diff --git a/sdk/resources/azure-mgmt-resource/CHANGELOG.md b/sdk/resources/azure-mgmt-resource/CHANGELOG.md index 838ca965eff7..28af0a80b0a3 100644 --- a/sdk/resources/azure-mgmt-resource/CHANGELOG.md +++ b/sdk/resources/azure-mgmt-resource/CHANGELOG.md @@ -1,5 +1,17 @@ # Release History +## 10.3.0 (2020-11-02) +**Features** + + - Model DeploymentWhatIfProperties has a new parameter expression_evaluation_options + - Model DeploymentProperties has a new parameter expression_evaluation_options + - Model TemplateSpec has a new parameter versions + - Added operation ProvidersOperations.register_at_management_group_scope + - Added operation ApplicationDefinitionsOperations.get_by_id + - Added operation ApplicationDefinitionsOperations.create_or_update_by_id + - Added operation ApplicationDefinitionsOperations.delete_by_id + - Added operation group ApplicationClientOperationsMixin + ## 10.2.0 (2020-08-03) **Features** diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/_deployment_scripts_client.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/_deployment_scripts_client.py index 52fe055e9c75..f84c15f7ecb6 100644 --- a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/_deployment_scripts_client.py +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/_deployment_scripts_client.py @@ -46,7 +46,7 @@ class DeploymentScriptsClient(MultiApiClientMixin, SDKClient): :type profile: azure.profiles.KnownProfiles """ - DEFAULT_API_VERSION = '2019-10-01-preview' + DEFAULT_API_VERSION = '2020-10-01' _PROFILE_TAG = "azure.mgmt.resource.deploymentscripts.DeploymentScriptsClient" LATEST_PROFILE = ProfileDefinition({ _PROFILE_TAG: { @@ -72,22 +72,36 @@ def _models_dict(cls, api_version): def models(cls, api_version=DEFAULT_API_VERSION): """Module depends on the API version: + * 2019-10-01-preview: :mod:`v2019_10_01_preview.models` * 2019-10-01-preview: :mod:`v2019_10_preview.models` + * 2020-10-01: :mod:`v2020_10_01.models` """ if api_version == '2019-10-01-preview': + from .v2019_10_01_preview import models + return models + elif api_version == '2019-10-01-preview': from .v2019_10_preview import models return models + elif api_version == '2020-10-01': + from .v2020_10_01 import models + return models raise NotImplementedError("APIVersion {} is not available".format(api_version)) @property def deployment_scripts(self): """Instance depends on the API version: + * 2019-10-01-preview: :class:`DeploymentScriptsOperations` * 2019-10-01-preview: :class:`DeploymentScriptsOperations` + * 2020-10-01: :class:`DeploymentScriptsOperations` """ api_version = self._get_api_version('deployment_scripts') if api_version == '2019-10-01-preview': + from .v2019_10_01_preview.operations import DeploymentScriptsOperations as OperationClass + elif api_version == '2019-10-01-preview': from .v2019_10_preview.operations import DeploymentScriptsOperations as OperationClass + elif api_version == '2020-10-01': + from .v2020_10_01.operations import DeploymentScriptsOperations as OperationClass else: raise NotImplementedError("APIVersion {} is not available".format(api_version)) return OperationClass(self._client, self.config, Serializer(self._models_dict(api_version)), Deserializer(self._models_dict(api_version))) diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/models.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/models.py index b44e4943769f..3a453a73ab82 100644 --- a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/models.py +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/models.py @@ -4,4 +4,4 @@ # Licensed under the MIT License. See License.txt in the project root for # license information. # -------------------------------------------------------------------------- -from .v2019_10_preview.models import * +from .v2020_10_01.models import * diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/__init__.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/__init__.py new file mode 100644 index 000000000000..08e241ee1ed8 --- /dev/null +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/__init__.py @@ -0,0 +1,19 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for +# license information. +# +# Code generated by Microsoft (R) AutoRest Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is +# regenerated. +# -------------------------------------------------------------------------- + +from ._configuration import DeploymentScriptsClientConfiguration +from ._deployment_scripts_client import DeploymentScriptsClient +__all__ = ['DeploymentScriptsClient', 'DeploymentScriptsClientConfiguration'] + +from .version import VERSION + +__version__ = VERSION + diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/_configuration.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/_configuration.py new file mode 100644 index 000000000000..142be065a596 --- /dev/null +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/_configuration.py @@ -0,0 +1,49 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for +# license information. +# +# Code generated by Microsoft (R) AutoRest Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is +# regenerated. +# -------------------------------------------------------------------------- +from msrestazure import AzureConfiguration + +from .version import VERSION + + +class DeploymentScriptsClientConfiguration(AzureConfiguration): + """Configuration for DeploymentScriptsClient + Note that all parameters used to create this instance are saved as instance + attributes. + + :param credentials: Credentials needed for the client to connect to Azure. + :type credentials: :mod:`A msrestazure Credentials + object` + :param subscription_id: Subscription Id which forms part of the URI for + every service call. + :type subscription_id: str + :param str base_url: Service URL + """ + + def __init__( + self, credentials, subscription_id, base_url=None): + + if credentials is None: + raise ValueError("Parameter 'credentials' must not be None.") + if subscription_id is None: + raise ValueError("Parameter 'subscription_id' must not be None.") + if not base_url: + base_url = 'https://management.azure.com' + + super(DeploymentScriptsClientConfiguration, self).__init__(base_url) + + # Starting Autorest.Python 4.0.64, make connection pool activated by default + self.keep_alive = True + + self.add_user_agent('azure-mgmt-resource/{}'.format(VERSION)) + self.add_user_agent('Azure-SDK-For-Python') + + self.credentials = credentials + self.subscription_id = subscription_id diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/_deployment_scripts_client.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/_deployment_scripts_client.py new file mode 100644 index 000000000000..7ad792dc361c --- /dev/null +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/_deployment_scripts_client.py @@ -0,0 +1,50 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for +# license information. +# +# Code generated by Microsoft (R) AutoRest Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is +# regenerated. +# -------------------------------------------------------------------------- + +from msrest.service_client import SDKClient +from msrest import Serializer, Deserializer + +from ._configuration import DeploymentScriptsClientConfiguration +from .operations import DeploymentScriptsOperations +from . import models + + +class DeploymentScriptsClient(SDKClient): + """The APIs listed in this specification can be used to manage Deployment Scripts resource through the Azure Resource Manager. + + :ivar config: Configuration for client. + :vartype config: DeploymentScriptsClientConfiguration + + :ivar deployment_scripts: DeploymentScripts operations + :vartype deployment_scripts: azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.operations.DeploymentScriptsOperations + + :param credentials: Credentials needed for the client to connect to Azure. + :type credentials: :mod:`A msrestazure Credentials + object` + :param subscription_id: Subscription Id which forms part of the URI for + every service call. + :type subscription_id: str + :param str base_url: Service URL + """ + + def __init__( + self, credentials, subscription_id, base_url=None): + + self.config = DeploymentScriptsClientConfiguration(credentials, subscription_id, base_url) + super(DeploymentScriptsClient, self).__init__(self.config.credentials, self.config) + + client_models = {k: v for k, v in models.__dict__.items() if isinstance(v, type)} + self.api_version = '2019-10-01-preview' + self._serialize = Serializer(client_models) + self._deserialize = Deserializer(client_models) + + self.deployment_scripts = DeploymentScriptsOperations( + self._client, self.config, self._serialize, self._deserialize) diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/models/__init__.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/models/__init__.py new file mode 100644 index 000000000000..6dd3003be147 --- /dev/null +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/models/__init__.py @@ -0,0 +1,79 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for +# license information. +# +# Code generated by Microsoft (R) AutoRest Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is +# regenerated. +# -------------------------------------------------------------------------- + +try: + from ._models_py3 import AzureCliScript + from ._models_py3 import AzurePowerShellScript + from ._models_py3 import AzureResourceBase + from ._models_py3 import ContainerConfiguration + from ._models_py3 import DeploymentScript + from ._models_py3 import DeploymentScriptsError, DeploymentScriptsErrorException + from ._models_py3 import DeploymentScriptUpdateParameter + from ._models_py3 import EnvironmentVariable + from ._models_py3 import ErrorAdditionalInfo + from ._models_py3 import ErrorResponse + from ._models_py3 import ManagedServiceIdentity + from ._models_py3 import ScriptLog + from ._models_py3 import ScriptLogsList + from ._models_py3 import ScriptStatus + from ._models_py3 import StorageAccountConfiguration + from ._models_py3 import SystemData + from ._models_py3 import UserAssignedIdentity +except (SyntaxError, ImportError): + from ._models import AzureCliScript + from ._models import AzurePowerShellScript + from ._models import AzureResourceBase + from ._models import ContainerConfiguration + from ._models import DeploymentScript + from ._models import DeploymentScriptsError, DeploymentScriptsErrorException + from ._models import DeploymentScriptUpdateParameter + from ._models import EnvironmentVariable + from ._models import ErrorAdditionalInfo + from ._models import ErrorResponse + from ._models import ManagedServiceIdentity + from ._models import ScriptLog + from ._models import ScriptLogsList + from ._models import ScriptStatus + from ._models import StorageAccountConfiguration + from ._models import SystemData + from ._models import UserAssignedIdentity +from ._paged_models import DeploymentScriptPaged +from ._deployment_scripts_client_enums import ( + ManagedServiceIdentityType, + CreatedByType, + CleanupOptions, + ScriptProvisioningState, +) + +__all__ = [ + 'AzureCliScript', + 'AzurePowerShellScript', + 'AzureResourceBase', + 'ContainerConfiguration', + 'DeploymentScript', + 'DeploymentScriptsError', 'DeploymentScriptsErrorException', + 'DeploymentScriptUpdateParameter', + 'EnvironmentVariable', + 'ErrorAdditionalInfo', + 'ErrorResponse', + 'ManagedServiceIdentity', + 'ScriptLog', + 'ScriptLogsList', + 'ScriptStatus', + 'StorageAccountConfiguration', + 'SystemData', + 'UserAssignedIdentity', + 'DeploymentScriptPaged', + 'ManagedServiceIdentityType', + 'CreatedByType', + 'CleanupOptions', + 'ScriptProvisioningState', +] diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/models/_deployment_scripts_client_enums.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/models/_deployment_scripts_client_enums.py new file mode 100644 index 000000000000..b59700cab06f --- /dev/null +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/models/_deployment_scripts_client_enums.py @@ -0,0 +1,42 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for +# license information. +# +# Code generated by Microsoft (R) AutoRest Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is +# regenerated. +# -------------------------------------------------------------------------- + +from enum import Enum + + +class ManagedServiceIdentityType(str, Enum): + + user_assigned = "UserAssigned" + + +class CreatedByType(str, Enum): + + user = "User" + application = "Application" + managed_identity = "ManagedIdentity" + key = "Key" + + +class CleanupOptions(str, Enum): + + always = "Always" + on_success = "OnSuccess" + on_expiration = "OnExpiration" + + +class ScriptProvisioningState(str, Enum): + + creating = "Creating" + provisioning_resources = "ProvisioningResources" + running = "Running" + succeeded = "Succeeded" + failed = "Failed" + canceled = "Canceled" diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/models/_models.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/models/_models.py new file mode 100644 index 000000000000..295332493c8a --- /dev/null +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/models/_models.py @@ -0,0 +1,931 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for +# license information. +# +# Code generated by Microsoft (R) AutoRest Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is +# regenerated. +# -------------------------------------------------------------------------- + +from msrest.serialization import Model +from msrest.exceptions import HttpOperationError + + +class AzureResourceBase(Model): + """Common properties for all Azure resources. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar id: String Id used to locate any resource on Azure. + :vartype id: str + :ivar name: Name of this resource. + :vartype name: str + :ivar type: Type of this resource. + :vartype type: str + """ + + _validation = { + 'id': {'readonly': True}, + 'name': {'readonly': True}, + 'type': {'readonly': True}, + } + + _attribute_map = { + 'id': {'key': 'id', 'type': 'str'}, + 'name': {'key': 'name', 'type': 'str'}, + 'type': {'key': 'type', 'type': 'str'}, + } + + def __init__(self, **kwargs): + super(AzureResourceBase, self).__init__(**kwargs) + self.id = None + self.name = None + self.type = None + + +class DeploymentScript(AzureResourceBase): + """Deployment script object. + + You probably want to use the sub-classes and not this class directly. Known + sub-classes are: AzurePowerShellScript, AzureCliScript + + Variables are only populated by the server, and will be ignored when + sending a request. + + All required parameters must be populated in order to send to Azure. + + :ivar id: String Id used to locate any resource on Azure. + :vartype id: str + :ivar name: Name of this resource. + :vartype name: str + :ivar type: Type of this resource. + :vartype type: str + :param identity: Required. Managed identity to be used for this deployment + script. Currently, only user-assigned MSI is supported. + :type identity: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ManagedServiceIdentity + :param location: Required. The location of the ACI and the storage account + for the deployment script. + :type location: str + :param tags: Resource tags. + :type tags: dict[str, str] + :ivar system_data: The system metadata related to this resource. + :vartype system_data: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.SystemData + :param kind: Required. Constant filled by server. + :type kind: str + """ + + _validation = { + 'id': {'readonly': True}, + 'name': {'readonly': True}, + 'type': {'readonly': True}, + 'identity': {'required': True}, + 'location': {'required': True}, + 'system_data': {'readonly': True}, + 'kind': {'required': True}, + } + + _attribute_map = { + 'id': {'key': 'id', 'type': 'str'}, + 'name': {'key': 'name', 'type': 'str'}, + 'type': {'key': 'type', 'type': 'str'}, + 'identity': {'key': 'identity', 'type': 'ManagedServiceIdentity'}, + 'location': {'key': 'location', 'type': 'str'}, + 'tags': {'key': 'tags', 'type': '{str}'}, + 'system_data': {'key': 'systemData', 'type': 'SystemData'}, + 'kind': {'key': 'kind', 'type': 'str'}, + } + + _subtype_map = { + 'kind': {'AzurePowerShell': 'AzurePowerShellScript', 'AzureCLI': 'AzureCliScript'} + } + + def __init__(self, **kwargs): + super(DeploymentScript, self).__init__(**kwargs) + self.identity = kwargs.get('identity', None) + self.location = kwargs.get('location', None) + self.tags = kwargs.get('tags', None) + self.system_data = None + self.kind = None + self.kind = 'DeploymentScript' + + +class AzureCliScript(DeploymentScript): + """Object model for the Azure CLI script. + + Variables are only populated by the server, and will be ignored when + sending a request. + + All required parameters must be populated in order to send to Azure. + + :ivar id: String Id used to locate any resource on Azure. + :vartype id: str + :ivar name: Name of this resource. + :vartype name: str + :ivar type: Type of this resource. + :vartype type: str + :param identity: Required. Managed identity to be used for this deployment + script. Currently, only user-assigned MSI is supported. + :type identity: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ManagedServiceIdentity + :param location: Required. The location of the ACI and the storage account + for the deployment script. + :type location: str + :param tags: Resource tags. + :type tags: dict[str, str] + :ivar system_data: The system metadata related to this resource. + :vartype system_data: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.SystemData + :param kind: Required. Constant filled by server. + :type kind: str + :param container_settings: Container settings. + :type container_settings: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ContainerConfiguration + :param storage_account_settings: Storage Account settings. + :type storage_account_settings: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.StorageAccountConfiguration + :param cleanup_preference: The clean up preference when the script + execution gets in a terminal state. Default setting is 'Always'. Possible + values include: 'Always', 'OnSuccess', 'OnExpiration' + :type cleanup_preference: str or + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.CleanupOptions + :ivar provisioning_state: State of the script execution. This only appears + in the response. Possible values include: 'Creating', + 'ProvisioningResources', 'Running', 'Succeeded', 'Failed', 'Canceled' + :vartype provisioning_state: str or + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ScriptProvisioningState + :ivar status: Contains the results of script execution. + :vartype status: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ScriptStatus + :ivar outputs: List of script outputs. + :vartype outputs: dict[str, object] + :param primary_script_uri: Uri for the script. This is the entry point for + the external script. + :type primary_script_uri: str + :param supporting_script_uris: Supporting files for the external script. + :type supporting_script_uris: list[str] + :param script_content: Script body. + :type script_content: str + :param arguments: Command line arguments to pass to the script. Arguments + are separated by spaces. ex: -Name blue* -Location 'West US 2' + :type arguments: str + :param environment_variables: The environment variables to pass over to + the script. + :type environment_variables: + list[~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.EnvironmentVariable] + :param force_update_tag: Gets or sets how the deployment script should be + forced to execute even if the script resource has not changed. Can be + current time stamp or a GUID. + :type force_update_tag: str + :param retention_interval: Required. Interval for which the service + retains the script resource after it reaches a terminal state. Resource + will be deleted when this duration expires. Duration is based on ISO 8601 + pattern (for example P7D means one week). + :type retention_interval: timedelta + :param timeout: Maximum allowed script execution time specified in ISO + 8601 format. Default value is PT1H + :type timeout: timedelta + :param az_cli_version: Required. Azure CLI module version to be used. + :type az_cli_version: str + """ + + _validation = { + 'id': {'readonly': True}, + 'name': {'readonly': True}, + 'type': {'readonly': True}, + 'identity': {'required': True}, + 'location': {'required': True}, + 'system_data': {'readonly': True}, + 'kind': {'required': True}, + 'provisioning_state': {'readonly': True}, + 'status': {'readonly': True}, + 'outputs': {'readonly': True}, + 'script_content': {'max_length': 32000}, + 'retention_interval': {'required': True}, + 'az_cli_version': {'required': True}, + } + + _attribute_map = { + 'id': {'key': 'id', 'type': 'str'}, + 'name': {'key': 'name', 'type': 'str'}, + 'type': {'key': 'type', 'type': 'str'}, + 'identity': {'key': 'identity', 'type': 'ManagedServiceIdentity'}, + 'location': {'key': 'location', 'type': 'str'}, + 'tags': {'key': 'tags', 'type': '{str}'}, + 'system_data': {'key': 'systemData', 'type': 'SystemData'}, + 'kind': {'key': 'kind', 'type': 'str'}, + 'container_settings': {'key': 'properties.containerSettings', 'type': 'ContainerConfiguration'}, + 'storage_account_settings': {'key': 'properties.storageAccountSettings', 'type': 'StorageAccountConfiguration'}, + 'cleanup_preference': {'key': 'properties.cleanupPreference', 'type': 'str'}, + 'provisioning_state': {'key': 'properties.provisioningState', 'type': 'str'}, + 'status': {'key': 'properties.status', 'type': 'ScriptStatus'}, + 'outputs': {'key': 'properties.outputs', 'type': '{object}'}, + 'primary_script_uri': {'key': 'properties.primaryScriptUri', 'type': 'str'}, + 'supporting_script_uris': {'key': 'properties.supportingScriptUris', 'type': '[str]'}, + 'script_content': {'key': 'properties.scriptContent', 'type': 'str'}, + 'arguments': {'key': 'properties.arguments', 'type': 'str'}, + 'environment_variables': {'key': 'properties.environmentVariables', 'type': '[EnvironmentVariable]'}, + 'force_update_tag': {'key': 'properties.forceUpdateTag', 'type': 'str'}, + 'retention_interval': {'key': 'properties.retentionInterval', 'type': 'duration'}, + 'timeout': {'key': 'properties.timeout', 'type': 'duration'}, + 'az_cli_version': {'key': 'properties.azCliVersion', 'type': 'str'}, + } + + def __init__(self, **kwargs): + super(AzureCliScript, self).__init__(**kwargs) + self.container_settings = kwargs.get('container_settings', None) + self.storage_account_settings = kwargs.get('storage_account_settings', None) + self.cleanup_preference = kwargs.get('cleanup_preference', None) + self.provisioning_state = None + self.status = None + self.outputs = None + self.primary_script_uri = kwargs.get('primary_script_uri', None) + self.supporting_script_uris = kwargs.get('supporting_script_uris', None) + self.script_content = kwargs.get('script_content', None) + self.arguments = kwargs.get('arguments', None) + self.environment_variables = kwargs.get('environment_variables', None) + self.force_update_tag = kwargs.get('force_update_tag', None) + self.retention_interval = kwargs.get('retention_interval', None) + self.timeout = kwargs.get('timeout', None) + self.az_cli_version = kwargs.get('az_cli_version', None) + self.kind = 'AzureCLI' + + +class AzurePowerShellScript(DeploymentScript): + """Object model for the Azure PowerShell script. + + Variables are only populated by the server, and will be ignored when + sending a request. + + All required parameters must be populated in order to send to Azure. + + :ivar id: String Id used to locate any resource on Azure. + :vartype id: str + :ivar name: Name of this resource. + :vartype name: str + :ivar type: Type of this resource. + :vartype type: str + :param identity: Required. Managed identity to be used for this deployment + script. Currently, only user-assigned MSI is supported. + :type identity: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ManagedServiceIdentity + :param location: Required. The location of the ACI and the storage account + for the deployment script. + :type location: str + :param tags: Resource tags. + :type tags: dict[str, str] + :ivar system_data: The system metadata related to this resource. + :vartype system_data: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.SystemData + :param kind: Required. Constant filled by server. + :type kind: str + :param container_settings: Container settings. + :type container_settings: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ContainerConfiguration + :param storage_account_settings: Storage Account settings. + :type storage_account_settings: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.StorageAccountConfiguration + :param cleanup_preference: The clean up preference when the script + execution gets in a terminal state. Default setting is 'Always'. Possible + values include: 'Always', 'OnSuccess', 'OnExpiration' + :type cleanup_preference: str or + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.CleanupOptions + :ivar provisioning_state: State of the script execution. This only appears + in the response. Possible values include: 'Creating', + 'ProvisioningResources', 'Running', 'Succeeded', 'Failed', 'Canceled' + :vartype provisioning_state: str or + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ScriptProvisioningState + :ivar status: Contains the results of script execution. + :vartype status: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ScriptStatus + :ivar outputs: List of script outputs. + :vartype outputs: dict[str, object] + :param primary_script_uri: Uri for the script. This is the entry point for + the external script. + :type primary_script_uri: str + :param supporting_script_uris: Supporting files for the external script. + :type supporting_script_uris: list[str] + :param script_content: Script body. + :type script_content: str + :param arguments: Command line arguments to pass to the script. Arguments + are separated by spaces. ex: -Name blue* -Location 'West US 2' + :type arguments: str + :param environment_variables: The environment variables to pass over to + the script. + :type environment_variables: + list[~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.EnvironmentVariable] + :param force_update_tag: Gets or sets how the deployment script should be + forced to execute even if the script resource has not changed. Can be + current time stamp or a GUID. + :type force_update_tag: str + :param retention_interval: Required. Interval for which the service + retains the script resource after it reaches a terminal state. Resource + will be deleted when this duration expires. Duration is based on ISO 8601 + pattern (for example P7D means one week). + :type retention_interval: timedelta + :param timeout: Maximum allowed script execution time specified in ISO + 8601 format. Default value is PT1H + :type timeout: timedelta + :param az_power_shell_version: Required. Azure PowerShell module version + to be used. + :type az_power_shell_version: str + """ + + _validation = { + 'id': {'readonly': True}, + 'name': {'readonly': True}, + 'type': {'readonly': True}, + 'identity': {'required': True}, + 'location': {'required': True}, + 'system_data': {'readonly': True}, + 'kind': {'required': True}, + 'provisioning_state': {'readonly': True}, + 'status': {'readonly': True}, + 'outputs': {'readonly': True}, + 'script_content': {'max_length': 32000}, + 'retention_interval': {'required': True}, + 'az_power_shell_version': {'required': True}, + } + + _attribute_map = { + 'id': {'key': 'id', 'type': 'str'}, + 'name': {'key': 'name', 'type': 'str'}, + 'type': {'key': 'type', 'type': 'str'}, + 'identity': {'key': 'identity', 'type': 'ManagedServiceIdentity'}, + 'location': {'key': 'location', 'type': 'str'}, + 'tags': {'key': 'tags', 'type': '{str}'}, + 'system_data': {'key': 'systemData', 'type': 'SystemData'}, + 'kind': {'key': 'kind', 'type': 'str'}, + 'container_settings': {'key': 'properties.containerSettings', 'type': 'ContainerConfiguration'}, + 'storage_account_settings': {'key': 'properties.storageAccountSettings', 'type': 'StorageAccountConfiguration'}, + 'cleanup_preference': {'key': 'properties.cleanupPreference', 'type': 'str'}, + 'provisioning_state': {'key': 'properties.provisioningState', 'type': 'str'}, + 'status': {'key': 'properties.status', 'type': 'ScriptStatus'}, + 'outputs': {'key': 'properties.outputs', 'type': '{object}'}, + 'primary_script_uri': {'key': 'properties.primaryScriptUri', 'type': 'str'}, + 'supporting_script_uris': {'key': 'properties.supportingScriptUris', 'type': '[str]'}, + 'script_content': {'key': 'properties.scriptContent', 'type': 'str'}, + 'arguments': {'key': 'properties.arguments', 'type': 'str'}, + 'environment_variables': {'key': 'properties.environmentVariables', 'type': '[EnvironmentVariable]'}, + 'force_update_tag': {'key': 'properties.forceUpdateTag', 'type': 'str'}, + 'retention_interval': {'key': 'properties.retentionInterval', 'type': 'duration'}, + 'timeout': {'key': 'properties.timeout', 'type': 'duration'}, + 'az_power_shell_version': {'key': 'properties.azPowerShellVersion', 'type': 'str'}, + } + + def __init__(self, **kwargs): + super(AzurePowerShellScript, self).__init__(**kwargs) + self.container_settings = kwargs.get('container_settings', None) + self.storage_account_settings = kwargs.get('storage_account_settings', None) + self.cleanup_preference = kwargs.get('cleanup_preference', None) + self.provisioning_state = None + self.status = None + self.outputs = None + self.primary_script_uri = kwargs.get('primary_script_uri', None) + self.supporting_script_uris = kwargs.get('supporting_script_uris', None) + self.script_content = kwargs.get('script_content', None) + self.arguments = kwargs.get('arguments', None) + self.environment_variables = kwargs.get('environment_variables', None) + self.force_update_tag = kwargs.get('force_update_tag', None) + self.retention_interval = kwargs.get('retention_interval', None) + self.timeout = kwargs.get('timeout', None) + self.az_power_shell_version = kwargs.get('az_power_shell_version', None) + self.kind = 'AzurePowerShell' + + +class CloudError(Model): + """CloudError. + """ + + _attribute_map = { + } + + +class ContainerConfiguration(Model): + """Settings to customize ACI container instance. + + :param container_group_name: Container group name, if not specified then + the name will get auto-generated. Not specifying a 'containerGroupName' + indicates the system to generate a unique name which might end up flagging + an Azure Policy as non-compliant. Use 'containerGroupName' when you have + an Azure Policy that expects a specific naming convention or when you want + to fully control the name. 'containerGroupName' property must be between 1 + and 63 characters long, must contain only lowercase letters, numbers, and + dashes and it cannot start or end with a dash and consecutive dashes are + not allowed. To specify a 'containerGroupName', add the following object + to properties: { "containerSettings": { "containerGroupName": + "contoso-container" } }. If you do not want to specify a + 'containerGroupName' then do not add 'containerSettings' property. + :type container_group_name: str + """ + + _validation = { + 'container_group_name': {'max_length': 63, 'min_length': 1}, + } + + _attribute_map = { + 'container_group_name': {'key': 'containerGroupName', 'type': 'str'}, + } + + def __init__(self, **kwargs): + super(ContainerConfiguration, self).__init__(**kwargs) + self.container_group_name = kwargs.get('container_group_name', None) + + +class DeploymentScriptPropertiesBase(Model): + """Common properties for the deployment script. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :param container_settings: Container settings. + :type container_settings: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ContainerConfiguration + :param storage_account_settings: Storage Account settings. + :type storage_account_settings: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.StorageAccountConfiguration + :param cleanup_preference: The clean up preference when the script + execution gets in a terminal state. Default setting is 'Always'. Possible + values include: 'Always', 'OnSuccess', 'OnExpiration' + :type cleanup_preference: str or + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.CleanupOptions + :ivar provisioning_state: State of the script execution. This only appears + in the response. Possible values include: 'Creating', + 'ProvisioningResources', 'Running', 'Succeeded', 'Failed', 'Canceled' + :vartype provisioning_state: str or + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ScriptProvisioningState + :ivar status: Contains the results of script execution. + :vartype status: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ScriptStatus + :ivar outputs: List of script outputs. + :vartype outputs: dict[str, object] + """ + + _validation = { + 'provisioning_state': {'readonly': True}, + 'status': {'readonly': True}, + 'outputs': {'readonly': True}, + } + + _attribute_map = { + 'container_settings': {'key': 'containerSettings', 'type': 'ContainerConfiguration'}, + 'storage_account_settings': {'key': 'storageAccountSettings', 'type': 'StorageAccountConfiguration'}, + 'cleanup_preference': {'key': 'cleanupPreference', 'type': 'str'}, + 'provisioning_state': {'key': 'provisioningState', 'type': 'str'}, + 'status': {'key': 'status', 'type': 'ScriptStatus'}, + 'outputs': {'key': 'outputs', 'type': '{object}'}, + } + + def __init__(self, **kwargs): + super(DeploymentScriptPropertiesBase, self).__init__(**kwargs) + self.container_settings = kwargs.get('container_settings', None) + self.storage_account_settings = kwargs.get('storage_account_settings', None) + self.cleanup_preference = kwargs.get('cleanup_preference', None) + self.provisioning_state = None + self.status = None + self.outputs = None + + +class DeploymentScriptsError(Model): + """Deployment scripts error response. + + :param error: + :type error: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ErrorResponse + """ + + _attribute_map = { + 'error': {'key': 'error', 'type': 'ErrorResponse'}, + } + + def __init__(self, **kwargs): + super(DeploymentScriptsError, self).__init__(**kwargs) + self.error = kwargs.get('error', None) + + +class DeploymentScriptsErrorException(HttpOperationError): + """Server responsed with exception of type: 'DeploymentScriptsError'. + + :param deserialize: A deserializer + :param response: Server response to be deserialized. + """ + + def __init__(self, deserialize, response, *args): + + super(DeploymentScriptsErrorException, self).__init__(deserialize, response, 'DeploymentScriptsError', *args) + + +class DeploymentScriptUpdateParameter(AzureResourceBase): + """Deployment script parameters to be updated. . + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar id: String Id used to locate any resource on Azure. + :vartype id: str + :ivar name: Name of this resource. + :vartype name: str + :ivar type: Type of this resource. + :vartype type: str + :param tags: Resource tags to be updated. + :type tags: dict[str, str] + """ + + _validation = { + 'id': {'readonly': True}, + 'name': {'readonly': True}, + 'type': {'readonly': True}, + } + + _attribute_map = { + 'id': {'key': 'id', 'type': 'str'}, + 'name': {'key': 'name', 'type': 'str'}, + 'type': {'key': 'type', 'type': 'str'}, + 'tags': {'key': 'tags', 'type': '{str}'}, + } + + def __init__(self, **kwargs): + super(DeploymentScriptUpdateParameter, self).__init__(**kwargs) + self.tags = kwargs.get('tags', None) + + +class EnvironmentVariable(Model): + """The environment variable to pass to the script in the container instance. + + All required parameters must be populated in order to send to Azure. + + :param name: Required. The name of the environment variable. + :type name: str + :param value: The value of the environment variable. + :type value: str + :param secure_value: The value of the secure environment variable. + :type secure_value: str + """ + + _validation = { + 'name': {'required': True}, + } + + _attribute_map = { + 'name': {'key': 'name', 'type': 'str'}, + 'value': {'key': 'value', 'type': 'str'}, + 'secure_value': {'key': 'secureValue', 'type': 'str'}, + } + + def __init__(self, **kwargs): + super(EnvironmentVariable, self).__init__(**kwargs) + self.name = kwargs.get('name', None) + self.value = kwargs.get('value', None) + self.secure_value = kwargs.get('secure_value', None) + + +class ErrorAdditionalInfo(Model): + """The resource management error additional info. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar type: The additional info type. + :vartype type: str + :ivar info: The additional info. + :vartype info: object + """ + + _validation = { + 'type': {'readonly': True}, + 'info': {'readonly': True}, + } + + _attribute_map = { + 'type': {'key': 'type', 'type': 'str'}, + 'info': {'key': 'info', 'type': 'object'}, + } + + def __init__(self, **kwargs): + super(ErrorAdditionalInfo, self).__init__(**kwargs) + self.type = None + self.info = None + + +class ErrorResponse(Model): + """The resource management error response. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar code: The error code. + :vartype code: str + :ivar message: The error message. + :vartype message: str + :ivar target: The error target. + :vartype target: str + :ivar details: The error details. + :vartype details: + list[~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ErrorResponse] + :ivar additional_info: The error additional info. + :vartype additional_info: + list[~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ErrorAdditionalInfo] + """ + + _validation = { + 'code': {'readonly': True}, + 'message': {'readonly': True}, + 'target': {'readonly': True}, + 'details': {'readonly': True}, + 'additional_info': {'readonly': True}, + } + + _attribute_map = { + 'code': {'key': 'code', 'type': 'str'}, + 'message': {'key': 'message', 'type': 'str'}, + 'target': {'key': 'target', 'type': 'str'}, + 'details': {'key': 'details', 'type': '[ErrorResponse]'}, + 'additional_info': {'key': 'additionalInfo', 'type': '[ErrorAdditionalInfo]'}, + } + + def __init__(self, **kwargs): + super(ErrorResponse, self).__init__(**kwargs) + self.code = None + self.message = None + self.target = None + self.details = None + self.additional_info = None + + +class ManagedServiceIdentity(Model): + """Managed identity generic object. + + :param type: Type of the managed identity. Possible values include: + 'UserAssigned' + :type type: str or + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ManagedServiceIdentityType + :param tenant_id: ID of the Azure Active Directory. + :type tenant_id: str + :param user_assigned_identities: The list of user-assigned managed + identities associated with the resource. Key is the Azure resource Id of + the managed identity. + :type user_assigned_identities: dict[str, + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.UserAssignedIdentity] + """ + + _attribute_map = { + 'type': {'key': 'type', 'type': 'str'}, + 'tenant_id': {'key': 'tenantId', 'type': 'str'}, + 'user_assigned_identities': {'key': 'userAssignedIdentities', 'type': '{UserAssignedIdentity}'}, + } + + def __init__(self, **kwargs): + super(ManagedServiceIdentity, self).__init__(**kwargs) + self.type = kwargs.get('type', None) + self.tenant_id = kwargs.get('tenant_id', None) + self.user_assigned_identities = kwargs.get('user_assigned_identities', None) + + +class ScriptConfigurationBase(Model): + """Common configuration settings for both Azure PowerShell and Azure CLI + scripts. + + All required parameters must be populated in order to send to Azure. + + :param primary_script_uri: Uri for the script. This is the entry point for + the external script. + :type primary_script_uri: str + :param supporting_script_uris: Supporting files for the external script. + :type supporting_script_uris: list[str] + :param script_content: Script body. + :type script_content: str + :param arguments: Command line arguments to pass to the script. Arguments + are separated by spaces. ex: -Name blue* -Location 'West US 2' + :type arguments: str + :param environment_variables: The environment variables to pass over to + the script. + :type environment_variables: + list[~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.EnvironmentVariable] + :param force_update_tag: Gets or sets how the deployment script should be + forced to execute even if the script resource has not changed. Can be + current time stamp or a GUID. + :type force_update_tag: str + :param retention_interval: Required. Interval for which the service + retains the script resource after it reaches a terminal state. Resource + will be deleted when this duration expires. Duration is based on ISO 8601 + pattern (for example P7D means one week). + :type retention_interval: timedelta + :param timeout: Maximum allowed script execution time specified in ISO + 8601 format. Default value is PT1H + :type timeout: timedelta + """ + + _validation = { + 'script_content': {'max_length': 32000}, + 'retention_interval': {'required': True}, + } + + _attribute_map = { + 'primary_script_uri': {'key': 'primaryScriptUri', 'type': 'str'}, + 'supporting_script_uris': {'key': 'supportingScriptUris', 'type': '[str]'}, + 'script_content': {'key': 'scriptContent', 'type': 'str'}, + 'arguments': {'key': 'arguments', 'type': 'str'}, + 'environment_variables': {'key': 'environmentVariables', 'type': '[EnvironmentVariable]'}, + 'force_update_tag': {'key': 'forceUpdateTag', 'type': 'str'}, + 'retention_interval': {'key': 'retentionInterval', 'type': 'duration'}, + 'timeout': {'key': 'timeout', 'type': 'duration'}, + } + + def __init__(self, **kwargs): + super(ScriptConfigurationBase, self).__init__(**kwargs) + self.primary_script_uri = kwargs.get('primary_script_uri', None) + self.supporting_script_uris = kwargs.get('supporting_script_uris', None) + self.script_content = kwargs.get('script_content', None) + self.arguments = kwargs.get('arguments', None) + self.environment_variables = kwargs.get('environment_variables', None) + self.force_update_tag = kwargs.get('force_update_tag', None) + self.retention_interval = kwargs.get('retention_interval', None) + self.timeout = kwargs.get('timeout', None) + + +class ScriptLog(AzureResourceBase): + """Script execution log object. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar id: String Id used to locate any resource on Azure. + :vartype id: str + :ivar name: Name of this resource. + :vartype name: str + :ivar type: Type of this resource. + :vartype type: str + :ivar log: Script execution logs in text format. + :vartype log: str + """ + + _validation = { + 'id': {'readonly': True}, + 'name': {'readonly': True}, + 'type': {'readonly': True}, + 'log': {'readonly': True}, + } + + _attribute_map = { + 'id': {'key': 'id', 'type': 'str'}, + 'name': {'key': 'name', 'type': 'str'}, + 'type': {'key': 'type', 'type': 'str'}, + 'log': {'key': 'properties.log', 'type': 'str'}, + } + + def __init__(self, **kwargs): + super(ScriptLog, self).__init__(**kwargs) + self.log = None + + +class ScriptLogsList(Model): + """Deployment script execution logs. + + :param value: Deployment scripts logs. + :type value: + list[~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ScriptLog] + """ + + _attribute_map = { + 'value': {'key': 'value', 'type': '[ScriptLog]'}, + } + + def __init__(self, **kwargs): + super(ScriptLogsList, self).__init__(**kwargs) + self.value = kwargs.get('value', None) + + +class ScriptStatus(Model): + """Generic object modeling results of script execution. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar container_instance_id: ACI resource Id. + :vartype container_instance_id: str + :ivar storage_account_id: Storage account resource Id. + :vartype storage_account_id: str + :ivar start_time: Start time of the script execution. + :vartype start_time: datetime + :ivar end_time: End time of the script execution. + :vartype end_time: datetime + :ivar expiration_time: Time the deployment script resource will expire. + :vartype expiration_time: datetime + :param error: Error that is relayed from the script execution. + :type error: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ErrorResponse + """ + + _validation = { + 'container_instance_id': {'readonly': True}, + 'storage_account_id': {'readonly': True}, + 'start_time': {'readonly': True}, + 'end_time': {'readonly': True}, + 'expiration_time': {'readonly': True}, + } + + _attribute_map = { + 'container_instance_id': {'key': 'containerInstanceId', 'type': 'str'}, + 'storage_account_id': {'key': 'storageAccountId', 'type': 'str'}, + 'start_time': {'key': 'startTime', 'type': 'iso-8601'}, + 'end_time': {'key': 'endTime', 'type': 'iso-8601'}, + 'expiration_time': {'key': 'expirationTime', 'type': 'iso-8601'}, + 'error': {'key': 'error', 'type': 'ErrorResponse'}, + } + + def __init__(self, **kwargs): + super(ScriptStatus, self).__init__(**kwargs) + self.container_instance_id = None + self.storage_account_id = None + self.start_time = None + self.end_time = None + self.expiration_time = None + self.error = kwargs.get('error', None) + + +class StorageAccountConfiguration(Model): + """Settings to use an existing storage account. Valid storage account kinds + are: Storage, StorageV2 and FileStorage. + + :param storage_account_name: The storage account name. + :type storage_account_name: str + :param storage_account_key: The storage account access key. + :type storage_account_key: str + """ + + _attribute_map = { + 'storage_account_name': {'key': 'storageAccountName', 'type': 'str'}, + 'storage_account_key': {'key': 'storageAccountKey', 'type': 'str'}, + } + + def __init__(self, **kwargs): + super(StorageAccountConfiguration, self).__init__(**kwargs) + self.storage_account_name = kwargs.get('storage_account_name', None) + self.storage_account_key = kwargs.get('storage_account_key', None) + + +class SystemData(Model): + """Metadata pertaining to creation and last modification of the resource. + + :param created_by: The identity that created the resource. + :type created_by: str + :param created_by_type: The type of identity that created the resource. + Possible values include: 'User', 'Application', 'ManagedIdentity', 'Key' + :type created_by_type: str or + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.CreatedByType + :param created_at: The timestamp of resource creation (UTC). + :type created_at: datetime + :param last_modified_by: The identity that last modified the resource. + :type last_modified_by: str + :param last_modified_by_type: The type of identity that last modified the + resource. Possible values include: 'User', 'Application', + 'ManagedIdentity', 'Key' + :type last_modified_by_type: str or + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.CreatedByType + :param last_modified_at: The type of identity that last modified the + resource. + :type last_modified_at: datetime + """ + + _attribute_map = { + 'created_by': {'key': 'createdBy', 'type': 'str'}, + 'created_by_type': {'key': 'createdByType', 'type': 'str'}, + 'created_at': {'key': 'createdAt', 'type': 'iso-8601'}, + 'last_modified_by': {'key': 'lastModifiedBy', 'type': 'str'}, + 'last_modified_by_type': {'key': 'lastModifiedByType', 'type': 'str'}, + 'last_modified_at': {'key': 'lastModifiedAt', 'type': 'iso-8601'}, + } + + def __init__(self, **kwargs): + super(SystemData, self).__init__(**kwargs) + self.created_by = kwargs.get('created_by', None) + self.created_by_type = kwargs.get('created_by_type', None) + self.created_at = kwargs.get('created_at', None) + self.last_modified_by = kwargs.get('last_modified_by', None) + self.last_modified_by_type = kwargs.get('last_modified_by_type', None) + self.last_modified_at = kwargs.get('last_modified_at', None) + + +class UserAssignedIdentity(Model): + """User-assigned managed identity. + + :param principal_id: Azure Active Directory principal ID associated with + this identity. + :type principal_id: str + :param client_id: Client App Id associated with this identity. + :type client_id: str + """ + + _attribute_map = { + 'principal_id': {'key': 'principalId', 'type': 'str'}, + 'client_id': {'key': 'clientId', 'type': 'str'}, + } + + def __init__(self, **kwargs): + super(UserAssignedIdentity, self).__init__(**kwargs) + self.principal_id = kwargs.get('principal_id', None) + self.client_id = kwargs.get('client_id', None) diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/models/_models_py3.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/models/_models_py3.py new file mode 100644 index 000000000000..19d239f1c17f --- /dev/null +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/models/_models_py3.py @@ -0,0 +1,931 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for +# license information. +# +# Code generated by Microsoft (R) AutoRest Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is +# regenerated. +# -------------------------------------------------------------------------- + +from msrest.serialization import Model +from msrest.exceptions import HttpOperationError + + +class AzureResourceBase(Model): + """Common properties for all Azure resources. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar id: String Id used to locate any resource on Azure. + :vartype id: str + :ivar name: Name of this resource. + :vartype name: str + :ivar type: Type of this resource. + :vartype type: str + """ + + _validation = { + 'id': {'readonly': True}, + 'name': {'readonly': True}, + 'type': {'readonly': True}, + } + + _attribute_map = { + 'id': {'key': 'id', 'type': 'str'}, + 'name': {'key': 'name', 'type': 'str'}, + 'type': {'key': 'type', 'type': 'str'}, + } + + def __init__(self, **kwargs) -> None: + super(AzureResourceBase, self).__init__(**kwargs) + self.id = None + self.name = None + self.type = None + + +class DeploymentScript(AzureResourceBase): + """Deployment script object. + + You probably want to use the sub-classes and not this class directly. Known + sub-classes are: AzurePowerShellScript, AzureCliScript + + Variables are only populated by the server, and will be ignored when + sending a request. + + All required parameters must be populated in order to send to Azure. + + :ivar id: String Id used to locate any resource on Azure. + :vartype id: str + :ivar name: Name of this resource. + :vartype name: str + :ivar type: Type of this resource. + :vartype type: str + :param identity: Required. Managed identity to be used for this deployment + script. Currently, only user-assigned MSI is supported. + :type identity: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ManagedServiceIdentity + :param location: Required. The location of the ACI and the storage account + for the deployment script. + :type location: str + :param tags: Resource tags. + :type tags: dict[str, str] + :ivar system_data: The system metadata related to this resource. + :vartype system_data: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.SystemData + :param kind: Required. Constant filled by server. + :type kind: str + """ + + _validation = { + 'id': {'readonly': True}, + 'name': {'readonly': True}, + 'type': {'readonly': True}, + 'identity': {'required': True}, + 'location': {'required': True}, + 'system_data': {'readonly': True}, + 'kind': {'required': True}, + } + + _attribute_map = { + 'id': {'key': 'id', 'type': 'str'}, + 'name': {'key': 'name', 'type': 'str'}, + 'type': {'key': 'type', 'type': 'str'}, + 'identity': {'key': 'identity', 'type': 'ManagedServiceIdentity'}, + 'location': {'key': 'location', 'type': 'str'}, + 'tags': {'key': 'tags', 'type': '{str}'}, + 'system_data': {'key': 'systemData', 'type': 'SystemData'}, + 'kind': {'key': 'kind', 'type': 'str'}, + } + + _subtype_map = { + 'kind': {'AzurePowerShell': 'AzurePowerShellScript', 'AzureCLI': 'AzureCliScript'} + } + + def __init__(self, *, identity, location: str, tags=None, **kwargs) -> None: + super(DeploymentScript, self).__init__(**kwargs) + self.identity = identity + self.location = location + self.tags = tags + self.system_data = None + self.kind = None + self.kind = 'DeploymentScript' + + +class AzureCliScript(DeploymentScript): + """Object model for the Azure CLI script. + + Variables are only populated by the server, and will be ignored when + sending a request. + + All required parameters must be populated in order to send to Azure. + + :ivar id: String Id used to locate any resource on Azure. + :vartype id: str + :ivar name: Name of this resource. + :vartype name: str + :ivar type: Type of this resource. + :vartype type: str + :param identity: Required. Managed identity to be used for this deployment + script. Currently, only user-assigned MSI is supported. + :type identity: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ManagedServiceIdentity + :param location: Required. The location of the ACI and the storage account + for the deployment script. + :type location: str + :param tags: Resource tags. + :type tags: dict[str, str] + :ivar system_data: The system metadata related to this resource. + :vartype system_data: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.SystemData + :param kind: Required. Constant filled by server. + :type kind: str + :param container_settings: Container settings. + :type container_settings: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ContainerConfiguration + :param storage_account_settings: Storage Account settings. + :type storage_account_settings: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.StorageAccountConfiguration + :param cleanup_preference: The clean up preference when the script + execution gets in a terminal state. Default setting is 'Always'. Possible + values include: 'Always', 'OnSuccess', 'OnExpiration' + :type cleanup_preference: str or + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.CleanupOptions + :ivar provisioning_state: State of the script execution. This only appears + in the response. Possible values include: 'Creating', + 'ProvisioningResources', 'Running', 'Succeeded', 'Failed', 'Canceled' + :vartype provisioning_state: str or + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ScriptProvisioningState + :ivar status: Contains the results of script execution. + :vartype status: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ScriptStatus + :ivar outputs: List of script outputs. + :vartype outputs: dict[str, object] + :param primary_script_uri: Uri for the script. This is the entry point for + the external script. + :type primary_script_uri: str + :param supporting_script_uris: Supporting files for the external script. + :type supporting_script_uris: list[str] + :param script_content: Script body. + :type script_content: str + :param arguments: Command line arguments to pass to the script. Arguments + are separated by spaces. ex: -Name blue* -Location 'West US 2' + :type arguments: str + :param environment_variables: The environment variables to pass over to + the script. + :type environment_variables: + list[~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.EnvironmentVariable] + :param force_update_tag: Gets or sets how the deployment script should be + forced to execute even if the script resource has not changed. Can be + current time stamp or a GUID. + :type force_update_tag: str + :param retention_interval: Required. Interval for which the service + retains the script resource after it reaches a terminal state. Resource + will be deleted when this duration expires. Duration is based on ISO 8601 + pattern (for example P7D means one week). + :type retention_interval: timedelta + :param timeout: Maximum allowed script execution time specified in ISO + 8601 format. Default value is PT1H + :type timeout: timedelta + :param az_cli_version: Required. Azure CLI module version to be used. + :type az_cli_version: str + """ + + _validation = { + 'id': {'readonly': True}, + 'name': {'readonly': True}, + 'type': {'readonly': True}, + 'identity': {'required': True}, + 'location': {'required': True}, + 'system_data': {'readonly': True}, + 'kind': {'required': True}, + 'provisioning_state': {'readonly': True}, + 'status': {'readonly': True}, + 'outputs': {'readonly': True}, + 'script_content': {'max_length': 32000}, + 'retention_interval': {'required': True}, + 'az_cli_version': {'required': True}, + } + + _attribute_map = { + 'id': {'key': 'id', 'type': 'str'}, + 'name': {'key': 'name', 'type': 'str'}, + 'type': {'key': 'type', 'type': 'str'}, + 'identity': {'key': 'identity', 'type': 'ManagedServiceIdentity'}, + 'location': {'key': 'location', 'type': 'str'}, + 'tags': {'key': 'tags', 'type': '{str}'}, + 'system_data': {'key': 'systemData', 'type': 'SystemData'}, + 'kind': {'key': 'kind', 'type': 'str'}, + 'container_settings': {'key': 'properties.containerSettings', 'type': 'ContainerConfiguration'}, + 'storage_account_settings': {'key': 'properties.storageAccountSettings', 'type': 'StorageAccountConfiguration'}, + 'cleanup_preference': {'key': 'properties.cleanupPreference', 'type': 'str'}, + 'provisioning_state': {'key': 'properties.provisioningState', 'type': 'str'}, + 'status': {'key': 'properties.status', 'type': 'ScriptStatus'}, + 'outputs': {'key': 'properties.outputs', 'type': '{object}'}, + 'primary_script_uri': {'key': 'properties.primaryScriptUri', 'type': 'str'}, + 'supporting_script_uris': {'key': 'properties.supportingScriptUris', 'type': '[str]'}, + 'script_content': {'key': 'properties.scriptContent', 'type': 'str'}, + 'arguments': {'key': 'properties.arguments', 'type': 'str'}, + 'environment_variables': {'key': 'properties.environmentVariables', 'type': '[EnvironmentVariable]'}, + 'force_update_tag': {'key': 'properties.forceUpdateTag', 'type': 'str'}, + 'retention_interval': {'key': 'properties.retentionInterval', 'type': 'duration'}, + 'timeout': {'key': 'properties.timeout', 'type': 'duration'}, + 'az_cli_version': {'key': 'properties.azCliVersion', 'type': 'str'}, + } + + def __init__(self, *, identity, location: str, retention_interval, az_cli_version: str, tags=None, container_settings=None, storage_account_settings=None, cleanup_preference=None, primary_script_uri: str=None, supporting_script_uris=None, script_content: str=None, arguments: str=None, environment_variables=None, force_update_tag: str=None, timeout=None, **kwargs) -> None: + super(AzureCliScript, self).__init__(identity=identity, location=location, tags=tags, **kwargs) + self.container_settings = container_settings + self.storage_account_settings = storage_account_settings + self.cleanup_preference = cleanup_preference + self.provisioning_state = None + self.status = None + self.outputs = None + self.primary_script_uri = primary_script_uri + self.supporting_script_uris = supporting_script_uris + self.script_content = script_content + self.arguments = arguments + self.environment_variables = environment_variables + self.force_update_tag = force_update_tag + self.retention_interval = retention_interval + self.timeout = timeout + self.az_cli_version = az_cli_version + self.kind = 'AzureCLI' + + +class AzurePowerShellScript(DeploymentScript): + """Object model for the Azure PowerShell script. + + Variables are only populated by the server, and will be ignored when + sending a request. + + All required parameters must be populated in order to send to Azure. + + :ivar id: String Id used to locate any resource on Azure. + :vartype id: str + :ivar name: Name of this resource. + :vartype name: str + :ivar type: Type of this resource. + :vartype type: str + :param identity: Required. Managed identity to be used for this deployment + script. Currently, only user-assigned MSI is supported. + :type identity: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ManagedServiceIdentity + :param location: Required. The location of the ACI and the storage account + for the deployment script. + :type location: str + :param tags: Resource tags. + :type tags: dict[str, str] + :ivar system_data: The system metadata related to this resource. + :vartype system_data: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.SystemData + :param kind: Required. Constant filled by server. + :type kind: str + :param container_settings: Container settings. + :type container_settings: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ContainerConfiguration + :param storage_account_settings: Storage Account settings. + :type storage_account_settings: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.StorageAccountConfiguration + :param cleanup_preference: The clean up preference when the script + execution gets in a terminal state. Default setting is 'Always'. Possible + values include: 'Always', 'OnSuccess', 'OnExpiration' + :type cleanup_preference: str or + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.CleanupOptions + :ivar provisioning_state: State of the script execution. This only appears + in the response. Possible values include: 'Creating', + 'ProvisioningResources', 'Running', 'Succeeded', 'Failed', 'Canceled' + :vartype provisioning_state: str or + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ScriptProvisioningState + :ivar status: Contains the results of script execution. + :vartype status: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ScriptStatus + :ivar outputs: List of script outputs. + :vartype outputs: dict[str, object] + :param primary_script_uri: Uri for the script. This is the entry point for + the external script. + :type primary_script_uri: str + :param supporting_script_uris: Supporting files for the external script. + :type supporting_script_uris: list[str] + :param script_content: Script body. + :type script_content: str + :param arguments: Command line arguments to pass to the script. Arguments + are separated by spaces. ex: -Name blue* -Location 'West US 2' + :type arguments: str + :param environment_variables: The environment variables to pass over to + the script. + :type environment_variables: + list[~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.EnvironmentVariable] + :param force_update_tag: Gets or sets how the deployment script should be + forced to execute even if the script resource has not changed. Can be + current time stamp or a GUID. + :type force_update_tag: str + :param retention_interval: Required. Interval for which the service + retains the script resource after it reaches a terminal state. Resource + will be deleted when this duration expires. Duration is based on ISO 8601 + pattern (for example P7D means one week). + :type retention_interval: timedelta + :param timeout: Maximum allowed script execution time specified in ISO + 8601 format. Default value is PT1H + :type timeout: timedelta + :param az_power_shell_version: Required. Azure PowerShell module version + to be used. + :type az_power_shell_version: str + """ + + _validation = { + 'id': {'readonly': True}, + 'name': {'readonly': True}, + 'type': {'readonly': True}, + 'identity': {'required': True}, + 'location': {'required': True}, + 'system_data': {'readonly': True}, + 'kind': {'required': True}, + 'provisioning_state': {'readonly': True}, + 'status': {'readonly': True}, + 'outputs': {'readonly': True}, + 'script_content': {'max_length': 32000}, + 'retention_interval': {'required': True}, + 'az_power_shell_version': {'required': True}, + } + + _attribute_map = { + 'id': {'key': 'id', 'type': 'str'}, + 'name': {'key': 'name', 'type': 'str'}, + 'type': {'key': 'type', 'type': 'str'}, + 'identity': {'key': 'identity', 'type': 'ManagedServiceIdentity'}, + 'location': {'key': 'location', 'type': 'str'}, + 'tags': {'key': 'tags', 'type': '{str}'}, + 'system_data': {'key': 'systemData', 'type': 'SystemData'}, + 'kind': {'key': 'kind', 'type': 'str'}, + 'container_settings': {'key': 'properties.containerSettings', 'type': 'ContainerConfiguration'}, + 'storage_account_settings': {'key': 'properties.storageAccountSettings', 'type': 'StorageAccountConfiguration'}, + 'cleanup_preference': {'key': 'properties.cleanupPreference', 'type': 'str'}, + 'provisioning_state': {'key': 'properties.provisioningState', 'type': 'str'}, + 'status': {'key': 'properties.status', 'type': 'ScriptStatus'}, + 'outputs': {'key': 'properties.outputs', 'type': '{object}'}, + 'primary_script_uri': {'key': 'properties.primaryScriptUri', 'type': 'str'}, + 'supporting_script_uris': {'key': 'properties.supportingScriptUris', 'type': '[str]'}, + 'script_content': {'key': 'properties.scriptContent', 'type': 'str'}, + 'arguments': {'key': 'properties.arguments', 'type': 'str'}, + 'environment_variables': {'key': 'properties.environmentVariables', 'type': '[EnvironmentVariable]'}, + 'force_update_tag': {'key': 'properties.forceUpdateTag', 'type': 'str'}, + 'retention_interval': {'key': 'properties.retentionInterval', 'type': 'duration'}, + 'timeout': {'key': 'properties.timeout', 'type': 'duration'}, + 'az_power_shell_version': {'key': 'properties.azPowerShellVersion', 'type': 'str'}, + } + + def __init__(self, *, identity, location: str, retention_interval, az_power_shell_version: str, tags=None, container_settings=None, storage_account_settings=None, cleanup_preference=None, primary_script_uri: str=None, supporting_script_uris=None, script_content: str=None, arguments: str=None, environment_variables=None, force_update_tag: str=None, timeout=None, **kwargs) -> None: + super(AzurePowerShellScript, self).__init__(identity=identity, location=location, tags=tags, **kwargs) + self.container_settings = container_settings + self.storage_account_settings = storage_account_settings + self.cleanup_preference = cleanup_preference + self.provisioning_state = None + self.status = None + self.outputs = None + self.primary_script_uri = primary_script_uri + self.supporting_script_uris = supporting_script_uris + self.script_content = script_content + self.arguments = arguments + self.environment_variables = environment_variables + self.force_update_tag = force_update_tag + self.retention_interval = retention_interval + self.timeout = timeout + self.az_power_shell_version = az_power_shell_version + self.kind = 'AzurePowerShell' + + +class CloudError(Model): + """CloudError. + """ + + _attribute_map = { + } + + +class ContainerConfiguration(Model): + """Settings to customize ACI container instance. + + :param container_group_name: Container group name, if not specified then + the name will get auto-generated. Not specifying a 'containerGroupName' + indicates the system to generate a unique name which might end up flagging + an Azure Policy as non-compliant. Use 'containerGroupName' when you have + an Azure Policy that expects a specific naming convention or when you want + to fully control the name. 'containerGroupName' property must be between 1 + and 63 characters long, must contain only lowercase letters, numbers, and + dashes and it cannot start or end with a dash and consecutive dashes are + not allowed. To specify a 'containerGroupName', add the following object + to properties: { "containerSettings": { "containerGroupName": + "contoso-container" } }. If you do not want to specify a + 'containerGroupName' then do not add 'containerSettings' property. + :type container_group_name: str + """ + + _validation = { + 'container_group_name': {'max_length': 63, 'min_length': 1}, + } + + _attribute_map = { + 'container_group_name': {'key': 'containerGroupName', 'type': 'str'}, + } + + def __init__(self, *, container_group_name: str=None, **kwargs) -> None: + super(ContainerConfiguration, self).__init__(**kwargs) + self.container_group_name = container_group_name + + +class DeploymentScriptPropertiesBase(Model): + """Common properties for the deployment script. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :param container_settings: Container settings. + :type container_settings: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ContainerConfiguration + :param storage_account_settings: Storage Account settings. + :type storage_account_settings: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.StorageAccountConfiguration + :param cleanup_preference: The clean up preference when the script + execution gets in a terminal state. Default setting is 'Always'. Possible + values include: 'Always', 'OnSuccess', 'OnExpiration' + :type cleanup_preference: str or + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.CleanupOptions + :ivar provisioning_state: State of the script execution. This only appears + in the response. Possible values include: 'Creating', + 'ProvisioningResources', 'Running', 'Succeeded', 'Failed', 'Canceled' + :vartype provisioning_state: str or + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ScriptProvisioningState + :ivar status: Contains the results of script execution. + :vartype status: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ScriptStatus + :ivar outputs: List of script outputs. + :vartype outputs: dict[str, object] + """ + + _validation = { + 'provisioning_state': {'readonly': True}, + 'status': {'readonly': True}, + 'outputs': {'readonly': True}, + } + + _attribute_map = { + 'container_settings': {'key': 'containerSettings', 'type': 'ContainerConfiguration'}, + 'storage_account_settings': {'key': 'storageAccountSettings', 'type': 'StorageAccountConfiguration'}, + 'cleanup_preference': {'key': 'cleanupPreference', 'type': 'str'}, + 'provisioning_state': {'key': 'provisioningState', 'type': 'str'}, + 'status': {'key': 'status', 'type': 'ScriptStatus'}, + 'outputs': {'key': 'outputs', 'type': '{object}'}, + } + + def __init__(self, *, container_settings=None, storage_account_settings=None, cleanup_preference=None, **kwargs) -> None: + super(DeploymentScriptPropertiesBase, self).__init__(**kwargs) + self.container_settings = container_settings + self.storage_account_settings = storage_account_settings + self.cleanup_preference = cleanup_preference + self.provisioning_state = None + self.status = None + self.outputs = None + + +class DeploymentScriptsError(Model): + """Deployment scripts error response. + + :param error: + :type error: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ErrorResponse + """ + + _attribute_map = { + 'error': {'key': 'error', 'type': 'ErrorResponse'}, + } + + def __init__(self, *, error=None, **kwargs) -> None: + super(DeploymentScriptsError, self).__init__(**kwargs) + self.error = error + + +class DeploymentScriptsErrorException(HttpOperationError): + """Server responsed with exception of type: 'DeploymentScriptsError'. + + :param deserialize: A deserializer + :param response: Server response to be deserialized. + """ + + def __init__(self, deserialize, response, *args): + + super(DeploymentScriptsErrorException, self).__init__(deserialize, response, 'DeploymentScriptsError', *args) + + +class DeploymentScriptUpdateParameter(AzureResourceBase): + """Deployment script parameters to be updated. . + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar id: String Id used to locate any resource on Azure. + :vartype id: str + :ivar name: Name of this resource. + :vartype name: str + :ivar type: Type of this resource. + :vartype type: str + :param tags: Resource tags to be updated. + :type tags: dict[str, str] + """ + + _validation = { + 'id': {'readonly': True}, + 'name': {'readonly': True}, + 'type': {'readonly': True}, + } + + _attribute_map = { + 'id': {'key': 'id', 'type': 'str'}, + 'name': {'key': 'name', 'type': 'str'}, + 'type': {'key': 'type', 'type': 'str'}, + 'tags': {'key': 'tags', 'type': '{str}'}, + } + + def __init__(self, *, tags=None, **kwargs) -> None: + super(DeploymentScriptUpdateParameter, self).__init__(**kwargs) + self.tags = tags + + +class EnvironmentVariable(Model): + """The environment variable to pass to the script in the container instance. + + All required parameters must be populated in order to send to Azure. + + :param name: Required. The name of the environment variable. + :type name: str + :param value: The value of the environment variable. + :type value: str + :param secure_value: The value of the secure environment variable. + :type secure_value: str + """ + + _validation = { + 'name': {'required': True}, + } + + _attribute_map = { + 'name': {'key': 'name', 'type': 'str'}, + 'value': {'key': 'value', 'type': 'str'}, + 'secure_value': {'key': 'secureValue', 'type': 'str'}, + } + + def __init__(self, *, name: str, value: str=None, secure_value: str=None, **kwargs) -> None: + super(EnvironmentVariable, self).__init__(**kwargs) + self.name = name + self.value = value + self.secure_value = secure_value + + +class ErrorAdditionalInfo(Model): + """The resource management error additional info. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar type: The additional info type. + :vartype type: str + :ivar info: The additional info. + :vartype info: object + """ + + _validation = { + 'type': {'readonly': True}, + 'info': {'readonly': True}, + } + + _attribute_map = { + 'type': {'key': 'type', 'type': 'str'}, + 'info': {'key': 'info', 'type': 'object'}, + } + + def __init__(self, **kwargs) -> None: + super(ErrorAdditionalInfo, self).__init__(**kwargs) + self.type = None + self.info = None + + +class ErrorResponse(Model): + """The resource management error response. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar code: The error code. + :vartype code: str + :ivar message: The error message. + :vartype message: str + :ivar target: The error target. + :vartype target: str + :ivar details: The error details. + :vartype details: + list[~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ErrorResponse] + :ivar additional_info: The error additional info. + :vartype additional_info: + list[~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ErrorAdditionalInfo] + """ + + _validation = { + 'code': {'readonly': True}, + 'message': {'readonly': True}, + 'target': {'readonly': True}, + 'details': {'readonly': True}, + 'additional_info': {'readonly': True}, + } + + _attribute_map = { + 'code': {'key': 'code', 'type': 'str'}, + 'message': {'key': 'message', 'type': 'str'}, + 'target': {'key': 'target', 'type': 'str'}, + 'details': {'key': 'details', 'type': '[ErrorResponse]'}, + 'additional_info': {'key': 'additionalInfo', 'type': '[ErrorAdditionalInfo]'}, + } + + def __init__(self, **kwargs) -> None: + super(ErrorResponse, self).__init__(**kwargs) + self.code = None + self.message = None + self.target = None + self.details = None + self.additional_info = None + + +class ManagedServiceIdentity(Model): + """Managed identity generic object. + + :param type: Type of the managed identity. Possible values include: + 'UserAssigned' + :type type: str or + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ManagedServiceIdentityType + :param tenant_id: ID of the Azure Active Directory. + :type tenant_id: str + :param user_assigned_identities: The list of user-assigned managed + identities associated with the resource. Key is the Azure resource Id of + the managed identity. + :type user_assigned_identities: dict[str, + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.UserAssignedIdentity] + """ + + _attribute_map = { + 'type': {'key': 'type', 'type': 'str'}, + 'tenant_id': {'key': 'tenantId', 'type': 'str'}, + 'user_assigned_identities': {'key': 'userAssignedIdentities', 'type': '{UserAssignedIdentity}'}, + } + + def __init__(self, *, type=None, tenant_id: str=None, user_assigned_identities=None, **kwargs) -> None: + super(ManagedServiceIdentity, self).__init__(**kwargs) + self.type = type + self.tenant_id = tenant_id + self.user_assigned_identities = user_assigned_identities + + +class ScriptConfigurationBase(Model): + """Common configuration settings for both Azure PowerShell and Azure CLI + scripts. + + All required parameters must be populated in order to send to Azure. + + :param primary_script_uri: Uri for the script. This is the entry point for + the external script. + :type primary_script_uri: str + :param supporting_script_uris: Supporting files for the external script. + :type supporting_script_uris: list[str] + :param script_content: Script body. + :type script_content: str + :param arguments: Command line arguments to pass to the script. Arguments + are separated by spaces. ex: -Name blue* -Location 'West US 2' + :type arguments: str + :param environment_variables: The environment variables to pass over to + the script. + :type environment_variables: + list[~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.EnvironmentVariable] + :param force_update_tag: Gets or sets how the deployment script should be + forced to execute even if the script resource has not changed. Can be + current time stamp or a GUID. + :type force_update_tag: str + :param retention_interval: Required. Interval for which the service + retains the script resource after it reaches a terminal state. Resource + will be deleted when this duration expires. Duration is based on ISO 8601 + pattern (for example P7D means one week). + :type retention_interval: timedelta + :param timeout: Maximum allowed script execution time specified in ISO + 8601 format. Default value is PT1H + :type timeout: timedelta + """ + + _validation = { + 'script_content': {'max_length': 32000}, + 'retention_interval': {'required': True}, + } + + _attribute_map = { + 'primary_script_uri': {'key': 'primaryScriptUri', 'type': 'str'}, + 'supporting_script_uris': {'key': 'supportingScriptUris', 'type': '[str]'}, + 'script_content': {'key': 'scriptContent', 'type': 'str'}, + 'arguments': {'key': 'arguments', 'type': 'str'}, + 'environment_variables': {'key': 'environmentVariables', 'type': '[EnvironmentVariable]'}, + 'force_update_tag': {'key': 'forceUpdateTag', 'type': 'str'}, + 'retention_interval': {'key': 'retentionInterval', 'type': 'duration'}, + 'timeout': {'key': 'timeout', 'type': 'duration'}, + } + + def __init__(self, *, retention_interval, primary_script_uri: str=None, supporting_script_uris=None, script_content: str=None, arguments: str=None, environment_variables=None, force_update_tag: str=None, timeout=None, **kwargs) -> None: + super(ScriptConfigurationBase, self).__init__(**kwargs) + self.primary_script_uri = primary_script_uri + self.supporting_script_uris = supporting_script_uris + self.script_content = script_content + self.arguments = arguments + self.environment_variables = environment_variables + self.force_update_tag = force_update_tag + self.retention_interval = retention_interval + self.timeout = timeout + + +class ScriptLog(AzureResourceBase): + """Script execution log object. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar id: String Id used to locate any resource on Azure. + :vartype id: str + :ivar name: Name of this resource. + :vartype name: str + :ivar type: Type of this resource. + :vartype type: str + :ivar log: Script execution logs in text format. + :vartype log: str + """ + + _validation = { + 'id': {'readonly': True}, + 'name': {'readonly': True}, + 'type': {'readonly': True}, + 'log': {'readonly': True}, + } + + _attribute_map = { + 'id': {'key': 'id', 'type': 'str'}, + 'name': {'key': 'name', 'type': 'str'}, + 'type': {'key': 'type', 'type': 'str'}, + 'log': {'key': 'properties.log', 'type': 'str'}, + } + + def __init__(self, **kwargs) -> None: + super(ScriptLog, self).__init__(**kwargs) + self.log = None + + +class ScriptLogsList(Model): + """Deployment script execution logs. + + :param value: Deployment scripts logs. + :type value: + list[~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ScriptLog] + """ + + _attribute_map = { + 'value': {'key': 'value', 'type': '[ScriptLog]'}, + } + + def __init__(self, *, value=None, **kwargs) -> None: + super(ScriptLogsList, self).__init__(**kwargs) + self.value = value + + +class ScriptStatus(Model): + """Generic object modeling results of script execution. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar container_instance_id: ACI resource Id. + :vartype container_instance_id: str + :ivar storage_account_id: Storage account resource Id. + :vartype storage_account_id: str + :ivar start_time: Start time of the script execution. + :vartype start_time: datetime + :ivar end_time: End time of the script execution. + :vartype end_time: datetime + :ivar expiration_time: Time the deployment script resource will expire. + :vartype expiration_time: datetime + :param error: Error that is relayed from the script execution. + :type error: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ErrorResponse + """ + + _validation = { + 'container_instance_id': {'readonly': True}, + 'storage_account_id': {'readonly': True}, + 'start_time': {'readonly': True}, + 'end_time': {'readonly': True}, + 'expiration_time': {'readonly': True}, + } + + _attribute_map = { + 'container_instance_id': {'key': 'containerInstanceId', 'type': 'str'}, + 'storage_account_id': {'key': 'storageAccountId', 'type': 'str'}, + 'start_time': {'key': 'startTime', 'type': 'iso-8601'}, + 'end_time': {'key': 'endTime', 'type': 'iso-8601'}, + 'expiration_time': {'key': 'expirationTime', 'type': 'iso-8601'}, + 'error': {'key': 'error', 'type': 'ErrorResponse'}, + } + + def __init__(self, *, error=None, **kwargs) -> None: + super(ScriptStatus, self).__init__(**kwargs) + self.container_instance_id = None + self.storage_account_id = None + self.start_time = None + self.end_time = None + self.expiration_time = None + self.error = error + + +class StorageAccountConfiguration(Model): + """Settings to use an existing storage account. Valid storage account kinds + are: Storage, StorageV2 and FileStorage. + + :param storage_account_name: The storage account name. + :type storage_account_name: str + :param storage_account_key: The storage account access key. + :type storage_account_key: str + """ + + _attribute_map = { + 'storage_account_name': {'key': 'storageAccountName', 'type': 'str'}, + 'storage_account_key': {'key': 'storageAccountKey', 'type': 'str'}, + } + + def __init__(self, *, storage_account_name: str=None, storage_account_key: str=None, **kwargs) -> None: + super(StorageAccountConfiguration, self).__init__(**kwargs) + self.storage_account_name = storage_account_name + self.storage_account_key = storage_account_key + + +class SystemData(Model): + """Metadata pertaining to creation and last modification of the resource. + + :param created_by: The identity that created the resource. + :type created_by: str + :param created_by_type: The type of identity that created the resource. + Possible values include: 'User', 'Application', 'ManagedIdentity', 'Key' + :type created_by_type: str or + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.CreatedByType + :param created_at: The timestamp of resource creation (UTC). + :type created_at: datetime + :param last_modified_by: The identity that last modified the resource. + :type last_modified_by: str + :param last_modified_by_type: The type of identity that last modified the + resource. Possible values include: 'User', 'Application', + 'ManagedIdentity', 'Key' + :type last_modified_by_type: str or + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.CreatedByType + :param last_modified_at: The type of identity that last modified the + resource. + :type last_modified_at: datetime + """ + + _attribute_map = { + 'created_by': {'key': 'createdBy', 'type': 'str'}, + 'created_by_type': {'key': 'createdByType', 'type': 'str'}, + 'created_at': {'key': 'createdAt', 'type': 'iso-8601'}, + 'last_modified_by': {'key': 'lastModifiedBy', 'type': 'str'}, + 'last_modified_by_type': {'key': 'lastModifiedByType', 'type': 'str'}, + 'last_modified_at': {'key': 'lastModifiedAt', 'type': 'iso-8601'}, + } + + def __init__(self, *, created_by: str=None, created_by_type=None, created_at=None, last_modified_by: str=None, last_modified_by_type=None, last_modified_at=None, **kwargs) -> None: + super(SystemData, self).__init__(**kwargs) + self.created_by = created_by + self.created_by_type = created_by_type + self.created_at = created_at + self.last_modified_by = last_modified_by + self.last_modified_by_type = last_modified_by_type + self.last_modified_at = last_modified_at + + +class UserAssignedIdentity(Model): + """User-assigned managed identity. + + :param principal_id: Azure Active Directory principal ID associated with + this identity. + :type principal_id: str + :param client_id: Client App Id associated with this identity. + :type client_id: str + """ + + _attribute_map = { + 'principal_id': {'key': 'principalId', 'type': 'str'}, + 'client_id': {'key': 'clientId', 'type': 'str'}, + } + + def __init__(self, *, principal_id: str=None, client_id: str=None, **kwargs) -> None: + super(UserAssignedIdentity, self).__init__(**kwargs) + self.principal_id = principal_id + self.client_id = client_id diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/models/_paged_models.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/models/_paged_models.py new file mode 100644 index 000000000000..e370d9a17f49 --- /dev/null +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/models/_paged_models.py @@ -0,0 +1,27 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for +# license information. +# +# Code generated by Microsoft (R) AutoRest Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is +# regenerated. +# -------------------------------------------------------------------------- + +from msrest.paging import Paged + + +class DeploymentScriptPaged(Paged): + """ + A paging container for iterating over a list of :class:`DeploymentScript ` object + """ + + _attribute_map = { + 'next_link': {'key': 'nextLink', 'type': 'str'}, + 'current_page': {'key': 'value', 'type': '[DeploymentScript]'} + } + + def __init__(self, *args, **kwargs): + + super(DeploymentScriptPaged, self).__init__(*args, **kwargs) diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/operations/__init__.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/operations/__init__.py new file mode 100644 index 000000000000..3868bac365a6 --- /dev/null +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/operations/__init__.py @@ -0,0 +1,16 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for +# license information. +# +# Code generated by Microsoft (R) AutoRest Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is +# regenerated. +# -------------------------------------------------------------------------- + +from ._deployment_scripts_operations import DeploymentScriptsOperations + +__all__ = [ + 'DeploymentScriptsOperations', +] diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/operations/_deployment_scripts_operations.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/operations/_deployment_scripts_operations.py new file mode 100644 index 000000000000..2651ddaa1f00 --- /dev/null +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/operations/_deployment_scripts_operations.py @@ -0,0 +1,600 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for +# license information. +# +# Code generated by Microsoft (R) AutoRest Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is +# regenerated. +# -------------------------------------------------------------------------- + +import uuid +from msrest.pipeline import ClientRawResponse +from msrest.polling import LROPoller, NoPolling +from msrestazure.polling.arm_polling import ARMPolling + +from .. import models + + +class DeploymentScriptsOperations(object): + """DeploymentScriptsOperations operations. + + You should not instantiate directly this class, but create a Client instance that will create it for you and attach it as attribute. + + :param client: Client for service requests. + :param config: Configuration of service client. + :param serializer: An object model serializer. + :param deserializer: An object model deserializer. + :ivar api_version: Client Api version. Constant value: "2019-10-01-preview". + """ + + models = models + + def __init__(self, client, config, serializer, deserializer): + + self._client = client + self._serialize = serializer + self._deserialize = deserializer + self.api_version = "2019-10-01-preview" + + self.config = config + + + def _create_initial( + self, resource_group_name, script_name, deployment_script, custom_headers=None, raw=False, **operation_config): + # Construct URL + url = self.create.metadata['url'] + path_format_arguments = { + 'subscriptionId': self._serialize.url("self.config.subscription_id", self.config.subscription_id, 'str'), + 'resourceGroupName': self._serialize.url("resource_group_name", resource_group_name, 'str', max_length=90, min_length=1, pattern=r'^[-\w\._\(\)]+$'), + 'scriptName': self._serialize.url("script_name", script_name, 'str', max_length=90, min_length=1) + } + url = self._client.format_url(url, **path_format_arguments) + + # Construct parameters + query_parameters = {} + query_parameters['api-version'] = self._serialize.query("self.api_version", self.api_version, 'str') + + # Construct headers + header_parameters = {} + header_parameters['Accept'] = 'application/json' + header_parameters['Content-Type'] = 'application/json; charset=utf-8' + if self.config.generate_client_request_id: + header_parameters['x-ms-client-request-id'] = str(uuid.uuid1()) + if custom_headers: + header_parameters.update(custom_headers) + if self.config.accept_language is not None: + header_parameters['accept-language'] = self._serialize.header("self.config.accept_language", self.config.accept_language, 'str') + + # Construct body + body_content = self._serialize.body(deployment_script, 'DeploymentScript') + + # Construct and send request + request = self._client.put(url, query_parameters, header_parameters, body_content) + response = self._client.send(request, stream=False, **operation_config) + + if response.status_code not in [200, 201]: + raise models.DeploymentScriptsErrorException(self._deserialize, response) + + deserialized = None + + if response.status_code == 200: + deserialized = self._deserialize('DeploymentScript', response) + if response.status_code == 201: + deserialized = self._deserialize('DeploymentScript', response) + + if raw: + client_raw_response = ClientRawResponse(deserialized, response) + return client_raw_response + + return deserialized + + def create( + self, resource_group_name, script_name, deployment_script, custom_headers=None, raw=False, polling=True, **operation_config): + """Creates a deployment script. + + :param resource_group_name: The name of the resource group. The name + is case insensitive. + :type resource_group_name: str + :param script_name: Name of the deployment script. + :type script_name: str + :param deployment_script: Deployment script supplied to the operation. + :type deployment_script: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.DeploymentScript + :param dict custom_headers: headers that will be added to the request + :param bool raw: The poller return type is ClientRawResponse, the + direct response alongside the deserialized response + :param polling: True for ARMPolling, False for no polling, or a + polling object for personal polling strategy + :return: An instance of LROPoller that returns DeploymentScript or + ClientRawResponse if raw==True + :rtype: + ~msrestazure.azure_operation.AzureOperationPoller[~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.DeploymentScript] + or + ~msrestazure.azure_operation.AzureOperationPoller[~msrest.pipeline.ClientRawResponse[~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.DeploymentScript]] + :raises: + :class:`DeploymentScriptsErrorException` + """ + raw_result = self._create_initial( + resource_group_name=resource_group_name, + script_name=script_name, + deployment_script=deployment_script, + custom_headers=custom_headers, + raw=True, + **operation_config + ) + + def get_long_running_output(response): + deserialized = self._deserialize('DeploymentScript', response) + + if raw: + client_raw_response = ClientRawResponse(deserialized, response) + return client_raw_response + + return deserialized + + lro_delay = operation_config.get( + 'long_running_operation_timeout', + self.config.long_running_operation_timeout) + if polling is True: polling_method = ARMPolling(lro_delay, **operation_config) + elif polling is False: polling_method = NoPolling() + else: polling_method = polling + return LROPoller(self._client, raw_result, get_long_running_output, polling_method) + create.metadata = {'url': '/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Resources/deploymentScripts/{scriptName}'} + + def update( + self, resource_group_name, script_name, tags=None, custom_headers=None, raw=False, **operation_config): + """Updates deployment script tags with specified values. + + :param resource_group_name: The name of the resource group. The name + is case insensitive. + :type resource_group_name: str + :param script_name: Name of the deployment script. + :type script_name: str + :param tags: Resource tags to be updated. + :type tags: dict[str, str] + :param dict custom_headers: headers that will be added to the request + :param bool raw: returns the direct response alongside the + deserialized response + :param operation_config: :ref:`Operation configuration + overrides`. + :return: DeploymentScript or ClientRawResponse if raw=true + :rtype: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.DeploymentScript + or ~msrest.pipeline.ClientRawResponse + :raises: + :class:`DeploymentScriptsErrorException` + """ + deployment_script = None + if tags is not None: + deployment_script = models.DeploymentScriptUpdateParameter(tags=tags) + + # Construct URL + url = self.update.metadata['url'] + path_format_arguments = { + 'subscriptionId': self._serialize.url("self.config.subscription_id", self.config.subscription_id, 'str'), + 'resourceGroupName': self._serialize.url("resource_group_name", resource_group_name, 'str', max_length=90, min_length=1, pattern=r'^[-\w\._\(\)]+$'), + 'scriptName': self._serialize.url("script_name", script_name, 'str', max_length=90, min_length=1) + } + url = self._client.format_url(url, **path_format_arguments) + + # Construct parameters + query_parameters = {} + query_parameters['api-version'] = self._serialize.query("self.api_version", self.api_version, 'str') + + # Construct headers + header_parameters = {} + header_parameters['Accept'] = 'application/json' + header_parameters['Content-Type'] = 'application/json; charset=utf-8' + if self.config.generate_client_request_id: + header_parameters['x-ms-client-request-id'] = str(uuid.uuid1()) + if custom_headers: + header_parameters.update(custom_headers) + if self.config.accept_language is not None: + header_parameters['accept-language'] = self._serialize.header("self.config.accept_language", self.config.accept_language, 'str') + + # Construct body + if deployment_script is not None: + body_content = self._serialize.body(deployment_script, 'DeploymentScriptUpdateParameter') + else: + body_content = None + + # Construct and send request + request = self._client.patch(url, query_parameters, header_parameters, body_content) + response = self._client.send(request, stream=False, **operation_config) + + if response.status_code not in [200]: + raise models.DeploymentScriptsErrorException(self._deserialize, response) + + deserialized = None + if response.status_code == 200: + deserialized = self._deserialize('DeploymentScript', response) + + if raw: + client_raw_response = ClientRawResponse(deserialized, response) + return client_raw_response + + return deserialized + update.metadata = {'url': '/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Resources/deploymentScripts/{scriptName}'} + + def get( + self, resource_group_name, script_name, custom_headers=None, raw=False, **operation_config): + """Gets a deployment script with a given name. + + :param resource_group_name: The name of the resource group. The name + is case insensitive. + :type resource_group_name: str + :param script_name: Name of the deployment script. + :type script_name: str + :param dict custom_headers: headers that will be added to the request + :param bool raw: returns the direct response alongside the + deserialized response + :param operation_config: :ref:`Operation configuration + overrides`. + :return: DeploymentScript or ClientRawResponse if raw=true + :rtype: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.DeploymentScript + or ~msrest.pipeline.ClientRawResponse + :raises: + :class:`DeploymentScriptsErrorException` + """ + # Construct URL + url = self.get.metadata['url'] + path_format_arguments = { + 'subscriptionId': self._serialize.url("self.config.subscription_id", self.config.subscription_id, 'str'), + 'resourceGroupName': self._serialize.url("resource_group_name", resource_group_name, 'str', max_length=90, min_length=1, pattern=r'^[-\w\._\(\)]+$'), + 'scriptName': self._serialize.url("script_name", script_name, 'str', max_length=90, min_length=1) + } + url = self._client.format_url(url, **path_format_arguments) + + # Construct parameters + query_parameters = {} + query_parameters['api-version'] = self._serialize.query("self.api_version", self.api_version, 'str') + + # Construct headers + header_parameters = {} + header_parameters['Accept'] = 'application/json' + if self.config.generate_client_request_id: + header_parameters['x-ms-client-request-id'] = str(uuid.uuid1()) + if custom_headers: + header_parameters.update(custom_headers) + if self.config.accept_language is not None: + header_parameters['accept-language'] = self._serialize.header("self.config.accept_language", self.config.accept_language, 'str') + + # Construct and send request + request = self._client.get(url, query_parameters, header_parameters) + response = self._client.send(request, stream=False, **operation_config) + + if response.status_code not in [200]: + raise models.DeploymentScriptsErrorException(self._deserialize, response) + + deserialized = None + if response.status_code == 200: + deserialized = self._deserialize('DeploymentScript', response) + + if raw: + client_raw_response = ClientRawResponse(deserialized, response) + return client_raw_response + + return deserialized + get.metadata = {'url': '/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Resources/deploymentScripts/{scriptName}'} + + def delete( + self, resource_group_name, script_name, custom_headers=None, raw=False, **operation_config): + """Deletes a deployment script. When operation completes, status code 200 + returned without content. + + :param resource_group_name: The name of the resource group. The name + is case insensitive. + :type resource_group_name: str + :param script_name: Name of the deployment script. + :type script_name: str + :param dict custom_headers: headers that will be added to the request + :param bool raw: returns the direct response alongside the + deserialized response + :param operation_config: :ref:`Operation configuration + overrides`. + :return: None or ClientRawResponse if raw=true + :rtype: None or ~msrest.pipeline.ClientRawResponse + :raises: + :class:`DeploymentScriptsErrorException` + """ + # Construct URL + url = self.delete.metadata['url'] + path_format_arguments = { + 'subscriptionId': self._serialize.url("self.config.subscription_id", self.config.subscription_id, 'str'), + 'resourceGroupName': self._serialize.url("resource_group_name", resource_group_name, 'str', max_length=90, min_length=1, pattern=r'^[-\w\._\(\)]+$'), + 'scriptName': self._serialize.url("script_name", script_name, 'str', max_length=90, min_length=1) + } + url = self._client.format_url(url, **path_format_arguments) + + # Construct parameters + query_parameters = {} + query_parameters['api-version'] = self._serialize.query("self.api_version", self.api_version, 'str') + + # Construct headers + header_parameters = {} + if self.config.generate_client_request_id: + header_parameters['x-ms-client-request-id'] = str(uuid.uuid1()) + if custom_headers: + header_parameters.update(custom_headers) + if self.config.accept_language is not None: + header_parameters['accept-language'] = self._serialize.header("self.config.accept_language", self.config.accept_language, 'str') + + # Construct and send request + request = self._client.delete(url, query_parameters, header_parameters) + response = self._client.send(request, stream=False, **operation_config) + + if response.status_code not in [200, 204]: + raise models.DeploymentScriptsErrorException(self._deserialize, response) + + if raw: + client_raw_response = ClientRawResponse(None, response) + return client_raw_response + delete.metadata = {'url': '/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Resources/deploymentScripts/{scriptName}'} + + def list_by_subscription( + self, custom_headers=None, raw=False, **operation_config): + """Lists all deployment scripts for a given subscription. + + :param dict custom_headers: headers that will be added to the request + :param bool raw: returns the direct response alongside the + deserialized response + :param operation_config: :ref:`Operation configuration + overrides`. + :return: An iterator like instance of DeploymentScript + :rtype: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.DeploymentScriptPaged[~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.DeploymentScript] + :raises: + :class:`DeploymentScriptsErrorException` + """ + def prepare_request(next_link=None): + if not next_link: + # Construct URL + url = self.list_by_subscription.metadata['url'] + path_format_arguments = { + 'subscriptionId': self._serialize.url("self.config.subscription_id", self.config.subscription_id, 'str') + } + url = self._client.format_url(url, **path_format_arguments) + + # Construct parameters + query_parameters = {} + query_parameters['api-version'] = self._serialize.query("self.api_version", self.api_version, 'str') + + else: + url = next_link + query_parameters = {} + + # Construct headers + header_parameters = {} + header_parameters['Accept'] = 'application/json' + if self.config.generate_client_request_id: + header_parameters['x-ms-client-request-id'] = str(uuid.uuid1()) + if custom_headers: + header_parameters.update(custom_headers) + if self.config.accept_language is not None: + header_parameters['accept-language'] = self._serialize.header("self.config.accept_language", self.config.accept_language, 'str') + + # Construct and send request + request = self._client.get(url, query_parameters, header_parameters) + return request + + def internal_paging(next_link=None): + request = prepare_request(next_link) + + response = self._client.send(request, stream=False, **operation_config) + + if response.status_code not in [200]: + raise models.DeploymentScriptsErrorException(self._deserialize, response) + + return response + + # Deserialize response + header_dict = None + if raw: + header_dict = {} + deserialized = models.DeploymentScriptPaged(internal_paging, self._deserialize.dependencies, header_dict) + + return deserialized + list_by_subscription.metadata = {'url': '/subscriptions/{subscriptionId}/providers/Microsoft.Resources/deploymentScripts'} + + def get_logs( + self, resource_group_name, script_name, custom_headers=None, raw=False, **operation_config): + """Gets deployment script logs for a given deployment script name. + + :param resource_group_name: The name of the resource group. The name + is case insensitive. + :type resource_group_name: str + :param script_name: Name of the deployment script. + :type script_name: str + :param dict custom_headers: headers that will be added to the request + :param bool raw: returns the direct response alongside the + deserialized response + :param operation_config: :ref:`Operation configuration + overrides`. + :return: ScriptLogsList or ClientRawResponse if raw=true + :rtype: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ScriptLogsList + or ~msrest.pipeline.ClientRawResponse + :raises: + :class:`DeploymentScriptsErrorException` + """ + # Construct URL + url = self.get_logs.metadata['url'] + path_format_arguments = { + 'subscriptionId': self._serialize.url("self.config.subscription_id", self.config.subscription_id, 'str'), + 'resourceGroupName': self._serialize.url("resource_group_name", resource_group_name, 'str', max_length=90, min_length=1, pattern=r'^[-\w\._\(\)]+$'), + 'scriptName': self._serialize.url("script_name", script_name, 'str', max_length=90, min_length=1) + } + url = self._client.format_url(url, **path_format_arguments) + + # Construct parameters + query_parameters = {} + query_parameters['api-version'] = self._serialize.query("self.api_version", self.api_version, 'str') + + # Construct headers + header_parameters = {} + header_parameters['Accept'] = 'application/json' + if self.config.generate_client_request_id: + header_parameters['x-ms-client-request-id'] = str(uuid.uuid1()) + if custom_headers: + header_parameters.update(custom_headers) + if self.config.accept_language is not None: + header_parameters['accept-language'] = self._serialize.header("self.config.accept_language", self.config.accept_language, 'str') + + # Construct and send request + request = self._client.get(url, query_parameters, header_parameters) + response = self._client.send(request, stream=False, **operation_config) + + if response.status_code not in [200]: + raise models.DeploymentScriptsErrorException(self._deserialize, response) + + deserialized = None + if response.status_code == 200: + deserialized = self._deserialize('ScriptLogsList', response) + + if raw: + client_raw_response = ClientRawResponse(deserialized, response) + return client_raw_response + + return deserialized + get_logs.metadata = {'url': '/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Resources/deploymentScripts/{scriptName}/logs'} + + def get_logs_default( + self, resource_group_name, script_name, tail=None, custom_headers=None, raw=False, **operation_config): + """Gets deployment script logs for a given deployment script name. + + :param resource_group_name: The name of the resource group. The name + is case insensitive. + :type resource_group_name: str + :param script_name: Name of the deployment script. + :type script_name: str + :param tail: The number of lines to show from the tail of the + deployment script log. Valid value is a positive number up to 1000. If + 'tail' is not provided, all available logs are shown up to container + instance log capacity of 4mb. + :type tail: int + :param dict custom_headers: headers that will be added to the request + :param bool raw: returns the direct response alongside the + deserialized response + :param operation_config: :ref:`Operation configuration + overrides`. + :return: ScriptLog or ClientRawResponse if raw=true + :rtype: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.ScriptLog + or ~msrest.pipeline.ClientRawResponse + :raises: + :class:`DeploymentScriptsErrorException` + """ + # Construct URL + url = self.get_logs_default.metadata['url'] + path_format_arguments = { + 'subscriptionId': self._serialize.url("self.config.subscription_id", self.config.subscription_id, 'str'), + 'resourceGroupName': self._serialize.url("resource_group_name", resource_group_name, 'str', max_length=90, min_length=1, pattern=r'^[-\w\._\(\)]+$'), + 'scriptName': self._serialize.url("script_name", script_name, 'str', max_length=90, min_length=1) + } + url = self._client.format_url(url, **path_format_arguments) + + # Construct parameters + query_parameters = {} + query_parameters['api-version'] = self._serialize.query("self.api_version", self.api_version, 'str') + if tail is not None: + query_parameters['tail'] = self._serialize.query("tail", tail, 'int') + + # Construct headers + header_parameters = {} + header_parameters['Accept'] = 'application/json' + if self.config.generate_client_request_id: + header_parameters['x-ms-client-request-id'] = str(uuid.uuid1()) + if custom_headers: + header_parameters.update(custom_headers) + if self.config.accept_language is not None: + header_parameters['accept-language'] = self._serialize.header("self.config.accept_language", self.config.accept_language, 'str') + + # Construct and send request + request = self._client.get(url, query_parameters, header_parameters) + response = self._client.send(request, stream=False, **operation_config) + + if response.status_code not in [200]: + raise models.DeploymentScriptsErrorException(self._deserialize, response) + + deserialized = None + if response.status_code == 200: + deserialized = self._deserialize('ScriptLog', response) + + if raw: + client_raw_response = ClientRawResponse(deserialized, response) + return client_raw_response + + return deserialized + get_logs_default.metadata = {'url': '/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Resources/deploymentScripts/{scriptName}/logs/default'} + + def list_by_resource_group( + self, resource_group_name, custom_headers=None, raw=False, **operation_config): + """Lists deployments scripts. + + :param resource_group_name: The name of the resource group. The name + is case insensitive. + :type resource_group_name: str + :param dict custom_headers: headers that will be added to the request + :param bool raw: returns the direct response alongside the + deserialized response + :param operation_config: :ref:`Operation configuration + overrides`. + :return: An iterator like instance of DeploymentScript + :rtype: + ~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.DeploymentScriptPaged[~azure.mgmt.resource.deploymentscripts.v2019_10_01_preview.models.DeploymentScript] + :raises: + :class:`DeploymentScriptsErrorException` + """ + def prepare_request(next_link=None): + if not next_link: + # Construct URL + url = self.list_by_resource_group.metadata['url'] + path_format_arguments = { + 'subscriptionId': self._serialize.url("self.config.subscription_id", self.config.subscription_id, 'str'), + 'resourceGroupName': self._serialize.url("resource_group_name", resource_group_name, 'str', max_length=90, min_length=1, pattern=r'^[-\w\._\(\)]+$') + } + url = self._client.format_url(url, **path_format_arguments) + + # Construct parameters + query_parameters = {} + query_parameters['api-version'] = self._serialize.query("self.api_version", self.api_version, 'str') + + else: + url = next_link + query_parameters = {} + + # Construct headers + header_parameters = {} + header_parameters['Accept'] = 'application/json' + if self.config.generate_client_request_id: + header_parameters['x-ms-client-request-id'] = str(uuid.uuid1()) + if custom_headers: + header_parameters.update(custom_headers) + if self.config.accept_language is not None: + header_parameters['accept-language'] = self._serialize.header("self.config.accept_language", self.config.accept_language, 'str') + + # Construct and send request + request = self._client.get(url, query_parameters, header_parameters) + return request + + def internal_paging(next_link=None): + request = prepare_request(next_link) + + response = self._client.send(request, stream=False, **operation_config) + + if response.status_code not in [200]: + raise models.DeploymentScriptsErrorException(self._deserialize, response) + + return response + + # Deserialize response + header_dict = None + if raw: + header_dict = {} + deserialized = models.DeploymentScriptPaged(internal_paging, self._deserialize.dependencies, header_dict) + + return deserialized + list_by_resource_group.metadata = {'url': '/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Resources/deploymentScripts'} diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/version.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/version.py new file mode 100644 index 000000000000..90309975708c --- /dev/null +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2019_10_01_preview/version.py @@ -0,0 +1,13 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for +# license information. +# +# Code generated by Microsoft (R) AutoRest Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is +# regenerated. +# -------------------------------------------------------------------------- + +VERSION = "2019-10-01-preview" + diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/__init__.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/__init__.py new file mode 100644 index 000000000000..08e241ee1ed8 --- /dev/null +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/__init__.py @@ -0,0 +1,19 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for +# license information. +# +# Code generated by Microsoft (R) AutoRest Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is +# regenerated. +# -------------------------------------------------------------------------- + +from ._configuration import DeploymentScriptsClientConfiguration +from ._deployment_scripts_client import DeploymentScriptsClient +__all__ = ['DeploymentScriptsClient', 'DeploymentScriptsClientConfiguration'] + +from .version import VERSION + +__version__ = VERSION + diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/_configuration.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/_configuration.py new file mode 100644 index 000000000000..142be065a596 --- /dev/null +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/_configuration.py @@ -0,0 +1,49 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for +# license information. +# +# Code generated by Microsoft (R) AutoRest Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is +# regenerated. +# -------------------------------------------------------------------------- +from msrestazure import AzureConfiguration + +from .version import VERSION + + +class DeploymentScriptsClientConfiguration(AzureConfiguration): + """Configuration for DeploymentScriptsClient + Note that all parameters used to create this instance are saved as instance + attributes. + + :param credentials: Credentials needed for the client to connect to Azure. + :type credentials: :mod:`A msrestazure Credentials + object` + :param subscription_id: Subscription Id which forms part of the URI for + every service call. + :type subscription_id: str + :param str base_url: Service URL + """ + + def __init__( + self, credentials, subscription_id, base_url=None): + + if credentials is None: + raise ValueError("Parameter 'credentials' must not be None.") + if subscription_id is None: + raise ValueError("Parameter 'subscription_id' must not be None.") + if not base_url: + base_url = 'https://management.azure.com' + + super(DeploymentScriptsClientConfiguration, self).__init__(base_url) + + # Starting Autorest.Python 4.0.64, make connection pool activated by default + self.keep_alive = True + + self.add_user_agent('azure-mgmt-resource/{}'.format(VERSION)) + self.add_user_agent('Azure-SDK-For-Python') + + self.credentials = credentials + self.subscription_id = subscription_id diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/_deployment_scripts_client.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/_deployment_scripts_client.py new file mode 100644 index 000000000000..250ce9c916f7 --- /dev/null +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/_deployment_scripts_client.py @@ -0,0 +1,50 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for +# license information. +# +# Code generated by Microsoft (R) AutoRest Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is +# regenerated. +# -------------------------------------------------------------------------- + +from msrest.service_client import SDKClient +from msrest import Serializer, Deserializer + +from ._configuration import DeploymentScriptsClientConfiguration +from .operations import DeploymentScriptsOperations +from . import models + + +class DeploymentScriptsClient(SDKClient): + """The APIs listed in this specification can be used to manage Deployment Scripts resource through the Azure Resource Manager. + + :ivar config: Configuration for client. + :vartype config: DeploymentScriptsClientConfiguration + + :ivar deployment_scripts: DeploymentScripts operations + :vartype deployment_scripts: azure.mgmt.resource.deploymentscripts.v2020_10_01.operations.DeploymentScriptsOperations + + :param credentials: Credentials needed for the client to connect to Azure. + :type credentials: :mod:`A msrestazure Credentials + object` + :param subscription_id: Subscription Id which forms part of the URI for + every service call. + :type subscription_id: str + :param str base_url: Service URL + """ + + def __init__( + self, credentials, subscription_id, base_url=None): + + self.config = DeploymentScriptsClientConfiguration(credentials, subscription_id, base_url) + super(DeploymentScriptsClient, self).__init__(self.config.credentials, self.config) + + client_models = {k: v for k, v in models.__dict__.items() if isinstance(v, type)} + self.api_version = '2020-10-01' + self._serialize = Serializer(client_models) + self._deserialize = Deserializer(client_models) + + self.deployment_scripts = DeploymentScriptsOperations( + self._client, self.config, self._serialize, self._deserialize) diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/models/__init__.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/models/__init__.py new file mode 100644 index 000000000000..6dd3003be147 --- /dev/null +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/models/__init__.py @@ -0,0 +1,79 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for +# license information. +# +# Code generated by Microsoft (R) AutoRest Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is +# regenerated. +# -------------------------------------------------------------------------- + +try: + from ._models_py3 import AzureCliScript + from ._models_py3 import AzurePowerShellScript + from ._models_py3 import AzureResourceBase + from ._models_py3 import ContainerConfiguration + from ._models_py3 import DeploymentScript + from ._models_py3 import DeploymentScriptsError, DeploymentScriptsErrorException + from ._models_py3 import DeploymentScriptUpdateParameter + from ._models_py3 import EnvironmentVariable + from ._models_py3 import ErrorAdditionalInfo + from ._models_py3 import ErrorResponse + from ._models_py3 import ManagedServiceIdentity + from ._models_py3 import ScriptLog + from ._models_py3 import ScriptLogsList + from ._models_py3 import ScriptStatus + from ._models_py3 import StorageAccountConfiguration + from ._models_py3 import SystemData + from ._models_py3 import UserAssignedIdentity +except (SyntaxError, ImportError): + from ._models import AzureCliScript + from ._models import AzurePowerShellScript + from ._models import AzureResourceBase + from ._models import ContainerConfiguration + from ._models import DeploymentScript + from ._models import DeploymentScriptsError, DeploymentScriptsErrorException + from ._models import DeploymentScriptUpdateParameter + from ._models import EnvironmentVariable + from ._models import ErrorAdditionalInfo + from ._models import ErrorResponse + from ._models import ManagedServiceIdentity + from ._models import ScriptLog + from ._models import ScriptLogsList + from ._models import ScriptStatus + from ._models import StorageAccountConfiguration + from ._models import SystemData + from ._models import UserAssignedIdentity +from ._paged_models import DeploymentScriptPaged +from ._deployment_scripts_client_enums import ( + ManagedServiceIdentityType, + CreatedByType, + CleanupOptions, + ScriptProvisioningState, +) + +__all__ = [ + 'AzureCliScript', + 'AzurePowerShellScript', + 'AzureResourceBase', + 'ContainerConfiguration', + 'DeploymentScript', + 'DeploymentScriptsError', 'DeploymentScriptsErrorException', + 'DeploymentScriptUpdateParameter', + 'EnvironmentVariable', + 'ErrorAdditionalInfo', + 'ErrorResponse', + 'ManagedServiceIdentity', + 'ScriptLog', + 'ScriptLogsList', + 'ScriptStatus', + 'StorageAccountConfiguration', + 'SystemData', + 'UserAssignedIdentity', + 'DeploymentScriptPaged', + 'ManagedServiceIdentityType', + 'CreatedByType', + 'CleanupOptions', + 'ScriptProvisioningState', +] diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/models/_deployment_scripts_client_enums.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/models/_deployment_scripts_client_enums.py new file mode 100644 index 000000000000..b59700cab06f --- /dev/null +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/models/_deployment_scripts_client_enums.py @@ -0,0 +1,42 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for +# license information. +# +# Code generated by Microsoft (R) AutoRest Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is +# regenerated. +# -------------------------------------------------------------------------- + +from enum import Enum + + +class ManagedServiceIdentityType(str, Enum): + + user_assigned = "UserAssigned" + + +class CreatedByType(str, Enum): + + user = "User" + application = "Application" + managed_identity = "ManagedIdentity" + key = "Key" + + +class CleanupOptions(str, Enum): + + always = "Always" + on_success = "OnSuccess" + on_expiration = "OnExpiration" + + +class ScriptProvisioningState(str, Enum): + + creating = "Creating" + provisioning_resources = "ProvisioningResources" + running = "Running" + succeeded = "Succeeded" + failed = "Failed" + canceled = "Canceled" diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/models/_models.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/models/_models.py new file mode 100644 index 000000000000..817c7c9e7076 --- /dev/null +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/models/_models.py @@ -0,0 +1,924 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for +# license information. +# +# Code generated by Microsoft (R) AutoRest Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is +# regenerated. +# -------------------------------------------------------------------------- + +from msrest.serialization import Model +from msrest.exceptions import HttpOperationError + + +class AzureResourceBase(Model): + """Common properties for all Azure resources. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar id: String Id used to locate any resource on Azure. + :vartype id: str + :ivar name: Name of this resource. + :vartype name: str + :ivar type: Type of this resource. + :vartype type: str + """ + + _validation = { + 'id': {'readonly': True}, + 'name': {'readonly': True}, + 'type': {'readonly': True}, + } + + _attribute_map = { + 'id': {'key': 'id', 'type': 'str'}, + 'name': {'key': 'name', 'type': 'str'}, + 'type': {'key': 'type', 'type': 'str'}, + } + + def __init__(self, **kwargs): + super(AzureResourceBase, self).__init__(**kwargs) + self.id = None + self.name = None + self.type = None + + +class DeploymentScript(AzureResourceBase): + """Deployment script object. + + You probably want to use the sub-classes and not this class directly. Known + sub-classes are: AzurePowerShellScript, AzureCliScript + + Variables are only populated by the server, and will be ignored when + sending a request. + + All required parameters must be populated in order to send to Azure. + + :ivar id: String Id used to locate any resource on Azure. + :vartype id: str + :ivar name: Name of this resource. + :vartype name: str + :ivar type: Type of this resource. + :vartype type: str + :param identity: Optional property. Managed identity to be used for this + deployment script. Currently, only user-assigned MSI is supported. + :type identity: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ManagedServiceIdentity + :param location: Required. The location of the ACI and the storage account + for the deployment script. + :type location: str + :param tags: Resource tags. + :type tags: dict[str, str] + :ivar system_data: The system metadata related to this resource. + :vartype system_data: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.SystemData + :param kind: Required. Constant filled by server. + :type kind: str + """ + + _validation = { + 'id': {'readonly': True}, + 'name': {'readonly': True}, + 'type': {'readonly': True}, + 'location': {'required': True}, + 'system_data': {'readonly': True}, + 'kind': {'required': True}, + } + + _attribute_map = { + 'id': {'key': 'id', 'type': 'str'}, + 'name': {'key': 'name', 'type': 'str'}, + 'type': {'key': 'type', 'type': 'str'}, + 'identity': {'key': 'identity', 'type': 'ManagedServiceIdentity'}, + 'location': {'key': 'location', 'type': 'str'}, + 'tags': {'key': 'tags', 'type': '{str}'}, + 'system_data': {'key': 'systemData', 'type': 'SystemData'}, + 'kind': {'key': 'kind', 'type': 'str'}, + } + + _subtype_map = { + 'kind': {'AzurePowerShell': 'AzurePowerShellScript', 'AzureCLI': 'AzureCliScript'} + } + + def __init__(self, **kwargs): + super(DeploymentScript, self).__init__(**kwargs) + self.identity = kwargs.get('identity', None) + self.location = kwargs.get('location', None) + self.tags = kwargs.get('tags', None) + self.system_data = None + self.kind = None + self.kind = 'DeploymentScript' + + +class AzureCliScript(DeploymentScript): + """Object model for the Azure CLI script. + + Variables are only populated by the server, and will be ignored when + sending a request. + + All required parameters must be populated in order to send to Azure. + + :ivar id: String Id used to locate any resource on Azure. + :vartype id: str + :ivar name: Name of this resource. + :vartype name: str + :ivar type: Type of this resource. + :vartype type: str + :param identity: Optional property. Managed identity to be used for this + deployment script. Currently, only user-assigned MSI is supported. + :type identity: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ManagedServiceIdentity + :param location: Required. The location of the ACI and the storage account + for the deployment script. + :type location: str + :param tags: Resource tags. + :type tags: dict[str, str] + :ivar system_data: The system metadata related to this resource. + :vartype system_data: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.SystemData + :param kind: Required. Constant filled by server. + :type kind: str + :param container_settings: Container settings. + :type container_settings: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ContainerConfiguration + :param storage_account_settings: Storage Account settings. + :type storage_account_settings: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.StorageAccountConfiguration + :param cleanup_preference: The clean up preference when the script + execution gets in a terminal state. Default setting is 'Always'. Possible + values include: 'Always', 'OnSuccess', 'OnExpiration' + :type cleanup_preference: str or + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.CleanupOptions + :ivar provisioning_state: State of the script execution. This only appears + in the response. Possible values include: 'Creating', + 'ProvisioningResources', 'Running', 'Succeeded', 'Failed', 'Canceled' + :vartype provisioning_state: str or + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ScriptProvisioningState + :ivar status: Contains the results of script execution. + :vartype status: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ScriptStatus + :ivar outputs: List of script outputs. + :vartype outputs: dict[str, object] + :param primary_script_uri: Uri for the script. This is the entry point for + the external script. + :type primary_script_uri: str + :param supporting_script_uris: Supporting files for the external script. + :type supporting_script_uris: list[str] + :param script_content: Script body. + :type script_content: str + :param arguments: Command line arguments to pass to the script. Arguments + are separated by spaces. ex: -Name blue* -Location 'West US 2' + :type arguments: str + :param environment_variables: The environment variables to pass over to + the script. + :type environment_variables: + list[~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.EnvironmentVariable] + :param force_update_tag: Gets or sets how the deployment script should be + forced to execute even if the script resource has not changed. Can be + current time stamp or a GUID. + :type force_update_tag: str + :param retention_interval: Required. Interval for which the service + retains the script resource after it reaches a terminal state. Resource + will be deleted when this duration expires. Duration is based on ISO 8601 + pattern (for example P7D means one week). + :type retention_interval: timedelta + :param timeout: Maximum allowed script execution time specified in ISO + 8601 format. Default value is PT1H + :type timeout: timedelta + :param az_cli_version: Required. Azure CLI module version to be used. + :type az_cli_version: str + """ + + _validation = { + 'id': {'readonly': True}, + 'name': {'readonly': True}, + 'type': {'readonly': True}, + 'location': {'required': True}, + 'system_data': {'readonly': True}, + 'kind': {'required': True}, + 'provisioning_state': {'readonly': True}, + 'status': {'readonly': True}, + 'outputs': {'readonly': True}, + 'script_content': {'max_length': 32000}, + 'retention_interval': {'required': True}, + 'az_cli_version': {'required': True}, + } + + _attribute_map = { + 'id': {'key': 'id', 'type': 'str'}, + 'name': {'key': 'name', 'type': 'str'}, + 'type': {'key': 'type', 'type': 'str'}, + 'identity': {'key': 'identity', 'type': 'ManagedServiceIdentity'}, + 'location': {'key': 'location', 'type': 'str'}, + 'tags': {'key': 'tags', 'type': '{str}'}, + 'system_data': {'key': 'systemData', 'type': 'SystemData'}, + 'kind': {'key': 'kind', 'type': 'str'}, + 'container_settings': {'key': 'properties.containerSettings', 'type': 'ContainerConfiguration'}, + 'storage_account_settings': {'key': 'properties.storageAccountSettings', 'type': 'StorageAccountConfiguration'}, + 'cleanup_preference': {'key': 'properties.cleanupPreference', 'type': 'str'}, + 'provisioning_state': {'key': 'properties.provisioningState', 'type': 'str'}, + 'status': {'key': 'properties.status', 'type': 'ScriptStatus'}, + 'outputs': {'key': 'properties.outputs', 'type': '{object}'}, + 'primary_script_uri': {'key': 'properties.primaryScriptUri', 'type': 'str'}, + 'supporting_script_uris': {'key': 'properties.supportingScriptUris', 'type': '[str]'}, + 'script_content': {'key': 'properties.scriptContent', 'type': 'str'}, + 'arguments': {'key': 'properties.arguments', 'type': 'str'}, + 'environment_variables': {'key': 'properties.environmentVariables', 'type': '[EnvironmentVariable]'}, + 'force_update_tag': {'key': 'properties.forceUpdateTag', 'type': 'str'}, + 'retention_interval': {'key': 'properties.retentionInterval', 'type': 'duration'}, + 'timeout': {'key': 'properties.timeout', 'type': 'duration'}, + 'az_cli_version': {'key': 'properties.azCliVersion', 'type': 'str'}, + } + + def __init__(self, **kwargs): + super(AzureCliScript, self).__init__(**kwargs) + self.container_settings = kwargs.get('container_settings', None) + self.storage_account_settings = kwargs.get('storage_account_settings', None) + self.cleanup_preference = kwargs.get('cleanup_preference', None) + self.provisioning_state = None + self.status = None + self.outputs = None + self.primary_script_uri = kwargs.get('primary_script_uri', None) + self.supporting_script_uris = kwargs.get('supporting_script_uris', None) + self.script_content = kwargs.get('script_content', None) + self.arguments = kwargs.get('arguments', None) + self.environment_variables = kwargs.get('environment_variables', None) + self.force_update_tag = kwargs.get('force_update_tag', None) + self.retention_interval = kwargs.get('retention_interval', None) + self.timeout = kwargs.get('timeout', None) + self.az_cli_version = kwargs.get('az_cli_version', None) + self.kind = 'AzureCLI' + + +class AzurePowerShellScript(DeploymentScript): + """Object model for the Azure PowerShell script. + + Variables are only populated by the server, and will be ignored when + sending a request. + + All required parameters must be populated in order to send to Azure. + + :ivar id: String Id used to locate any resource on Azure. + :vartype id: str + :ivar name: Name of this resource. + :vartype name: str + :ivar type: Type of this resource. + :vartype type: str + :param identity: Optional property. Managed identity to be used for this + deployment script. Currently, only user-assigned MSI is supported. + :type identity: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ManagedServiceIdentity + :param location: Required. The location of the ACI and the storage account + for the deployment script. + :type location: str + :param tags: Resource tags. + :type tags: dict[str, str] + :ivar system_data: The system metadata related to this resource. + :vartype system_data: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.SystemData + :param kind: Required. Constant filled by server. + :type kind: str + :param container_settings: Container settings. + :type container_settings: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ContainerConfiguration + :param storage_account_settings: Storage Account settings. + :type storage_account_settings: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.StorageAccountConfiguration + :param cleanup_preference: The clean up preference when the script + execution gets in a terminal state. Default setting is 'Always'. Possible + values include: 'Always', 'OnSuccess', 'OnExpiration' + :type cleanup_preference: str or + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.CleanupOptions + :ivar provisioning_state: State of the script execution. This only appears + in the response. Possible values include: 'Creating', + 'ProvisioningResources', 'Running', 'Succeeded', 'Failed', 'Canceled' + :vartype provisioning_state: str or + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ScriptProvisioningState + :ivar status: Contains the results of script execution. + :vartype status: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ScriptStatus + :ivar outputs: List of script outputs. + :vartype outputs: dict[str, object] + :param primary_script_uri: Uri for the script. This is the entry point for + the external script. + :type primary_script_uri: str + :param supporting_script_uris: Supporting files for the external script. + :type supporting_script_uris: list[str] + :param script_content: Script body. + :type script_content: str + :param arguments: Command line arguments to pass to the script. Arguments + are separated by spaces. ex: -Name blue* -Location 'West US 2' + :type arguments: str + :param environment_variables: The environment variables to pass over to + the script. + :type environment_variables: + list[~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.EnvironmentVariable] + :param force_update_tag: Gets or sets how the deployment script should be + forced to execute even if the script resource has not changed. Can be + current time stamp or a GUID. + :type force_update_tag: str + :param retention_interval: Required. Interval for which the service + retains the script resource after it reaches a terminal state. Resource + will be deleted when this duration expires. Duration is based on ISO 8601 + pattern (for example P7D means one week). + :type retention_interval: timedelta + :param timeout: Maximum allowed script execution time specified in ISO + 8601 format. Default value is PT1H + :type timeout: timedelta + :param az_power_shell_version: Required. Azure PowerShell module version + to be used. + :type az_power_shell_version: str + """ + + _validation = { + 'id': {'readonly': True}, + 'name': {'readonly': True}, + 'type': {'readonly': True}, + 'location': {'required': True}, + 'system_data': {'readonly': True}, + 'kind': {'required': True}, + 'provisioning_state': {'readonly': True}, + 'status': {'readonly': True}, + 'outputs': {'readonly': True}, + 'script_content': {'max_length': 32000}, + 'retention_interval': {'required': True}, + 'az_power_shell_version': {'required': True}, + } + + _attribute_map = { + 'id': {'key': 'id', 'type': 'str'}, + 'name': {'key': 'name', 'type': 'str'}, + 'type': {'key': 'type', 'type': 'str'}, + 'identity': {'key': 'identity', 'type': 'ManagedServiceIdentity'}, + 'location': {'key': 'location', 'type': 'str'}, + 'tags': {'key': 'tags', 'type': '{str}'}, + 'system_data': {'key': 'systemData', 'type': 'SystemData'}, + 'kind': {'key': 'kind', 'type': 'str'}, + 'container_settings': {'key': 'properties.containerSettings', 'type': 'ContainerConfiguration'}, + 'storage_account_settings': {'key': 'properties.storageAccountSettings', 'type': 'StorageAccountConfiguration'}, + 'cleanup_preference': {'key': 'properties.cleanupPreference', 'type': 'str'}, + 'provisioning_state': {'key': 'properties.provisioningState', 'type': 'str'}, + 'status': {'key': 'properties.status', 'type': 'ScriptStatus'}, + 'outputs': {'key': 'properties.outputs', 'type': '{object}'}, + 'primary_script_uri': {'key': 'properties.primaryScriptUri', 'type': 'str'}, + 'supporting_script_uris': {'key': 'properties.supportingScriptUris', 'type': '[str]'}, + 'script_content': {'key': 'properties.scriptContent', 'type': 'str'}, + 'arguments': {'key': 'properties.arguments', 'type': 'str'}, + 'environment_variables': {'key': 'properties.environmentVariables', 'type': '[EnvironmentVariable]'}, + 'force_update_tag': {'key': 'properties.forceUpdateTag', 'type': 'str'}, + 'retention_interval': {'key': 'properties.retentionInterval', 'type': 'duration'}, + 'timeout': {'key': 'properties.timeout', 'type': 'duration'}, + 'az_power_shell_version': {'key': 'properties.azPowerShellVersion', 'type': 'str'}, + } + + def __init__(self, **kwargs): + super(AzurePowerShellScript, self).__init__(**kwargs) + self.container_settings = kwargs.get('container_settings', None) + self.storage_account_settings = kwargs.get('storage_account_settings', None) + self.cleanup_preference = kwargs.get('cleanup_preference', None) + self.provisioning_state = None + self.status = None + self.outputs = None + self.primary_script_uri = kwargs.get('primary_script_uri', None) + self.supporting_script_uris = kwargs.get('supporting_script_uris', None) + self.script_content = kwargs.get('script_content', None) + self.arguments = kwargs.get('arguments', None) + self.environment_variables = kwargs.get('environment_variables', None) + self.force_update_tag = kwargs.get('force_update_tag', None) + self.retention_interval = kwargs.get('retention_interval', None) + self.timeout = kwargs.get('timeout', None) + self.az_power_shell_version = kwargs.get('az_power_shell_version', None) + self.kind = 'AzurePowerShell' + + +class CloudError(Model): + """CloudError. + """ + + _attribute_map = { + } + + +class ContainerConfiguration(Model): + """Settings to customize ACI container instance. + + :param container_group_name: Container group name, if not specified then + the name will get auto-generated. Not specifying a 'containerGroupName' + indicates the system to generate a unique name which might end up flagging + an Azure Policy as non-compliant. Use 'containerGroupName' when you have + an Azure Policy that expects a specific naming convention or when you want + to fully control the name. 'containerGroupName' property must be between 1 + and 63 characters long, must contain only lowercase letters, numbers, and + dashes and it cannot start or end with a dash and consecutive dashes are + not allowed. To specify a 'containerGroupName', add the following object + to properties: { "containerSettings": { "containerGroupName": + "contoso-container" } }. If you do not want to specify a + 'containerGroupName' then do not add 'containerSettings' property. + :type container_group_name: str + """ + + _validation = { + 'container_group_name': {'max_length': 63, 'min_length': 1}, + } + + _attribute_map = { + 'container_group_name': {'key': 'containerGroupName', 'type': 'str'}, + } + + def __init__(self, **kwargs): + super(ContainerConfiguration, self).__init__(**kwargs) + self.container_group_name = kwargs.get('container_group_name', None) + + +class DeploymentScriptPropertiesBase(Model): + """Common properties for the deployment script. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :param container_settings: Container settings. + :type container_settings: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ContainerConfiguration + :param storage_account_settings: Storage Account settings. + :type storage_account_settings: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.StorageAccountConfiguration + :param cleanup_preference: The clean up preference when the script + execution gets in a terminal state. Default setting is 'Always'. Possible + values include: 'Always', 'OnSuccess', 'OnExpiration' + :type cleanup_preference: str or + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.CleanupOptions + :ivar provisioning_state: State of the script execution. This only appears + in the response. Possible values include: 'Creating', + 'ProvisioningResources', 'Running', 'Succeeded', 'Failed', 'Canceled' + :vartype provisioning_state: str or + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ScriptProvisioningState + :ivar status: Contains the results of script execution. + :vartype status: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ScriptStatus + :ivar outputs: List of script outputs. + :vartype outputs: dict[str, object] + """ + + _validation = { + 'provisioning_state': {'readonly': True}, + 'status': {'readonly': True}, + 'outputs': {'readonly': True}, + } + + _attribute_map = { + 'container_settings': {'key': 'containerSettings', 'type': 'ContainerConfiguration'}, + 'storage_account_settings': {'key': 'storageAccountSettings', 'type': 'StorageAccountConfiguration'}, + 'cleanup_preference': {'key': 'cleanupPreference', 'type': 'str'}, + 'provisioning_state': {'key': 'provisioningState', 'type': 'str'}, + 'status': {'key': 'status', 'type': 'ScriptStatus'}, + 'outputs': {'key': 'outputs', 'type': '{object}'}, + } + + def __init__(self, **kwargs): + super(DeploymentScriptPropertiesBase, self).__init__(**kwargs) + self.container_settings = kwargs.get('container_settings', None) + self.storage_account_settings = kwargs.get('storage_account_settings', None) + self.cleanup_preference = kwargs.get('cleanup_preference', None) + self.provisioning_state = None + self.status = None + self.outputs = None + + +class DeploymentScriptsError(Model): + """Deployment scripts error response. + + :param error: + :type error: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ErrorResponse + """ + + _attribute_map = { + 'error': {'key': 'error', 'type': 'ErrorResponse'}, + } + + def __init__(self, **kwargs): + super(DeploymentScriptsError, self).__init__(**kwargs) + self.error = kwargs.get('error', None) + + +class DeploymentScriptsErrorException(HttpOperationError): + """Server responsed with exception of type: 'DeploymentScriptsError'. + + :param deserialize: A deserializer + :param response: Server response to be deserialized. + """ + + def __init__(self, deserialize, response, *args): + + super(DeploymentScriptsErrorException, self).__init__(deserialize, response, 'DeploymentScriptsError', *args) + + +class DeploymentScriptUpdateParameter(AzureResourceBase): + """Deployment script parameters to be updated. . + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar id: String Id used to locate any resource on Azure. + :vartype id: str + :ivar name: Name of this resource. + :vartype name: str + :ivar type: Type of this resource. + :vartype type: str + :param tags: Resource tags to be updated. + :type tags: dict[str, str] + """ + + _validation = { + 'id': {'readonly': True}, + 'name': {'readonly': True}, + 'type': {'readonly': True}, + } + + _attribute_map = { + 'id': {'key': 'id', 'type': 'str'}, + 'name': {'key': 'name', 'type': 'str'}, + 'type': {'key': 'type', 'type': 'str'}, + 'tags': {'key': 'tags', 'type': '{str}'}, + } + + def __init__(self, **kwargs): + super(DeploymentScriptUpdateParameter, self).__init__(**kwargs) + self.tags = kwargs.get('tags', None) + + +class EnvironmentVariable(Model): + """The environment variable to pass to the script in the container instance. + + All required parameters must be populated in order to send to Azure. + + :param name: Required. The name of the environment variable. + :type name: str + :param value: The value of the environment variable. + :type value: str + :param secure_value: The value of the secure environment variable. + :type secure_value: str + """ + + _validation = { + 'name': {'required': True}, + } + + _attribute_map = { + 'name': {'key': 'name', 'type': 'str'}, + 'value': {'key': 'value', 'type': 'str'}, + 'secure_value': {'key': 'secureValue', 'type': 'str'}, + } + + def __init__(self, **kwargs): + super(EnvironmentVariable, self).__init__(**kwargs) + self.name = kwargs.get('name', None) + self.value = kwargs.get('value', None) + self.secure_value = kwargs.get('secure_value', None) + + +class ErrorAdditionalInfo(Model): + """The resource management error additional info. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar type: The additional info type. + :vartype type: str + :ivar info: The additional info. + :vartype info: object + """ + + _validation = { + 'type': {'readonly': True}, + 'info': {'readonly': True}, + } + + _attribute_map = { + 'type': {'key': 'type', 'type': 'str'}, + 'info': {'key': 'info', 'type': 'object'}, + } + + def __init__(self, **kwargs): + super(ErrorAdditionalInfo, self).__init__(**kwargs) + self.type = None + self.info = None + + +class ErrorResponse(Model): + """The resource management error response. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar code: The error code. + :vartype code: str + :ivar message: The error message. + :vartype message: str + :ivar target: The error target. + :vartype target: str + :ivar details: The error details. + :vartype details: + list[~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ErrorResponse] + :ivar additional_info: The error additional info. + :vartype additional_info: + list[~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ErrorAdditionalInfo] + """ + + _validation = { + 'code': {'readonly': True}, + 'message': {'readonly': True}, + 'target': {'readonly': True}, + 'details': {'readonly': True}, + 'additional_info': {'readonly': True}, + } + + _attribute_map = { + 'code': {'key': 'code', 'type': 'str'}, + 'message': {'key': 'message', 'type': 'str'}, + 'target': {'key': 'target', 'type': 'str'}, + 'details': {'key': 'details', 'type': '[ErrorResponse]'}, + 'additional_info': {'key': 'additionalInfo', 'type': '[ErrorAdditionalInfo]'}, + } + + def __init__(self, **kwargs): + super(ErrorResponse, self).__init__(**kwargs) + self.code = None + self.message = None + self.target = None + self.details = None + self.additional_info = None + + +class ManagedServiceIdentity(Model): + """Managed identity generic object. + + :param type: Type of the managed identity. Possible values include: + 'UserAssigned' + :type type: str or + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ManagedServiceIdentityType + :param user_assigned_identities: The list of user-assigned managed + identities associated with the resource. Key is the Azure resource Id of + the managed identity. + :type user_assigned_identities: dict[str, + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.UserAssignedIdentity] + """ + + _attribute_map = { + 'type': {'key': 'type', 'type': 'str'}, + 'user_assigned_identities': {'key': 'userAssignedIdentities', 'type': '{UserAssignedIdentity}'}, + } + + def __init__(self, **kwargs): + super(ManagedServiceIdentity, self).__init__(**kwargs) + self.type = kwargs.get('type', None) + self.user_assigned_identities = kwargs.get('user_assigned_identities', None) + + +class ScriptConfigurationBase(Model): + """Common configuration settings for both Azure PowerShell and Azure CLI + scripts. + + All required parameters must be populated in order to send to Azure. + + :param primary_script_uri: Uri for the script. This is the entry point for + the external script. + :type primary_script_uri: str + :param supporting_script_uris: Supporting files for the external script. + :type supporting_script_uris: list[str] + :param script_content: Script body. + :type script_content: str + :param arguments: Command line arguments to pass to the script. Arguments + are separated by spaces. ex: -Name blue* -Location 'West US 2' + :type arguments: str + :param environment_variables: The environment variables to pass over to + the script. + :type environment_variables: + list[~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.EnvironmentVariable] + :param force_update_tag: Gets or sets how the deployment script should be + forced to execute even if the script resource has not changed. Can be + current time stamp or a GUID. + :type force_update_tag: str + :param retention_interval: Required. Interval for which the service + retains the script resource after it reaches a terminal state. Resource + will be deleted when this duration expires. Duration is based on ISO 8601 + pattern (for example P7D means one week). + :type retention_interval: timedelta + :param timeout: Maximum allowed script execution time specified in ISO + 8601 format. Default value is PT1H + :type timeout: timedelta + """ + + _validation = { + 'script_content': {'max_length': 32000}, + 'retention_interval': {'required': True}, + } + + _attribute_map = { + 'primary_script_uri': {'key': 'primaryScriptUri', 'type': 'str'}, + 'supporting_script_uris': {'key': 'supportingScriptUris', 'type': '[str]'}, + 'script_content': {'key': 'scriptContent', 'type': 'str'}, + 'arguments': {'key': 'arguments', 'type': 'str'}, + 'environment_variables': {'key': 'environmentVariables', 'type': '[EnvironmentVariable]'}, + 'force_update_tag': {'key': 'forceUpdateTag', 'type': 'str'}, + 'retention_interval': {'key': 'retentionInterval', 'type': 'duration'}, + 'timeout': {'key': 'timeout', 'type': 'duration'}, + } + + def __init__(self, **kwargs): + super(ScriptConfigurationBase, self).__init__(**kwargs) + self.primary_script_uri = kwargs.get('primary_script_uri', None) + self.supporting_script_uris = kwargs.get('supporting_script_uris', None) + self.script_content = kwargs.get('script_content', None) + self.arguments = kwargs.get('arguments', None) + self.environment_variables = kwargs.get('environment_variables', None) + self.force_update_tag = kwargs.get('force_update_tag', None) + self.retention_interval = kwargs.get('retention_interval', None) + self.timeout = kwargs.get('timeout', None) + + +class ScriptLog(AzureResourceBase): + """Script execution log object. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar id: String Id used to locate any resource on Azure. + :vartype id: str + :ivar name: Name of this resource. + :vartype name: str + :ivar type: Type of this resource. + :vartype type: str + :ivar log: Script execution logs in text format. + :vartype log: str + """ + + _validation = { + 'id': {'readonly': True}, + 'name': {'readonly': True}, + 'type': {'readonly': True}, + 'log': {'readonly': True}, + } + + _attribute_map = { + 'id': {'key': 'id', 'type': 'str'}, + 'name': {'key': 'name', 'type': 'str'}, + 'type': {'key': 'type', 'type': 'str'}, + 'log': {'key': 'properties.log', 'type': 'str'}, + } + + def __init__(self, **kwargs): + super(ScriptLog, self).__init__(**kwargs) + self.log = None + + +class ScriptLogsList(Model): + """Deployment script execution logs. + + :param value: Deployment scripts logs. + :type value: + list[~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ScriptLog] + """ + + _attribute_map = { + 'value': {'key': 'value', 'type': '[ScriptLog]'}, + } + + def __init__(self, **kwargs): + super(ScriptLogsList, self).__init__(**kwargs) + self.value = kwargs.get('value', None) + + +class ScriptStatus(Model): + """Generic object modeling results of script execution. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar container_instance_id: ACI resource Id. + :vartype container_instance_id: str + :ivar storage_account_id: Storage account resource Id. + :vartype storage_account_id: str + :ivar start_time: Start time of the script execution. + :vartype start_time: datetime + :ivar end_time: End time of the script execution. + :vartype end_time: datetime + :ivar expiration_time: Time the deployment script resource will expire. + :vartype expiration_time: datetime + :param error: Error that is relayed from the script execution. + :type error: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ErrorResponse + """ + + _validation = { + 'container_instance_id': {'readonly': True}, + 'storage_account_id': {'readonly': True}, + 'start_time': {'readonly': True}, + 'end_time': {'readonly': True}, + 'expiration_time': {'readonly': True}, + } + + _attribute_map = { + 'container_instance_id': {'key': 'containerInstanceId', 'type': 'str'}, + 'storage_account_id': {'key': 'storageAccountId', 'type': 'str'}, + 'start_time': {'key': 'startTime', 'type': 'iso-8601'}, + 'end_time': {'key': 'endTime', 'type': 'iso-8601'}, + 'expiration_time': {'key': 'expirationTime', 'type': 'iso-8601'}, + 'error': {'key': 'error', 'type': 'ErrorResponse'}, + } + + def __init__(self, **kwargs): + super(ScriptStatus, self).__init__(**kwargs) + self.container_instance_id = None + self.storage_account_id = None + self.start_time = None + self.end_time = None + self.expiration_time = None + self.error = kwargs.get('error', None) + + +class StorageAccountConfiguration(Model): + """Settings to use an existing storage account. Valid storage account kinds + are: Storage, StorageV2 and FileStorage. + + :param storage_account_name: The storage account name. + :type storage_account_name: str + :param storage_account_key: The storage account access key. + :type storage_account_key: str + """ + + _attribute_map = { + 'storage_account_name': {'key': 'storageAccountName', 'type': 'str'}, + 'storage_account_key': {'key': 'storageAccountKey', 'type': 'str'}, + } + + def __init__(self, **kwargs): + super(StorageAccountConfiguration, self).__init__(**kwargs) + self.storage_account_name = kwargs.get('storage_account_name', None) + self.storage_account_key = kwargs.get('storage_account_key', None) + + +class SystemData(Model): + """Metadata pertaining to creation and last modification of the resource. + + :param created_by: The identity that created the resource. + :type created_by: str + :param created_by_type: The type of identity that created the resource. + Possible values include: 'User', 'Application', 'ManagedIdentity', 'Key' + :type created_by_type: str or + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.CreatedByType + :param created_at: The timestamp of resource creation (UTC). + :type created_at: datetime + :param last_modified_by: The identity that last modified the resource. + :type last_modified_by: str + :param last_modified_by_type: The type of identity that last modified the + resource. Possible values include: 'User', 'Application', + 'ManagedIdentity', 'Key' + :type last_modified_by_type: str or + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.CreatedByType + :param last_modified_at: The type of identity that last modified the + resource. + :type last_modified_at: datetime + """ + + _attribute_map = { + 'created_by': {'key': 'createdBy', 'type': 'str'}, + 'created_by_type': {'key': 'createdByType', 'type': 'str'}, + 'created_at': {'key': 'createdAt', 'type': 'iso-8601'}, + 'last_modified_by': {'key': 'lastModifiedBy', 'type': 'str'}, + 'last_modified_by_type': {'key': 'lastModifiedByType', 'type': 'str'}, + 'last_modified_at': {'key': 'lastModifiedAt', 'type': 'iso-8601'}, + } + + def __init__(self, **kwargs): + super(SystemData, self).__init__(**kwargs) + self.created_by = kwargs.get('created_by', None) + self.created_by_type = kwargs.get('created_by_type', None) + self.created_at = kwargs.get('created_at', None) + self.last_modified_by = kwargs.get('last_modified_by', None) + self.last_modified_by_type = kwargs.get('last_modified_by_type', None) + self.last_modified_at = kwargs.get('last_modified_at', None) + + +class UserAssignedIdentity(Model): + """User-assigned managed identity. + + :param principal_id: Azure Active Directory principal ID associated with + this identity. + :type principal_id: str + :param client_id: Client App Id associated with this identity. + :type client_id: str + """ + + _attribute_map = { + 'principal_id': {'key': 'principalId', 'type': 'str'}, + 'client_id': {'key': 'clientId', 'type': 'str'}, + } + + def __init__(self, **kwargs): + super(UserAssignedIdentity, self).__init__(**kwargs) + self.principal_id = kwargs.get('principal_id', None) + self.client_id = kwargs.get('client_id', None) diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/models/_models_py3.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/models/_models_py3.py new file mode 100644 index 000000000000..760ab3f125b4 --- /dev/null +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/models/_models_py3.py @@ -0,0 +1,924 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for +# license information. +# +# Code generated by Microsoft (R) AutoRest Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is +# regenerated. +# -------------------------------------------------------------------------- + +from msrest.serialization import Model +from msrest.exceptions import HttpOperationError + + +class AzureResourceBase(Model): + """Common properties for all Azure resources. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar id: String Id used to locate any resource on Azure. + :vartype id: str + :ivar name: Name of this resource. + :vartype name: str + :ivar type: Type of this resource. + :vartype type: str + """ + + _validation = { + 'id': {'readonly': True}, + 'name': {'readonly': True}, + 'type': {'readonly': True}, + } + + _attribute_map = { + 'id': {'key': 'id', 'type': 'str'}, + 'name': {'key': 'name', 'type': 'str'}, + 'type': {'key': 'type', 'type': 'str'}, + } + + def __init__(self, **kwargs) -> None: + super(AzureResourceBase, self).__init__(**kwargs) + self.id = None + self.name = None + self.type = None + + +class DeploymentScript(AzureResourceBase): + """Deployment script object. + + You probably want to use the sub-classes and not this class directly. Known + sub-classes are: AzurePowerShellScript, AzureCliScript + + Variables are only populated by the server, and will be ignored when + sending a request. + + All required parameters must be populated in order to send to Azure. + + :ivar id: String Id used to locate any resource on Azure. + :vartype id: str + :ivar name: Name of this resource. + :vartype name: str + :ivar type: Type of this resource. + :vartype type: str + :param identity: Optional property. Managed identity to be used for this + deployment script. Currently, only user-assigned MSI is supported. + :type identity: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ManagedServiceIdentity + :param location: Required. The location of the ACI and the storage account + for the deployment script. + :type location: str + :param tags: Resource tags. + :type tags: dict[str, str] + :ivar system_data: The system metadata related to this resource. + :vartype system_data: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.SystemData + :param kind: Required. Constant filled by server. + :type kind: str + """ + + _validation = { + 'id': {'readonly': True}, + 'name': {'readonly': True}, + 'type': {'readonly': True}, + 'location': {'required': True}, + 'system_data': {'readonly': True}, + 'kind': {'required': True}, + } + + _attribute_map = { + 'id': {'key': 'id', 'type': 'str'}, + 'name': {'key': 'name', 'type': 'str'}, + 'type': {'key': 'type', 'type': 'str'}, + 'identity': {'key': 'identity', 'type': 'ManagedServiceIdentity'}, + 'location': {'key': 'location', 'type': 'str'}, + 'tags': {'key': 'tags', 'type': '{str}'}, + 'system_data': {'key': 'systemData', 'type': 'SystemData'}, + 'kind': {'key': 'kind', 'type': 'str'}, + } + + _subtype_map = { + 'kind': {'AzurePowerShell': 'AzurePowerShellScript', 'AzureCLI': 'AzureCliScript'} + } + + def __init__(self, *, location: str, identity=None, tags=None, **kwargs) -> None: + super(DeploymentScript, self).__init__(**kwargs) + self.identity = identity + self.location = location + self.tags = tags + self.system_data = None + self.kind = None + self.kind = 'DeploymentScript' + + +class AzureCliScript(DeploymentScript): + """Object model for the Azure CLI script. + + Variables are only populated by the server, and will be ignored when + sending a request. + + All required parameters must be populated in order to send to Azure. + + :ivar id: String Id used to locate any resource on Azure. + :vartype id: str + :ivar name: Name of this resource. + :vartype name: str + :ivar type: Type of this resource. + :vartype type: str + :param identity: Optional property. Managed identity to be used for this + deployment script. Currently, only user-assigned MSI is supported. + :type identity: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ManagedServiceIdentity + :param location: Required. The location of the ACI and the storage account + for the deployment script. + :type location: str + :param tags: Resource tags. + :type tags: dict[str, str] + :ivar system_data: The system metadata related to this resource. + :vartype system_data: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.SystemData + :param kind: Required. Constant filled by server. + :type kind: str + :param container_settings: Container settings. + :type container_settings: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ContainerConfiguration + :param storage_account_settings: Storage Account settings. + :type storage_account_settings: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.StorageAccountConfiguration + :param cleanup_preference: The clean up preference when the script + execution gets in a terminal state. Default setting is 'Always'. Possible + values include: 'Always', 'OnSuccess', 'OnExpiration' + :type cleanup_preference: str or + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.CleanupOptions + :ivar provisioning_state: State of the script execution. This only appears + in the response. Possible values include: 'Creating', + 'ProvisioningResources', 'Running', 'Succeeded', 'Failed', 'Canceled' + :vartype provisioning_state: str or + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ScriptProvisioningState + :ivar status: Contains the results of script execution. + :vartype status: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ScriptStatus + :ivar outputs: List of script outputs. + :vartype outputs: dict[str, object] + :param primary_script_uri: Uri for the script. This is the entry point for + the external script. + :type primary_script_uri: str + :param supporting_script_uris: Supporting files for the external script. + :type supporting_script_uris: list[str] + :param script_content: Script body. + :type script_content: str + :param arguments: Command line arguments to pass to the script. Arguments + are separated by spaces. ex: -Name blue* -Location 'West US 2' + :type arguments: str + :param environment_variables: The environment variables to pass over to + the script. + :type environment_variables: + list[~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.EnvironmentVariable] + :param force_update_tag: Gets or sets how the deployment script should be + forced to execute even if the script resource has not changed. Can be + current time stamp or a GUID. + :type force_update_tag: str + :param retention_interval: Required. Interval for which the service + retains the script resource after it reaches a terminal state. Resource + will be deleted when this duration expires. Duration is based on ISO 8601 + pattern (for example P7D means one week). + :type retention_interval: timedelta + :param timeout: Maximum allowed script execution time specified in ISO + 8601 format. Default value is PT1H + :type timeout: timedelta + :param az_cli_version: Required. Azure CLI module version to be used. + :type az_cli_version: str + """ + + _validation = { + 'id': {'readonly': True}, + 'name': {'readonly': True}, + 'type': {'readonly': True}, + 'location': {'required': True}, + 'system_data': {'readonly': True}, + 'kind': {'required': True}, + 'provisioning_state': {'readonly': True}, + 'status': {'readonly': True}, + 'outputs': {'readonly': True}, + 'script_content': {'max_length': 32000}, + 'retention_interval': {'required': True}, + 'az_cli_version': {'required': True}, + } + + _attribute_map = { + 'id': {'key': 'id', 'type': 'str'}, + 'name': {'key': 'name', 'type': 'str'}, + 'type': {'key': 'type', 'type': 'str'}, + 'identity': {'key': 'identity', 'type': 'ManagedServiceIdentity'}, + 'location': {'key': 'location', 'type': 'str'}, + 'tags': {'key': 'tags', 'type': '{str}'}, + 'system_data': {'key': 'systemData', 'type': 'SystemData'}, + 'kind': {'key': 'kind', 'type': 'str'}, + 'container_settings': {'key': 'properties.containerSettings', 'type': 'ContainerConfiguration'}, + 'storage_account_settings': {'key': 'properties.storageAccountSettings', 'type': 'StorageAccountConfiguration'}, + 'cleanup_preference': {'key': 'properties.cleanupPreference', 'type': 'str'}, + 'provisioning_state': {'key': 'properties.provisioningState', 'type': 'str'}, + 'status': {'key': 'properties.status', 'type': 'ScriptStatus'}, + 'outputs': {'key': 'properties.outputs', 'type': '{object}'}, + 'primary_script_uri': {'key': 'properties.primaryScriptUri', 'type': 'str'}, + 'supporting_script_uris': {'key': 'properties.supportingScriptUris', 'type': '[str]'}, + 'script_content': {'key': 'properties.scriptContent', 'type': 'str'}, + 'arguments': {'key': 'properties.arguments', 'type': 'str'}, + 'environment_variables': {'key': 'properties.environmentVariables', 'type': '[EnvironmentVariable]'}, + 'force_update_tag': {'key': 'properties.forceUpdateTag', 'type': 'str'}, + 'retention_interval': {'key': 'properties.retentionInterval', 'type': 'duration'}, + 'timeout': {'key': 'properties.timeout', 'type': 'duration'}, + 'az_cli_version': {'key': 'properties.azCliVersion', 'type': 'str'}, + } + + def __init__(self, *, location: str, retention_interval, az_cli_version: str, identity=None, tags=None, container_settings=None, storage_account_settings=None, cleanup_preference=None, primary_script_uri: str=None, supporting_script_uris=None, script_content: str=None, arguments: str=None, environment_variables=None, force_update_tag: str=None, timeout=None, **kwargs) -> None: + super(AzureCliScript, self).__init__(identity=identity, location=location, tags=tags, **kwargs) + self.container_settings = container_settings + self.storage_account_settings = storage_account_settings + self.cleanup_preference = cleanup_preference + self.provisioning_state = None + self.status = None + self.outputs = None + self.primary_script_uri = primary_script_uri + self.supporting_script_uris = supporting_script_uris + self.script_content = script_content + self.arguments = arguments + self.environment_variables = environment_variables + self.force_update_tag = force_update_tag + self.retention_interval = retention_interval + self.timeout = timeout + self.az_cli_version = az_cli_version + self.kind = 'AzureCLI' + + +class AzurePowerShellScript(DeploymentScript): + """Object model for the Azure PowerShell script. + + Variables are only populated by the server, and will be ignored when + sending a request. + + All required parameters must be populated in order to send to Azure. + + :ivar id: String Id used to locate any resource on Azure. + :vartype id: str + :ivar name: Name of this resource. + :vartype name: str + :ivar type: Type of this resource. + :vartype type: str + :param identity: Optional property. Managed identity to be used for this + deployment script. Currently, only user-assigned MSI is supported. + :type identity: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ManagedServiceIdentity + :param location: Required. The location of the ACI and the storage account + for the deployment script. + :type location: str + :param tags: Resource tags. + :type tags: dict[str, str] + :ivar system_data: The system metadata related to this resource. + :vartype system_data: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.SystemData + :param kind: Required. Constant filled by server. + :type kind: str + :param container_settings: Container settings. + :type container_settings: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ContainerConfiguration + :param storage_account_settings: Storage Account settings. + :type storage_account_settings: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.StorageAccountConfiguration + :param cleanup_preference: The clean up preference when the script + execution gets in a terminal state. Default setting is 'Always'. Possible + values include: 'Always', 'OnSuccess', 'OnExpiration' + :type cleanup_preference: str or + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.CleanupOptions + :ivar provisioning_state: State of the script execution. This only appears + in the response. Possible values include: 'Creating', + 'ProvisioningResources', 'Running', 'Succeeded', 'Failed', 'Canceled' + :vartype provisioning_state: str or + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ScriptProvisioningState + :ivar status: Contains the results of script execution. + :vartype status: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ScriptStatus + :ivar outputs: List of script outputs. + :vartype outputs: dict[str, object] + :param primary_script_uri: Uri for the script. This is the entry point for + the external script. + :type primary_script_uri: str + :param supporting_script_uris: Supporting files for the external script. + :type supporting_script_uris: list[str] + :param script_content: Script body. + :type script_content: str + :param arguments: Command line arguments to pass to the script. Arguments + are separated by spaces. ex: -Name blue* -Location 'West US 2' + :type arguments: str + :param environment_variables: The environment variables to pass over to + the script. + :type environment_variables: + list[~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.EnvironmentVariable] + :param force_update_tag: Gets or sets how the deployment script should be + forced to execute even if the script resource has not changed. Can be + current time stamp or a GUID. + :type force_update_tag: str + :param retention_interval: Required. Interval for which the service + retains the script resource after it reaches a terminal state. Resource + will be deleted when this duration expires. Duration is based on ISO 8601 + pattern (for example P7D means one week). + :type retention_interval: timedelta + :param timeout: Maximum allowed script execution time specified in ISO + 8601 format. Default value is PT1H + :type timeout: timedelta + :param az_power_shell_version: Required. Azure PowerShell module version + to be used. + :type az_power_shell_version: str + """ + + _validation = { + 'id': {'readonly': True}, + 'name': {'readonly': True}, + 'type': {'readonly': True}, + 'location': {'required': True}, + 'system_data': {'readonly': True}, + 'kind': {'required': True}, + 'provisioning_state': {'readonly': True}, + 'status': {'readonly': True}, + 'outputs': {'readonly': True}, + 'script_content': {'max_length': 32000}, + 'retention_interval': {'required': True}, + 'az_power_shell_version': {'required': True}, + } + + _attribute_map = { + 'id': {'key': 'id', 'type': 'str'}, + 'name': {'key': 'name', 'type': 'str'}, + 'type': {'key': 'type', 'type': 'str'}, + 'identity': {'key': 'identity', 'type': 'ManagedServiceIdentity'}, + 'location': {'key': 'location', 'type': 'str'}, + 'tags': {'key': 'tags', 'type': '{str}'}, + 'system_data': {'key': 'systemData', 'type': 'SystemData'}, + 'kind': {'key': 'kind', 'type': 'str'}, + 'container_settings': {'key': 'properties.containerSettings', 'type': 'ContainerConfiguration'}, + 'storage_account_settings': {'key': 'properties.storageAccountSettings', 'type': 'StorageAccountConfiguration'}, + 'cleanup_preference': {'key': 'properties.cleanupPreference', 'type': 'str'}, + 'provisioning_state': {'key': 'properties.provisioningState', 'type': 'str'}, + 'status': {'key': 'properties.status', 'type': 'ScriptStatus'}, + 'outputs': {'key': 'properties.outputs', 'type': '{object}'}, + 'primary_script_uri': {'key': 'properties.primaryScriptUri', 'type': 'str'}, + 'supporting_script_uris': {'key': 'properties.supportingScriptUris', 'type': '[str]'}, + 'script_content': {'key': 'properties.scriptContent', 'type': 'str'}, + 'arguments': {'key': 'properties.arguments', 'type': 'str'}, + 'environment_variables': {'key': 'properties.environmentVariables', 'type': '[EnvironmentVariable]'}, + 'force_update_tag': {'key': 'properties.forceUpdateTag', 'type': 'str'}, + 'retention_interval': {'key': 'properties.retentionInterval', 'type': 'duration'}, + 'timeout': {'key': 'properties.timeout', 'type': 'duration'}, + 'az_power_shell_version': {'key': 'properties.azPowerShellVersion', 'type': 'str'}, + } + + def __init__(self, *, location: str, retention_interval, az_power_shell_version: str, identity=None, tags=None, container_settings=None, storage_account_settings=None, cleanup_preference=None, primary_script_uri: str=None, supporting_script_uris=None, script_content: str=None, arguments: str=None, environment_variables=None, force_update_tag: str=None, timeout=None, **kwargs) -> None: + super(AzurePowerShellScript, self).__init__(identity=identity, location=location, tags=tags, **kwargs) + self.container_settings = container_settings + self.storage_account_settings = storage_account_settings + self.cleanup_preference = cleanup_preference + self.provisioning_state = None + self.status = None + self.outputs = None + self.primary_script_uri = primary_script_uri + self.supporting_script_uris = supporting_script_uris + self.script_content = script_content + self.arguments = arguments + self.environment_variables = environment_variables + self.force_update_tag = force_update_tag + self.retention_interval = retention_interval + self.timeout = timeout + self.az_power_shell_version = az_power_shell_version + self.kind = 'AzurePowerShell' + + +class CloudError(Model): + """CloudError. + """ + + _attribute_map = { + } + + +class ContainerConfiguration(Model): + """Settings to customize ACI container instance. + + :param container_group_name: Container group name, if not specified then + the name will get auto-generated. Not specifying a 'containerGroupName' + indicates the system to generate a unique name which might end up flagging + an Azure Policy as non-compliant. Use 'containerGroupName' when you have + an Azure Policy that expects a specific naming convention or when you want + to fully control the name. 'containerGroupName' property must be between 1 + and 63 characters long, must contain only lowercase letters, numbers, and + dashes and it cannot start or end with a dash and consecutive dashes are + not allowed. To specify a 'containerGroupName', add the following object + to properties: { "containerSettings": { "containerGroupName": + "contoso-container" } }. If you do not want to specify a + 'containerGroupName' then do not add 'containerSettings' property. + :type container_group_name: str + """ + + _validation = { + 'container_group_name': {'max_length': 63, 'min_length': 1}, + } + + _attribute_map = { + 'container_group_name': {'key': 'containerGroupName', 'type': 'str'}, + } + + def __init__(self, *, container_group_name: str=None, **kwargs) -> None: + super(ContainerConfiguration, self).__init__(**kwargs) + self.container_group_name = container_group_name + + +class DeploymentScriptPropertiesBase(Model): + """Common properties for the deployment script. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :param container_settings: Container settings. + :type container_settings: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ContainerConfiguration + :param storage_account_settings: Storage Account settings. + :type storage_account_settings: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.StorageAccountConfiguration + :param cleanup_preference: The clean up preference when the script + execution gets in a terminal state. Default setting is 'Always'. Possible + values include: 'Always', 'OnSuccess', 'OnExpiration' + :type cleanup_preference: str or + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.CleanupOptions + :ivar provisioning_state: State of the script execution. This only appears + in the response. Possible values include: 'Creating', + 'ProvisioningResources', 'Running', 'Succeeded', 'Failed', 'Canceled' + :vartype provisioning_state: str or + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ScriptProvisioningState + :ivar status: Contains the results of script execution. + :vartype status: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ScriptStatus + :ivar outputs: List of script outputs. + :vartype outputs: dict[str, object] + """ + + _validation = { + 'provisioning_state': {'readonly': True}, + 'status': {'readonly': True}, + 'outputs': {'readonly': True}, + } + + _attribute_map = { + 'container_settings': {'key': 'containerSettings', 'type': 'ContainerConfiguration'}, + 'storage_account_settings': {'key': 'storageAccountSettings', 'type': 'StorageAccountConfiguration'}, + 'cleanup_preference': {'key': 'cleanupPreference', 'type': 'str'}, + 'provisioning_state': {'key': 'provisioningState', 'type': 'str'}, + 'status': {'key': 'status', 'type': 'ScriptStatus'}, + 'outputs': {'key': 'outputs', 'type': '{object}'}, + } + + def __init__(self, *, container_settings=None, storage_account_settings=None, cleanup_preference=None, **kwargs) -> None: + super(DeploymentScriptPropertiesBase, self).__init__(**kwargs) + self.container_settings = container_settings + self.storage_account_settings = storage_account_settings + self.cleanup_preference = cleanup_preference + self.provisioning_state = None + self.status = None + self.outputs = None + + +class DeploymentScriptsError(Model): + """Deployment scripts error response. + + :param error: + :type error: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ErrorResponse + """ + + _attribute_map = { + 'error': {'key': 'error', 'type': 'ErrorResponse'}, + } + + def __init__(self, *, error=None, **kwargs) -> None: + super(DeploymentScriptsError, self).__init__(**kwargs) + self.error = error + + +class DeploymentScriptsErrorException(HttpOperationError): + """Server responsed with exception of type: 'DeploymentScriptsError'. + + :param deserialize: A deserializer + :param response: Server response to be deserialized. + """ + + def __init__(self, deserialize, response, *args): + + super(DeploymentScriptsErrorException, self).__init__(deserialize, response, 'DeploymentScriptsError', *args) + + +class DeploymentScriptUpdateParameter(AzureResourceBase): + """Deployment script parameters to be updated. . + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar id: String Id used to locate any resource on Azure. + :vartype id: str + :ivar name: Name of this resource. + :vartype name: str + :ivar type: Type of this resource. + :vartype type: str + :param tags: Resource tags to be updated. + :type tags: dict[str, str] + """ + + _validation = { + 'id': {'readonly': True}, + 'name': {'readonly': True}, + 'type': {'readonly': True}, + } + + _attribute_map = { + 'id': {'key': 'id', 'type': 'str'}, + 'name': {'key': 'name', 'type': 'str'}, + 'type': {'key': 'type', 'type': 'str'}, + 'tags': {'key': 'tags', 'type': '{str}'}, + } + + def __init__(self, *, tags=None, **kwargs) -> None: + super(DeploymentScriptUpdateParameter, self).__init__(**kwargs) + self.tags = tags + + +class EnvironmentVariable(Model): + """The environment variable to pass to the script in the container instance. + + All required parameters must be populated in order to send to Azure. + + :param name: Required. The name of the environment variable. + :type name: str + :param value: The value of the environment variable. + :type value: str + :param secure_value: The value of the secure environment variable. + :type secure_value: str + """ + + _validation = { + 'name': {'required': True}, + } + + _attribute_map = { + 'name': {'key': 'name', 'type': 'str'}, + 'value': {'key': 'value', 'type': 'str'}, + 'secure_value': {'key': 'secureValue', 'type': 'str'}, + } + + def __init__(self, *, name: str, value: str=None, secure_value: str=None, **kwargs) -> None: + super(EnvironmentVariable, self).__init__(**kwargs) + self.name = name + self.value = value + self.secure_value = secure_value + + +class ErrorAdditionalInfo(Model): + """The resource management error additional info. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar type: The additional info type. + :vartype type: str + :ivar info: The additional info. + :vartype info: object + """ + + _validation = { + 'type': {'readonly': True}, + 'info': {'readonly': True}, + } + + _attribute_map = { + 'type': {'key': 'type', 'type': 'str'}, + 'info': {'key': 'info', 'type': 'object'}, + } + + def __init__(self, **kwargs) -> None: + super(ErrorAdditionalInfo, self).__init__(**kwargs) + self.type = None + self.info = None + + +class ErrorResponse(Model): + """The resource management error response. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar code: The error code. + :vartype code: str + :ivar message: The error message. + :vartype message: str + :ivar target: The error target. + :vartype target: str + :ivar details: The error details. + :vartype details: + list[~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ErrorResponse] + :ivar additional_info: The error additional info. + :vartype additional_info: + list[~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ErrorAdditionalInfo] + """ + + _validation = { + 'code': {'readonly': True}, + 'message': {'readonly': True}, + 'target': {'readonly': True}, + 'details': {'readonly': True}, + 'additional_info': {'readonly': True}, + } + + _attribute_map = { + 'code': {'key': 'code', 'type': 'str'}, + 'message': {'key': 'message', 'type': 'str'}, + 'target': {'key': 'target', 'type': 'str'}, + 'details': {'key': 'details', 'type': '[ErrorResponse]'}, + 'additional_info': {'key': 'additionalInfo', 'type': '[ErrorAdditionalInfo]'}, + } + + def __init__(self, **kwargs) -> None: + super(ErrorResponse, self).__init__(**kwargs) + self.code = None + self.message = None + self.target = None + self.details = None + self.additional_info = None + + +class ManagedServiceIdentity(Model): + """Managed identity generic object. + + :param type: Type of the managed identity. Possible values include: + 'UserAssigned' + :type type: str or + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ManagedServiceIdentityType + :param user_assigned_identities: The list of user-assigned managed + identities associated with the resource. Key is the Azure resource Id of + the managed identity. + :type user_assigned_identities: dict[str, + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.UserAssignedIdentity] + """ + + _attribute_map = { + 'type': {'key': 'type', 'type': 'str'}, + 'user_assigned_identities': {'key': 'userAssignedIdentities', 'type': '{UserAssignedIdentity}'}, + } + + def __init__(self, *, type=None, user_assigned_identities=None, **kwargs) -> None: + super(ManagedServiceIdentity, self).__init__(**kwargs) + self.type = type + self.user_assigned_identities = user_assigned_identities + + +class ScriptConfigurationBase(Model): + """Common configuration settings for both Azure PowerShell and Azure CLI + scripts. + + All required parameters must be populated in order to send to Azure. + + :param primary_script_uri: Uri for the script. This is the entry point for + the external script. + :type primary_script_uri: str + :param supporting_script_uris: Supporting files for the external script. + :type supporting_script_uris: list[str] + :param script_content: Script body. + :type script_content: str + :param arguments: Command line arguments to pass to the script. Arguments + are separated by spaces. ex: -Name blue* -Location 'West US 2' + :type arguments: str + :param environment_variables: The environment variables to pass over to + the script. + :type environment_variables: + list[~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.EnvironmentVariable] + :param force_update_tag: Gets or sets how the deployment script should be + forced to execute even if the script resource has not changed. Can be + current time stamp or a GUID. + :type force_update_tag: str + :param retention_interval: Required. Interval for which the service + retains the script resource after it reaches a terminal state. Resource + will be deleted when this duration expires. Duration is based on ISO 8601 + pattern (for example P7D means one week). + :type retention_interval: timedelta + :param timeout: Maximum allowed script execution time specified in ISO + 8601 format. Default value is PT1H + :type timeout: timedelta + """ + + _validation = { + 'script_content': {'max_length': 32000}, + 'retention_interval': {'required': True}, + } + + _attribute_map = { + 'primary_script_uri': {'key': 'primaryScriptUri', 'type': 'str'}, + 'supporting_script_uris': {'key': 'supportingScriptUris', 'type': '[str]'}, + 'script_content': {'key': 'scriptContent', 'type': 'str'}, + 'arguments': {'key': 'arguments', 'type': 'str'}, + 'environment_variables': {'key': 'environmentVariables', 'type': '[EnvironmentVariable]'}, + 'force_update_tag': {'key': 'forceUpdateTag', 'type': 'str'}, + 'retention_interval': {'key': 'retentionInterval', 'type': 'duration'}, + 'timeout': {'key': 'timeout', 'type': 'duration'}, + } + + def __init__(self, *, retention_interval, primary_script_uri: str=None, supporting_script_uris=None, script_content: str=None, arguments: str=None, environment_variables=None, force_update_tag: str=None, timeout=None, **kwargs) -> None: + super(ScriptConfigurationBase, self).__init__(**kwargs) + self.primary_script_uri = primary_script_uri + self.supporting_script_uris = supporting_script_uris + self.script_content = script_content + self.arguments = arguments + self.environment_variables = environment_variables + self.force_update_tag = force_update_tag + self.retention_interval = retention_interval + self.timeout = timeout + + +class ScriptLog(AzureResourceBase): + """Script execution log object. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar id: String Id used to locate any resource on Azure. + :vartype id: str + :ivar name: Name of this resource. + :vartype name: str + :ivar type: Type of this resource. + :vartype type: str + :ivar log: Script execution logs in text format. + :vartype log: str + """ + + _validation = { + 'id': {'readonly': True}, + 'name': {'readonly': True}, + 'type': {'readonly': True}, + 'log': {'readonly': True}, + } + + _attribute_map = { + 'id': {'key': 'id', 'type': 'str'}, + 'name': {'key': 'name', 'type': 'str'}, + 'type': {'key': 'type', 'type': 'str'}, + 'log': {'key': 'properties.log', 'type': 'str'}, + } + + def __init__(self, **kwargs) -> None: + super(ScriptLog, self).__init__(**kwargs) + self.log = None + + +class ScriptLogsList(Model): + """Deployment script execution logs. + + :param value: Deployment scripts logs. + :type value: + list[~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ScriptLog] + """ + + _attribute_map = { + 'value': {'key': 'value', 'type': '[ScriptLog]'}, + } + + def __init__(self, *, value=None, **kwargs) -> None: + super(ScriptLogsList, self).__init__(**kwargs) + self.value = value + + +class ScriptStatus(Model): + """Generic object modeling results of script execution. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar container_instance_id: ACI resource Id. + :vartype container_instance_id: str + :ivar storage_account_id: Storage account resource Id. + :vartype storage_account_id: str + :ivar start_time: Start time of the script execution. + :vartype start_time: datetime + :ivar end_time: End time of the script execution. + :vartype end_time: datetime + :ivar expiration_time: Time the deployment script resource will expire. + :vartype expiration_time: datetime + :param error: Error that is relayed from the script execution. + :type error: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ErrorResponse + """ + + _validation = { + 'container_instance_id': {'readonly': True}, + 'storage_account_id': {'readonly': True}, + 'start_time': {'readonly': True}, + 'end_time': {'readonly': True}, + 'expiration_time': {'readonly': True}, + } + + _attribute_map = { + 'container_instance_id': {'key': 'containerInstanceId', 'type': 'str'}, + 'storage_account_id': {'key': 'storageAccountId', 'type': 'str'}, + 'start_time': {'key': 'startTime', 'type': 'iso-8601'}, + 'end_time': {'key': 'endTime', 'type': 'iso-8601'}, + 'expiration_time': {'key': 'expirationTime', 'type': 'iso-8601'}, + 'error': {'key': 'error', 'type': 'ErrorResponse'}, + } + + def __init__(self, *, error=None, **kwargs) -> None: + super(ScriptStatus, self).__init__(**kwargs) + self.container_instance_id = None + self.storage_account_id = None + self.start_time = None + self.end_time = None + self.expiration_time = None + self.error = error + + +class StorageAccountConfiguration(Model): + """Settings to use an existing storage account. Valid storage account kinds + are: Storage, StorageV2 and FileStorage. + + :param storage_account_name: The storage account name. + :type storage_account_name: str + :param storage_account_key: The storage account access key. + :type storage_account_key: str + """ + + _attribute_map = { + 'storage_account_name': {'key': 'storageAccountName', 'type': 'str'}, + 'storage_account_key': {'key': 'storageAccountKey', 'type': 'str'}, + } + + def __init__(self, *, storage_account_name: str=None, storage_account_key: str=None, **kwargs) -> None: + super(StorageAccountConfiguration, self).__init__(**kwargs) + self.storage_account_name = storage_account_name + self.storage_account_key = storage_account_key + + +class SystemData(Model): + """Metadata pertaining to creation and last modification of the resource. + + :param created_by: The identity that created the resource. + :type created_by: str + :param created_by_type: The type of identity that created the resource. + Possible values include: 'User', 'Application', 'ManagedIdentity', 'Key' + :type created_by_type: str or + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.CreatedByType + :param created_at: The timestamp of resource creation (UTC). + :type created_at: datetime + :param last_modified_by: The identity that last modified the resource. + :type last_modified_by: str + :param last_modified_by_type: The type of identity that last modified the + resource. Possible values include: 'User', 'Application', + 'ManagedIdentity', 'Key' + :type last_modified_by_type: str or + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.CreatedByType + :param last_modified_at: The type of identity that last modified the + resource. + :type last_modified_at: datetime + """ + + _attribute_map = { + 'created_by': {'key': 'createdBy', 'type': 'str'}, + 'created_by_type': {'key': 'createdByType', 'type': 'str'}, + 'created_at': {'key': 'createdAt', 'type': 'iso-8601'}, + 'last_modified_by': {'key': 'lastModifiedBy', 'type': 'str'}, + 'last_modified_by_type': {'key': 'lastModifiedByType', 'type': 'str'}, + 'last_modified_at': {'key': 'lastModifiedAt', 'type': 'iso-8601'}, + } + + def __init__(self, *, created_by: str=None, created_by_type=None, created_at=None, last_modified_by: str=None, last_modified_by_type=None, last_modified_at=None, **kwargs) -> None: + super(SystemData, self).__init__(**kwargs) + self.created_by = created_by + self.created_by_type = created_by_type + self.created_at = created_at + self.last_modified_by = last_modified_by + self.last_modified_by_type = last_modified_by_type + self.last_modified_at = last_modified_at + + +class UserAssignedIdentity(Model): + """User-assigned managed identity. + + :param principal_id: Azure Active Directory principal ID associated with + this identity. + :type principal_id: str + :param client_id: Client App Id associated with this identity. + :type client_id: str + """ + + _attribute_map = { + 'principal_id': {'key': 'principalId', 'type': 'str'}, + 'client_id': {'key': 'clientId', 'type': 'str'}, + } + + def __init__(self, *, principal_id: str=None, client_id: str=None, **kwargs) -> None: + super(UserAssignedIdentity, self).__init__(**kwargs) + self.principal_id = principal_id + self.client_id = client_id diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/models/_paged_models.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/models/_paged_models.py new file mode 100644 index 000000000000..005ec1cb59e9 --- /dev/null +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/models/_paged_models.py @@ -0,0 +1,27 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for +# license information. +# +# Code generated by Microsoft (R) AutoRest Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is +# regenerated. +# -------------------------------------------------------------------------- + +from msrest.paging import Paged + + +class DeploymentScriptPaged(Paged): + """ + A paging container for iterating over a list of :class:`DeploymentScript ` object + """ + + _attribute_map = { + 'next_link': {'key': 'nextLink', 'type': 'str'}, + 'current_page': {'key': 'value', 'type': '[DeploymentScript]'} + } + + def __init__(self, *args, **kwargs): + + super(DeploymentScriptPaged, self).__init__(*args, **kwargs) diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/operations/__init__.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/operations/__init__.py new file mode 100644 index 000000000000..3868bac365a6 --- /dev/null +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/operations/__init__.py @@ -0,0 +1,16 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for +# license information. +# +# Code generated by Microsoft (R) AutoRest Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is +# regenerated. +# -------------------------------------------------------------------------- + +from ._deployment_scripts_operations import DeploymentScriptsOperations + +__all__ = [ + 'DeploymentScriptsOperations', +] diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/operations/_deployment_scripts_operations.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/operations/_deployment_scripts_operations.py new file mode 100644 index 000000000000..1c8f358dcfb8 --- /dev/null +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/operations/_deployment_scripts_operations.py @@ -0,0 +1,600 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for +# license information. +# +# Code generated by Microsoft (R) AutoRest Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is +# regenerated. +# -------------------------------------------------------------------------- + +import uuid +from msrest.pipeline import ClientRawResponse +from msrest.polling import LROPoller, NoPolling +from msrestazure.polling.arm_polling import ARMPolling + +from .. import models + + +class DeploymentScriptsOperations(object): + """DeploymentScriptsOperations operations. + + You should not instantiate directly this class, but create a Client instance that will create it for you and attach it as attribute. + + :param client: Client for service requests. + :param config: Configuration of service client. + :param serializer: An object model serializer. + :param deserializer: An object model deserializer. + :ivar api_version: Client Api version. Constant value: "2020-10-01". + """ + + models = models + + def __init__(self, client, config, serializer, deserializer): + + self._client = client + self._serialize = serializer + self._deserialize = deserializer + self.api_version = "2020-10-01" + + self.config = config + + + def _create_initial( + self, resource_group_name, script_name, deployment_script, custom_headers=None, raw=False, **operation_config): + # Construct URL + url = self.create.metadata['url'] + path_format_arguments = { + 'subscriptionId': self._serialize.url("self.config.subscription_id", self.config.subscription_id, 'str'), + 'resourceGroupName': self._serialize.url("resource_group_name", resource_group_name, 'str', max_length=90, min_length=1, pattern=r'^[-\w\._\(\)]+$'), + 'scriptName': self._serialize.url("script_name", script_name, 'str', max_length=90, min_length=1) + } + url = self._client.format_url(url, **path_format_arguments) + + # Construct parameters + query_parameters = {} + query_parameters['api-version'] = self._serialize.query("self.api_version", self.api_version, 'str') + + # Construct headers + header_parameters = {} + header_parameters['Accept'] = 'application/json' + header_parameters['Content-Type'] = 'application/json; charset=utf-8' + if self.config.generate_client_request_id: + header_parameters['x-ms-client-request-id'] = str(uuid.uuid1()) + if custom_headers: + header_parameters.update(custom_headers) + if self.config.accept_language is not None: + header_parameters['accept-language'] = self._serialize.header("self.config.accept_language", self.config.accept_language, 'str') + + # Construct body + body_content = self._serialize.body(deployment_script, 'DeploymentScript') + + # Construct and send request + request = self._client.put(url, query_parameters, header_parameters, body_content) + response = self._client.send(request, stream=False, **operation_config) + + if response.status_code not in [200, 201]: + raise models.DeploymentScriptsErrorException(self._deserialize, response) + + deserialized = None + + if response.status_code == 200: + deserialized = self._deserialize('DeploymentScript', response) + if response.status_code == 201: + deserialized = self._deserialize('DeploymentScript', response) + + if raw: + client_raw_response = ClientRawResponse(deserialized, response) + return client_raw_response + + return deserialized + + def create( + self, resource_group_name, script_name, deployment_script, custom_headers=None, raw=False, polling=True, **operation_config): + """Creates a deployment script. + + :param resource_group_name: The name of the resource group. The name + is case insensitive. + :type resource_group_name: str + :param script_name: Name of the deployment script. + :type script_name: str + :param deployment_script: Deployment script supplied to the operation. + :type deployment_script: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.DeploymentScript + :param dict custom_headers: headers that will be added to the request + :param bool raw: The poller return type is ClientRawResponse, the + direct response alongside the deserialized response + :param polling: True for ARMPolling, False for no polling, or a + polling object for personal polling strategy + :return: An instance of LROPoller that returns DeploymentScript or + ClientRawResponse if raw==True + :rtype: + ~msrestazure.azure_operation.AzureOperationPoller[~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.DeploymentScript] + or + ~msrestazure.azure_operation.AzureOperationPoller[~msrest.pipeline.ClientRawResponse[~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.DeploymentScript]] + :raises: + :class:`DeploymentScriptsErrorException` + """ + raw_result = self._create_initial( + resource_group_name=resource_group_name, + script_name=script_name, + deployment_script=deployment_script, + custom_headers=custom_headers, + raw=True, + **operation_config + ) + + def get_long_running_output(response): + deserialized = self._deserialize('DeploymentScript', response) + + if raw: + client_raw_response = ClientRawResponse(deserialized, response) + return client_raw_response + + return deserialized + + lro_delay = operation_config.get( + 'long_running_operation_timeout', + self.config.long_running_operation_timeout) + if polling is True: polling_method = ARMPolling(lro_delay, **operation_config) + elif polling is False: polling_method = NoPolling() + else: polling_method = polling + return LROPoller(self._client, raw_result, get_long_running_output, polling_method) + create.metadata = {'url': '/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Resources/deploymentScripts/{scriptName}'} + + def update( + self, resource_group_name, script_name, tags=None, custom_headers=None, raw=False, **operation_config): + """Updates deployment script tags with specified values. + + :param resource_group_name: The name of the resource group. The name + is case insensitive. + :type resource_group_name: str + :param script_name: Name of the deployment script. + :type script_name: str + :param tags: Resource tags to be updated. + :type tags: dict[str, str] + :param dict custom_headers: headers that will be added to the request + :param bool raw: returns the direct response alongside the + deserialized response + :param operation_config: :ref:`Operation configuration + overrides`. + :return: DeploymentScript or ClientRawResponse if raw=true + :rtype: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.DeploymentScript + or ~msrest.pipeline.ClientRawResponse + :raises: + :class:`DeploymentScriptsErrorException` + """ + deployment_script = None + if tags is not None: + deployment_script = models.DeploymentScriptUpdateParameter(tags=tags) + + # Construct URL + url = self.update.metadata['url'] + path_format_arguments = { + 'subscriptionId': self._serialize.url("self.config.subscription_id", self.config.subscription_id, 'str'), + 'resourceGroupName': self._serialize.url("resource_group_name", resource_group_name, 'str', max_length=90, min_length=1, pattern=r'^[-\w\._\(\)]+$'), + 'scriptName': self._serialize.url("script_name", script_name, 'str', max_length=90, min_length=1) + } + url = self._client.format_url(url, **path_format_arguments) + + # Construct parameters + query_parameters = {} + query_parameters['api-version'] = self._serialize.query("self.api_version", self.api_version, 'str') + + # Construct headers + header_parameters = {} + header_parameters['Accept'] = 'application/json' + header_parameters['Content-Type'] = 'application/json; charset=utf-8' + if self.config.generate_client_request_id: + header_parameters['x-ms-client-request-id'] = str(uuid.uuid1()) + if custom_headers: + header_parameters.update(custom_headers) + if self.config.accept_language is not None: + header_parameters['accept-language'] = self._serialize.header("self.config.accept_language", self.config.accept_language, 'str') + + # Construct body + if deployment_script is not None: + body_content = self._serialize.body(deployment_script, 'DeploymentScriptUpdateParameter') + else: + body_content = None + + # Construct and send request + request = self._client.patch(url, query_parameters, header_parameters, body_content) + response = self._client.send(request, stream=False, **operation_config) + + if response.status_code not in [200]: + raise models.DeploymentScriptsErrorException(self._deserialize, response) + + deserialized = None + if response.status_code == 200: + deserialized = self._deserialize('DeploymentScript', response) + + if raw: + client_raw_response = ClientRawResponse(deserialized, response) + return client_raw_response + + return deserialized + update.metadata = {'url': '/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Resources/deploymentScripts/{scriptName}'} + + def get( + self, resource_group_name, script_name, custom_headers=None, raw=False, **operation_config): + """Gets a deployment script with a given name. + + :param resource_group_name: The name of the resource group. The name + is case insensitive. + :type resource_group_name: str + :param script_name: Name of the deployment script. + :type script_name: str + :param dict custom_headers: headers that will be added to the request + :param bool raw: returns the direct response alongside the + deserialized response + :param operation_config: :ref:`Operation configuration + overrides`. + :return: DeploymentScript or ClientRawResponse if raw=true + :rtype: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.DeploymentScript + or ~msrest.pipeline.ClientRawResponse + :raises: + :class:`DeploymentScriptsErrorException` + """ + # Construct URL + url = self.get.metadata['url'] + path_format_arguments = { + 'subscriptionId': self._serialize.url("self.config.subscription_id", self.config.subscription_id, 'str'), + 'resourceGroupName': self._serialize.url("resource_group_name", resource_group_name, 'str', max_length=90, min_length=1, pattern=r'^[-\w\._\(\)]+$'), + 'scriptName': self._serialize.url("script_name", script_name, 'str', max_length=90, min_length=1) + } + url = self._client.format_url(url, **path_format_arguments) + + # Construct parameters + query_parameters = {} + query_parameters['api-version'] = self._serialize.query("self.api_version", self.api_version, 'str') + + # Construct headers + header_parameters = {} + header_parameters['Accept'] = 'application/json' + if self.config.generate_client_request_id: + header_parameters['x-ms-client-request-id'] = str(uuid.uuid1()) + if custom_headers: + header_parameters.update(custom_headers) + if self.config.accept_language is not None: + header_parameters['accept-language'] = self._serialize.header("self.config.accept_language", self.config.accept_language, 'str') + + # Construct and send request + request = self._client.get(url, query_parameters, header_parameters) + response = self._client.send(request, stream=False, **operation_config) + + if response.status_code not in [200]: + raise models.DeploymentScriptsErrorException(self._deserialize, response) + + deserialized = None + if response.status_code == 200: + deserialized = self._deserialize('DeploymentScript', response) + + if raw: + client_raw_response = ClientRawResponse(deserialized, response) + return client_raw_response + + return deserialized + get.metadata = {'url': '/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Resources/deploymentScripts/{scriptName}'} + + def delete( + self, resource_group_name, script_name, custom_headers=None, raw=False, **operation_config): + """Deletes a deployment script. When operation completes, status code 200 + returned without content. + + :param resource_group_name: The name of the resource group. The name + is case insensitive. + :type resource_group_name: str + :param script_name: Name of the deployment script. + :type script_name: str + :param dict custom_headers: headers that will be added to the request + :param bool raw: returns the direct response alongside the + deserialized response + :param operation_config: :ref:`Operation configuration + overrides`. + :return: None or ClientRawResponse if raw=true + :rtype: None or ~msrest.pipeline.ClientRawResponse + :raises: + :class:`DeploymentScriptsErrorException` + """ + # Construct URL + url = self.delete.metadata['url'] + path_format_arguments = { + 'subscriptionId': self._serialize.url("self.config.subscription_id", self.config.subscription_id, 'str'), + 'resourceGroupName': self._serialize.url("resource_group_name", resource_group_name, 'str', max_length=90, min_length=1, pattern=r'^[-\w\._\(\)]+$'), + 'scriptName': self._serialize.url("script_name", script_name, 'str', max_length=90, min_length=1) + } + url = self._client.format_url(url, **path_format_arguments) + + # Construct parameters + query_parameters = {} + query_parameters['api-version'] = self._serialize.query("self.api_version", self.api_version, 'str') + + # Construct headers + header_parameters = {} + if self.config.generate_client_request_id: + header_parameters['x-ms-client-request-id'] = str(uuid.uuid1()) + if custom_headers: + header_parameters.update(custom_headers) + if self.config.accept_language is not None: + header_parameters['accept-language'] = self._serialize.header("self.config.accept_language", self.config.accept_language, 'str') + + # Construct and send request + request = self._client.delete(url, query_parameters, header_parameters) + response = self._client.send(request, stream=False, **operation_config) + + if response.status_code not in [200, 204]: + raise models.DeploymentScriptsErrorException(self._deserialize, response) + + if raw: + client_raw_response = ClientRawResponse(None, response) + return client_raw_response + delete.metadata = {'url': '/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Resources/deploymentScripts/{scriptName}'} + + def list_by_subscription( + self, custom_headers=None, raw=False, **operation_config): + """Lists all deployment scripts for a given subscription. + + :param dict custom_headers: headers that will be added to the request + :param bool raw: returns the direct response alongside the + deserialized response + :param operation_config: :ref:`Operation configuration + overrides`. + :return: An iterator like instance of DeploymentScript + :rtype: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.DeploymentScriptPaged[~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.DeploymentScript] + :raises: + :class:`DeploymentScriptsErrorException` + """ + def prepare_request(next_link=None): + if not next_link: + # Construct URL + url = self.list_by_subscription.metadata['url'] + path_format_arguments = { + 'subscriptionId': self._serialize.url("self.config.subscription_id", self.config.subscription_id, 'str') + } + url = self._client.format_url(url, **path_format_arguments) + + # Construct parameters + query_parameters = {} + query_parameters['api-version'] = self._serialize.query("self.api_version", self.api_version, 'str') + + else: + url = next_link + query_parameters = {} + + # Construct headers + header_parameters = {} + header_parameters['Accept'] = 'application/json' + if self.config.generate_client_request_id: + header_parameters['x-ms-client-request-id'] = str(uuid.uuid1()) + if custom_headers: + header_parameters.update(custom_headers) + if self.config.accept_language is not None: + header_parameters['accept-language'] = self._serialize.header("self.config.accept_language", self.config.accept_language, 'str') + + # Construct and send request + request = self._client.get(url, query_parameters, header_parameters) + return request + + def internal_paging(next_link=None): + request = prepare_request(next_link) + + response = self._client.send(request, stream=False, **operation_config) + + if response.status_code not in [200]: + raise models.DeploymentScriptsErrorException(self._deserialize, response) + + return response + + # Deserialize response + header_dict = None + if raw: + header_dict = {} + deserialized = models.DeploymentScriptPaged(internal_paging, self._deserialize.dependencies, header_dict) + + return deserialized + list_by_subscription.metadata = {'url': '/subscriptions/{subscriptionId}/providers/Microsoft.Resources/deploymentScripts'} + + def get_logs( + self, resource_group_name, script_name, custom_headers=None, raw=False, **operation_config): + """Gets deployment script logs for a given deployment script name. + + :param resource_group_name: The name of the resource group. The name + is case insensitive. + :type resource_group_name: str + :param script_name: Name of the deployment script. + :type script_name: str + :param dict custom_headers: headers that will be added to the request + :param bool raw: returns the direct response alongside the + deserialized response + :param operation_config: :ref:`Operation configuration + overrides`. + :return: ScriptLogsList or ClientRawResponse if raw=true + :rtype: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ScriptLogsList + or ~msrest.pipeline.ClientRawResponse + :raises: + :class:`DeploymentScriptsErrorException` + """ + # Construct URL + url = self.get_logs.metadata['url'] + path_format_arguments = { + 'subscriptionId': self._serialize.url("self.config.subscription_id", self.config.subscription_id, 'str'), + 'resourceGroupName': self._serialize.url("resource_group_name", resource_group_name, 'str', max_length=90, min_length=1, pattern=r'^[-\w\._\(\)]+$'), + 'scriptName': self._serialize.url("script_name", script_name, 'str', max_length=90, min_length=1) + } + url = self._client.format_url(url, **path_format_arguments) + + # Construct parameters + query_parameters = {} + query_parameters['api-version'] = self._serialize.query("self.api_version", self.api_version, 'str') + + # Construct headers + header_parameters = {} + header_parameters['Accept'] = 'application/json' + if self.config.generate_client_request_id: + header_parameters['x-ms-client-request-id'] = str(uuid.uuid1()) + if custom_headers: + header_parameters.update(custom_headers) + if self.config.accept_language is not None: + header_parameters['accept-language'] = self._serialize.header("self.config.accept_language", self.config.accept_language, 'str') + + # Construct and send request + request = self._client.get(url, query_parameters, header_parameters) + response = self._client.send(request, stream=False, **operation_config) + + if response.status_code not in [200]: + raise models.DeploymentScriptsErrorException(self._deserialize, response) + + deserialized = None + if response.status_code == 200: + deserialized = self._deserialize('ScriptLogsList', response) + + if raw: + client_raw_response = ClientRawResponse(deserialized, response) + return client_raw_response + + return deserialized + get_logs.metadata = {'url': '/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Resources/deploymentScripts/{scriptName}/logs'} + + def get_logs_default( + self, resource_group_name, script_name, tail=None, custom_headers=None, raw=False, **operation_config): + """Gets deployment script logs for a given deployment script name. + + :param resource_group_name: The name of the resource group. The name + is case insensitive. + :type resource_group_name: str + :param script_name: Name of the deployment script. + :type script_name: str + :param tail: The number of lines to show from the tail of the + deployment script log. Valid value is a positive number up to 1000. If + 'tail' is not provided, all available logs are shown up to container + instance log capacity of 4mb. + :type tail: int + :param dict custom_headers: headers that will be added to the request + :param bool raw: returns the direct response alongside the + deserialized response + :param operation_config: :ref:`Operation configuration + overrides`. + :return: ScriptLog or ClientRawResponse if raw=true + :rtype: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.ScriptLog or + ~msrest.pipeline.ClientRawResponse + :raises: + :class:`DeploymentScriptsErrorException` + """ + # Construct URL + url = self.get_logs_default.metadata['url'] + path_format_arguments = { + 'subscriptionId': self._serialize.url("self.config.subscription_id", self.config.subscription_id, 'str'), + 'resourceGroupName': self._serialize.url("resource_group_name", resource_group_name, 'str', max_length=90, min_length=1, pattern=r'^[-\w\._\(\)]+$'), + 'scriptName': self._serialize.url("script_name", script_name, 'str', max_length=90, min_length=1) + } + url = self._client.format_url(url, **path_format_arguments) + + # Construct parameters + query_parameters = {} + query_parameters['api-version'] = self._serialize.query("self.api_version", self.api_version, 'str') + if tail is not None: + query_parameters['tail'] = self._serialize.query("tail", tail, 'int') + + # Construct headers + header_parameters = {} + header_parameters['Accept'] = 'application/json' + if self.config.generate_client_request_id: + header_parameters['x-ms-client-request-id'] = str(uuid.uuid1()) + if custom_headers: + header_parameters.update(custom_headers) + if self.config.accept_language is not None: + header_parameters['accept-language'] = self._serialize.header("self.config.accept_language", self.config.accept_language, 'str') + + # Construct and send request + request = self._client.get(url, query_parameters, header_parameters) + response = self._client.send(request, stream=False, **operation_config) + + if response.status_code not in [200]: + raise models.DeploymentScriptsErrorException(self._deserialize, response) + + deserialized = None + if response.status_code == 200: + deserialized = self._deserialize('ScriptLog', response) + + if raw: + client_raw_response = ClientRawResponse(deserialized, response) + return client_raw_response + + return deserialized + get_logs_default.metadata = {'url': '/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Resources/deploymentScripts/{scriptName}/logs/default'} + + def list_by_resource_group( + self, resource_group_name, custom_headers=None, raw=False, **operation_config): + """Lists deployments scripts. + + :param resource_group_name: The name of the resource group. The name + is case insensitive. + :type resource_group_name: str + :param dict custom_headers: headers that will be added to the request + :param bool raw: returns the direct response alongside the + deserialized response + :param operation_config: :ref:`Operation configuration + overrides`. + :return: An iterator like instance of DeploymentScript + :rtype: + ~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.DeploymentScriptPaged[~azure.mgmt.resource.deploymentscripts.v2020_10_01.models.DeploymentScript] + :raises: + :class:`DeploymentScriptsErrorException` + """ + def prepare_request(next_link=None): + if not next_link: + # Construct URL + url = self.list_by_resource_group.metadata['url'] + path_format_arguments = { + 'subscriptionId': self._serialize.url("self.config.subscription_id", self.config.subscription_id, 'str'), + 'resourceGroupName': self._serialize.url("resource_group_name", resource_group_name, 'str', max_length=90, min_length=1, pattern=r'^[-\w\._\(\)]+$') + } + url = self._client.format_url(url, **path_format_arguments) + + # Construct parameters + query_parameters = {} + query_parameters['api-version'] = self._serialize.query("self.api_version", self.api_version, 'str') + + else: + url = next_link + query_parameters = {} + + # Construct headers + header_parameters = {} + header_parameters['Accept'] = 'application/json' + if self.config.generate_client_request_id: + header_parameters['x-ms-client-request-id'] = str(uuid.uuid1()) + if custom_headers: + header_parameters.update(custom_headers) + if self.config.accept_language is not None: + header_parameters['accept-language'] = self._serialize.header("self.config.accept_language", self.config.accept_language, 'str') + + # Construct and send request + request = self._client.get(url, query_parameters, header_parameters) + return request + + def internal_paging(next_link=None): + request = prepare_request(next_link) + + response = self._client.send(request, stream=False, **operation_config) + + if response.status_code not in [200]: + raise models.DeploymentScriptsErrorException(self._deserialize, response) + + return response + + # Deserialize response + header_dict = None + if raw: + header_dict = {} + deserialized = models.DeploymentScriptPaged(internal_paging, self._deserialize.dependencies, header_dict) + + return deserialized + list_by_resource_group.metadata = {'url': '/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Resources/deploymentScripts'} diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/version.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/version.py new file mode 100644 index 000000000000..f1684021ce87 --- /dev/null +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/deploymentscripts/v2020_10_01/version.py @@ -0,0 +1,13 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for +# license information. +# +# Code generated by Microsoft (R) AutoRest Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is +# regenerated. +# -------------------------------------------------------------------------- + +VERSION = "2020-10-01" + diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/_application_client.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/_application_client.py index c1761c597cd7..e8d9ea59d08e 100644 --- a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/_application_client.py +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/_application_client.py @@ -13,12 +13,13 @@ from msrest import Serializer, Deserializer from ._configuration import ApplicationClientConfiguration +from .operations import ApplicationClientOperationsMixin from .operations import ApplicationsOperations from .operations import ApplicationDefinitionsOperations from . import models -class ApplicationClient(SDKClient): +class ApplicationClient(ApplicationClientOperationsMixin, SDKClient): """ARM applications :ivar config: Configuration for client. diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/models/__init__.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/models/__init__.py index fe77a86199f0..c0616bc4fc10 100644 --- a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/models/__init__.py +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/models/__init__.py @@ -18,6 +18,8 @@ from ._models_py3 import ErrorResponse, ErrorResponseException from ._models_py3 import GenericResource from ._models_py3 import Identity + from ._models_py3 import Operation + from ._models_py3 import OperationDisplay from ._models_py3 import Plan from ._models_py3 import PlanPatchable from ._models_py3 import Resource @@ -31,12 +33,15 @@ from ._models import ErrorResponse, ErrorResponseException from ._models import GenericResource from ._models import Identity + from ._models import Operation + from ._models import OperationDisplay from ._models import Plan from ._models import PlanPatchable from ._models import Resource from ._models import Sku from ._paged_models import ApplicationDefinitionPaged from ._paged_models import ApplicationPaged +from ._paged_models import OperationPaged from ._application_client_enums import ( ProvisioningState, ApplicationLockLevel, @@ -53,10 +58,13 @@ 'ErrorResponse', 'ErrorResponseException', 'GenericResource', 'Identity', + 'Operation', + 'OperationDisplay', 'Plan', 'PlanPatchable', 'Resource', 'Sku', + 'OperationPaged', 'ApplicationPaged', 'ApplicationDefinitionPaged', 'ProvisioningState', diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/models/_models.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/models/_models.py index 3572d2988276..97ad73bb4c96 100644 --- a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/models/_models.py +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/models/_models.py @@ -507,6 +507,52 @@ def __init__(self, **kwargs): self.type = kwargs.get('type', None) +class Operation(Model): + """Microsoft.Solutions operation. + + :param name: Operation name: {provider}/{resource}/{operation} + :type name: str + :param display: The object that represents the operation. + :type display: + ~azure.mgmt.resource.managedapplications.models.OperationDisplay + """ + + _attribute_map = { + 'name': {'key': 'name', 'type': 'str'}, + 'display': {'key': 'display', 'type': 'OperationDisplay'}, + } + + def __init__(self, **kwargs): + super(Operation, self).__init__(**kwargs) + self.name = kwargs.get('name', None) + self.display = kwargs.get('display', None) + + +class OperationDisplay(Model): + """The object that represents the operation. + + :param provider: Service provider: Microsoft.Solutions + :type provider: str + :param resource: Resource on which the operation is performed: + Application, JitRequest, etc. + :type resource: str + :param operation: Operation type: Read, write, delete, etc. + :type operation: str + """ + + _attribute_map = { + 'provider': {'key': 'provider', 'type': 'str'}, + 'resource': {'key': 'resource', 'type': 'str'}, + 'operation': {'key': 'operation', 'type': 'str'}, + } + + def __init__(self, **kwargs): + super(OperationDisplay, self).__init__(**kwargs) + self.provider = kwargs.get('provider', None) + self.resource = kwargs.get('resource', None) + self.operation = kwargs.get('operation', None) + + class Plan(Model): """Plan for the managed application. diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/models/_models_py3.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/models/_models_py3.py index af550cd14d37..a3e179df903c 100644 --- a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/models/_models_py3.py +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/models/_models_py3.py @@ -507,6 +507,52 @@ def __init__(self, *, type=None, **kwargs) -> None: self.type = type +class Operation(Model): + """Microsoft.Solutions operation. + + :param name: Operation name: {provider}/{resource}/{operation} + :type name: str + :param display: The object that represents the operation. + :type display: + ~azure.mgmt.resource.managedapplications.models.OperationDisplay + """ + + _attribute_map = { + 'name': {'key': 'name', 'type': 'str'}, + 'display': {'key': 'display', 'type': 'OperationDisplay'}, + } + + def __init__(self, *, name: str=None, display=None, **kwargs) -> None: + super(Operation, self).__init__(**kwargs) + self.name = name + self.display = display + + +class OperationDisplay(Model): + """The object that represents the operation. + + :param provider: Service provider: Microsoft.Solutions + :type provider: str + :param resource: Resource on which the operation is performed: + Application, JitRequest, etc. + :type resource: str + :param operation: Operation type: Read, write, delete, etc. + :type operation: str + """ + + _attribute_map = { + 'provider': {'key': 'provider', 'type': 'str'}, + 'resource': {'key': 'resource', 'type': 'str'}, + 'operation': {'key': 'operation', 'type': 'str'}, + } + + def __init__(self, *, provider: str=None, resource: str=None, operation: str=None, **kwargs) -> None: + super(OperationDisplay, self).__init__(**kwargs) + self.provider = provider + self.resource = resource + self.operation = operation + + class Plan(Model): """Plan for the managed application. diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/models/_paged_models.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/models/_paged_models.py index f043675463e2..ff3781b6aa06 100644 --- a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/models/_paged_models.py +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/models/_paged_models.py @@ -12,6 +12,19 @@ from msrest.paging import Paged +class OperationPaged(Paged): + """ + A paging container for iterating over a list of :class:`Operation ` object + """ + + _attribute_map = { + 'next_link': {'key': 'nextLink', 'type': 'str'}, + 'current_page': {'key': 'value', 'type': '[Operation]'} + } + + def __init__(self, *args, **kwargs): + + super(OperationPaged, self).__init__(*args, **kwargs) class ApplicationPaged(Paged): """ A paging container for iterating over a list of :class:`Application ` object diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/operations/__init__.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/operations/__init__.py index 60ebab061654..94b576e685a0 100644 --- a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/operations/__init__.py +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/operations/__init__.py @@ -11,8 +11,10 @@ from ._applications_operations import ApplicationsOperations from ._application_definitions_operations import ApplicationDefinitionsOperations +from ._application_client_operations import ApplicationClientOperationsMixin __all__ = [ 'ApplicationsOperations', 'ApplicationDefinitionsOperations', + 'ApplicationClientOperationsMixin', ] diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/operations/_application_client_operations.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/operations/_application_client_operations.py new file mode 100644 index 000000000000..737589352c73 --- /dev/null +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/operations/_application_client_operations.py @@ -0,0 +1,82 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for +# license information. +# +# Code generated by Microsoft (R) AutoRest Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is +# regenerated. +# -------------------------------------------------------------------------- + +from msrest.pipeline import ClientRawResponse +from msrestazure.azure_exceptions import CloudError +from msrest.polling import LROPoller, NoPolling +from msrestazure.polling.arm_polling import ARMPolling +from .. import models +import uuid + + +class ApplicationClientOperationsMixin(object): + + def list_operations( + self, custom_headers=None, raw=False, **operation_config): + """Lists all of the available Microsoft.Solutions REST API operations. + + :param dict custom_headers: headers that will be added to the request + :param bool raw: returns the direct response alongside the + deserialized response + :param operation_config: :ref:`Operation configuration + overrides`. + :return: An iterator like instance of Operation + :rtype: + ~azure.mgmt.resource.managedapplications.models.OperationPaged[~azure.mgmt.resource.managedapplications.models.Operation] + :raises: :class:`CloudError` + """ + def prepare_request(next_link=None): + if not next_link: + # Construct URL + url = self.list_operations.metadata['url'] + + # Construct parameters + query_parameters = {} + query_parameters['api-version'] = self._serialize.query("self.api_version", self.api_version, 'str') + + else: + url = next_link + query_parameters = {} + + # Construct headers + header_parameters = {} + header_parameters['Accept'] = 'application/json' + if self.config.generate_client_request_id: + header_parameters['x-ms-client-request-id'] = str(uuid.uuid1()) + if custom_headers: + header_parameters.update(custom_headers) + if self.config.accept_language is not None: + header_parameters['accept-language'] = self._serialize.header("self.config.accept_language", self.config.accept_language, 'str') + + # Construct and send request + request = self._client.get(url, query_parameters, header_parameters) + return request + + def internal_paging(next_link=None): + request = prepare_request(next_link) + + response = self._client.send(request, stream=False, **operation_config) + + if response.status_code not in [200]: + exp = CloudError(response) + exp.request_id = response.headers.get('x-ms-request-id') + raise exp + + return response + + # Deserialize response + header_dict = None + if raw: + header_dict = {} + deserialized = models.OperationPaged(internal_paging, self._deserialize.dependencies, header_dict) + + return deserialized + list_operations.metadata = {'url': '/providers/Microsoft.Solutions/operations'} diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/operations/_application_definitions_operations.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/operations/_application_definitions_operations.py index 2dde22fe0576..a9bd8ba17aa5 100644 --- a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/operations/_application_definitions_operations.py +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/operations/_application_definitions_operations.py @@ -358,14 +358,15 @@ def internal_paging(next_link=None): list_by_resource_group.metadata = {'url': '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Solutions/applicationDefinitions'} def get_by_id( - self, application_definition_id, custom_headers=None, raw=False, **operation_config): + self, resource_group_name, application_definition_name, custom_headers=None, raw=False, **operation_config): """Gets the managed application definition. - :param application_definition_id: The fully qualified ID of the - managed application definition, including the managed application name - and the managed application definition resource type. Use the format, - /subscriptions/{guid}/resourceGroups/{resource-group-name}/Microsoft.Solutions/applicationDefinitions/{applicationDefinition-name} - :type application_definition_id: str + :param resource_group_name: The name of the resource group. The name + is case insensitive. + :type resource_group_name: str + :param application_definition_name: The name of the managed + application definition. + :type application_definition_name: str :param dict custom_headers: headers that will be added to the request :param bool raw: returns the direct response alongside the deserialized response @@ -381,7 +382,9 @@ def get_by_id( # Construct URL url = self.get_by_id.metadata['url'] path_format_arguments = { - 'applicationDefinitionId': self._serialize.url("application_definition_id", application_definition_id, 'str', skip_quote=True) + 'resourceGroupName': self._serialize.url("resource_group_name", resource_group_name, 'str', max_length=90, min_length=1, pattern=r'^[-\w\._\(\)]+$'), + 'applicationDefinitionName': self._serialize.url("application_definition_name", application_definition_name, 'str', max_length=64, min_length=3), + 'subscriptionId': self._serialize.url("self.config.subscription_id", self.config.subscription_id, 'str') } url = self._client.format_url(url, **path_format_arguments) @@ -415,15 +418,17 @@ def get_by_id( return client_raw_response return deserialized - get_by_id.metadata = {'url': '/{applicationDefinitionId}'} + get_by_id.metadata = {'url': '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Solutions/applicationDefinitions/{applicationDefinitionName}'} def _delete_by_id_initial( - self, application_definition_id, custom_headers=None, raw=False, **operation_config): + self, resource_group_name, application_definition_name, custom_headers=None, raw=False, **operation_config): # Construct URL url = self.delete_by_id.metadata['url'] path_format_arguments = { - 'applicationDefinitionId': self._serialize.url("application_definition_id", application_definition_id, 'str', skip_quote=True) + 'resourceGroupName': self._serialize.url("resource_group_name", resource_group_name, 'str', max_length=90, min_length=1, pattern=r'^[-\w\._\(\)]+$'), + 'applicationDefinitionName': self._serialize.url("application_definition_name", application_definition_name, 'str', max_length=64, min_length=3), + 'subscriptionId': self._serialize.url("self.config.subscription_id", self.config.subscription_id, 'str') } url = self._client.format_url(url, **path_format_arguments) @@ -452,14 +457,15 @@ def _delete_by_id_initial( return client_raw_response def delete_by_id( - self, application_definition_id, custom_headers=None, raw=False, polling=True, **operation_config): + self, resource_group_name, application_definition_name, custom_headers=None, raw=False, polling=True, **operation_config): """Deletes the managed application definition. - :param application_definition_id: The fully qualified ID of the - managed application definition, including the managed application name - and the managed application definition resource type. Use the format, - /subscriptions/{guid}/resourceGroups/{resource-group-name}/Microsoft.Solutions/applicationDefinitions/{applicationDefinition-name} - :type application_definition_id: str + :param resource_group_name: The name of the resource group. The name + is case insensitive. + :type resource_group_name: str + :param application_definition_name: The name of the managed + application definition. + :type application_definition_name: str :param dict custom_headers: headers that will be added to the request :param bool raw: The poller return type is ClientRawResponse, the direct response alongside the deserialized response @@ -473,7 +479,8 @@ def delete_by_id( :class:`ErrorResponseException` """ raw_result = self._delete_by_id_initial( - application_definition_id=application_definition_id, + resource_group_name=resource_group_name, + application_definition_name=application_definition_name, custom_headers=custom_headers, raw=True, **operation_config @@ -491,15 +498,17 @@ def get_long_running_output(response): elif polling is False: polling_method = NoPolling() else: polling_method = polling return LROPoller(self._client, raw_result, get_long_running_output, polling_method) - delete_by_id.metadata = {'url': '/{applicationDefinitionId}'} + delete_by_id.metadata = {'url': '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Solutions/applicationDefinitions/{applicationDefinitionName}'} def _create_or_update_by_id_initial( - self, application_definition_id, parameters, custom_headers=None, raw=False, **operation_config): + self, resource_group_name, application_definition_name, parameters, custom_headers=None, raw=False, **operation_config): # Construct URL url = self.create_or_update_by_id.metadata['url'] path_format_arguments = { - 'applicationDefinitionId': self._serialize.url("application_definition_id", application_definition_id, 'str', skip_quote=True) + 'resourceGroupName': self._serialize.url("resource_group_name", resource_group_name, 'str', max_length=90, min_length=1, pattern=r'^[-\w\._\(\)]+$'), + 'applicationDefinitionName': self._serialize.url("application_definition_name", application_definition_name, 'str', max_length=64, min_length=3), + 'subscriptionId': self._serialize.url("self.config.subscription_id", self.config.subscription_id, 'str') } url = self._client.format_url(url, **path_format_arguments) @@ -542,14 +551,15 @@ def _create_or_update_by_id_initial( return deserialized def create_or_update_by_id( - self, application_definition_id, parameters, custom_headers=None, raw=False, polling=True, **operation_config): + self, resource_group_name, application_definition_name, parameters, custom_headers=None, raw=False, polling=True, **operation_config): """Creates a new managed application definition. - :param application_definition_id: The fully qualified ID of the - managed application definition, including the managed application name - and the managed application definition resource type. Use the format, - /subscriptions/{guid}/resourceGroups/{resource-group-name}/Microsoft.Solutions/applicationDefinitions/{applicationDefinition-name} - :type application_definition_id: str + :param resource_group_name: The name of the resource group. The name + is case insensitive. + :type resource_group_name: str + :param application_definition_name: The name of the managed + application definition. + :type application_definition_name: str :param parameters: Parameters supplied to the create or update a managed application definition. :type parameters: @@ -569,7 +579,8 @@ def create_or_update_by_id( :class:`ErrorResponseException` """ raw_result = self._create_or_update_by_id_initial( - application_definition_id=application_definition_id, + resource_group_name=resource_group_name, + application_definition_name=application_definition_name, parameters=parameters, custom_headers=custom_headers, raw=True, @@ -592,4 +603,4 @@ def get_long_running_output(response): elif polling is False: polling_method = NoPolling() else: polling_method = polling return LROPoller(self._client, raw_result, get_long_running_output, polling_method) - create_or_update_by_id.metadata = {'url': '/{applicationDefinitionId}'} + create_or_update_by_id.metadata = {'url': '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Solutions/applicationDefinitions/{applicationDefinitionName}'} diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/operations/_applications_operations.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/operations/_applications_operations.py index 200dc626853a..c278b7d086ed 100644 --- a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/operations/_applications_operations.py +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/managedapplications/operations/_applications_operations.py @@ -297,7 +297,7 @@ def update( :param parameters: Parameters supplied to update an existing managed application. :type parameters: - ~azure.mgmt.resource.managedapplications.models.Application + ~azure.mgmt.resource.managedapplications.models.ApplicationPatchable :param dict custom_headers: headers that will be added to the request :param bool raw: returns the direct response alongside the deserialized response @@ -335,7 +335,7 @@ def update( # Construct body if parameters is not None: - body_content = self._serialize.body(parameters, 'Application') + body_content = self._serialize.body(parameters, 'ApplicationPatchable') else: body_content = None diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/resources/v2020_06_01/models/__init__.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/resources/v2020_06_01/models/__init__.py index 5cad23ead614..fe0051b633b0 100644 --- a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/resources/v2020_06_01/models/__init__.py +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/resources/v2020_06_01/models/__init__.py @@ -33,6 +33,7 @@ from ._models_py3 import ErrorAdditionalInfo from ._models_py3 import ErrorResponse from ._models_py3 import ExportTemplateRequest + from ._models_py3 import ExpressionEvaluationOptions from ._models_py3 import GenericResource from ._models_py3 import GenericResourceExpanded from ._models_py3 import GenericResourceFilter @@ -97,6 +98,7 @@ from ._models import ErrorAdditionalInfo from ._models import ErrorResponse from ._models import ExportTemplateRequest + from ._models import ExpressionEvaluationOptions from ._models import GenericResource from ._models import GenericResourceExpanded from ._models import GenericResourceFilter @@ -147,6 +149,7 @@ from ._resource_management_client_enums import ( DeploymentMode, OnErrorDeploymentType, + ExpressionEvaluationOptionsScopeType, WhatIfResultFormat, AliasPathTokenType, AliasPathAttributes, @@ -184,6 +187,7 @@ 'ErrorAdditionalInfo', 'ErrorResponse', 'ExportTemplateRequest', + 'ExpressionEvaluationOptions', 'GenericResource', 'GenericResourceExpanded', 'GenericResourceFilter', @@ -233,6 +237,7 @@ 'DeploymentOperationPaged', 'DeploymentMode', 'OnErrorDeploymentType', + 'ExpressionEvaluationOptionsScopeType', 'WhatIfResultFormat', 'AliasPathTokenType', 'AliasPathAttributes', diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/resources/v2020_06_01/models/_models.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/resources/v2020_06_01/models/_models.py index 0154a3b529df..4330f5e65230 100644 --- a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/resources/v2020_06_01/models/_models.py +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/resources/v2020_06_01/models/_models.py @@ -554,6 +554,12 @@ class DeploymentProperties(Model): :param on_error_deployment: The deployment on error behavior. :type on_error_deployment: ~azure.mgmt.resource.resources.v2020_06_01.models.OnErrorDeployment + :param expression_evaluation_options: Specifies whether template + expressions are evaluated within the scope of the parent template or + nested template. Only applicable to nested templates. If not specified, + default value is outer. + :type expression_evaluation_options: + ~azure.mgmt.resource.resources.v2020_06_01.models.ExpressionEvaluationOptions """ _validation = { @@ -568,6 +574,7 @@ class DeploymentProperties(Model): 'mode': {'key': 'mode', 'type': 'DeploymentMode'}, 'debug_setting': {'key': 'debugSetting', 'type': 'DebugSetting'}, 'on_error_deployment': {'key': 'onErrorDeployment', 'type': 'OnErrorDeployment'}, + 'expression_evaluation_options': {'key': 'expressionEvaluationOptions', 'type': 'ExpressionEvaluationOptions'}, } def __init__(self, **kwargs): @@ -579,6 +586,7 @@ def __init__(self, **kwargs): self.mode = kwargs.get('mode', None) self.debug_setting = kwargs.get('debug_setting', None) self.on_error_deployment = kwargs.get('on_error_deployment', None) + self.expression_evaluation_options = kwargs.get('expression_evaluation_options', None) class DeploymentPropertiesExtended(Model): @@ -797,6 +805,12 @@ class DeploymentWhatIfProperties(DeploymentProperties): :param on_error_deployment: The deployment on error behavior. :type on_error_deployment: ~azure.mgmt.resource.resources.v2020_06_01.models.OnErrorDeployment + :param expression_evaluation_options: Specifies whether template + expressions are evaluated within the scope of the parent template or + nested template. Only applicable to nested templates. If not specified, + default value is outer. + :type expression_evaluation_options: + ~azure.mgmt.resource.resources.v2020_06_01.models.ExpressionEvaluationOptions :param what_if_settings: Optional What-If operation settings. :type what_if_settings: ~azure.mgmt.resource.resources.v2020_06_01.models.DeploymentWhatIfSettings @@ -814,6 +828,7 @@ class DeploymentWhatIfProperties(DeploymentProperties): 'mode': {'key': 'mode', 'type': 'DeploymentMode'}, 'debug_setting': {'key': 'debugSetting', 'type': 'DebugSetting'}, 'on_error_deployment': {'key': 'onErrorDeployment', 'type': 'OnErrorDeployment'}, + 'expression_evaluation_options': {'key': 'expressionEvaluationOptions', 'type': 'ExpressionEvaluationOptions'}, 'what_if_settings': {'key': 'whatIfSettings', 'type': 'DeploymentWhatIfSettings'}, } @@ -937,6 +952,26 @@ def __init__(self, **kwargs): self.options = kwargs.get('options', None) +class ExpressionEvaluationOptions(Model): + """Specifies whether template expressions are evaluated within the scope of + the parent template or nested template. + + :param scope: The scope to be used for evaluation of parameters, variables + and functions in a nested template. Possible values include: + 'NotSpecified', 'Outer', 'Inner' + :type scope: str or + ~azure.mgmt.resource.resources.v2020_06_01.models.ExpressionEvaluationOptionsScopeType + """ + + _attribute_map = { + 'scope': {'key': 'scope', 'type': 'str'}, + } + + def __init__(self, **kwargs): + super(ExpressionEvaluationOptions, self).__init__(**kwargs) + self.scope = kwargs.get('scope', None) + + class Resource(Model): """Specified resource. diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/resources/v2020_06_01/models/_models_py3.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/resources/v2020_06_01/models/_models_py3.py index bae72bde8ca9..68e6a12a04a6 100644 --- a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/resources/v2020_06_01/models/_models_py3.py +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/resources/v2020_06_01/models/_models_py3.py @@ -554,6 +554,12 @@ class DeploymentProperties(Model): :param on_error_deployment: The deployment on error behavior. :type on_error_deployment: ~azure.mgmt.resource.resources.v2020_06_01.models.OnErrorDeployment + :param expression_evaluation_options: Specifies whether template + expressions are evaluated within the scope of the parent template or + nested template. Only applicable to nested templates. If not specified, + default value is outer. + :type expression_evaluation_options: + ~azure.mgmt.resource.resources.v2020_06_01.models.ExpressionEvaluationOptions """ _validation = { @@ -568,9 +574,10 @@ class DeploymentProperties(Model): 'mode': {'key': 'mode', 'type': 'DeploymentMode'}, 'debug_setting': {'key': 'debugSetting', 'type': 'DebugSetting'}, 'on_error_deployment': {'key': 'onErrorDeployment', 'type': 'OnErrorDeployment'}, + 'expression_evaluation_options': {'key': 'expressionEvaluationOptions', 'type': 'ExpressionEvaluationOptions'}, } - def __init__(self, *, mode, template=None, template_link=None, parameters=None, parameters_link=None, debug_setting=None, on_error_deployment=None, **kwargs) -> None: + def __init__(self, *, mode, template=None, template_link=None, parameters=None, parameters_link=None, debug_setting=None, on_error_deployment=None, expression_evaluation_options=None, **kwargs) -> None: super(DeploymentProperties, self).__init__(**kwargs) self.template = template self.template_link = template_link @@ -579,6 +586,7 @@ def __init__(self, *, mode, template=None, template_link=None, parameters=None, self.mode = mode self.debug_setting = debug_setting self.on_error_deployment = on_error_deployment + self.expression_evaluation_options = expression_evaluation_options class DeploymentPropertiesExtended(Model): @@ -797,6 +805,12 @@ class DeploymentWhatIfProperties(DeploymentProperties): :param on_error_deployment: The deployment on error behavior. :type on_error_deployment: ~azure.mgmt.resource.resources.v2020_06_01.models.OnErrorDeployment + :param expression_evaluation_options: Specifies whether template + expressions are evaluated within the scope of the parent template or + nested template. Only applicable to nested templates. If not specified, + default value is outer. + :type expression_evaluation_options: + ~azure.mgmt.resource.resources.v2020_06_01.models.ExpressionEvaluationOptions :param what_if_settings: Optional What-If operation settings. :type what_if_settings: ~azure.mgmt.resource.resources.v2020_06_01.models.DeploymentWhatIfSettings @@ -814,11 +828,12 @@ class DeploymentWhatIfProperties(DeploymentProperties): 'mode': {'key': 'mode', 'type': 'DeploymentMode'}, 'debug_setting': {'key': 'debugSetting', 'type': 'DebugSetting'}, 'on_error_deployment': {'key': 'onErrorDeployment', 'type': 'OnErrorDeployment'}, + 'expression_evaluation_options': {'key': 'expressionEvaluationOptions', 'type': 'ExpressionEvaluationOptions'}, 'what_if_settings': {'key': 'whatIfSettings', 'type': 'DeploymentWhatIfSettings'}, } - def __init__(self, *, mode, template=None, template_link=None, parameters=None, parameters_link=None, debug_setting=None, on_error_deployment=None, what_if_settings=None, **kwargs) -> None: - super(DeploymentWhatIfProperties, self).__init__(template=template, template_link=template_link, parameters=parameters, parameters_link=parameters_link, mode=mode, debug_setting=debug_setting, on_error_deployment=on_error_deployment, **kwargs) + def __init__(self, *, mode, template=None, template_link=None, parameters=None, parameters_link=None, debug_setting=None, on_error_deployment=None, expression_evaluation_options=None, what_if_settings=None, **kwargs) -> None: + super(DeploymentWhatIfProperties, self).__init__(template=template, template_link=template_link, parameters=parameters, parameters_link=parameters_link, mode=mode, debug_setting=debug_setting, on_error_deployment=on_error_deployment, expression_evaluation_options=expression_evaluation_options, **kwargs) self.what_if_settings = what_if_settings @@ -937,6 +952,26 @@ def __init__(self, *, resources=None, options: str=None, **kwargs) -> None: self.options = options +class ExpressionEvaluationOptions(Model): + """Specifies whether template expressions are evaluated within the scope of + the parent template or nested template. + + :param scope: The scope to be used for evaluation of parameters, variables + and functions in a nested template. Possible values include: + 'NotSpecified', 'Outer', 'Inner' + :type scope: str or + ~azure.mgmt.resource.resources.v2020_06_01.models.ExpressionEvaluationOptionsScopeType + """ + + _attribute_map = { + 'scope': {'key': 'scope', 'type': 'str'}, + } + + def __init__(self, *, scope=None, **kwargs) -> None: + super(ExpressionEvaluationOptions, self).__init__(**kwargs) + self.scope = scope + + class Resource(Model): """Specified resource. diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/resources/v2020_06_01/models/_resource_management_client_enums.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/resources/v2020_06_01/models/_resource_management_client_enums.py index 097b6213626c..3626ea4e8e91 100644 --- a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/resources/v2020_06_01/models/_resource_management_client_enums.py +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/resources/v2020_06_01/models/_resource_management_client_enums.py @@ -24,6 +24,13 @@ class OnErrorDeploymentType(str, Enum): specific_deployment = "SpecificDeployment" +class ExpressionEvaluationOptionsScopeType(str, Enum): + + not_specified = "NotSpecified" + outer = "Outer" + inner = "Inner" + + class WhatIfResultFormat(str, Enum): resource_id_only = "ResourceIdOnly" diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/resources/v2020_06_01/operations/_providers_operations.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/resources/v2020_06_01/operations/_providers_operations.py index ca4ea5af186a..ee3eebd4cd6d 100644 --- a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/resources/v2020_06_01/operations/_providers_operations.py +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/resources/v2020_06_01/operations/_providers_operations.py @@ -98,6 +98,59 @@ def unregister( return deserialized unregister.metadata = {'url': '/subscriptions/{subscriptionId}/providers/{resourceProviderNamespace}/unregister'} + def register_at_management_group_scope( + self, resource_provider_namespace, group_id, custom_headers=None, raw=False, **operation_config): + """Registers a management group with a resource provider. + + :param resource_provider_namespace: The namespace of the resource + provider to register. + :type resource_provider_namespace: str + :param group_id: The management group ID. + :type group_id: str + :param dict custom_headers: headers that will be added to the request + :param bool raw: returns the direct response alongside the + deserialized response + :param operation_config: :ref:`Operation configuration + overrides`. + :return: None or ClientRawResponse if raw=true + :rtype: None or ~msrest.pipeline.ClientRawResponse + :raises: :class:`CloudError` + """ + # Construct URL + url = self.register_at_management_group_scope.metadata['url'] + path_format_arguments = { + 'resourceProviderNamespace': self._serialize.url("resource_provider_namespace", resource_provider_namespace, 'str'), + 'groupId': self._serialize.url("group_id", group_id, 'str', max_length=90, min_length=1) + } + url = self._client.format_url(url, **path_format_arguments) + + # Construct parameters + query_parameters = {} + query_parameters['api-version'] = self._serialize.query("self.api_version", self.api_version, 'str') + + # Construct headers + header_parameters = {} + if self.config.generate_client_request_id: + header_parameters['x-ms-client-request-id'] = str(uuid.uuid1()) + if custom_headers: + header_parameters.update(custom_headers) + if self.config.accept_language is not None: + header_parameters['accept-language'] = self._serialize.header("self.config.accept_language", self.config.accept_language, 'str') + + # Construct and send request + request = self._client.post(url, query_parameters, header_parameters) + response = self._client.send(request, stream=False, **operation_config) + + if response.status_code not in [200]: + exp = CloudError(response) + exp.request_id = response.headers.get('x-ms-request-id') + raise exp + + if raw: + client_raw_response = ClientRawResponse(None, response) + return client_raw_response + register_at_management_group_scope.metadata = {'url': '/providers/Microsoft.Management/managementGroups/{groupId}/providers/{resourceProviderNamespace}/register'} + def register( self, resource_provider_namespace, custom_headers=None, raw=False, **operation_config): """Registers a subscription with a resource provider. diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/templatespecs/v2019_06_01_preview/models/__init__.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/templatespecs/v2019_06_01_preview/models/__init__.py index 75de92f1cbad..4e577351a667 100644 --- a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/templatespecs/v2019_06_01_preview/models/__init__.py +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/templatespecs/v2019_06_01_preview/models/__init__.py @@ -20,6 +20,7 @@ from ._models_py3 import TemplateSpecTemplateArtifact from ._models_py3 import TemplateSpecUpdateModel from ._models_py3 import TemplateSpecVersion + from ._models_py3 import TemplateSpecVersionInfo from ._models_py3 import TemplateSpecVersionUpdateModel except (SyntaxError, ImportError): from ._models import AzureResourceBase @@ -32,11 +33,13 @@ from ._models import TemplateSpecTemplateArtifact from ._models import TemplateSpecUpdateModel from ._models import TemplateSpecVersion + from ._models import TemplateSpecVersionInfo from ._models import TemplateSpecVersionUpdateModel from ._paged_models import TemplateSpecPaged from ._paged_models import TemplateSpecVersionPaged from ._template_specs_client_enums import ( CreatedByType, + TemplateSpecExpandKind, ) __all__ = [ @@ -50,8 +53,10 @@ 'TemplateSpecTemplateArtifact', 'TemplateSpecUpdateModel', 'TemplateSpecVersion', + 'TemplateSpecVersionInfo', 'TemplateSpecVersionUpdateModel', 'TemplateSpecPaged', 'TemplateSpecVersionPaged', 'CreatedByType', + 'TemplateSpecExpandKind', ] diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/templatespecs/v2019_06_01_preview/models/_models.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/templatespecs/v2019_06_01_preview/models/_models.py index d6e1e5494000..e2fd370aad46 100644 --- a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/templatespecs/v2019_06_01_preview/models/_models.py +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/templatespecs/v2019_06_01_preview/models/_models.py @@ -202,6 +202,11 @@ class TemplateSpec(AzureResourceBase): :type description: str :param display_name: Template Spec display name. :type display_name: str + :ivar versions: High-level information about the versions within this + Template Spec. The keys are the version names. Only populated if the + $expand query parameter is set to 'versions'. + :vartype versions: dict[str, + ~azure.mgmt.resource.templatespecs.v2019_06_01_preview.models.TemplateSpecVersionInfo] :param tags: Resource tags. :type tags: dict[str, str] """ @@ -214,6 +219,7 @@ class TemplateSpec(AzureResourceBase): 'location': {'required': True}, 'description': {'max_length': 4096}, 'display_name': {'max_length': 64}, + 'versions': {'readonly': True}, } _attribute_map = { @@ -224,6 +230,7 @@ class TemplateSpec(AzureResourceBase): 'location': {'key': 'location', 'type': 'str'}, 'description': {'key': 'properties.description', 'type': 'str'}, 'display_name': {'key': 'properties.displayName', 'type': 'str'}, + 'versions': {'key': 'properties.versions', 'type': '{TemplateSpecVersionInfo}'}, 'tags': {'key': 'tags', 'type': '{str}'}, } @@ -232,6 +239,7 @@ def __init__(self, **kwargs): self.location = kwargs.get('location', None) self.description = kwargs.get('description', None) self.display_name = kwargs.get('display_name', None) + self.versions = None self.tags = kwargs.get('tags', None) @@ -432,6 +440,39 @@ def __init__(self, **kwargs): self.tags = kwargs.get('tags', None) +class TemplateSpecVersionInfo(Model): + """High-level information about a Template Spec version. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar description: Template Spec version description. + :vartype description: str + :ivar time_created: The timestamp of when the version was created. + :vartype time_created: datetime + :ivar time_modified: The timestamp of when the version was last modified. + :vartype time_modified: datetime + """ + + _validation = { + 'description': {'readonly': True}, + 'time_created': {'readonly': True}, + 'time_modified': {'readonly': True}, + } + + _attribute_map = { + 'description': {'key': 'description', 'type': 'str'}, + 'time_created': {'key': 'timeCreated', 'type': 'iso-8601'}, + 'time_modified': {'key': 'timeModified', 'type': 'iso-8601'}, + } + + def __init__(self, **kwargs): + super(TemplateSpecVersionInfo, self).__init__(**kwargs) + self.description = None + self.time_created = None + self.time_modified = None + + class TemplateSpecVersionUpdateModel(AzureResourceBase): """Template Spec Version properties to be updated (only tags are currently supported). diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/templatespecs/v2019_06_01_preview/models/_models_py3.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/templatespecs/v2019_06_01_preview/models/_models_py3.py index 81d384b1c289..ab48b42fb6d9 100644 --- a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/templatespecs/v2019_06_01_preview/models/_models_py3.py +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/templatespecs/v2019_06_01_preview/models/_models_py3.py @@ -202,6 +202,11 @@ class TemplateSpec(AzureResourceBase): :type description: str :param display_name: Template Spec display name. :type display_name: str + :ivar versions: High-level information about the versions within this + Template Spec. The keys are the version names. Only populated if the + $expand query parameter is set to 'versions'. + :vartype versions: dict[str, + ~azure.mgmt.resource.templatespecs.v2019_06_01_preview.models.TemplateSpecVersionInfo] :param tags: Resource tags. :type tags: dict[str, str] """ @@ -214,6 +219,7 @@ class TemplateSpec(AzureResourceBase): 'location': {'required': True}, 'description': {'max_length': 4096}, 'display_name': {'max_length': 64}, + 'versions': {'readonly': True}, } _attribute_map = { @@ -224,6 +230,7 @@ class TemplateSpec(AzureResourceBase): 'location': {'key': 'location', 'type': 'str'}, 'description': {'key': 'properties.description', 'type': 'str'}, 'display_name': {'key': 'properties.displayName', 'type': 'str'}, + 'versions': {'key': 'properties.versions', 'type': '{TemplateSpecVersionInfo}'}, 'tags': {'key': 'tags', 'type': '{str}'}, } @@ -232,6 +239,7 @@ def __init__(self, *, location: str, description: str=None, display_name: str=No self.location = location self.description = description self.display_name = display_name + self.versions = None self.tags = tags @@ -432,6 +440,39 @@ def __init__(self, *, location: str, artifacts=None, description: str=None, temp self.tags = tags +class TemplateSpecVersionInfo(Model): + """High-level information about a Template Spec version. + + Variables are only populated by the server, and will be ignored when + sending a request. + + :ivar description: Template Spec version description. + :vartype description: str + :ivar time_created: The timestamp of when the version was created. + :vartype time_created: datetime + :ivar time_modified: The timestamp of when the version was last modified. + :vartype time_modified: datetime + """ + + _validation = { + 'description': {'readonly': True}, + 'time_created': {'readonly': True}, + 'time_modified': {'readonly': True}, + } + + _attribute_map = { + 'description': {'key': 'description', 'type': 'str'}, + 'time_created': {'key': 'timeCreated', 'type': 'iso-8601'}, + 'time_modified': {'key': 'timeModified', 'type': 'iso-8601'}, + } + + def __init__(self, **kwargs) -> None: + super(TemplateSpecVersionInfo, self).__init__(**kwargs) + self.description = None + self.time_created = None + self.time_modified = None + + class TemplateSpecVersionUpdateModel(AzureResourceBase): """Template Spec Version properties to be updated (only tags are currently supported). diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/templatespecs/v2019_06_01_preview/models/_template_specs_client_enums.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/templatespecs/v2019_06_01_preview/models/_template_specs_client_enums.py index 68ab94e64947..372b2739eb53 100644 --- a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/templatespecs/v2019_06_01_preview/models/_template_specs_client_enums.py +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/templatespecs/v2019_06_01_preview/models/_template_specs_client_enums.py @@ -18,3 +18,8 @@ class CreatedByType(str, Enum): application = "Application" managed_identity = "ManagedIdentity" key = "Key" + + +class TemplateSpecExpandKind(str, Enum): + + versions = "versions" #: Includes version information with the Template Spec. diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/templatespecs/v2019_06_01_preview/operations/_template_specs_operations.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/templatespecs/v2019_06_01_preview/operations/_template_specs_operations.py index 4b93ee7fafde..f19b066f6580 100644 --- a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/templatespecs/v2019_06_01_preview/operations/_template_specs_operations.py +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/templatespecs/v2019_06_01_preview/operations/_template_specs_operations.py @@ -185,7 +185,7 @@ def update( update.metadata = {'url': '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Resources/templateSpecs/{templateSpecName}'} def get( - self, resource_group_name, template_spec_name, custom_headers=None, raw=False, **operation_config): + self, resource_group_name, template_spec_name, expand=None, custom_headers=None, raw=False, **operation_config): """Gets a Template Spec with a given name. :param resource_group_name: The name of the resource group. The name @@ -193,6 +193,10 @@ def get( :type resource_group_name: str :param template_spec_name: Name of the Template Spec. :type template_spec_name: str + :param expand: Allows for expansion of additional Template Spec + details in the response. Optional. Possible values include: 'versions' + :type expand: str or + ~azure.mgmt.resource.templatespecs.v2019_06_01_preview.models.TemplateSpecExpandKind :param dict custom_headers: headers that will be added to the request :param bool raw: returns the direct response alongside the deserialized response @@ -216,6 +220,8 @@ def get( # Construct parameters query_parameters = {} + if expand is not None: + query_parameters['$expand'] = self._serialize.query("expand", expand, 'str') query_parameters['api-version'] = self._serialize.query("self.api_version", self.api_version, 'str') # Construct headers @@ -301,9 +307,13 @@ def delete( delete.metadata = {'url': '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Resources/templateSpecs/{templateSpecName}'} def list_by_subscription( - self, custom_headers=None, raw=False, **operation_config): + self, expand=None, custom_headers=None, raw=False, **operation_config): """Lists all the Template Specs within the specified subscriptions. + :param expand: Allows for expansion of additional Template Spec + details in the response. Optional. Possible values include: 'versions' + :type expand: str or + ~azure.mgmt.resource.templatespecs.v2019_06_01_preview.models.TemplateSpecExpandKind :param dict custom_headers: headers that will be added to the request :param bool raw: returns the direct response alongside the deserialized response @@ -326,6 +336,8 @@ def prepare_request(next_link=None): # Construct parameters query_parameters = {} + if expand is not None: + query_parameters['$expand'] = self._serialize.query("expand", expand, 'str') query_parameters['api-version'] = self._serialize.query("self.api_version", self.api_version, 'str') else: @@ -366,12 +378,16 @@ def internal_paging(next_link=None): list_by_subscription.metadata = {'url': '/subscriptions/{subscriptionId}/providers/Microsoft.Resources/templateSpecs/'} def list_by_resource_group( - self, resource_group_name, custom_headers=None, raw=False, **operation_config): + self, resource_group_name, expand=None, custom_headers=None, raw=False, **operation_config): """Lists all the Template Specs within the specified resource group. :param resource_group_name: The name of the resource group. The name is case insensitive. :type resource_group_name: str + :param expand: Allows for expansion of additional Template Spec + details in the response. Optional. Possible values include: 'versions' + :type expand: str or + ~azure.mgmt.resource.templatespecs.v2019_06_01_preview.models.TemplateSpecExpandKind :param dict custom_headers: headers that will be added to the request :param bool raw: returns the direct response alongside the deserialized response @@ -395,6 +411,8 @@ def prepare_request(next_link=None): # Construct parameters query_parameters = {} + if expand is not None: + query_parameters['$expand'] = self._serialize.query("expand", expand, 'str') query_parameters['api-version'] = self._serialize.query("self.api_version", self.api_version, 'str') else: diff --git a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/version.py b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/version.py index 0d352efbf747..ae889e46ecc4 100644 --- a/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/version.py +++ b/sdk/resources/azure-mgmt-resource/azure/mgmt/resource/version.py @@ -5,4 +5,4 @@ # license information. # -------------------------------------------------------------------------- -VERSION = "10.2.0" +VERSION = "10.3.0" diff --git a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_deployments_basic.yaml b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_deployments_basic.yaml index b7f5c63f433b..b92341af2057 100644 --- a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_deployments_basic.yaml +++ b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_deployments_basic.yaml @@ -9,8 +9,8 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: HEAD @@ -26,7 +26,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:52:56 GMT + - Thu, 29 Oct 2020 05:34:04 GMT expires: - '-1' pragma: @@ -60,8 +60,8 @@ interactions: Content-Type: - application/json; charset=utf-8 User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: PUT @@ -69,10 +69,10 @@ interactions: response: body: string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Resources/deployments/pytestdeployment667e10fe","name":"pytestdeployment667e10fe","type":"Microsoft.Resources/deployments","properties":{"templateHash":"16604828588493152528","parameters":{"location":{"type":"String","value":"West - US"}},"mode":"Incremental","provisioningState":"Accepted","timestamp":"2020-07-01T00:53:02.2529804Z","duration":"PT2.8411394S","correlationId":"5712f503-b01e-4345-a84c-66841b693114","providers":[{"namespace":"Microsoft.Compute","resourceTypes":[{"resourceType":"availabilitySets","locations":["westus"]}]}],"dependencies":[]}}' + US"}},"mode":"Incremental","provisioningState":"Accepted","timestamp":"2020-10-29T05:34:08.9681947Z","duration":"PT2.3300654S","correlationId":"b080e3ec-13d9-445f-89d3-27b0e0a1f184","providers":[{"namespace":"Microsoft.Compute","resourceTypes":[{"resourceType":"availabilitySets","locations":["westus"]}]}],"dependencies":[]}}' headers: azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Resources/deployments/pytestdeployment667e10fe/operationStatuses/08586080421060657702?api-version=2020-06-01 + - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Resources/deployments/pytestdeployment667e10fe/operationStatuses/08585976572388394828?api-version=2020-06-01 cache-control: - no-cache content-length: @@ -80,7 +80,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:53:03 GMT + - Thu, 29 Oct 2020 05:34:09 GMT expires: - '-1' pragma: @@ -104,10 +104,10 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Resources/deployments/pytestdeployment667e10fe/operationStatuses/08586080421060657702?api-version=2020-06-01 + uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Resources/deployments/pytestdeployment667e10fe/operationStatuses/08585976572388394828?api-version=2020-06-01 response: body: string: '{"status":"Succeeded"}' @@ -119,7 +119,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:53:34 GMT + - Thu, 29 Oct 2020 05:34:40 GMT expires: - '-1' pragma: @@ -143,23 +143,23 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python method: GET uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Resources/deployments/pytestdeployment667e10fe?api-version=2020-06-01 response: body: string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Resources/deployments/pytestdeployment667e10fe","name":"pytestdeployment667e10fe","type":"Microsoft.Resources/deployments","properties":{"templateHash":"16604828588493152528","parameters":{"location":{"type":"String","value":"West - US"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2020-07-01T00:53:15.6173187Z","duration":"PT16.2054777S","correlationId":"5712f503-b01e-4345-a84c-66841b693114","providers":[{"namespace":"Microsoft.Compute","resourceTypes":[{"resourceType":"availabilitySets","locations":["westus"]}]}],"dependencies":[],"outputs":{"myparameter":{"type":"Object","value":{"platformUpdateDomainCount":5,"platformFaultDomainCount":3}}},"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Compute/availabilitySets/availabilitySet1"}]}}' + US"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2020-10-29T05:34:13.5518888Z","duration":"PT6.9137595S","correlationId":"b080e3ec-13d9-445f-89d3-27b0e0a1f184","providers":[{"namespace":"Microsoft.Compute","resourceTypes":[{"resourceType":"availabilitySets","locations":["westus"]}]}],"dependencies":[],"outputs":{"myparameter":{"type":"Object","value":{"platformUpdateDomainCount":5,"platformFaultDomainCount":3}}},"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Compute/availabilitySets/availabilitySet1"}]}}' headers: cache-control: - no-cache content-length: - - '1024' + - '1023' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:53:34 GMT + - Thu, 29 Oct 2020 05:34:40 GMT expires: - '-1' pragma: @@ -183,8 +183,8 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET @@ -192,16 +192,16 @@ interactions: response: body: string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Resources/deployments/pytestdeployment667e10fe","name":"pytestdeployment667e10fe","type":"Microsoft.Resources/deployments","properties":{"templateHash":"16604828588493152528","parameters":{"location":{"type":"String","value":"West - US"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2020-07-01T00:53:15.6173187Z","duration":"PT16.2054777S","correlationId":"5712f503-b01e-4345-a84c-66841b693114","providers":[{"namespace":"Microsoft.Compute","resourceTypes":[{"resourceType":"availabilitySets","locations":["westus"]}]}],"dependencies":[],"outputs":{"myparameter":{"type":"Object","value":{"platformUpdateDomainCount":5,"platformFaultDomainCount":3}}},"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Compute/availabilitySets/availabilitySet1"}]}}]}' + US"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2020-10-29T05:34:13.5518888Z","duration":"PT6.9137595S","correlationId":"b080e3ec-13d9-445f-89d3-27b0e0a1f184","providers":[{"namespace":"Microsoft.Compute","resourceTypes":[{"resourceType":"availabilitySets","locations":["westus"]}]}],"dependencies":[],"outputs":{"myparameter":{"type":"Object","value":{"platformUpdateDomainCount":5,"platformFaultDomainCount":3}}},"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Compute/availabilitySets/availabilitySet1"}]}}]}' headers: cache-control: - no-cache content-length: - - '1036' + - '1035' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:53:35 GMT + - Thu, 29 Oct 2020 05:34:40 GMT expires: - '-1' pragma: @@ -225,8 +225,8 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET @@ -234,16 +234,16 @@ interactions: response: body: string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Resources/deployments/pytestdeployment667e10fe","name":"pytestdeployment667e10fe","type":"Microsoft.Resources/deployments","properties":{"templateHash":"16604828588493152528","parameters":{"location":{"type":"String","value":"West - US"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2020-07-01T00:53:15.6173187Z","duration":"PT16.2054777S","correlationId":"5712f503-b01e-4345-a84c-66841b693114","providers":[{"namespace":"Microsoft.Compute","resourceTypes":[{"resourceType":"availabilitySets","locations":["westus"]}]}],"dependencies":[],"outputs":{"myparameter":{"type":"Object","value":{"platformUpdateDomainCount":5,"platformFaultDomainCount":3}}},"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Compute/availabilitySets/availabilitySet1"}]}}' + US"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2020-10-29T05:34:13.5518888Z","duration":"PT6.9137595S","correlationId":"b080e3ec-13d9-445f-89d3-27b0e0a1f184","providers":[{"namespace":"Microsoft.Compute","resourceTypes":[{"resourceType":"availabilitySets","locations":["westus"]}]}],"dependencies":[],"outputs":{"myparameter":{"type":"Object","value":{"platformUpdateDomainCount":5,"platformFaultDomainCount":3}}},"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Compute/availabilitySets/availabilitySet1"}]}}' headers: cache-control: - no-cache content-length: - - '1024' + - '1023' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:53:36 GMT + - Thu, 29 Oct 2020 05:34:41 GMT expires: - '-1' pragma: @@ -267,24 +267,24 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_mgmt_resource_test_deployments_basic667e10fe/deployments/pytestdeployment667e10fe/operations?api-version=2020-06-01 response: body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Resources/deployments/pytestdeployment667e10fe/operations/0A0E2A272432CE40","operationId":"0A0E2A272432CE40","properties":{"provisioningOperation":"Create","provisioningState":"Succeeded","timestamp":"2020-07-01T00:53:14.4208116Z","duration":"PT9.7583608S","trackingId":"d678e9ce-70b1-4765-b1d6-41b1736972be","serviceRequestId":"121e8647-42e3-478f-a121-cb99eaf2df17","statusCode":"OK","targetResource":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Compute/availabilitySets/availabilitySet1","resourceType":"Microsoft.Compute/availabilitySets","resourceName":"availabilitySet1"}}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Resources/deployments/pytestdeployment667e10fe/operations/08586080421060657702","operationId":"08586080421060657702","properties":{"provisioningOperation":"EvaluateDeploymentOutput","provisioningState":"Succeeded","timestamp":"2020-07-01T00:53:15.4111149Z","duration":"PT0.4199734S","trackingId":"3351498b-7002-4281-8776-4fa7069cbb81","statusCode":"OK","statusMessage":null}}]}' + string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Resources/deployments/pytestdeployment667e10fe/operations/0E73F65A6055882F","operationId":"0E73F65A6055882F","properties":{"provisioningOperation":"Create","provisioningState":"Succeeded","timestamp":"2020-10-29T05:34:13.4401173Z","duration":"PT3.6004931S","trackingId":"919a3e82-b777-4ad9-8c5c-67329aaae58a","serviceRequestId":"e4f8452d-53ca-422c-90e1-145fb4891cf1","statusCode":"OK","targetResource":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Compute/availabilitySets/availabilitySet1","resourceType":"Microsoft.Compute/availabilitySets","resourceName":"availabilitySet1"}}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Resources/deployments/pytestdeployment667e10fe/operations/08585976572388394828","operationId":"08585976572388394828","properties":{"provisioningOperation":"EvaluateDeploymentOutput","provisioningState":"Succeeded","timestamp":"2020-10-29T05:34:13.5275033Z","duration":"PT3.6878791S","trackingId":"68ff8b06-e655-41e0-a2e6-743dadd9753c","statusCode":"OK"}}]}' headers: cache-control: - no-cache content-length: - - '1353' + - '1332' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:53:36 GMT + - Thu, 29 Oct 2020 05:34:41 GMT expires: - '-1' pragma: @@ -308,15 +308,15 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_mgmt_resource_test_deployments_basic667e10fe/deployments/pytestdeployment667e10fe/operations/0A0E2A272432CE40?api-version=2020-06-01 + uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_mgmt_resource_test_deployments_basic667e10fe/deployments/pytestdeployment667e10fe/operations/0E73F65A6055882F?api-version=2020-06-01 response: body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Resources/deployments/pytestdeployment667e10fe/operations/0A0E2A272432CE40","operationId":"0A0E2A272432CE40","properties":{"provisioningOperation":"Create","provisioningState":"Succeeded","timestamp":"2020-07-01T00:53:14.4208116Z","duration":"PT9.7583608S","trackingId":"d678e9ce-70b1-4765-b1d6-41b1736972be","serviceRequestId":"121e8647-42e3-478f-a121-cb99eaf2df17","statusCode":"OK","targetResource":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Compute/availabilitySets/availabilitySet1","resourceType":"Microsoft.Compute/availabilitySets","resourceName":"availabilitySet1"}}}' + string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Resources/deployments/pytestdeployment667e10fe/operations/0E73F65A6055882F","operationId":"0E73F65A6055882F","properties":{"provisioningOperation":"Create","provisioningState":"Succeeded","timestamp":"2020-10-29T05:34:13.4401173Z","duration":"PT3.6004931S","trackingId":"919a3e82-b777-4ad9-8c5c-67329aaae58a","serviceRequestId":"e4f8452d-53ca-422c-90e1-145fb4891cf1","statusCode":"OK","targetResource":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_basic667e10fe/providers/Microsoft.Compute/availabilitySets/availabilitySet1","resourceType":"Microsoft.Compute/availabilitySets","resourceName":"availabilitySet1"}}}' headers: cache-control: - no-cache @@ -325,7 +325,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:53:37 GMT + - Thu, 29 Oct 2020 05:34:42 GMT expires: - '-1' pragma: @@ -351,8 +351,8 @@ interactions: Content-Length: - '0' User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: POST @@ -361,8 +361,8 @@ interactions: body: string: '{"error":{"code":"DeploymentCannotBeCancelled","message":"The deployment ''pytestdeployment667e10fe'' cannot be cancelled because it has provisioning - state ''Succeeded'' or it has already expired (expiration time is ''7/8/2020 - 12:52:59 AM'')."}}' + state ''Succeeded'' or it has already expired (expiration time is ''11/5/2020 + 5:34:06 AM'')."}}' headers: cache-control: - no-cache @@ -371,7 +371,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:53:38 GMT + - Thu, 29 Oct 2020 05:34:43 GMT expires: - '-1' pragma: @@ -399,8 +399,8 @@ interactions: Content-Length: - '0' User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: POST @@ -418,7 +418,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:53:38 GMT + - Thu, 29 Oct 2020 05:34:44 GMT expires: - '-1' pragma: @@ -448,8 +448,8 @@ interactions: Content-Length: - '0' User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: DELETE @@ -463,7 +463,7 @@ interactions: content-length: - '0' date: - - Wed, 01 Jul 2020 00:53:41 GMT + - Thu, 29 Oct 2020 05:34:46 GMT expires: - '-1' location: @@ -489,8 +489,8 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python method: GET uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IkRlcGxveW1lbnREZWxldGlvbkpvYi1HTlMtVEVTVDo1Rk1HTVQ6NUZSRVNPVVJDRTo1RlRFU1Q6NUZERVBMT1lNRU5UUzo1RkJBU0lDNjY3RTEwRkUtUFlURVNUREVQTE9ZTUVOVDY2N0UxMEZFLSIsImpvYkxvY2F0aW9uIjoid2VzdHVzIn0?api-version=2020-06-01 response: @@ -500,7 +500,7 @@ interactions: cache-control: - no-cache date: - - Wed, 01 Jul 2020 00:53:57 GMT + - Thu, 29 Oct 2020 05:35:03 GMT expires: - '-1' pragma: diff --git a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_deployments_linked_template.yaml b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_deployments_linked_template.yaml index 5e6a0a3c0068..7c5a4c1b3203 100644 --- a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_deployments_linked_template.yaml +++ b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_deployments_linked_template.yaml @@ -15,18 +15,18 @@ interactions: Content-Type: - application/json; charset=utf-8 User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: PUT uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_mgmt_resource_test_deployments_linked_template27ec152e/providers/Microsoft.Resources/deployments/pytestlinked27ec152e?api-version=2020-06-01 response: body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_linked_template27ec152e/providers/Microsoft.Resources/deployments/pytestlinked27ec152e","name":"pytestlinked27ec152e","type":"Microsoft.Resources/deployments","properties":{"templateLink":{"uri":"https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/101-availability-set-create-3FDs-20UDs/azuredeploy.json","contentVersion":"1.0.0.0"},"templateHash":"17784735771325130982","parametersLink":{"uri":"https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/101-availability-set-create-3FDs-20UDs/azuredeploy.parameters.json"},"parameters":{"location":{"type":"String","value":"westus"}},"mode":"Incremental","provisioningState":"Accepted","timestamp":"2020-07-01T00:54:09.2041255Z","duration":"PT1.3683499S","correlationId":"b2e7c7ad-3c2f-481f-8111-8de852053c13","providers":[{"namespace":"Microsoft.Compute","resourceTypes":[{"resourceType":"availabilitySets","locations":["westus"]}]}],"dependencies":[]}}' + string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_linked_template27ec152e/providers/Microsoft.Resources/deployments/pytestlinked27ec152e","name":"pytestlinked27ec152e","type":"Microsoft.Resources/deployments","properties":{"templateLink":{"uri":"https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/101-availability-set-create-3FDs-20UDs/azuredeploy.json","contentVersion":"1.0.0.0"},"templateHash":"12128152019257086208","parametersLink":{"uri":"https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/101-availability-set-create-3FDs-20UDs/azuredeploy.parameters.json"},"parameters":{"location":{"type":"String","value":"westus"}},"mode":"Incremental","provisioningState":"Accepted","timestamp":"2020-10-29T05:35:15.1234575Z","duration":"PT1.0383246S","correlationId":"4045ceac-8f36-4001-bfa7-2fb9b25379c9","providers":[{"namespace":"Microsoft.Compute","resourceTypes":[{"resourceType":"availabilitySets","locations":["westus"]}]}],"dependencies":[]}}' headers: azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_mgmt_resource_test_deployments_linked_template27ec152e/providers/Microsoft.Resources/deployments/pytestlinked27ec152e/operationStatuses/08586080420376418308?api-version=2020-06-01 + - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_mgmt_resource_test_deployments_linked_template27ec152e/providers/Microsoft.Resources/deployments/pytestlinked27ec152e/operationStatuses/08585976571713924753?api-version=2020-06-01 cache-control: - no-cache content-length: @@ -34,7 +34,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:54:09 GMT + - Thu, 29 Oct 2020 05:35:15 GMT expires: - '-1' pragma: @@ -58,10 +58,10 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_mgmt_resource_test_deployments_linked_template27ec152e/providers/Microsoft.Resources/deployments/pytestlinked27ec152e/operationStatuses/08586080420376418308?api-version=2020-06-01 + uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_mgmt_resource_test_deployments_linked_template27ec152e/providers/Microsoft.Resources/deployments/pytestlinked27ec152e/operationStatuses/08585976571713924753?api-version=2020-06-01 response: body: string: '{"status":"Succeeded"}' @@ -73,7 +73,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:54:40 GMT + - Thu, 29 Oct 2020 05:35:46 GMT expires: - '-1' pragma: @@ -97,22 +97,22 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python method: GET uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_mgmt_resource_test_deployments_linked_template27ec152e/providers/Microsoft.Resources/deployments/pytestlinked27ec152e?api-version=2020-06-01 response: body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_linked_template27ec152e/providers/Microsoft.Resources/deployments/pytestlinked27ec152e","name":"pytestlinked27ec152e","type":"Microsoft.Resources/deployments","properties":{"templateLink":{"uri":"https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/101-availability-set-create-3FDs-20UDs/azuredeploy.json","contentVersion":"1.0.0.0"},"templateHash":"17784735771325130982","parametersLink":{"uri":"https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/101-availability-set-create-3FDs-20UDs/azuredeploy.parameters.json"},"parameters":{"location":{"type":"String","value":"westus"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2020-07-01T00:54:17.1212109Z","duration":"PT9.2854353S","correlationId":"b2e7c7ad-3c2f-481f-8111-8de852053c13","providers":[{"namespace":"Microsoft.Compute","resourceTypes":[{"resourceType":"availabilitySets","locations":["westus"]}]}],"dependencies":[],"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_linked_template27ec152e/providers/Microsoft.Compute/availabilitySets/availabilitySet1"}]}}' + string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_linked_template27ec152e/providers/Microsoft.Resources/deployments/pytestlinked27ec152e","name":"pytestlinked27ec152e","type":"Microsoft.Resources/deployments","properties":{"templateLink":{"uri":"https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/101-availability-set-create-3FDs-20UDs/azuredeploy.json","contentVersion":"1.0.0.0"},"templateHash":"12128152019257086208","parametersLink":{"uri":"https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/101-availability-set-create-3FDs-20UDs/azuredeploy.parameters.json"},"parameters":{"location":{"type":"String","value":"westus"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2020-10-29T05:35:25.4246182Z","duration":"PT11.3394853S","correlationId":"4045ceac-8f36-4001-bfa7-2fb9b25379c9","providers":[{"namespace":"Microsoft.Compute","resourceTypes":[{"resourceType":"availabilitySets","locations":["westus"]}]}],"dependencies":[],"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_linked_template27ec152e/providers/Microsoft.Compute/availabilitySets/availabilitySet1"}]}}' headers: cache-control: - no-cache content-length: - - '1271' + - '1272' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:54:40 GMT + - Thu, 29 Oct 2020 05:35:46 GMT expires: - '-1' pragma: @@ -136,24 +136,24 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_mgmt_resource_test_deployments_linked_template27ec152e/providers/Microsoft.Resources/deployments/?api-version=2020-06-01 response: body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_linked_template27ec152e/providers/Microsoft.Resources/deployments/pytestlinked27ec152e","name":"pytestlinked27ec152e","type":"Microsoft.Resources/deployments","properties":{"templateLink":{"uri":"https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/101-availability-set-create-3FDs-20UDs/azuredeploy.json","contentVersion":"1.0.0.0"},"templateHash":"17784735771325130982","parametersLink":{"uri":"https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/101-availability-set-create-3FDs-20UDs/azuredeploy.parameters.json"},"parameters":{"location":{"type":"String","value":"westus"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2020-07-01T00:54:17.1212109Z","duration":"PT9.2854353S","correlationId":"b2e7c7ad-3c2f-481f-8111-8de852053c13","providers":[{"namespace":"Microsoft.Compute","resourceTypes":[{"resourceType":"availabilitySets","locations":["westus"]}]}],"dependencies":[],"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_linked_template27ec152e/providers/Microsoft.Compute/availabilitySets/availabilitySet1"}]}}]}' + string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_linked_template27ec152e/providers/Microsoft.Resources/deployments/pytestlinked27ec152e","name":"pytestlinked27ec152e","type":"Microsoft.Resources/deployments","properties":{"templateLink":{"uri":"https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/101-availability-set-create-3FDs-20UDs/azuredeploy.json","contentVersion":"1.0.0.0"},"templateHash":"12128152019257086208","parametersLink":{"uri":"https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/101-availability-set-create-3FDs-20UDs/azuredeploy.parameters.json"},"parameters":{"location":{"type":"String","value":"westus"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2020-10-29T05:35:25.4246182Z","duration":"PT11.3394853S","correlationId":"4045ceac-8f36-4001-bfa7-2fb9b25379c9","providers":[{"namespace":"Microsoft.Compute","resourceTypes":[{"resourceType":"availabilitySets","locations":["westus"]}]}],"dependencies":[],"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_linked_template27ec152e/providers/Microsoft.Compute/availabilitySets/availabilitySet1"}]}}]}' headers: cache-control: - no-cache content-length: - - '1283' + - '1284' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:54:41 GMT + - Thu, 29 Oct 2020 05:35:46 GMT expires: - '-1' pragma: @@ -177,24 +177,24 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_mgmt_resource_test_deployments_linked_template27ec152e/providers/Microsoft.Resources/deployments/pytestlinked27ec152e?api-version=2020-06-01 response: body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_linked_template27ec152e/providers/Microsoft.Resources/deployments/pytestlinked27ec152e","name":"pytestlinked27ec152e","type":"Microsoft.Resources/deployments","properties":{"templateLink":{"uri":"https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/101-availability-set-create-3FDs-20UDs/azuredeploy.json","contentVersion":"1.0.0.0"},"templateHash":"17784735771325130982","parametersLink":{"uri":"https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/101-availability-set-create-3FDs-20UDs/azuredeploy.parameters.json"},"parameters":{"location":{"type":"String","value":"westus"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2020-07-01T00:54:17.1212109Z","duration":"PT9.2854353S","correlationId":"b2e7c7ad-3c2f-481f-8111-8de852053c13","providers":[{"namespace":"Microsoft.Compute","resourceTypes":[{"resourceType":"availabilitySets","locations":["westus"]}]}],"dependencies":[],"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_linked_template27ec152e/providers/Microsoft.Compute/availabilitySets/availabilitySet1"}]}}' + string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_linked_template27ec152e/providers/Microsoft.Resources/deployments/pytestlinked27ec152e","name":"pytestlinked27ec152e","type":"Microsoft.Resources/deployments","properties":{"templateLink":{"uri":"https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/101-availability-set-create-3FDs-20UDs/azuredeploy.json","contentVersion":"1.0.0.0"},"templateHash":"12128152019257086208","parametersLink":{"uri":"https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/101-availability-set-create-3FDs-20UDs/azuredeploy.parameters.json"},"parameters":{"location":{"type":"String","value":"westus"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2020-10-29T05:35:25.4246182Z","duration":"PT11.3394853S","correlationId":"4045ceac-8f36-4001-bfa7-2fb9b25379c9","providers":[{"namespace":"Microsoft.Compute","resourceTypes":[{"resourceType":"availabilitySets","locations":["westus"]}]}],"dependencies":[],"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_linked_template27ec152e/providers/Microsoft.Compute/availabilitySets/availabilitySet1"}]}}' headers: cache-control: - no-cache content-length: - - '1271' + - '1272' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:54:41 GMT + - Thu, 29 Oct 2020 05:35:47 GMT expires: - '-1' pragma: diff --git a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_deployments_linked_template_error.yaml b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_deployments_linked_template_error.yaml index a92f2627d0b2..67604e762d8e 100644 --- a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_deployments_linked_template_error.yaml +++ b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_deployments_linked_template_error.yaml @@ -15,8 +15,8 @@ interactions: Content-Type: - application/json; charset=utf-8 User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: PUT @@ -25,7 +25,7 @@ interactions: body: string: '{"error":{"code":"InvalidTemplateDeployment","message":"The template deployment ''pytestlinkedafa117b7'' is not valid according to the validation - procedure. The tracking id is ''6b97519d-c19f-4186-ab27-c86faa9b745d''. See + procedure. The tracking id is ''34973261-8e96-479b-b79d-875d8197ea4d''. See inner errors for details.","details":[{"code":"InvalidDomainNameLabel","message":"The domain name label GEN-UNIQUE is invalid. It must conform to the following regular expression: ^[a-z][a-z0-9-]{1,61}[a-z0-9]$.","details":[]}]}}' @@ -37,7 +37,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:54:57 GMT + - Thu, 29 Oct 2020 05:35:57 GMT expires: - '-1' pragma: @@ -49,7 +49,7 @@ interactions: x-ms-failure-cause: - gateway x-ms-ratelimit-remaining-subscription-writes: - - '1199' + - '1198' status: code: 400 message: Bad Request diff --git a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_provider_locations.yaml b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_provider_locations.yaml index c4ce83f308ba..7922a6355806 100644 --- a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_provider_locations.yaml +++ b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_provider_locations.yaml @@ -9,8 +9,8 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET @@ -25,7 +25,8 @@ interactions: Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"ishostnameavailable","locations":["Central + Central","Switzerland North","Germany West Central","Norway East","UAE North","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"ishostnameavailable","locations":["Central US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West US","East US","Japan West","Japan East","East Asia","East US 2","North Central US","South Central US","Brazil South","Australia East","Australia Southeast","West @@ -33,7 +34,8 @@ interactions: Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"validate","locations":["Central + Central","Switzerland North","Germany West Central","Norway East","UAE North","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"validate","locations":["Central US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West US","East US","Japan West","Japan East","East Asia","East US 2","North Central US","South Central US","Brazil South","Australia East","Australia Southeast","West @@ -41,7 +43,8 @@ interactions: Central US","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"isusernameavailable","locations":["Central + North","Germany West Central","Norway East","UAE North","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"isusernameavailable","locations":["Central US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West US","East US","Japan West","Japan East","East Asia","East US 2","North Central US","South Central US","Brazil South","Australia East","Australia Southeast","West @@ -49,7 +52,8 @@ interactions: Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"sourceControls","locations":["Central + Central","Switzerland North","Germany West Central","Norway East","UAE North","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"sourceControls","locations":["Central US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West US","East US","Japan West","Japan East","East Asia","East US 2","North Central US","South Central US","Brazil South","Australia East","Australia Southeast","West @@ -57,7 +61,8 @@ interactions: Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"availableStacks","locations":["Central + Central","Switzerland North","Germany West Central","Norway East","UAE North","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"availableStacks","locations":["Central US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West US","East US","Japan West","Japan East","East Asia","East US 2","North Central US","South Central US","Brazil South","Australia East","Australia Southeast","West @@ -65,9 +70,13 @@ interactions: Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"staticSites","locations":["West - US 2","Central US","East US 2","West Europe","East Asia","West US"],"apiVersions":["2019-12-01-preview","2019-08-01"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"listSitesAssignedToHostName","locations":["Central + Central","Switzerland North","Germany West Central","Norway East","UAE North","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"staticSites","locations":["West + US 2","Central US","East US 2","West Europe","East Asia","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2020-06-01","2019-12-01-preview","2019-08-01"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"locations/previewStaticSiteWorkflowFile","locations":["West + US 2","Central US","East US 2","West Europe","East Asia","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2020-06-01","2019-12-01-preview","2019-08-01"],"defaultApiVersion":"2020-06-01","capabilities":"None"},{"resourceType":"listSitesAssignedToHostName","locations":["Central US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West US","East US","Japan West","Japan East","East Asia","East US 2","North Central US","South Central US","Brazil South","Australia East","Australia Southeast","West @@ -75,64 +84,70 @@ interactions: Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"locations/getNetworkPolicies","locations":["Central + Central","Switzerland North","Germany West Central","Norway East","UAE North","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"locations/getNetworkPolicies","locations":["Central US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West US","East US","Japan West","Japan East","East Asia","East US 2","North Central US","South Central US","Brazil South","Australia East","Australia Southeast","West India","Central India","South India","Canada Central","Canada East","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central US (Stage)","France Central","West Central - US","East Asia (Stage)","North Central US (Stage)"],"apiVersions":["2019-08-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"locations/operations","locations":["South + US","East Asia (Stage)","North Central US (Stage)","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"locations/operations","locations":["South Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","Switzerland + India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland North","North Central US","UK West","Australia Southeast","Korea South","Canada Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)"],"apiVersions":["2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2019-01-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["South + US (Stage)","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2019-01-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["South Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","Switzerland + India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland North","North Central US","UK West","Australia Southeast","Korea South","Canada Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)"],"apiVersions":["2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2019-01-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"sites/networkConfig","locations":["South + US (Stage)","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2019-01-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"sites/networkConfig","locations":["South Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","East Asia","Japan - East","Australia East","Brazil South","Southeast Asia","Japan West","Central - India","UK South","Canada East","Korea Central","France Central","North Europe","East - US","West India","East US 2","Australia Central","Germany West Central","Norway - East","Switzerland North","North Central US","UK West","Australia Southeast","Korea - South","Canada Central","West Europe","South India","West Central US","East - Asia (Stage)","North Central US (Stage)","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"sites/slots/networkConfig","locations":["South + US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia + East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada + East","Korea Central","France Central","North Europe","West India","East US + 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"sites/slots/networkConfig","locations":["South Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","East Asia","Japan - East","Australia East","Brazil South","Southeast Asia","Japan West","Central - India","UK South","Canada East","Korea Central","France Central","North Europe","East - US","West India","East US 2","Australia Central","Germany West Central","Norway - East","Switzerland North","North Central US","UK West","Australia Southeast","Korea - South","Canada Central","West Europe","South India","West Central US","East - Asia (Stage)","North Central US (Stage)","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"sites/hostNameBindings","locations":["South + US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia + East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada + East","Korea Central","France Central","North Europe","West India","East US + 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"sites/hostNameBindings","locations":["South Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","East Asia","Japan - East","Australia East","Brazil South","Southeast Asia","Japan West","Central - India","UK South","Canada East","Korea Central","France Central","North Europe","East - US","West India","East US 2","Australia Central","Germany West Central","Norway - East","Switzerland North","North Central US","UK West","Australia Southeast","Korea - South","Canada Central","West Europe","South India","West Central US","East - Asia (Stage)","North Central US (Stage)","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"sites/slots/hostNameBindings","locations":["South + US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia + East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada + East","Korea Central","France Central","North Europe","West India","East US + 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"sites/slots/hostNameBindings","locations":["South Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","East Asia","Japan - East","Australia East","Brazil South","Southeast Asia","Japan West","Central - India","UK South","Canada East","Korea Central","France Central","North Europe","East - US","West India","East US 2","Australia Central","Germany West Central","Norway - East","Switzerland North","North Central US","UK West","Australia Southeast","Korea - South","Canada Central","West Europe","South India","West Central US","East - Asia (Stage)","North Central US (Stage)","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"operations","locations":["Central + US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia + East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada + East","Korea Central","France Central","North Europe","West India","East US + 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"operations","locations":["Central US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West US","East US","Japan West","Japan East","East Asia","East US 2","North Central US","South Central US","Brazil South","Australia East","Australia Southeast","West @@ -140,87 +155,98 @@ interactions: Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"certificates","locations":["South + Central","Switzerland North","Germany West Central","Norway East","UAE North","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"certificates","locations":["South Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","East Asia","Japan - East","Australia East","Brazil South","Southeast Asia","Japan West","Central - India","UK South","Canada East","Korea Central","France Central","North Europe","East - US","West India","East US 2","Australia Central","Germany West Central","Norway - East","Switzerland North","North Central US","UK West","Australia Southeast","Korea - South","Canada Central","West Europe","South India","West Central US","East - Asia (Stage)","North Central US (Stage)","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossSubscriptionResourceMove, + US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia + East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada + East","Korea Central","France Central","North Europe","West India","East US + 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","East Asia","East US 2 EUAP","Central US EUAP","West US","Central + US","West US 2","East US"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"serverFarms","locations":["South Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","East US","West India","East US 2","Australia - Central","Germany West Central","Norway East","Switzerland North","North Central - US","UK West","Australia Southeast","Korea South","Canada Central","West Europe","South - India","West Central US","East Asia (Stage)","North Central US (Stage)","East - Asia","Japan East","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, + Central","France Central","North Europe","West India","East US 2","Australia + Central","Germany West Central","Norway East","UAE North","Switzerland North","North + Central US","UK West","Australia Southeast","Korea South","Canada Central","West + Europe","South India","West Central US","East Asia (Stage)","North Central + US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central + US","West US 2","East US","East Asia"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"sites","locations":["South Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","East US","West India","East US 2","Australia - Central","Germany West Central","Norway East","Switzerland North","North Central - US","UK West","Australia Southeast","Korea South","Canada Central","West Europe","South - India","West Central US","East Asia (Stage)","North Central US (Stage)","East - Asia","Japan East","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, + Central","France Central","North Europe","West India","East US 2","Australia + Central","Germany West Central","Norway East","UAE North","Switzerland North","North + Central US","UK West","Australia Southeast","Korea South","Canada Central","West + Europe","South India","West Central US","East Asia (Stage)","North Central + US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central + US","West US 2","East US","East Asia"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, SupportsLocation"},{"resourceType":"sites/slots","locations":["South Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","East US","West India","East US 2","Australia - Central","Germany West Central","Norway East","Switzerland North","North Central - US","UK West","Australia Southeast","Korea South","Canada Central","West Europe","South - India","West Central US","East Asia (Stage)","North Central US (Stage)","East - Asia","Japan East","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, + Central","France Central","North Europe","West India","East US 2","Australia + Central","Germany West Central","Norway East","UAE North","Switzerland North","North + Central US","UK West","Australia Southeast","Korea South","Canada Central","West + Europe","South India","West Central US","East Asia (Stage)","North Central + US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central + US","West US 2","East US","East Asia"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"runtimes","locations":[],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"recommendations","locations":[],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"resourceHealthMetadata","locations":[],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"georegions","locations":[],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"sites/premieraddons","locations":["South + SupportsLocation"},{"resourceType":"runtimes","locations":[],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"recommendations","locations":[],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"resourceHealthMetadata","locations":[],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"georegions","locations":[],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"sites/premieraddons","locations":["South Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","East Asia","Japan - East","Australia East","Brazil South","Southeast Asia","Japan West","Central - India","UK South","Canada East","Korea Central","France Central","North Europe","East - US","West India","East US 2","Australia Central","Germany West Central","Norway - East","Switzerland North","North Central US","UK West","Australia Southeast","Korea - South","Canada Central","West Europe","South India","West Central US","East - Asia (Stage)","North Central US (Stage)","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, + US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia + East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada + East","Korea Central","France Central","North Europe","West India","East US + 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","East Asia","East US 2 EUAP","Central US EUAP","West US","Central + US","West US 2","East US"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"hostingEnvironments","locations":["South Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","East US 2","East - US","UK South","Southeast Asia","North Europe","Japan East","West Europe","East - Asia","Australia East","Brazil South","Japan West","Central India","Canada - East","Korea Central","France Central","West India","Australia Central","Germany - West Central","Norway East","Switzerland North","North Central US","UK West","Australia - Southeast","Korea South","Canada Central","South India","West Central US","East - Asia (Stage)","North Central US (Stage)","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"zoneMappings":[{"location":"East - US 2","zones":["3","1","2"]},{"location":"Central US","zones":["3","1","2"]},{"location":"West - Europe","zones":["3","1","2"]},{"location":"France Central","zones":["3","1","2"]},{"location":"Southeast - Asia","zones":["3","1","2"]},{"location":"West US 2","zones":["3","1","2"]},{"location":"North - Europe","zones":["3","1","2"]},{"location":"East US","zones":["3","1","2"]},{"location":"UK - South","zones":["3","1","2"]},{"location":"Japan East","zones":["3","1","2"]},{"location":"Australia - East","zones":[]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":[]},{"location":"Canada Central","zones":[]}],"capabilities":"SupportsTags, + US 2 (Stage)","Central US (Stage)","South Africa North","East US 2","UK South","Southeast + Asia","North Europe","Japan East","West Europe","Australia East","Brazil South","Japan + West","Central India","Canada East","Korea Central","France Central","West + India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","South India","West Central US","East Asia (Stage)","North Central + US (Stage)","East Asia","West US","Central US","West US 2","East US","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"zoneMappings":[{"location":"East + US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West + Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central + US EUAP","zones":[]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast + Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North + Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK + South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia + East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South + Central US","zones":[]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany + West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]}],"capabilities":"SupportsTags, SupportsLocation"},{"resourceType":"hostingEnvironments/multiRolePools","locations":["South Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","East Asia","Japan - East","Australia East","Brazil South","Southeast Asia","Japan West","Central - India","UK South","Canada East","Korea Central","France Central","North Europe","East - US","West India","East US 2","Australia Central","Germany West Central","Norway - East","Switzerland North","North Central US","UK West","Australia Southeast","Korea - South","Canada Central","West Europe","South India","West Central US","East - Asia (Stage)","North Central US (Stage)","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"hostingEnvironments/workerPools","locations":["South + US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia + East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada + East","Korea Central","France Central","North Europe","West India","East US + 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"hostingEnvironments/workerPools","locations":["South Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","East Asia","Japan - East","Australia East","Brazil South","Southeast Asia","Japan West","Central - India","UK South","Canada East","Korea Central","France Central","North Europe","East - US","West India","East US 2","Australia Central","Germany West Central","Norway - East","Switzerland North","North Central US","UK West","Australia Southeast","Korea - South","Canada Central","West Europe","South India","West Central US","East - Asia (Stage)","North Central US (Stage)","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"kubeEnvironments","locations":["North - Central US (Stage)"],"apiVersions":["2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, + US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia + East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada + East","Korea Central","France Central","North Europe","West India","East US + 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"kubeEnvironments","locations":["North + Central US (Stage)"],"apiVersions":["2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"deploymentLocations","locations":["Central US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West US","East US","Japan West","Japan East","East Asia","East US 2","North Central @@ -229,88 +255,109 @@ interactions: Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"deletedSites","locations":["South + North","Germany West Central","Norway East","UAE North"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"deletedSites","locations":["South Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","East Asia","Japan - East","Australia East","Brazil South","Southeast Asia","Japan West","Central - India","UK South","Canada East","Korea Central","France Central","North Europe","East - US","West India","East US 2","Australia Central","Germany West Central","Norway - East","Switzerland North","North Central US","UK West","Australia Southeast","Korea - South","Canada Central","West Europe","South India","West Central US","East - Asia (Stage)","North Central US (Stage)","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"locations/deletedSites","locations":["South + US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia + East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada + East","Korea Central","France Central","North Europe","West India","East US + 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"locations/deletedSites","locations":["South Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","East Asia","Japan - East","Australia East","Brazil South","Southeast Asia","Japan West","Central - India","UK South","Canada East","Korea Central","France Central","North Europe","East - US","West India","East US 2","Australia Central","Germany West Central","Norway - East","Switzerland North","North Central US","UK West","Australia Southeast","Korea - South","Canada Central","West Europe","South India","West Central US","East - Asia (Stage)","North Central US (Stage)","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"ishostingenvironmentnameavailable","locations":[],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["South + US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia + East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada + East","Korea Central","France Central","North Europe","West India","East US + 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"ishostingenvironmentnameavailable","locations":[],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["South Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","East US","West India","East US 2","Australia - Central","Germany West Central","Norway East","Switzerland North","North Central - US","UK West","Australia Southeast","Korea South","Canada Central","West Europe","South - India","West Central US","East Asia (Stage)","North Central US (Stage)","East - Asia","Japan East","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-11-01","2016-08-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"connections","locations":["North + Central","France Central","North Europe","West India","East US 2","Australia + Central","Germany West Central","Norway East","UAE North","Switzerland North","North + Central US","UK West","Australia Southeast","Korea South","Canada Central","West + Europe","South India","West Central US","East Asia (Stage)","North Central + US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central + US","West US 2","East US","East Asia"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-11-01","2016-08-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"connections","locations":["North Central US","Central US","South Central US","North Europe","West Europe","East Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan East","Brazil South","Australia East","Australia Southeast","South India","Central India","West India","West US 2","West Central US","Canada Central","Canada East","UK South","UK West","France Central","France South","Korea Central","Korea - South","South Africa West","South Africa North","UAE Central"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, + South","South Africa West","South Africa North","UAE Central","Switzerland + North","Germany North","Germany West Central","Central US EUAP","East US 2 + EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"customApis","locations":["North Central US","Central US","South Central US","North Europe","West Europe","East Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan East","Brazil South","Australia East","Australia Southeast","South India","Central India","West India","West US 2","West Central US","Canada Central","Canada East","UK South","UK West","France Central","France South","Korea Central","Korea - South","South Africa West","South Africa North","UAE Central"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, + South","South Africa West","South Africa North","UAE Central","Switzerland + North","Germany North","Germany West Central","Central US EUAP","East US 2 + EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"locations/listWsdlInterfaces","locations":["North Central US","Central US","South Central US","North Europe","West Europe","East Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan East","Brazil South","Australia East","Australia Southeast","South India","Central India","West India","West US 2","West Central US","Canada Central","Canada East","UK South","UK West","France Central","France South","Korea Central","Korea - South","South Africa West","South Africa North","UAE Central"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"locations/extractApiDefinitionFromWsdl","locations":["North + South","South Africa West","South Africa North","UAE Central","Switzerland + North","Germany North","Germany West Central","Central US EUAP","East US 2 + EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"locations/extractApiDefinitionFromWsdl","locations":["North Central US","Central US","South Central US","North Europe","West Europe","East Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan East","Brazil South","Australia East","Australia Southeast","South India","Central India","West India","West US 2","West Central US","Canada Central","Canada East","UK South","UK West","France Central","France South","Korea Central","Korea - South","South Africa West","South Africa North","UAE Central"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"locations/managedApis","locations":["North + South","South Africa West","South Africa North","UAE Central","Switzerland + North","Germany North","Germany West Central","Central US EUAP","East US 2 + EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"locations/managedApis","locations":["North Central US","Central US","South Central US","North Europe","West Europe","East Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan East","Brazil South","Australia East","Australia Southeast","South India","Central India","West India","West US 2","West Central US","Canada Central","Canada East","UK South","UK West","France Central","France South","Korea Central","Korea - South","South Africa West","South Africa North","UAE Central"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"locations/runtimes","locations":["North + South","South Africa West","South Africa North","UAE Central","Switzerland + North","Germany North","Germany West Central","Central US EUAP","East US 2 + EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"locations/runtimes","locations":["North Central US","Central US","South Central US","North Europe","West Europe","East Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan East","Brazil South","Australia East","Australia Southeast","South India","Central India","West India","West US 2","West Central US","Canada Central","Canada East","UK South","UK West","France Central","France South","Korea Central","Korea - South","South Africa West","South Africa North","UAE Central"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"locations/apiOperations","locations":["North + South","South Africa West","South Africa North","UAE Central","Switzerland + North","Germany North","Germany West Central","Central US EUAP","East US 2 + EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"locations/apiOperations","locations":["North Central US","Central US","South Central US","North Europe","West Europe","East Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan East","Brazil South","Australia East","Australia Southeast","South India","Central India","West India","West US 2","West Central US","Canada Central","Canada East","UK South","UK West","France Central","France South","Korea Central","Korea - South","South Africa West","South Africa North","UAE Central"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"connectionGateways","locations":["North + South","South Africa West","South Africa North","UAE Central","Switzerland + North","Germany North","Germany West Central","Central US EUAP","East US 2 + EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"connectionGateways","locations":["North Central US","Central US","South Central US","North Europe","West Europe","East Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan East","Brazil South","Australia East","Australia Southeast","South India","Central India","West India","West US 2","West Central US","Canada Central","Canada East","UK South","UK West","France Central","France South","Korea Central","Korea - South","South Africa West","South Africa North","UAE Central"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, + South","South Africa West","South Africa North","UAE Central","Switzerland + North","Germany North","Germany West Central","Central US EUAP","East US 2 + EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations/connectionGatewayInstallations","locations":["North Central US","Central US","South Central US","North Europe","West Europe","East Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan East","Brazil South","Australia East","Australia Southeast","South India","Central India","West India","West US 2","West Central US","Canada Central","Canada East","UK South","UK West","France Central","France South","Korea Central","Korea - South","South Africa West","South Africa North","UAE Central"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["Central + South","South Africa West","South Africa North","UAE Central","Switzerland + North","Germany North","Germany West Central","Central US EUAP","East US 2 + EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["Central US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West US","East US","Japan West","Japan East","East Asia","East US 2","North Central US","South Central US","Brazil South","Australia East","Australia Southeast","West @@ -318,7 +365,8 @@ interactions: Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"billingMeters","locations":["Central + Central","Switzerland North","Germany West Central","Norway East","UAE North","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"billingMeters","locations":["Central US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West US","East US","Japan West","Japan East","East Asia","East US 2","North Central US","South Central US","Brazil South","Australia East","Australia Southeast","West @@ -326,7 +374,8 @@ interactions: Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"verifyHostingEnvironmentVnet","locations":["Central + Central","Switzerland North","Germany West Central","Norway East","UAE North","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"verifyHostingEnvironmentVnet","locations":["Central US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West US","East US","Japan West","Japan East","East Asia","East US 2","North Central US","South Central US","Brazil South","Australia East","Australia Southeast","West @@ -334,51 +383,73 @@ interactions: Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"serverFarms/eventGridFilters","locations":["South + Central","Switzerland North","Germany West Central","Norway East","UAE North","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"serverFarms/eventGridFilters","locations":["South Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","East US","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","West US","Central - US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"capabilities":"None"},{"resourceType":"sites/eventGridFilters","locations":["South + Central","France Central","North Europe","West India","East US 2","Australia + Central","Germany West Central","Norway West","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central + US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"capabilities":"None"},{"resourceType":"sites/eventGridFilters","locations":["South Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","East US","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","West US","Central - US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"capabilities":"None"},{"resourceType":"sites/slots/eventGridFilters","locations":["South + Central","France Central","North Europe","West India","East US 2","Australia + Central","Germany West Central","Norway West","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central + US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"capabilities":"None"},{"resourceType":"sites/slots/eventGridFilters","locations":["South Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","East US","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","West US","Central - US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"capabilities":"None"},{"resourceType":"hostingEnvironments/eventGridFilters","locations":["North + Central","France Central","North Europe","West India","East US 2","Australia + Central","Germany West Central","Norway West","Norway East","Switzerland North","UAE + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central + US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"capabilities":"None"},{"resourceType":"hostingEnvironments/eventGridFilters","locations":["North Central US","South Central US","Brazil South","Canada East","UK West","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central - US (Stage)","South Africa North","East US 2","East US","UK South","Southeast - Asia","North Europe","Japan East","West Europe","East Asia","Australia East","Japan - West","Central India","Korea Central","France Central","West India","Australia - Central","Germany West Central","Norway East","Switzerland North","Australia - Southeast","Korea South","Canada Central","South India","West Central US","East - Asia (Stage)","North Central US (Stage)","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"}' + US (Stage)","South Africa North","East US 2","UK South","Southeast Asia","North + Europe","Japan East","West Europe","Australia East","Japan West","Central + India","Korea Central","France Central","West India","Australia Central","Germany + West Central","Norway East","Switzerland North","UAE North","Australia Southeast","Korea + South","Canada Central","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"capabilities":"None"},{"resourceType":"serverFarms/firstPartyApps","locations":["South + Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East + US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia + East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK + South","Canada East","Korea Central","France Central","North Europe","West + US 2","East US","West India","East US 2","Australia Central","Germany West + Central","Norway West","Norway East","UAE North","Switzerland North","North + Central US","UK West","Australia Southeast","Korea South","Canada Central","West + Europe","South India","West Central US","East Asia (Stage)","North Central + US (Stage)","East Asia","Japan East","South Africa West","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"capabilities":"None"},{"resourceType":"serverFarms/firstPartyApps/keyVaultSettings","locations":["South + Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East + US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia + East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK + South","Canada East","Korea Central","France Central","North Europe","West + US 2","East US","West India","East US 2","Australia Central","Germany West + Central","Norway West","Norway East","UAE North","Switzerland North","North + Central US","UK West","Australia Southeast","Korea South","Canada Central","West + Europe","South India","West Central US","East Asia (Stage)","North Central + US (Stage)","East Asia","Japan East","South Africa West","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"}' headers: cache-control: - no-cache content-length: - - '53167' + - '58747' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:55:05 GMT + - Thu, 29 Oct 2020 05:36:02 GMT expires: - '-1' pragma: diff --git a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_provider_registration.yaml b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_provider_registration.yaml index 3954bb3521bd..a3621d37fb17 100644 --- a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_provider_registration.yaml +++ b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_provider_registration.yaml @@ -11,8 +11,8 @@ interactions: Content-Length: - '0' User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: POST @@ -24,23 +24,23 @@ interactions: Asia","East Asia","North Central US","South Central US","Central US","Japan West","Japan East","Korea Central","Australia East","Australia Southeast","Brazil South","Central India","West Central US","Canada Central","UK South","France - Central","South Africa North","UAE North"],"apiVersions":["2020-03-13","2019-10-01-Preview","2015-08-19","2015-02-28","2014-07-31-Preview"],"capabilities":"CrossResourceGroupResourceMove, + Central","South Africa North","UAE North","East US 2 EUAP"],"apiVersions":["2020-08-01-Preview","2020-08-01","2020-03-13","2019-10-01-Preview","2015-08-19","2015-02-28","2014-07-31-Preview"],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"checkServiceNameAvailability","locations":[],"apiVersions":["2015-02-28","2014-07-31-Preview"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2020-03-13","2019-10-01-Preview","2015-08-19"],"capabilities":"None"},{"resourceType":"resourceHealthMetadata","locations":["West + SupportsLocation"},{"resourceType":"checkServiceNameAvailability","locations":[],"apiVersions":["2015-02-28","2014-07-31-Preview"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2020-08-01-Preview","2020-08-01","2020-03-13","2019-10-01-Preview","2015-08-19"],"capabilities":"None"},{"resourceType":"resourceHealthMetadata","locations":["West US","West US 2","East US","East US 2","North Europe","West Europe","Southeast Asia","East Asia","North Central US","South Central US","Central US","Japan West","Japan East","Korea Central","Australia East","Australia Southeast","Brazil South","Central India","West Central US","Canada Central","UK South","France - Central","South Africa North","UAE North"],"apiVersions":["2020-03-13","2019-10-01-Preview","2015-08-19"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-03-13","2019-10-01-Preview","2015-08-19","2015-02-28"],"capabilities":"None"}],"registrationState":"Unregistering","registrationPolicy":"RegistrationRequired"}' + Central","South Africa North","UAE North","East US 2 EUAP"],"apiVersions":["2020-08-01-Preview","2020-08-01","2020-03-13","2019-10-01-Preview","2015-08-19"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-08-01-Preview","2020-08-01","2020-03-13","2019-10-01-Preview","2015-08-19","2015-02-28"],"capabilities":"None"}],"registrationState":"Unregistering","registrationPolicy":"RegistrationRequired"}' headers: cache-control: - no-cache content-length: - - '1917' + - '2087' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:55:13 GMT + - Thu, 29 Oct 2020 05:36:07 GMT expires: - '-1' pragma: @@ -68,8 +68,8 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET @@ -81,23 +81,23 @@ interactions: Asia","East Asia","North Central US","South Central US","Central US","Japan West","Japan East","Korea Central","Australia East","Australia Southeast","Brazil South","Central India","West Central US","Canada Central","UK South","France - Central","South Africa North","UAE North"],"apiVersions":["2020-03-13","2019-10-01-Preview","2015-08-19","2015-02-28","2014-07-31-Preview"],"capabilities":"CrossResourceGroupResourceMove, + Central","South Africa North","UAE North","East US 2 EUAP"],"apiVersions":["2020-08-01-Preview","2020-08-01","2020-03-13","2019-10-01-Preview","2015-08-19","2015-02-28","2014-07-31-Preview"],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"checkServiceNameAvailability","locations":[],"apiVersions":["2015-02-28","2014-07-31-Preview"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2020-03-13","2019-10-01-Preview","2015-08-19"],"capabilities":"None"},{"resourceType":"resourceHealthMetadata","locations":["West + SupportsLocation"},{"resourceType":"checkServiceNameAvailability","locations":[],"apiVersions":["2015-02-28","2014-07-31-Preview"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2020-08-01-Preview","2020-08-01","2020-03-13","2019-10-01-Preview","2015-08-19"],"capabilities":"None"},{"resourceType":"resourceHealthMetadata","locations":["West US","West US 2","East US","East US 2","North Europe","West Europe","Southeast Asia","East Asia","North Central US","South Central US","Central US","Japan West","Japan East","Korea Central","Australia East","Australia Southeast","Brazil South","Central India","West Central US","Canada Central","UK South","France - Central","South Africa North","UAE North"],"apiVersions":["2020-03-13","2019-10-01-Preview","2015-08-19"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-03-13","2019-10-01-Preview","2015-08-19","2015-02-28"],"capabilities":"None"}],"registrationState":"Unregistering","registrationPolicy":"RegistrationRequired"}' + Central","South Africa North","UAE North","East US 2 EUAP"],"apiVersions":["2020-08-01-Preview","2020-08-01","2020-03-13","2019-10-01-Preview","2015-08-19"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-08-01-Preview","2020-08-01","2020-03-13","2019-10-01-Preview","2015-08-19","2015-02-28"],"capabilities":"None"}],"registrationState":"Unregistering","registrationPolicy":"RegistrationRequired"}' headers: cache-control: - no-cache content-length: - - '1917' + - '2087' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:55:13 GMT + - Thu, 29 Oct 2020 05:36:07 GMT expires: - '-1' pragma: @@ -123,8 +123,8 @@ interactions: Content-Length: - '0' User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: POST @@ -136,23 +136,23 @@ interactions: Asia","East Asia","North Central US","South Central US","Central US","Japan West","Japan East","Korea Central","Australia East","Australia Southeast","Brazil South","Central India","West Central US","Canada Central","UK South","France - Central","South Africa North","UAE North"],"apiVersions":["2020-03-13","2019-10-01-Preview","2015-08-19","2015-02-28","2014-07-31-Preview"],"capabilities":"CrossResourceGroupResourceMove, + Central","South Africa North","UAE North","East US 2 EUAP"],"apiVersions":["2020-08-01-Preview","2020-08-01","2020-03-13","2019-10-01-Preview","2015-08-19","2015-02-28","2014-07-31-Preview"],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"checkServiceNameAvailability","locations":[],"apiVersions":["2015-02-28","2014-07-31-Preview"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2020-03-13","2019-10-01-Preview","2015-08-19"],"capabilities":"None"},{"resourceType":"resourceHealthMetadata","locations":["West + SupportsLocation"},{"resourceType":"checkServiceNameAvailability","locations":[],"apiVersions":["2015-02-28","2014-07-31-Preview"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2020-08-01-Preview","2020-08-01","2020-03-13","2019-10-01-Preview","2015-08-19"],"capabilities":"None"},{"resourceType":"resourceHealthMetadata","locations":["West US","West US 2","East US","East US 2","North Europe","West Europe","Southeast Asia","East Asia","North Central US","South Central US","Central US","Japan West","Japan East","Korea Central","Australia East","Australia Southeast","Brazil South","Central India","West Central US","Canada Central","UK South","France - Central","South Africa North","UAE North"],"apiVersions":["2020-03-13","2019-10-01-Preview","2015-08-19"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-03-13","2019-10-01-Preview","2015-08-19","2015-02-28"],"capabilities":"None"}],"registrationState":"Registering","registrationPolicy":"RegistrationRequired"}' + Central","South Africa North","UAE North","East US 2 EUAP"],"apiVersions":["2020-08-01-Preview","2020-08-01","2020-03-13","2019-10-01-Preview","2015-08-19"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-08-01-Preview","2020-08-01","2020-03-13","2019-10-01-Preview","2015-08-19","2015-02-28"],"capabilities":"None"}],"registrationState":"Registering","registrationPolicy":"RegistrationRequired"}' headers: cache-control: - no-cache content-length: - - '1915' + - '2085' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:55:16 GMT + - Thu, 29 Oct 2020 05:36:10 GMT expires: - '-1' pragma: diff --git a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_providers.yaml b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_providers.yaml index e70a0444fedd..b54239f9bf77 100644 --- a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_providers.yaml +++ b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_providers.yaml @@ -9,5638 +9,7132 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers?api-version=2020-06-01 response: body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AppConfiguration","namespace":"Microsoft.AppConfiguration","authorizations":[{"applicationId":"35ffadb3-7fc1-497e-b61b-381d28e744cc","roleDefinitionId":"fffa409e-a8cc-4cbf-8e1c-6d940b33040e"}],"resourceTypes":[{"resourceType":"configurationStores","locations":["West - Central US","Central US","West US","East US","West Europe","Southeast Asia","Australia - East","North Europe","UK South","South Central US","East US 2","West US 2","Brazil - South","Canada Central","Central India","East Asia","France Central","Japan - East","Korea Central","North Central US"],"apiVersions":["2019-11-01-preview","2019-10-01","2019-02-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"],"capabilities":"None"},{"resourceType":"managementGroups","locations":[],"apiVersions":["2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"],"capabilities":"None"},{"resourceType":"getEntities","locations":[],"apiVersions":["2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"],"capabilities":"None"},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2020-05-01","2020-02-01","2018-03-01-beta"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"],"capabilities":"None"},{"resourceType":"operationResults","locations":[],"apiVersions":["2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"],"capabilities":"None"},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2020-05-01","2020-02-01","2019-11-01","2018-03-01-beta"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"],"capabilities":"None"},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"],"capabilities":"None"},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.OperationalInsights","namespace":"Microsoft.OperationalInsights","authorizations":[{"applicationId":"d2a0a418-0aac-4541-82b2-b3142c89da77","roleDefinitionId":"86695298-2eb9-48a7-9ec3-2fdb38b6878b"},{"applicationId":"ca7f3f0b-7d91-482c-8e09-c5d840d0eac5","roleDefinitionId":"5d5a2e56-9835-44aa-93db-d2f19e155438"}],"resourceTypes":[{"resourceType":"workspaces","locations":["East + US","West Europe","Southeast Asia","Australia Southeast","West Central US","Japan + East","UK South","Central India","Canada Central","West US 2","Australia Central","Australia + East","France Central","Korea Central","North Europe","Central US","East Asia","East + US 2","South Central US","North Central US","West US","UK West","South Africa + North","Brazil South","Switzerland North","Switzerland West","Brazil Southeast","Norway + East"],"apiVersions":["2020-08-01","2020-03-01-preview","2017-04-26-preview","2017-03-15-preview","2017-03-03-preview","2017-01-01-preview","2015-11-01-preview","2015-03-20"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2020-08-01","2020-03-01-preview","2019-08-01-preview","2017-04-26-preview","2017-03-15-preview","2017-03-03-preview","2017-01-01-preview","2015-11-01-preview","2015-03-20"],"defaultApiVersion":"2020-08-01","capabilities":"None"},{"resourceType":"locations/operationStatuses","locations":["East + US","West Europe","Southeast Asia","Australia Southeast","West Central US","Japan + East","UK South","Central India","Canada Central","West US 2","Australia Central","Australia + East","France Central","Korea Central","North Europe","Central US","East Asia","East + US 2","South Central US","North Central US","West US","UK West","South Africa + North","Brazil South","Switzerland North","Switzerland West","Brazil Southeast","Norway + East"],"apiVersions":["2020-08-01","2020-03-01-preview","2019-08-01-preview","2017-04-26-preview","2017-03-15-preview","2017-03-03-preview","2017-01-01-preview","2015-11-01-preview","2015-03-20"],"defaultApiVersion":"2020-08-01","capabilities":"None"},{"resourceType":"workspaces/scopedPrivateLinkProxies","locations":["East + US","West Europe","Southeast Asia","Australia Southeast","West Central US","Japan + East","UK South","Central India","Canada Central","West US 2","Australia Central","Australia + East","France Central","Korea Central","North Europe","Central US","East Asia","East + US 2","South Central US","North Central US","West US","UK West","South Africa + North","Brazil South","Switzerland North","Switzerland West","Brazil Southeast","Norway + East"],"apiVersions":["2020-03-01-preview","2019-08-01-preview","2015-11-01-preview"],"defaultApiVersion":"2020-03-01-preview","capabilities":"None"},{"resourceType":"workspaces/query","locations":[],"apiVersions":["2017-10-01"],"capabilities":"None"},{"resourceType":"workspaces/metadata","locations":[],"apiVersions":["2017-10-01"],"capabilities":"None"},{"resourceType":"workspaces/dataSources","locations":["East + US","West Europe","Southeast Asia","Australia Southeast","West Central US","Japan + East","UK South","Central India","Canada Central","West US 2","Australia Central","Australia + East","France Central","Korea Central","North Europe","Central US","East Asia","East + US 2","South Central US","North Central US","West US","UK West","South Africa + North","Brazil South","Switzerland North","Switzerland West","Brazil Southeast","Norway + East"],"apiVersions":["2020-08-01","2020-03-01-preview","2015-11-01-preview"],"defaultApiVersion":"2020-08-01","capabilities":"None"},{"resourceType":"workspaces/linkedStorageAccounts","locations":["East + US","West Europe","Southeast Asia","Australia Southeast","West Central US","Japan + East","UK South","Central India","Canada Central","West US 2","Australia Central","Australia + East","France Central","Korea Central","North Europe","Central US","East Asia","East + US 2","South Central US","North Central US","West US","UK West","South Africa + North","Brazil South","Switzerland North","Switzerland West","Brazil Southeast","Norway + East"],"apiVersions":["2020-08-01","2020-03-01-preview","2019-08-01-preview"],"defaultApiVersion":"2020-08-01","capabilities":"None"},{"resourceType":"storageInsightConfigs","locations":[],"apiVersions":["2020-08-01","2020-03-01-preview","2014-10-10"],"capabilities":"SupportsExtension"},{"resourceType":"workspaces/linkedServices","locations":["East + US","West Europe","Southeast Asia","Australia Southeast","West Central US","Japan + East","UK South","Central India","Canada Central","West US 2","Australia Central","Australia + East","France Central","Korea Central","North Europe","Central US","East Asia","East + US 2","South Central US","North Central US","West US","UK West","South Africa + North","Brazil South","Switzerland North","Switzerland West","Brazil Southeast","Norway + East"],"apiVersions":["2020-08-01","2020-03-01-preview","2019-08-01-preview","2015-11-01-preview"],"defaultApiVersion":"2020-08-01","capabilities":"None"},{"resourceType":"linkTargets","locations":["East + US"],"apiVersions":["2020-03-01-preview","2015-03-20"],"capabilities":"None"},{"resourceType":"deletedWorkspaces","locations":["East + US","West Europe","Southeast Asia","Australia Southeast","West Central US","Japan + East","UK South","Central India","Canada Central","West US 2","Australia Central","Australia + East","France Central","Korea Central","North Europe","Central US","East Asia","East + US 2","South Central US","North Central US","West US","UK West","South Africa + North","Brazil South","Switzerland North","Switzerland West","Brazil Southeast","Norway + East"],"apiVersions":["2020-08-01","2020-03-01-preview"],"defaultApiVersion":"2020-08-01","capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-08-01","2020-03-01-preview","2015-11-01-preview","2014-11-10"],"defaultApiVersion":"2020-08-01","capabilities":"None"},{"resourceType":"workspaces/dataExports","locations":["East + US","West Europe","Southeast Asia","Australia Southeast","West Central US","Japan + East","UK South","Central India","Canada Central","West US 2","Australia Central","Australia + East","France Central","Korea Central","North Europe","Central US","East Asia","East + US 2","South Central US","North Central US","West US","UK West","South Africa + North","Brazil South","Switzerland North","Switzerland West","Germany West + Central","Australia Central 2","UAE Central","UAE North","Japan West","Brazil + Southeast","Norway East"],"apiVersions":["2020-08-01","2020-03-01-preview","2019-08-01-preview"],"defaultApiVersion":"2020-08-01","capabilities":"None"},{"resourceType":"clusters","locations":["East + US","West Europe","Southeast Asia","Australia Southeast","West Central US","Japan + East","UK South","Central India","Canada Central","West US 2","Australia Central","Australia + East","France Central","Korea Central","North Europe","Central US","East Asia","East + US 2","South Central US","North Central US","West US","UK West","South Africa + North","Switzerland North","Switzerland West","Germany West Central","Australia + Central 2","UAE Central","Brazil South","UAE North","Japan West","Brazil Southeast","Norway + East"],"apiVersions":["2020-08-01","2020-03-01-preview","2019-08-01-preview"],"defaultApiVersion":"2020-08-01","capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"configurationStores/eventGridFilters","locations":["West - Central US","Central US","West US","East US","West Europe","Southeast Asia","Australia - East","North Europe","UK South","South Central US","East US 2","West US 2","Brazil - South","Canada Central","Central India","East Asia","France Central","Japan - East","Korea Central","North Central US"],"apiVersions":["2019-11-01-preview","2019-10-01","2019-02-01-preview"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["West - Central US","Central US","West US","East US","West Europe","Southeast Asia","Australia - East","North Europe","UK South","South Central US","East US 2","West US 2","Brazil - South","Canada Central","Central India","East Asia","France Central","Japan - East","Korea Central","North Central US"],"apiVersions":["2019-11-01-preview","2019-10-01","2019-02-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":["West - Central US","Central US","West US","East US","West Europe","Southeast Asia","Australia - East","North Europe","UK South","South Central US","East US 2","West US 2","Brazil - South","Canada Central","Central India","East Asia","France Central","Japan - East","Korea Central","North Central US"],"apiVersions":["2019-11-01-preview","2019-10-01","2019-02-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationsStatus","locations":["West - Central US","Central US","West US","East US","West Europe","Southeast Asia","Australia - East","North Europe","UK South","South Central US","East US 2","West US 2","Brazil - South","Canada Central","Central India","East Asia","France Central","Japan - East","Korea Central","North Central US"],"apiVersions":["2019-11-01-preview","2019-10-01","2019-02-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["West - Central US","Central US","West US","East US","West Europe","Southeast Asia","Australia - East","North Europe","UK South","South Central US","East US 2","West US 2","Brazil - South","Canada Central","Central India","East Asia","France Central","Japan - East","Korea Central","North Central US"],"apiVersions":["2019-11-01-preview","2019-10-01","2019-02-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DataBoxEdge","namespace":"Microsoft.DataBoxEdge","authorizations":[{"applicationId":"2368d027-f996-4edb-bf48-928f98f2ab8c"}],"resourceTypes":[{"resourceType":"DataBoxEdgeDevices","locations":["East - US","West Europe","Southeast Asia"],"apiVersions":["2020-05-01-preview","2020-01-01","2019-08-01","2019-07-01","2019-03-01","2018-07-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"DataBoxEdgeDevices/checkNameAvailability","locations":["East - US","West Europe","Southeast Asia"],"apiVersions":["2020-05-01-preview","2020-01-01","2019-08-01","2019-07-01","2019-03-01","2018-07-01","2017-09-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-05-01-preview","2020-01-01","2019-08-01","2019-07-01","2019-03-01","2018-07-01","2017-09-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DataBox","namespace":"Microsoft.DataBox","authorizations":[{"applicationId":"5613cb5c-a7c9-4099-8034-511fd7616cb2","roleDefinitionId":"382D72D1-63DC-4243-9B99-CB69FDD473D8","managedByRoleDefinitionId":"f4c0a4f9-768c-4927-ab83-d319111d6ef4"}],"resourceTypes":[{"resourceType":"jobs","locations":["West - US","West Europe","Southeast Asia","East Asia","South India","Brazil South","Australia - East","Canada Central","Korea Central","Japan East","South Africa North"],"apiVersions":["2020-04-01","2019-09-01","2018-01-01"],"capabilities":"SystemAssignedResourceIdentity, - SupportsTags, SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2020-04-01","2019-09-01","2018-01-01"],"capabilities":"None"},{"resourceType":"locations/validateAddress","locations":["West - US","West Europe","Southeast Asia","East Asia","South India","Brazil South","Australia - East","Canada Central","Korea Central","Japan East","South Africa North"],"apiVersions":["2020-04-01","2019-09-01","2018-01-01"],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["West - US","West Europe","Southeast Asia","East Asia","South India","Brazil South","Australia - East","Canada Central","Korea Central","Japan East","South Africa North"],"apiVersions":["2020-04-01","2019-09-01","2018-01-01"],"capabilities":"None"},{"resourceType":"locations/operationresults","locations":["West - US","West Europe","Southeast Asia","East Asia","South India","Brazil South","Australia - East","Canada Central","Korea Central","Japan East","South Africa North"],"apiVersions":["2020-04-01","2019-09-01","2018-01-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-04-01","2019-09-01","2018-01-01"],"capabilities":"None"},{"resourceType":"locations/availableSkus","locations":["West - US","West Europe","Southeast Asia","East Asia","South India","Brazil South","Australia - East","Canada Central","Korea Central","Japan East","South Africa North"],"apiVersions":["2020-04-01","2019-09-01","2018-01-01"],"capabilities":"None"},{"resourceType":"locations/validateInputs","locations":["West - US","West Europe","Southeast Asia","East Asia","South India","Brazil South","Australia - East","Canada Central","Korea Central","Japan East","South Africa North"],"apiVersions":["2020-04-01","2019-09-01","2018-01-01"],"capabilities":"None"},{"resourceType":"locations/regionConfiguration","locations":["West - US","West Europe","Southeast Asia","East Asia","South India","Brazil South","Australia - East","Canada Central","Korea Central","Japan East","South Africa North"],"apiVersions":["2020-04-01","2019-09-01","2018-01-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.StreamAnalytics","namespace":"Microsoft.StreamAnalytics","resourceTypes":[{"resourceType":"streamingjobs","locations":["Central - US","West Europe","East US 2","North Europe","Japan East","West US","Southeast - Asia","South Central US","East Asia","Japan West","North Central US","East - US","Australia East","Australia Southeast","Brazil South","Central India","West - Central US","UK South","UK West","Canada Central","Canada East","West US 2","Korea - Central","France Central"],"apiVersions":["2019-06-01","2018-11-01","2017-04-01-preview","2016-03-01","2015-11-01","2015-10-01","2015-09-01","2015-08-01-preview","2015-06-01","2015-05-01","2015-04-01","2015-03-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + SupportsLocation"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.OperationsManagement","namespace":"Microsoft.OperationsManagement","authorization":{"applicationId":"d2a0a418-0aac-4541-82b2-b3142c89da77","roleDefinitionId":"aa249101-6816-4966-aafa-08175d795f14"},"resourceTypes":[{"resourceType":"solutions","locations":["East + US","West Europe","Southeast Asia","Australia Southeast","West Central US","Japan + East","UK South","Central India","Canada Central","West US 2","Australia East","Australia + Central","France Central","Korea Central","North Europe","Central Us","East + Us 2","East Asia","West Us","South Central Us","North Central US","UK West","South + Africa North","Brazil South","Switzerland North","Switzerland West","UAE Central","Australia + Central 2","Germany West Central","Japan West","UAE North","Brazil Southeast","Norway + East"],"apiVersions":["2015-11-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"managementconfigurations","locations":["East + US","West Europe","Southeast Asia","Australia Southeast","West Central US","Japan + East","UK South","Central India","Canada Central","West US 2","Australia East","Australia + Central","France Central","Korea Central","North Europe","Central Us","East + Us 2","East Asia","West Us","South Central Us","North Central US","UK West","South + Africa North","Brazil South","Switzerland North","Switzerland West"],"apiVersions":["2015-11-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"managementassociations","locations":[],"apiVersions":["2015-11-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"views","locations":["East + US","West Europe","Southeast Asia","Australia Southeast","West Central US","Japan + East","UK South","Central India","Canada Central","West US 2","Australia East","Australia + Central","France Central","Korea Central","North Europe","Central Us","East + Us 2","East Asia","West Us","South Central Us","North Central US","UK West","South + Africa North","Brazil South","Switzerland North","Switzerland West"],"apiVersions":["2017-08-21-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2015-11-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Advisor","namespace":"Microsoft.Advisor","authorization":{"applicationId":"c39c9bac-9d1f-4dfb-aa29-27f6365e5cb7","roleDefinitionId":"8a63b04c-3731-409b-9765-f1175c047872"},"resourceTypes":[{"resourceType":"suppressions","locations":[],"apiVersions":["2020-01-01","2017-04-19","2017-03-31","2016-07-12-preview","2016-05-09-preview"],"capabilities":"SupportsExtension"},{"resourceType":"configurations","locations":[],"apiVersions":["2020-01-01","2017-04-19","2017-03-31"],"capabilities":"SupportsExtension"},{"resourceType":"metadata","locations":[],"apiVersions":["2020-01-01-alpha","2020-01-01","2017-04-19-rc","2017-04-19-alpha","2017-04-19","2017-03-31-alpha","2017-03-31","2016-07-12-rc"],"capabilities":"None"},{"resourceType":"recommendations","locations":[],"apiVersions":["2020-01-01","2017-04-19","2017-03-31","2016-07-12-preview","2016-05-09-preview"],"capabilities":"SupportsExtension"},{"resourceType":"generateRecommendations","locations":[],"apiVersions":["2020-01-01","2017-04-19","2017-03-31","2016-07-12-preview","2016-05-09-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-01-01","2017-04-19","2017-03-31","2016-07-12-preview","2016-05-09-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ContainerRegistry","namespace":"Microsoft.ContainerRegistry","authorizations":[{"applicationId":"6a0ec4d3-30cb-4a83-91c0-ae56bc0e3d26","roleDefinitionId":"78e18383-93eb-418a-9887-bc9271046576"},{"applicationId":"737d58c1-397a-46e7-9d12-7d8c830883c2","roleDefinitionId":"716bb53a-0390-4428-bf41-b1bedde7d751"},{"applicationId":"918d0db8-4a38-4938-93c1-9313bdfe0272","roleDefinitionId":"dcd2d2c9-3f80-4d72-95a8-2593111b4b12"},{"applicationId":"d2fa1650-4805-4a83-bcb9-cf41fe63539c","roleDefinitionId":"c15f8dab-b103-4f8d-9afb-fbe4b8e98de2"},{"applicationId":"a4c95b9e-3994-40cc-8953-5dc66d48348d","roleDefinitionId":"dc88c655-90fa-48d9-8d51-003cc8738508"},{"applicationId":"62c559cd-db0c-4da0-bab2-972528c65d42","roleDefinitionId":"437b639a-6d74-491d-959f-d172e8c5c1fc"}],"resourceTypes":[{"resourceType":"registries","locations":["West + US","East US","South Central US","West Europe","North Europe","UK South","UK + West","Australia East","Australia Southeast","Central India","Korea Central","France + Central","South Africa North","UAE North","East Asia","Japan East","Japan + West","Southeast Asia","South India","Brazil South","Canada East","Canada + Central","Central US","East US 2","North Central US","West Central US","West + US 2","Switzerland North","UAE Central","Switzerland West","Germany West Central","Brazil + Southeast","East US 2 EUAP","Central US EUAP"],"apiVersions":["2019-12-01-preview","2019-05-01","2017-10-01","2017-03-01"],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"locations","locations":["West Europe","Central - US","East US 2","North Europe","Japan East","West US","Southeast Asia","South - Central US","East Asia","Japan West","North Central US","East US","Australia - East","Australia Southeast","Brazil South","Central India","West Central US","UK - South","West US 2","UK West","Canada Central","Canada East","Korea Central","France - Central"],"apiVersions":["2019-06-01","2018-11-01","2017-04-01-preview","2016-03-01","2015-11-01","2015-10-01","2015-09-01","2015-08-01-preview","2015-06-01","2015-05-01","2015-04-01","2015-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/quotas","locations":[],"apiVersions":["2019-06-01","2018-11-01","2017-04-01-preview","2016-03-01","2015-11-01","2015-10-01","2015-09-01","2015-08-01-preview","2015-06-01","2015-05-01","2015-04-01","2015-03-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["West - Europe","West US","Central US","East US 2","North Europe","Japan East","Southeast - Asia","South Central US","East Asia","Japan West","North Central US","East - US","Australia East","Australia Southeast","Brazil South","Central India","West - Central US","UK South","UK West","Canada Central","Canada East","West US 2","Korea - Central","France Central"],"apiVersions":["2019-06-01","2018-11-01","2017-04-01-preview","2016-03-01","2015-11-01","2015-10-01","2015-09-01","2015-08-01-preview","2015-06-01","2015-05-01","2015-04-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Logic","namespace":"Microsoft.Logic","authorization":{"applicationId":"7cd684f4-8a78-49b0-91ec-6a35d38739ba","roleDefinitionId":"cb3ef1fb-6e31-49e2-9d87-ed821053fe58"},"resourceTypes":[{"resourceType":"workflows","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","France Central","France South","Korea Central","Korea - South","South Africa North","South Africa West","UAE Central"],"apiVersions":["2019-05-01","2018-07-01-preview","2017-07-01","2016-10-01","2016-06-01","2015-08-01-preview","2015-02-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + SupportsLocation"},{"resourceType":"registries/scopeMaps","locations":["West + US","East US","South Central US","West Europe","North Europe","UK South","UK + West","Australia East","Australia Southeast","Central India","East Asia","Japan + East","Japan West","Southeast Asia","South India","Brazil South","Canada East","Canada + Central","Central US","East US 2","North Central US","West Central US","West + US 2","Korea Central","France Central","South Africa North","UAE North","Switzerland + North","UAE Central","Switzerland West","Germany West Central","Brazil Southeast","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2019-05-01-preview"],"capabilities":"None"},{"resourceType":"registries/tokens","locations":["West + US","East US","South Central US","West Europe","North Europe","UK South","UK + West","Australia East","Australia Southeast","Central India","East Asia","Japan + East","Japan West","Southeast Asia","South India","Brazil South","Canada East","Canada + Central","Central US","East US 2","North Central US","West Central US","West + US 2","Korea Central","France Central","South Africa North","UAE North","Switzerland + North","UAE Central","Switzerland West","Germany West Central","Brazil Southeast","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2019-05-01-preview"],"capabilities":"None"},{"resourceType":"registries/generateCredentials","locations":["West + US","East US","South Central US","West Europe","North Europe","UK South","UK + West","Australia East","Australia Southeast","Central India","East Asia","Japan + East","Japan West","Southeast Asia","South India","Brazil South","Canada East","Canada + Central","Central US","East US 2","North Central US","West Central US","West + US 2","Korea Central","France Central","South Africa North","UAE North","Switzerland + North","UAE Central","Switzerland West","Germany West Central","Brazil Southeast","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2019-05-01-preview"],"capabilities":"None"},{"resourceType":"registries/privateEndpointConnections","locations":["West + US","East US","South Central US","West Europe","Switzerland North","North + Europe","UK South","UK West","Australia East","Australia Southeast","Central + India","East Asia","Japan East","Japan West","Southeast Asia","South India","Brazil + South","Canada East","Canada Central","Central US","East US 2","North Central + US","West Central US","West US 2","Korea Central","France Central","South + Africa North","UAE North","UAE Central","Switzerland West","Germany West Central","Brazil + Southeast","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-12-01-preview"],"capabilities":"None"},{"resourceType":"registries/privateEndpointConnectionProxies","locations":["West + US","East US","South Central US","West Europe","Switzerland North","North + Europe","UK South","UK West","Australia East","Australia Southeast","Central + India","East Asia","Japan East","Japan West","Southeast Asia","South India","Brazil + South","Canada East","Canada Central","Central US","East US 2","North Central + US","West Central US","West US 2","Korea Central","France Central","South + Africa North","UAE North","UAE Central","Switzerland West","Germany West Central","Brazil + Southeast","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-12-01-preview"],"capabilities":"None"},{"resourceType":"registries/privateEndpointConnectionProxies/validate","locations":["West + US","East US","South Central US","West Europe","Switzerland North","North + Europe","UK South","UK West","Australia East","Australia Southeast","Central + India","East Asia","Japan East","Japan West","Southeast Asia","South India","Brazil + South","Canada East","Canada Central","Central US","East US 2","North Central + US","West Central US","West US 2","Korea Central","France Central","South + Africa North","UAE North","UAE Central","Switzerland West","Germany West Central","Brazil + Southeast","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-12-01-preview"],"capabilities":"None"},{"resourceType":"registries/privateLinkResources","locations":["West + US","East US","South Central US","West Europe","Switzerland North","North + Europe","UK South","UK West","Australia East","Australia Southeast","Central + India","East Asia","Japan East","Japan West","Southeast Asia","South India","Brazil + South","Canada East","Canada Central","Central US","East US 2","North Central + US","West Central US","West US 2","Korea Central","France Central","South + Africa North","UAE North","UAE Central","Switzerland West","Germany West Central","Brazil + Southeast","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-12-01-preview"],"capabilities":"None"},{"resourceType":"registries/importImage","locations":["South + Central US","West Central US","East US","West Europe","West US","Japan East","North + Europe","Southeast Asia","North Central US","East US 2","West US 2","Brazil + South","Australia East","Central India","Korea Central","France Central","South + Africa North","UAE North","Central US","Canada East","Canada Central","UK + South","UK West","Australia Southeast","East Asia","Japan West","South India","Switzerland + North","UAE Central","Switzerland West","Germany West Central","Brazil Southeast","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2019-12-01-preview","2019-05-01","2017-10-01"],"capabilities":"None"},{"resourceType":"registries/exportPipelines","locations":["West + US","East US","South Central US","West Europe","Switzerland North","North + Europe","UK South","UK West","Australia East","Australia Southeast","Central + India","East Asia","Japan East","Japan West","Southeast Asia","South India","Brazil + South","Canada East","Canada Central","Central US","East US 2","North Central + US","West Central US","West US 2","Korea Central","France Central","South + Africa North","UAE North","UAE Central","Switzerland West","Germany West Central","Brazil + Southeast","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-12-01-preview"],"capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"registries/importPipelines","locations":["West + US","East US","South Central US","West Europe","Switzerland North","North + Europe","UK South","UK West","Australia East","Australia Southeast","Central + India","East Asia","Japan East","Japan West","Southeast Asia","South India","Brazil + South","Canada East","Canada Central","Central US","East US 2","North Central + US","West Central US","West US 2","Korea Central","France Central","South + Africa North","UAE North","UAE Central","Switzerland West","Germany West Central","Brazil + Southeast","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-12-01-preview"],"capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"registries/pipelineRuns","locations":["West + US","East US","South Central US","West Europe","Switzerland North","North + Europe","UK South","UK West","Australia East","Australia Southeast","Central + India","East Asia","Japan East","Japan West","Southeast Asia","South India","Brazil + South","Canada East","Canada Central","Central US","East US 2","North Central + US","West Central US","West US 2","Korea Central","France Central","South + Africa North","UAE North","UAE Central","Switzerland West","Germany West Central","Brazil + Southeast","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-12-01-preview"],"capabilities":"None"},{"resourceType":"registries/listBuildSourceUploadUrl","locations":["East + US","West Europe","West US 2","South Central US","Australia East","Australia + Southeast","Brazil South","Canada Central","Canada East","Central India","Central + US","East Asia","East US 2","Japan East","Japan West","North Central US","North + Europe","Southeast Asia","South India","UK South","UK West","West US","West + Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland + North","Switzerland West","UAE Central","Brazil Southeast","Germany West Central","East + US 2 EUAP"],"apiVersions":["2019-06-01-preview","2019-04-01","2018-09-01"],"capabilities":"None"},{"resourceType":"registries/scheduleRun","locations":["East + US","West Europe","West US 2","South Central US","Australia East","Australia + Southeast","Brazil South","Canada Central","Canada East","Central India","Central + US","East Asia","East US 2","Japan East","Japan West","North Central US","North + Europe","Southeast Asia","South India","UK South","UK West","West US","West + Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland + North","Switzerland West","UAE Central","Brazil Southeast","Germany West Central","East + US 2 EUAP"],"apiVersions":["2019-06-01-preview","2019-04-01","2018-09-01"],"capabilities":"None"},{"resourceType":"registries/runs","locations":["East + US","West Europe","West US 2","South Central US","Australia East","Australia + Southeast","Brazil South","Canada Central","Canada East","Central India","Central + US","East Asia","East US 2","Japan East","Japan West","North Central US","North + Europe","Southeast Asia","South India","UK South","UK West","West US","West + Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland + North","Switzerland West","UAE Central","Brazil Southeast","Germany West Central","East + US 2 EUAP"],"apiVersions":["2019-06-01-preview","2019-04-01","2018-09-01"],"capabilities":"None"},{"resourceType":"registries/taskRuns","locations":["East + US","West Europe","West US 2","South Central US","Australia East","Australia + Southeast","Brazil South","Canada Central","Canada East","Central India","Central + US","East Asia","East US 2","Japan East","Japan West","North Central US","North + Europe","Southeast Asia","South India","UK South","UK West","West US","West + Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland + North","Switzerland West","UAE Central","Brazil Southeast","Germany West Central","East + US 2 EUAP"],"apiVersions":["2019-06-01-preview"],"defaultApiVersion":"2019-06-01-preview","capabilities":"None"},{"resourceType":"registries/taskRuns/listDetails","locations":["East + US","West Europe","West US 2","South Central US","Australia East","Australia + Southeast","Brazil South","Canada Central","Canada East","Central India","Central + US","East Asia","East US 2","Japan East","Japan West","North Central US","North + Europe","Southeast Asia","South India","UK South","UK West","West US","West + Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland + North","Switzerland West","UAE Central","Brazil Southeast","Germany West Central","East + US 2 EUAP"],"apiVersions":["2019-06-01-preview"],"capabilities":"None"},{"resourceType":"registries/agentPools","locations":["East + US","West US 2","South Central US","Central US","East US 2","East US 2 EUAP"],"apiVersions":["2019-06-01-preview"],"defaultApiVersion":"2019-06-01-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"registries/agentPools/listQueueStatus","locations":["East + US","West US 2","South Central US","Central US","East US 2","East US 2 EUAP"],"apiVersions":["2019-06-01-preview"],"capabilities":"None"},{"resourceType":"registries/runs/listLogSasUrl","locations":["East + US","West Europe","West US 2","South Central US","Australia East","Australia + Southeast","Brazil South","Canada Central","Canada East","Central India","Central + US","East Asia","East US 2","Japan East","Japan West","North Central US","North + Europe","Southeast Asia","South India","UK South","UK West","West US","West + Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland + North","Switzerland West","UAE Central","Brazil Southeast","Germany West Central","East + US 2 EUAP"],"apiVersions":["2019-06-01-preview","2019-04-01","2018-09-01"],"capabilities":"None"},{"resourceType":"registries/runs/cancel","locations":["East + US","West Europe","West US 2","South Central US","Australia East","Australia + Southeast","Brazil South","Canada Central","Canada East","Central India","Central + US","East Asia","East US 2","Japan East","Japan West","North Central US","North + Europe","Southeast Asia","South India","UK South","UK West","West US","West + Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland + North","Switzerland West","UAE Central","Brazil Southeast","Germany West Central","East + US 2 EUAP"],"apiVersions":["2019-06-01-preview","2019-04-01","2018-09-01"],"capabilities":"None"},{"resourceType":"registries/tasks","locations":["East + US","West Europe","West US 2","South Central US","Australia East","Australia + Southeast","Brazil South","Canada Central","Canada East","Central India","Central + US","East Asia","East US 2","Japan East","Japan West","North Central US","North + Europe","Southeast Asia","South India","UK South","UK West","West US","West + Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland + North","Switzerland West","UAE Central","Brazil Southeast","Germany West Central","East + US 2 EUAP"],"apiVersions":["2019-06-01-preview","2019-04-01","2018-09-01"],"defaultApiVersion":"2019-04-01","capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"locations/workflows","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","France Central","France South","Korea Central","Korea - South","South Africa North","South Africa West","UAE Central"],"apiVersions":["2019-05-01","2018-07-01-preview","2017-07-01","2016-10-01","2016-06-01","2015-08-01-preview","2015-02-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":["North - Central US"],"apiVersions":["2019-05-01","2018-07-01-preview","2017-07-01","2016-10-01","2016-06-01","2015-08-01-preview","2015-02-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","France Central","France South","Korea Central","Korea - South","South Africa North","South Africa West","UAE Central"],"apiVersions":["2019-05-01","2018-07-01-preview","2017-07-01","2016-10-01","2016-06-01","2015-08-01-preview","2015-02-01-preview"],"capabilities":"None"},{"resourceType":"integrationAccounts","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","France Central","France South","Korea Central","South - Africa North","South Africa West","UAE Central"],"apiVersions":["2019-05-01","2018-07-01-preview","2016-06-01","2015-08-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"integrationServiceEnvironments","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Australia East","Australia Southeast","South India","Central India","Canada - Central","West US 2","UK South","UK West"],"apiVersions":["2019-06-01-preview","2019-05-01","2018-07-01-preview","2018-03-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - SystemAssignedResourceIdentity, SupportsTags, SupportsLocation"},{"resourceType":"integrationServiceEnvironments/managedApis","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Australia East","Australia Southeast","South India","Central India","Canada - Central","West US 2","West Central US","UK South","UK West"],"apiVersions":["2019-06-01-preview","2019-05-01","2018-07-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - SupportsTags, SupportsLocation"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Databricks","namespace":"Microsoft.Databricks","authorizations":[{"applicationId":"d9327919-6775-4843-9037-3fb0fb0473cb","roleDefinitionId":"f31567d0-b61f-43c2-97a5-a98cdc3bfcb6","managedByRoleDefinitionId":"8e3af657-a8ff-443c-a75c-2fe8c4bcb635"},{"applicationId":"2ff814a6-3304-4ab8-85cb-cd0e6f879c1d","roleDefinitionId":"f31567d0-b61f-43c2-97a5-a98cdc3bfcb6","managedByRoleDefinitionId":"8e3af657-a8ff-443c-a75c-2fe8c4bcb635"}],"resourceTypes":[{"resourceType":"workspaces","locations":["West - US","East US 2","West Europe","East US","North Europe","Southeast Asia","East - Asia","South Central US","North Central US","West US 2","Central US","UK West","UK - South","Australia East","Australia Southeast","Australia Central","Australia - Central 2","Japan East","Japan West","Canada Central","Canada East","Central - India","South India","West India","Korea Central","Korea South","South Africa - West","South Africa North","Brazil South","France Central","UAE North"],"apiVersions":["2018-04-01"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"workspaces/virtualNetworkPeerings","locations":["West - US","East US 2","West Europe","North Europe","East US","Southeast Asia","East - Asia","South Central US","North Central US","West US 2","Central US","UK West","UK - South","Australia East","Australia Southeast","Australia Central","Australia - Central 2","Japan East","Japan West","Canada Central","Canada East","Central - India","South India","West India","Korea Central","Korea South","South Africa - North","South Africa West","UAE North","Brazil South","France Central"],"apiVersions":["2018-04-01"],"capabilities":"None"},{"resourceType":"workspaces/dbWorkspaces","locations":["West - US","East US 2","West Europe","North Europe","East US","Southeast Asia","East - Asia","South Central US","North Central US","West US 2","Central US","UK West","UK - South","Australia East","Australia Southeast","Australia Central","Australia - Central 2","Japan East","Japan West","Canada Central","Canada East","Central - India","South India","West India","Korea Central","Korea South","South Africa - North","South Africa West","UAE North","Brazil South","France Central"],"apiVersions":["2018-04-01"],"capabilities":"None"},{"resourceType":"operations","locations":["West - US","East US 2","West Europe","North Europe","East US","Southeast Asia","East - Asia","South Central US","North Central US","Korea South","Korea Central","South - Africa North","South Africa West","West US 2","Central US","UK West","UK South","Australia - East","Australia Southeast","Australia Central","Australia Central 2","Japan - East","Japan West","Canada Central","Canada East","Central India","South India","West - India","UAE North","Brazil South","France Central"],"apiVersions":["2018-04-01"],"capabilities":"None"},{"resourceType":"locations","locations":["West - US","East US 2","West Europe","North Europe","East US","Southeast Asia","East - Asia","South Central US","North Central US","West US 2","Central US","UK West","UK - South","Australia East","Australia Southeast","Australia Central","Australia - Central 2","Japan East","Japan West","Canada Central","Canada East","Central - India","South India","West India","Korea Central","Korea South","South Africa - North","South Africa West","UAE North","Brazil South","France Central"],"apiVersions":["2018-04-01","2018-03-15","2018-03-01","2017-09-01-preview","2017-08-01-preview","2016-09-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationstatuses","locations":["West - US","East US 2","West Europe","East US","North Europe","Southeast Asia","East - Asia","South Central US","North Central US","West US 2","Central US","UK West","UK - South","Australia East","Australia Southeast","Australia Central","Australia - Central 2","Japan East","Japan West","Canada Central","Canada East","Central - India","South India","West India","Korea Central","Korea South","South Africa - West","South Africa North","Brazil South","France Central","UAE North"],"apiVersions":["2018-04-01"],"capabilities":"None"},{"resourceType":"locations/getNetworkPolicies","locations":["West - US","East US 2","West Europe","East US","North Europe","Southeast Asia","East - Asia","South Central US","North Central US","West US 2","Central US","UK West","UK - South","Australia East","Australia Southeast","Australia Central","Australia - Central 2","Japan East","Japan West","Canada Central","Canada East","Central - India","South India","West India","Korea Central","Korea South","South Africa - West","South Africa North","Brazil South","France Central","UAE North"],"apiVersions":["2018-04-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Cdn","namespace":"Microsoft.Cdn","authorizations":[],"resourceTypes":[{"resourceType":"profiles","locations":["global","Australia - East","Australia Southeast","Brazil South","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","Japan East","Japan - West","North Central US","North Europe","South Central US","South India","Southeast - Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02","2016-04-02","2015-06-01"],"defaultApiVersion":"2017-10-12","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"profiles/endpoints","locations":["global","Australia - East","Australia Southeast","Brazil South","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","Japan East","Japan - West","North Central US","North Europe","South Central US","South India","Southeast - Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02","2016-04-02","2015-06-01"],"defaultApiVersion":"2017-10-12","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"profiles/endpoints/origins","locations":["global","Australia - East","Australia Southeast","Brazil South","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","Japan East","Japan - West","North Central US","North Europe","South Central US","South India","Southeast - Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02","2016-04-02","2015-06-01"],"defaultApiVersion":"2017-10-12","capabilities":"None"},{"resourceType":"profiles/endpoints/origingroups","locations":["global","Australia - East","Australia Southeast","Brazil South","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","Japan East","Japan - West","North Central US","North Europe","South Central US","South India","Southeast - Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31"],"defaultApiVersion":"2019-12-31","capabilities":"None"},{"resourceType":"profiles/endpoints/customdomains","locations":["global","Australia - East","Australia Southeast","Brazil South","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","Japan East","Japan - West","North Central US","North Europe","South Central US","South India","Southeast - Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02","2016-04-02","2015-06-01"],"defaultApiVersion":"2017-10-12","capabilities":"None"},{"resourceType":"operationresults","locations":["global","Australia - East","Australia Southeast","Brazil South","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","Japan East","Japan - West","North Central US","North Europe","South Central US","South India","Southeast - Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02","2016-04-02","2015-06-01"],"defaultApiVersion":"2017-10-12","capabilities":"None"},{"resourceType":"operationresults/profileresults","locations":["global","Australia - East","Australia Southeast","Brazil South","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","Japan East","Japan - West","North Central US","North Europe","South Central US","South India","Southeast - Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02","2016-04-02","2015-06-01"],"defaultApiVersion":"2017-10-12","capabilities":"None"},{"resourceType":"operationresults/profileresults/endpointresults","locations":["global","Australia - East","Australia Southeast","Brazil South","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","Japan East","Japan - West","North Central US","North Europe","South Central US","South India","Southeast - Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02","2016-04-02","2015-06-01"],"defaultApiVersion":"2017-10-12","capabilities":"None"},{"resourceType":"operationresults/profileresults/endpointresults/originresults","locations":["global","Australia - East","Australia Southeast","Brazil South","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","Japan East","Japan - West","North Central US","North Europe","South Central US","South India","Southeast - Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02","2016-04-02","2015-06-01"],"defaultApiVersion":"2017-10-12","capabilities":"None"},{"resourceType":"operationresults/profileresults/endpointresults/origingroupresults","locations":["global","Australia - East","Australia Southeast","Brazil South","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","Japan East","Japan - West","North Central US","North Europe","South Central US","South India","Southeast - Asia","West Europe","West India","West US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31"],"defaultApiVersion":"2019-12-31","capabilities":"None"},{"resourceType":"operationresults/profileresults/endpointresults/customdomainresults","locations":["global","Australia - East","Australia Southeast","Brazil South","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","Japan East","Japan - West","North Central US","North Europe","South Central US","South India","Southeast - Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02","2016-04-02","2015-06-01"],"defaultApiVersion":"2017-10-12","capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["global","Australia - East","Australia Southeast","Brazil South","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","Japan East","Japan - West","North Central US","North Europe","South Central US","South India","Southeast - Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02","2016-04-02","2015-06-01"],"defaultApiVersion":"2017-10-12","capabilities":"None"},{"resourceType":"checkResourceUsage","locations":["global","Australia - East","Australia Southeast","Brazil South","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","Japan East","Japan - West","North Central US","North Europe","South Central US","South India","Southeast - Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02"],"defaultApiVersion":"2017-10-12","capabilities":"None"},{"resourceType":"validateProbe","locations":["global","Australia - East","Australia Southeast","Brazil South","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","Japan East","Japan - West","North Central US","North Europe","South Central US","South India","Southeast - Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02"],"defaultApiVersion":"2017-10-12","capabilities":"None"},{"resourceType":"operations","locations":["global","Australia - East","Australia Southeast","Brazil South","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","Japan East","Japan - West","North Central US","North Europe","South Central US","South India","Southeast - Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02","2016-04-02","2015-06-01"],"defaultApiVersion":"2017-10-12","capabilities":"None"},{"resourceType":"edgenodes","locations":["global","Australia - East","Australia Southeast","Brazil South","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","Japan East","Japan - West","North Central US","North Europe","South Central US","South India","Southeast - Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02","2016-04-02","2015-06-01"],"defaultApiVersion":"2017-10-12","capabilities":"None"},{"resourceType":"CdnWebApplicationFirewallPolicies","locations":["global"],"apiVersions":["2019-06-15-preview"],"defaultApiVersion":"2019-06-15-preview","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"CdnWebApplicationFirewallManagedRuleSets","locations":[],"apiVersions":["2019-06-15-preview"],"defaultApiVersion":"2019-06-15-preview","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Media","namespace":"Microsoft.Media","authorization":{"applicationId":"374b2a64-3b6b-436b-934c-b820eacca870","roleDefinitionId":"aab70789-0cec-44b5-95d7-84b64c9487af"},"resourceTypes":[{"resourceType":"mediaservices","locations":["Japan - West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East - US","West US","Australia East","Australia Southeast","East US 2","Central - US","Brazil South","Central India","West India","South India","North Central - US","South Central US","UK South","UK West","Canada Central","Canada East","West - Central US","West US 2","Korea Central","Korea South","France Central","France - South","South Africa North","South Africa West","Germany West Central","Germany - North","Switzerland West","Switzerland North"],"apiVersions":["2018-07-01","2018-06-01-preview","2018-03-30-preview","2015-10-01","2015-04-01"],"defaultApiVersion":"2018-07-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"mediaservices/assets","locations":["Japan - West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East - US","West US","Australia East","Australia Southeast","East US 2","Central - US","Brazil South","Central India","West India","South India","North Central - US","South Central US","UK South","UK West","Canada Central","Canada East","West - Central US","West US 2","Korea Central","Korea South","France Central","France - South","South Africa North","South Africa West","Germany West Central","Germany - North","Switzerland West","Switzerland North"],"apiVersions":["2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"mediaservices/contentKeyPolicies","locations":["Japan - West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East - US","West US","Australia East","Australia Southeast","East US 2","Central - US","Brazil South","Central India","West India","South India","North Central - US","South Central US","UK South","UK West","Canada Central","Canada East","West - Central US","West US 2","Korea Central","Korea South","France Central","France - South","South Africa North","South Africa West","Germany West Central","Germany - North","Switzerland West","Switzerland North"],"apiVersions":["2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"mediaservices/streamingLocators","locations":["Japan - West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East - US","West US","Australia East","Australia Southeast","East US 2","Central - US","Brazil South","Central India","West India","South India","North Central - US","South Central US","UK South","UK West","Canada Central","Canada East","West - Central US","West US 2","Korea Central","Korea South","France Central","France - South","South Africa North","South Africa West","Germany West Central","Germany - North","Switzerland West","Switzerland North"],"apiVersions":["2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"mediaservices/streamingPolicies","locations":["Japan - West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East - US","West US","Australia East","Australia Southeast","East US 2","Central - US","Brazil South","Central India","West India","South India","North Central - US","South Central US","UK South","UK West","Canada Central","Canada East","West - Central US","West US 2","Korea Central","Korea South","France Central","France - South","South Africa North","South Africa West","Germany West Central","Germany - North","Switzerland West","Switzerland North"],"apiVersions":["2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"mediaservices/eventGridFilters","locations":["Japan - West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East - US","West US","Australia East","Australia Southeast","East US 2","Central - US","Brazil South","Central India","West India","South India","North Central - US","South Central US","UK South","UK West","Canada Central","Canada East","West - Central US","West US 2","Korea Central","Korea South","France Central","France - South","South Africa North","South Africa West","Germany West Central","Germany - North","Switzerland West","Switzerland North"],"apiVersions":["2018-02-05"],"defaultApiVersion":"2018-02-05","capabilities":"None"},{"resourceType":"mediaservices/transforms","locations":["Japan - West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East - US","West US","Australia East","Australia Southeast","East US 2","Central - US","Brazil South","Central India","West India","South India","North Central - US","South Central US","UK South","UK West","Canada Central","Canada East","West - Central US","West US 2","Korea Central","Korea South","France Central","France - South","South Africa North","South Africa West","Germany West Central","Germany - North","Switzerland West","Switzerland North"],"apiVersions":["2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"mediaservices/transforms/jobs","locations":["Japan - West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East - US","West US","Australia East","Australia Southeast","East US 2","Central - US","Brazil South","Central India","West India","South India","North Central - US","South Central US","UK South","UK West","Canada Central","Canada East","West - Central US","West US 2","Korea Central","Korea South","France Central","France - South","South Africa North","South Africa West","Germany West Central","Germany - North","Switzerland West","Switzerland North"],"apiVersions":["2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"mediaservices/streamingEndpoints","locations":["Japan - West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East - US","West US","Australia East","Australia Southeast","East US 2","Central - US","Brazil South","Central India","West India","South India","North Central - US","South Central US","UK South","UK West","Canada Central","Canada East","West - Central US","West US 2","Korea Central","Korea South","France Central","France - South","South Africa North","South Africa West","Germany West Central","Germany - North","Switzerland West","Switzerland North"],"apiVersions":["2019-05-01-preview","2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"mediaservices/liveEvents","locations":["Japan - West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East - US","West US","Australia East","Australia Southeast","East US 2","Central - US","Brazil South","Central India","West India","South India","North Central - US","South Central US","UK South","UK West","Canada Central","Canada East","West - Central US","West US 2","Korea Central","Korea South","France Central","France - South","South Africa North","South Africa West","Germany West Central","Germany - North","Switzerland West","Switzerland North"],"apiVersions":["2019-05-01-preview","2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"mediaservices/liveEvents/liveOutputs","locations":["Japan - West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East - US","West US","Australia East","Australia Southeast","East US 2","Central - US","Brazil South","Central India","West India","South India","North Central - US","South Central US","UK South","UK West","Canada Central","Canada East","West - Central US","West US 2","Korea Central","Korea South","France Central","France - South","South Africa North","South Africa West","Germany West Central","Germany - North","Switzerland West","Switzerland North"],"apiVersions":["2019-05-01-preview","2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"mediaservices/streamingEndpointOperations","locations":["Japan - West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East - US","West US","Australia East","Australia Southeast","East US 2","Central - US","Brazil South","Central India","West India","South India","North Central - US","South Central US","UK South","UK West","Canada Central","Canada East","West - Central US","West US 2","Korea Central","Korea South","France Central","France - South","South Africa North","South Africa West","Germany West Central","Germany - North","Switzerland West","Switzerland North"],"apiVersions":["2019-05-01-preview","2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"mediaservices/liveEventOperations","locations":["Japan - West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East - US","West US","Australia East","Australia Southeast","East US 2","Central - US","Brazil South","Central India","West India","South India","North Central - US","South Central US","UK South","UK West","Canada Central","Canada East","West - Central US","West US 2","Korea Central","Korea South","France Central","France - South","South Africa North","South Africa West","Germany West Central","Germany - North","Switzerland West","Switzerland North"],"apiVersions":["2019-05-01-preview","2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"mediaservices/liveOutputOperations","locations":["Japan - West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East - US","West US","Australia East","Australia Southeast","East US 2","Central - US","Brazil South","Central India","West India","South India","North Central - US","South Central US","UK South","UK West","Canada Central","Canada East","West - Central US","West US 2","Korea Central","Korea South","France Central","France - South","South Africa North","South Africa West","Germany West Central","Germany - North","Switzerland West","Switzerland North"],"apiVersions":["2019-05-01-preview","2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"mediaservices/assets/assetFilters","locations":["Japan - West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East - US","West US","Australia East","Australia Southeast","East US 2","Central - US","Brazil South","Central India","West India","South India","North Central - US","South Central US","UK South","UK West","Canada Central","Canada East","West - Central US","West US 2","Korea Central","Korea South","France Central","France - South","South Africa North","South Africa West","Germany West Central","Germany - North","Switzerland West","Switzerland North"],"apiVersions":["2018-07-01"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"mediaservices/accountFilters","locations":["Japan - West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East - US","West US","Australia East","Australia Southeast","East US 2","Central - US","Brazil South","Central India","West India","South India","North Central - US","South Central US","UK South","UK West","Canada Central","Canada East","West - Central US","West US 2","Korea Central","Korea South","France Central","France - South","South Africa North","South Africa West","Germany West Central","Germany - North","Switzerland West","Switzerland North"],"apiVersions":["2018-07-01"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2018-07-01","2018-06-01-preview","2018-03-30-preview","2018-02-05","2015-10-01","2015-04-01"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"checknameavailability","locations":[],"apiVersions":["2015-10-01","2015-04-01"],"defaultApiVersion":"2015-10-01","capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["Japan - West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East - US","West US","Australia East","Australia Southeast","East US 2","Central - US","Brazil South","Central India","West India","South India","North Central - US","South Central US","UK South","UK West","Canada Central","Canada East","West - Central US","West US 2","Korea Central","Korea South","France Central","France - South","South Africa North","South Africa West","Germany West Central","Germany - North","Switzerland West","Switzerland North"],"apiVersions":["2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Relay","namespace":"Microsoft.Relay","authorizations":[{"applicationId":"91bb937c-29c2-4275-982f-9465f0caf03d","roleDefinitionId":"6ea9e989-a5f4-4187-8d11-c8db3dd04da1"},{"applicationId":"80369ed6-5f11-4dd9-bef3-692475845e77"}],"resourceTypes":[{"resourceType":"namespaces","locations":["Australia - East","Australia Southeast","Central US","East US","East US 2","West US 2","West - US","North Central US","South Central US","West Central US","East Asia","Southeast - Asia","Brazil South","Japan East","Japan West","North Europe","West Europe","Central - India","South India","West India","Canada Central","Canada East","UK West","UK - South","Korea Central","Korea South","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2018-01-01-preview","2017-04-01","2016-07-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"namespaces/authorizationrules","locations":[],"apiVersions":["2017-04-01","2016-07-01","2015-08-01","2014-09-01"],"capabilities":"None"},{"resourceType":"namespaces/hybridconnections","locations":[],"apiVersions":["2017-04-01","2016-07-01","2015-08-01","2014-09-01"],"capabilities":"None"},{"resourceType":"namespaces/hybridconnections/authorizationrules","locations":[],"apiVersions":["2017-04-01","2016-07-01","2015-08-01","2014-09-01"],"capabilities":"None"},{"resourceType":"namespaces/wcfrelays","locations":[],"apiVersions":["2017-04-01","2016-07-01","2015-08-01","2014-09-01"],"capabilities":"None"},{"resourceType":"namespaces/wcfrelays/authorizationrules","locations":[],"apiVersions":["2017-04-01","2016-07-01","2015-08-01","2014-09-01"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2017-04-01","2016-07-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2017-04-01","2016-07-01"],"defaultApiVersion":"2017-04-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.EventHub","namespace":"Microsoft.EventHub","authorizations":[{"applicationId":"80369ed6-5f11-4dd9-bef3-692475845e77","roleDefinitionId":"eb8e1991-5de0-42a6-a64b-29b059341b7b"},{"applicationId":"6201d19e-14fb-4472-a2d6-5634a5c97568"}],"resourceTypes":[{"resourceType":"namespaces","locations":["Australia - East","Australia Southeast","Central US","East US","East US 2","West US","West - US 2","North Central US","South Central US","West Central US","East Asia","Southeast - Asia","Brazil South","Japan East","Japan West","North Europe","West Europe","Central - India","South India","West India","Canada Central","Canada East","UK West","UK - South","Korea Central","Korea South","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2018-01-01-preview","2017-04-01","2015-08-01","2014-09-01"],"defaultApiVersion":"2017-04-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"clusters","locations":["Australia East","Australia - Southeast","Central US","East US","East US 2","West US","West US 2","North - Central US","South Central US","West Central US","East Asia","Southeast Asia","Brazil - South","Japan East","Japan West","North Europe","West Europe","Central India","South - India","West India","Canada Central","Canada East","UK West","UK South","Korea - Central","Korea South","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East"],"apiVersions":["2018-01-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"namespaces/authorizationrules","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/networkrulesets","locations":[],"apiVersions":["2018-01-01-preview","2017-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/eventhubs","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/eventhubs/authorizationrules","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/eventhubs/consumergroups","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"checkNamespaceAvailability","locations":[],"apiVersions":["2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-08-01"}],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"sku","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/disasterrecoveryconfigs","locations":[],"apiVersions":["2017-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/disasterrecoveryconfigs/checkNameAvailability","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2018-01-01-preview","2017-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":[],"apiVersions":["2018-01-01-preview","2017-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"availableClusterRegions","locations":[],"apiVersions":["2018-01-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-01-01-preview"}],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Devices","namespace":"Microsoft.Devices","authorizations":[{"applicationId":"0cd79364-7a90-4354-9984-6e36c841418d","roleDefinitionId":"C121DF10-FE58-4BC4-97F9-8296879F7BBB"},{"applicationId":"29f411f1-b2cf-4043-8ac8-2185d7316811"},{"applicationId":"89d10474-74af-4874-99a7-c23c2f643083","roleDefinitionId":"7df22794-26e3-4f94-9d50-a4f0f6e1cb41"}],"resourceTypes":[{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2020-04-01","2020-03-01","2019-11-04","2019-07-01-preview","2019-03-22-preview","2019-03-22","2018-12-01-preview","2018-04-01","2018-01-22","2017-07-01","2017-01-19","2016-02-03","2015-08-15-preview"],"defaultApiVersion":"2018-04-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"None"},{"resourceType":"checkProvisioningServiceNameAvailability","locations":[],"apiVersions":["2020-03-01","2020-01-01","2018-01-22","2017-11-15","2017-08-21-preview"],"defaultApiVersion":"2018-01-22","capabilities":"None"},{"resourceType":"usages","locations":[],"apiVersions":["2020-04-01","2020-03-01","2019-11-04","2019-07-01-preview","2019-03-22-preview","2019-03-22","2018-12-01-preview","2018-04-01","2018-01-22","2017-07-01","2017-01-19","2016-02-03","2015-08-15-preview"],"defaultApiVersion":"2018-04-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-04-01","2020-03-01","2019-11-04","2019-07-01-preview","2019-03-22-preview","2019-03-22","2018-12-01-preview","2018-04-01","2018-01-22","2017-07-01","2017-01-19","2016-02-03","2015-08-15-preview"],"defaultApiVersion":"2018-04-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"None"},{"resourceType":"operationResults","locations":[],"apiVersions":["2020-04-01","2020-03-01","2020-01-01","2019-11-04","2019-09-01","2019-07-01-preview","2019-03-22-preview","2019-03-22","2018-12-01-preview","2018-04-01-preview","2018-04-01","2018-01-22-preview","2018-01-22","2017-11-15","2017-09-25-preview","2017-08-21-preview","2017-07-01","2017-01-19","2016-02-03","2015-08-15-preview"],"defaultApiVersion":"2018-04-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"None"},{"resourceType":"IotHubs","locations":["West - US","North Europe","East Asia","East US","West Europe","Southeast Asia","Japan - East","Japan West","Australia East","Australia Southeast","West US 2","West - Central US","East US 2","Central US","UK South","UK West","South India","Central - India","Canada Central","Canada East","Brazil South","South Central US","Korea - South","Korea Central","France Central","North Central US"],"apiVersions":["2020-04-01","2020-03-01","2020-01-01","2019-11-04","2019-07-01-preview","2019-03-22-preview","2019-03-22","2018-12-01-preview","2018-04-01-preview","2018-04-01","2018-01-22","2017-07-01","2017-01-19","2016-02-03","2015-08-15-preview"],"defaultApiVersion":"2020-01-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"IotHubs/eventGridFilters","locations":["West - US","East US","West US 2","West Central US","East US 2","Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","UK South","UK West","South India","Central India","Canada - Central","Canada East","Brazil South","South Central US","Korea South","Korea - Central","France Central","North Central US"],"apiVersions":["2018-07-31","2018-01-15-preview"],"capabilities":"None"},{"resourceType":"ProvisioningServices","locations":["East - US","West US","West Europe","North Europe","Southeast Asia","East Asia","Australia - East","Australia Southeast","Japan West","Japan East","UK West","UK South","East - US 2","Central US","West US 2","West Central US","North Central US","South - Central US"],"apiVersions":["2020-03-01","2020-01-01","2018-01-22","2017-11-15","2017-08-21-preview"],"defaultApiVersion":"2020-01-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"IotHubs/securitySettings","locations":["West - US","North Europe","East Asia","East US","West Europe","Southeast Asia","Japan - East","Japan West","Australia East","Australia Southeast","West US 2","West - Central US","East US 2","Central US","UK South","UK West","South India","Central - India","Canada Central","Canada East","Brazil South","South Central US","Korea - South","Korea Central","France Central","North Central US"],"apiVersions":["2019-09-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DevSpaces","namespace":"Microsoft.DevSpaces","resourceTypes":[{"resourceType":"controllers","locations":["East - US","Canada East","West Europe","Canada Central","Central US","West US 2","West - Central US","Southeast Asia","East US 2","North Europe","Australia East","UK - South","South Central US","East Asia","Japan East","Australia SouthEast"],"apiVersions":["2019-04-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"controllers/listConnectionDetails","locations":["East - US","Canada East","West Europe","Canada Central","Central US","West US 2","West - Central US","Southeast Asia","East US 2","North Europe","Australia East","UK - South","South Central US","East Asia","Japan East","Australia SouthEast"],"apiVersions":["2019-04-01"],"capabilities":"None"},{"resourceType":"operations","locations":["East - US","Canada East","West Europe","Canada Central","Central US","West US 2","West - Central US","Southeast Asia","East US 2","North Europe","Australia East","UK - South","South Central US","East Asia","Japan East","Australia SouthEast"],"apiVersions":["2020-05-01","2019-04-01"],"capabilities":"None"},{"resourceType":"locations","locations":["East - US","Canada East","West Europe","Canada Central","Central US","West US 2","West - Central US","Southeast Asia","East US 2","North Europe","Australia East","UK - South","South Central US","East Asia","Japan East","Australia SouthEast"],"apiVersions":["2019-04-01"],"capabilities":"None"},{"resourceType":"locations/operationresults","locations":["East - US","Canada East","West Europe","Canada Central","Central US","West US 2","West - Central US","Southeast Asia","East US 2","North Europe","Australia East","UK - South","South Central US","East Asia","Japan East","Australia SouthEast"],"apiVersions":["2019-04-01"],"capabilities":"None"},{"resourceType":"locations/checkContainerHostMapping","locations":["East - US","Canada East","West Europe","Canada Central","Central US","West US 2","West - Central US","Southeast Asia","East US 2","North Europe","Australia East","UK - South","South Central US","East Asia","Japan East","Australia SouthEast"],"apiVersions":["2019-04-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DataLakeStore","namespace":"Microsoft.DataLakeStore","authorization":{"applicationId":"e9f49c6b-5ce5-44c8-925d-015017e9f7ad","roleDefinitionId":"17eb9cca-f08a-4499-b2d3-852d175f614f"},"resourceTypes":[{"resourceType":"accounts","locations":["East - US 2","North Europe","Central US","West Europe","Australia East"],"apiVersions":["2016-11-01","2015-10-01-preview"],"defaultApiVersion":"2016-11-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"accounts/firewallRules","locations":["East - US 2","North Europe","Central US","West Europe","Australia East"],"apiVersions":["2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"accounts/eventGridFilters","locations":["East - US 2","North Europe","Central US","West Europe","Australia East"],"apiVersions":["2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationresults","locations":[],"apiVersions":["2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":[],"apiVersions":["2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/capability","locations":[],"apiVersions":["2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/usages","locations":[],"apiVersions":["2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":[],"apiVersions":["2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2016-11-01","2015-10-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.NotificationHubs","namespace":"Microsoft.NotificationHubs","resourceTypes":[{"resourceType":"namespaces","locations":["Australia - East","Australia Southeast","Central US","East US","East US 2","West US","West - US 2","North Central US","South Central US","West Central US","East Asia","Southeast - Asia","Brazil South","Japan East","Japan West","North Europe","West Europe","Central - India","South India","West India","Canada Central","Canada East","UK West","UK - South","Germany West Central"],"apiVersions":["2017-04-01","2016-03-01","2014-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"namespaces/notificationHubs","locations":["Australia - East","Australia Southeast","Central US","East US","East US 2","West US","West - US 2","North Central US","South Central US","West Central US","East Asia","Southeast - Asia","Brazil South","Japan East","Japan West","North Europe","West Europe","Central - India","South India","West India","Canada Central","Canada East","UK West","UK - South","Germany West Central"],"apiVersions":["2017-04-01","2016-03-01","2014-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"checkNamespaceAvailability","locations":["Australia - East","Australia Southeast","Central US","East US","East US 2","West US","West - US 2","North Central US","South Central US","West Central US","East Asia","Southeast - Asia","Brazil South","Japan East","Japan West","North Europe","West Europe","Central - India","South India","West India","Canada Central","Canada East","UK West","UK - South","Germany West Central"],"apiVersions":["2017-04-01","2016-03-01","2014-09-01"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["Australia - East","Australia Southeast","Central US","East US","East US 2","West US","West - US 2","North Central US","South Central US","West Central US","East Asia","Southeast - Asia","Brazil South","Japan East","Japan West","North Europe","West Europe","Central - India","South India","West India","Canada Central","Canada East","UK West","UK - South","Germany West Central"],"apiVersions":["2017-04-01","2016-03-01","2014-09-01"],"capabilities":"None"},{"resourceType":"operations","locations":["Australia - East","Australia Southeast","Central US","East US","East US 2","West US","West - US 2","North Central US","South Central US","West Central US","East Asia","Southeast - Asia","Brazil South","Japan East","Japan West","North Europe","West Europe","Central - India","South India","West India","Canada Central","Canada East","UK West","UK - South","Germany West Central"],"apiVersions":["2017-04-01","2016-03-01","2014-09-01"],"capabilities":"None"},{"resourceType":"operationResults","locations":["Australia - East","Australia Southeast","Central US","East US","East US 2","West US","West - US 2","North Central US","South Central US","West Central US","East Asia","Southeast - Asia","Brazil South","Japan East","Japan West","North Europe","West Europe","Central - India","South India","West India","Canada Central","Canada East","UK West","UK - South","Germany West Central"],"apiVersions":["2017-04-01","2016-03-01","2014-09-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.HDInsight","namespace":"Microsoft.HDInsight","authorizations":[{"applicationId":"9191c4da-09fe-49d9-a5f1-d41cbe92ad95","roleDefinitionId":"d102a6f3-d9cb-4633-8950-1243b975886c","managedByRoleDefinitionId":"346da55d-e1db-4a5a-89db-33ab3cdb6fc6"},{"applicationId":"7865c1d2-f040-46cc-875f-831a1ef6a28a","roleDefinitionId":"e27c0895-d168-46d5-8b65-870eb2350378"}],"resourceTypes":[{"resourceType":"clusters","locations":["East - US 2","South Central US","Australia Southeast","Central India","West Central - US","West US 2","Canada East","Canada Central","Brazil South","UK South","UK - West","East Asia","Australia East","Japan East","Japan West","North Europe","West - Europe","North Central US","Central US","Southeast Asia","East US","Korea - South","Korea Central","West US","South India","France Central","UAE North","Switzerland - North","Switzerland West","South Africa North","Germany West Central"],"apiVersions":["2018-06-01-preview","2015-03-01-preview"],"defaultApiVersion":"2015-03-01-preview","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"clusters/applications","locations":["East - US 2","South Central US","Australia Southeast","Central India","West Central - US","West US 2","Canada East","Canada Central","Brazil South","UK South","UK - West","East Asia","Australia East","Japan East","Japan West","North Europe","West - Europe","North Central US","Central US","Southeast Asia","East US","Korea - South","Korea Central","West US","South India","France Central","UAE North","Switzerland - North","Switzerland West","South Africa North","Germany West Central"],"apiVersions":["2018-06-01-preview","2015-03-01-preview"],"defaultApiVersion":"2015-03-01-preview","capabilities":"None"},{"resourceType":"clusters/operationresults","locations":["East - US 2","South Central US","Australia Southeast","Central India","West Central - US","West US 2","Canada East","Canada Central","Brazil South","UK South","UK - West","East Asia","Australia East","Japan East","Japan West","North Europe","West - Europe","North Central US","Central US","Southeast Asia","East US","Korea - South","Korea Central","West US","South India","France Central","UAE North","Switzerland - North","Switzerland West","South Africa North","Germany West Central"],"apiVersions":["2018-06-01-preview","2015-03-01-preview"],"defaultApiVersion":"2015-03-01-preview","capabilities":"None"},{"resourceType":"locations","locations":["East - Asia","Southeast Asia","East US","East US 2","West US","North Central US","South - Central US","Central US","North Europe","West Europe","Japan East","Japan - West","Australia East","Australia Southeast","Brazil South","Central India"],"apiVersions":["2018-06-01-preview","2015-03-01-preview"],"defaultApiVersion":"2015-03-01-preview","capabilities":"None"},{"resourceType":"locations/capabilities","locations":["East - US 2","South Central US","Australia Southeast","Central India","West Central - US","West US 2","Canada East","Canada Central","Brazil South","UK South","UK - West","East Asia","Australia East","Japan East","Japan West","North Europe","West - Europe","North Central US","Central US","Southeast Asia","East US","Korea - South","Korea Central","West US","South India","France Central","UAE North","Switzerland - North","Switzerland West","South Africa North","Germany West Central"],"apiVersions":["2018-06-01-preview","2015-03-01-preview"],"defaultApiVersion":"2015-03-01-preview","capabilities":"None"},{"resourceType":"locations/usages","locations":["East - US 2","South Central US","Australia Southeast","Central India","West Central - US","West US 2","Canada East","Canada Central","Brazil South","UK South","UK - West","East Asia","Australia East","Japan East","Japan West","North Europe","West - Europe","North Central US","Central US","Southeast Asia","East US","Korea - South","Korea Central","West US","South India","France Central","UAE North","Switzerland - North","Switzerland West","South Africa North","Germany West Central"],"apiVersions":["2018-06-01-preview","2015-03-01-preview"],"defaultApiVersion":"2015-03-01-preview","capabilities":"None"},{"resourceType":"locations/billingSpecs","locations":["East - US 2","South Central US","Australia Southeast","Central India","West Central - US","West US 2","Canada East","Canada Central","Brazil South","UK South","UK - West","East Asia","Australia East","Japan East","Japan West","North Europe","West - Europe","North Central US","Central US","Southeast Asia","East US","Korea - South","Korea Central","West US","South India","France Central","UAE North","Switzerland - North","Switzerland West","South Africa North","Germany West Central"],"apiVersions":["2018-06-01-preview","2015-03-01-preview"],"defaultApiVersion":"2015-03-01-preview","capabilities":"None"},{"resourceType":"locations/operationresults","locations":["East - US 2","South Central US","Australia Southeast","Central India","West Central - US","West US 2","Canada East","Canada Central","Brazil South","UK South","UK - West","East Asia","Australia East","Japan East","Japan West","North Europe","West - Europe","North Central US","Central US","Southeast Asia","East US","Korea - South","Korea Central","West US","South India","France Central","UAE North","Switzerland - North","Switzerland West","South Africa North","Germany West Central"],"apiVersions":["2018-06-01-preview","2015-03-01-preview"],"defaultApiVersion":"2015-03-01-preview","capabilities":"None"},{"resourceType":"locations/azureasyncoperations","locations":["East - US 2","South Central US","Australia Southeast","Central India","West Central - US","West US 2","Canada East","Canada Central","Brazil South","UK South","UK - West","East Asia","Australia East","Japan East","Japan West","North Europe","West - Europe","North Central US","Central US","Southeast Asia","East US","Korea - South","Korea Central","West US","South India","France Central","UAE North","Switzerland - North","Switzerland West","South Africa North","Germany West Central"],"apiVersions":["2018-06-01-preview","2015-03-01-preview"],"defaultApiVersion":"2015-03-01-preview","capabilities":"None"},{"resourceType":"locations/validateCreateRequest","locations":["East - US 2","South Central US","Australia Southeast","Central India","West Central - US","West US 2","Canada East","Canada Central","Brazil South","UK South","UK - West","East Asia","Australia East","Japan East","Japan West","North Europe","West - Europe","North Central US","Central US","Southeast Asia","East US","Korea - South","Korea Central","West US","South India","France Central","UAE North","Switzerland - North","Switzerland West","South Africa North","Germany West Central"],"apiVersions":["2018-06-01-preview","2015-03-01-preview"],"defaultApiVersion":"2015-03-01-preview","capabilities":"None"},{"resourceType":"operations","locations":["East - Asia","Southeast Asia","East US","East US 2","West US","North Central US","South - Central US","Central US","North Europe","West Europe","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India"],"apiVersions":["2018-06-01-preview","2015-03-01-preview"],"defaultApiVersion":"2015-03-01-preview","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ContainerInstance","namespace":"Microsoft.ContainerInstance","authorizations":[{"applicationId":"6bb8e274-af5d-4df2-98a3-4fd78b4cafd9","roleDefinitionId":"3c60422b-a83a-428d-9830-22609c77aa6c"}],"resourceTypes":[{"resourceType":"containerGroups","locations":["West - Central US","West US","East US","West Europe","West US 2","North Europe","Southeast - Asia","East US 2","Central US","Australia East","UK South","South Central - US","Central India","Brazil South","South India","North Central US","East - Asia","Canada Central","Japan East","Korea Central"],"apiVersions":["2019-12-01","2018-10-01","2018-09-01","2018-07-01","2018-06-01","2018-04-01","2018-02-01-preview","2017-12-01-preview","2017-10-01-preview","2017-08-01-preview"],"capabilities":"SystemAssignedResourceIdentity, - SupportsTags, SupportsLocation"},{"resourceType":"serviceAssociationLinks","locations":["West - Central US","West US","East US","West Europe","West US 2","North Europe","Southeast - Asia","East US 2","Central US","Australia East","UK South","South Central - US","Central India","Brazil South","South India","North Central US","East - Asia","Canada Central","Japan East","Korea Central"],"apiVersions":["2019-12-01","2018-10-01","2018-09-01","2018-07-01","2018-06-01","2018-04-01","2018-02-01-preview","2017-12-01-preview","2017-10-01-preview","2017-08-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"locations","locations":[],"apiVersions":["2019-12-01","2018-10-01","2018-09-01","2018-07-01","2018-06-01","2018-04-01","2018-02-01-preview","2017-12-01-preview","2017-10-01-preview","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"locations/capabilities","locations":["West - Central US","West US","East US","West Europe","West US 2","North Europe","Southeast - Asia","East US 2","Central US","Australia East","UK South","South Central - US","Central India","Brazil South","South India","North Central US","East - Asia","Canada Central","Japan East","Korea Central"],"apiVersions":["2019-12-01","2018-10-01","2018-09-01","2018-07-01","2018-06-01","2018-04-01","2018-02-01-preview","2017-12-01-preview","2017-10-01-preview","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"locations/usages","locations":["West - Central US","West US","East US","West Europe","West US 2","North Europe","Southeast - Asia","East US 2","Central US","Australia East","UK South","South Central - US","Central India","Brazil South","South India","North Central US","East - Asia","Canada Central","Japan East","Korea Central"],"apiVersions":["2019-12-01","2018-10-01","2018-09-01","2018-07-01","2018-06-01","2018-04-01","2018-02-01-preview","2017-12-01-preview","2017-10-01-preview","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"locations/operations","locations":["West - US","East US","West Europe","West US 2","North Europe","Southeast Asia","East - US 2","Central US","Australia East","UK South","South Central US","Central - India","West Central US","Brazil South","South India","North Central US","East - Asia","Canada Central","Japan East","Korea Central"],"apiVersions":["2019-12-01","2018-10-01","2018-09-01","2018-07-01","2018-06-01","2018-04-01","2018-02-01-preview","2017-12-01-preview","2017-10-01-preview","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2019-12-01","2018-10-01","2018-09-01","2018-07-01","2018-06-01","2018-04-01","2018-02-01-preview","2017-12-01-preview","2017-10-01-preview","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"locations/cachedImages","locations":["West - Central US","West US","East US","West Europe","West US 2","North Europe","Southeast - Asia","East US 2","Central US","Australia East","UK South","South Central - US","Central India","Brazil South","South India","North Central US","East - Asia","Canada Central","Japan East","Korea Central"],"apiVersions":["2019-12-01","2018-10-01"],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["West - Central US","West US","East US","West Europe","West US 2","North Europe","Southeast - Asia","East US 2","Central US","Australia East","UK South","South Central - US","Central India","Brazil South","South India","North Central US","East - Asia","Canada Central","Japan East","Korea Central"],"apiVersions":["2019-12-01","2018-12-01","2018-10-01","2018-09-01","2018-07-01","2018-06-01","2018-04-01","2018-02-01-preview","2017-12-01-preview","2017-10-01-preview","2017-08-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Scheduler","namespace":"Microsoft.Scheduler","resourceTypes":[{"resourceType":"jobcollections","locations":["North - Central US","South Central US","North Europe","West Europe","East Asia","Southeast - Asia","West US","East US","Japan West","Japan East","Brazil South","Central - US","East US 2","Australia East","Australia Southeast","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South"],"apiVersions":["2016-03-01","2016-01-01","2014-08-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":["North - Central US","South Central US","North Europe","West Europe","East Asia","Southeast - Asia","West US","East US","Japan West","Japan East","Brazil South","Central - US","East US 2","Australia East","Australia Southeast","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South"],"apiVersions":["2016-03-01","2016-01-01","2014-08-01-preview"],"capabilities":"None"},{"resourceType":"operationResults","locations":["North - Central US","South Central US","North Europe","West Europe","East Asia","Southeast - Asia","West US","East US","Japan West","Japan East","Brazil South","Central - US","East US 2","Australia East","Australia Southeast","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South"],"apiVersions":["2016-03-01","2016-01-01","2014-08-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.RecoveryServices","namespace":"Microsoft.RecoveryServices","authorizations":[{"applicationId":"262044b1-e2ce-469f-a196-69ab7ada62d3","roleDefinitionId":"21CEC436-F7D0-4ADE-8AD8-FEC5668484CC"},{"applicationId":"b8340c3b-9267-498f-b21a-15d5547fd85e","roleDefinitionId":"8A00C8EA-8F1B-45A7-8F64-F4CC61EEE9B6"},{"applicationId":"3b2fa68d-a091-48c9-95be-88d572e08fb7","roleDefinitionId":"47d68fae-99c7-4c10-b9db-2316116a061e"},{"applicationId":"9bdab391-7bbe-42e8-8132-e4491dc29cc0","roleDefinitionId":"0383f7f5-023d-4379-b2c7-9ef786459969"}],"resourceTypes":[{"resourceType":"vaults","locations":["West - US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast - Asia","North Central US","South Central US","Japan East","Japan West","Australia - East","Australia Southeast","Central US","East US 2","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-02-02-preview","2020-02-02","2019-06-15","2019-05-13-preview","2019-05-13","2018-12-20-preview","2018-07-10-preview","2018-07-10","2018-01-10","2017-07-01-preview","2017-07-01","2016-12-01","2016-08-10","2016-06-01","2016-05-01","2015-12-15","2015-12-10","2015-11-10","2015-08-15","2015-08-10","2015-06-10","2015-03-15"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-01-10"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2020-02-02-preview","2020-02-02","2019-06-15","2019-05-13-preview","2019-05-13","2018-07-10-preview","2018-07-10","2018-01-10","2017-09-01","2017-07-01-preview","2017-07-01","2016-12-01","2016-08-10","2016-06-01","2015-12-15","2015-12-10","2015-11-10","2015-08-15","2015-08-10","2015-06-10","2015-03-15"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-08-10"}],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2017-07-01","2016-06-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"}],"capabilities":"None"},{"resourceType":"locations/backupStatus","locations":["West - US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast - Asia","North Central US","South Central US","Japan East","Japan West","Australia - East","Australia Southeast","Central US","East US 2","Central India","South - India","West India","West Central US","Canada Central","Canada East","West - US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2017-07-01","2016-06-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"}],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["West - US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast - Asia","North Central US","South Central US","Japan East","Japan West","Australia - East","Australia Southeast","Central US","East US 2","Central India","South - India","West India","West Central US","Canada Central","Canada East","West - US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2018-01-10"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-01-10"}],"capabilities":"None"},{"resourceType":"locations/allocatedStamp","locations":["West - US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast - Asia","North Central US","South Central US","Japan East","Japan West","Australia - East","Australia Southeast","Central US","East US 2","Central India","South - India","West India","West Central US","Canada Central","Canada East","West - US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2016-06-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"}],"capabilities":"None"},{"resourceType":"locations/allocateStamp","locations":["West - US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast - Asia","North Central US","South Central US","Japan East","Japan West","Australia - East","Australia Southeast","Central US","East US 2","Central India","South - India","West India","West Central US","Canada Central","Canada East","West - US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2016-06-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"}],"capabilities":"None"},{"resourceType":"locations/backupValidateFeatures","locations":["West - US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast - Asia","North Central US","South Central US","Japan East","Japan West","Australia - East","Australia Southeast","Central US","East US 2","Central India","South - India","West India","West Central US","Canada Central","Canada East","West - US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2017-07-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-07-01"}],"capabilities":"None"},{"resourceType":"locations/backupPreValidateProtection","locations":["West - US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast - Asia","North Central US","South Central US","Japan East","Japan West","Australia - East","Australia Southeast","Central US","East US 2","Central India","South - India","West India","West Central US","Canada Central","Canada East","West - US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2017-07-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-07-01"}],"capabilities":"None"},{"resourceType":"locations/backupCrrJobs","locations":["West - US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast - Asia","North Central US","South Central US","Japan East","Japan West","Australia - East","Australia Southeast","Central US","East US 2","Central India","South - India","West India","West Central US","Canada Central","Canada East","West - US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2018-12-20-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-12-20-preview"}],"capabilities":"None"},{"resourceType":"locations/backupCrrJob","locations":["West - US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast - Asia","North Central US","South Central US","Japan East","Japan West","Australia - East","Australia Southeast","Central US","East US 2","Central India","South - India","West India","West Central US","Canada Central","Canada East","West - US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2018-12-20-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-12-20-preview"}],"capabilities":"None"},{"resourceType":"locations/backupAadProperties","locations":["West - US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast - Asia","North Central US","South Central US","Japan East","Japan West","Australia - East","Australia Southeast","Central US","East US 2","Central India","South - India","West India","West Central US","Canada Central","Canada East","West - US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2018-12-20-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-12-20-preview"}],"capabilities":"None"},{"resourceType":"locations/backupCrossRegionRestore","locations":["West - US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast - Asia","North Central US","South Central US","Japan East","Japan West","Australia - East","Australia Southeast","Central US","East US 2","Central India","South - India","West India","West Central US","Canada Central","Canada East","West - US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2018-12-20-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-12-20-preview"}],"capabilities":"None"},{"resourceType":"locations/backupCrrOperationResults","locations":["West - US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast - Asia","North Central US","South Central US","Japan East","Japan West","Australia - East","Australia Southeast","Central US","East US 2","Central India","South - India","West India","West Central US","Canada Central","Canada East","West - US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2018-12-20-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-12-20-preview"}],"capabilities":"None"},{"resourceType":"locations/backupCrrOperationsStatus","locations":["West - US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast - Asia","North Central US","South Central US","Japan East","Japan West","Australia - East","Australia Southeast","Central US","East US 2","Central India","South - India","West India","West Central US","Canada Central","Canada East","West - US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2018-12-20-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-12-20-preview"}],"capabilities":"None"},{"resourceType":"backupProtectedItems","locations":["West - US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast - Asia","North Central US","South Central US","Japan East","Japan West","Australia - East","Australia Southeast","Central US","East US 2","Central India","South - India","West India","West Central US","Canada Central","Canada East","West - US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2017-07-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-07-01-preview"}],"capabilities":"SupportsExtension"},{"resourceType":"replicationEligibilityResults","locations":["West - US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast - Asia","North Central US","South Central US","Japan East","Japan West","Australia - East","Australia Southeast","Central US","East US 2","Central India","South - India","West India","West Central US","Canada Central","Canada East","West - US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2018-07-10"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-07-10"}],"capabilities":"SupportsExtension"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DocumentDB","namespace":"Microsoft.DocumentDB","authorizations":[{"applicationId":"57c0fc58-a83a-41d0-8ae9-08952659bdfd","roleDefinitionId":"FFFD5CF5-FFD3-4B24-B0E2-0715ADD4C282"},{"applicationId":"36e2398c-9dd3-4f29-9a72-d9f2cfc47ad9","roleDefinitionId":"D5A795DE-916D-4818-B015-33C9E103E39B"},{"applicationId":"a232010e-820c-4083-83bb-3ace5fc29d0b"}],"resourceTypes":[{"resourceType":"databaseAccounts","locations":["Australia - Central","Australia East","Australia Southeast","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","France Central","Germany - West Central","Japan East","Japan West","North Central US","North Europe","Norway - East","South Africa North","South Central US","South India","Southeast Asia","Switzerland - North","West Central US","West Europe","West India","West US","West US 2","UAE - North","UK West","UK South","Brazil South","Korea South","Korea Central"],"apiVersions":["2020-04-01","2020-03-01","2019-12-12","2019-08-01-preview","2019-08-01","2016-03-31","2016-03-19","2015-11-06","2015-04-08","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-04-08"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"databaseAccountNames","locations":["Australia - Central","Australia East","Australia Southeast","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","France Central","Germany - West Central","Japan East","Japan West","North Central US","North Europe","Norway - East","South Africa North","South Central US","South India","Southeast Asia","Switzerland - North","West Central US","West Europe","West India","West US","West US 2","UAE - North","UK West","UK South","Brazil South","Korea South","Korea Central"],"apiVersions":["2020-04-01","2020-03-01","2019-12-12","2019-08-01-preview","2019-08-01","2016-03-31","2016-03-19","2015-11-06","2015-04-08","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-04-08"}],"capabilities":"None"},{"resourceType":"operations","locations":["Australia - Central","Australia East","Australia Southeast","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","France Central","Germany - West Central","Japan East","Japan West","North Central US","North Europe","Norway - East","South Africa North","South Central US","South India","Southeast Asia","Switzerland - North","West Central US","West Europe","West India","West US","West US 2","UAE - North","UK West","UK South","Brazil South","Korea South","Korea Central"],"apiVersions":["2020-04-01","2020-03-01","2019-12-12","2019-08-01-preview","2019-08-01","2016-03-31","2016-03-19","2015-11-06","2015-04-08","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-04-08"}],"capabilities":"None"},{"resourceType":"operationResults","locations":["Australia - Central","Australia East","Australia Southeast","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","France Central","Germany - West Central","Japan East","Japan West","North Central US","North Europe","Norway - East","South Africa North","South Central US","South India","Southeast Asia","Switzerland - North","West Central US","West Europe","West India","West US","West US 2","UAE - North","UK West","UK South","Brazil South","Korea South","Korea Central"],"apiVersions":["2020-04-01","2020-03-01","2019-12-12","2019-08-01-preview","2019-08-01","2016-03-31","2016-03-19","2015-11-06","2015-04-08","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-04-08"}],"capabilities":"None"},{"resourceType":"locations/operationsStatus","locations":["Australia - Central","Australia East","Australia Southeast","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","France Central","Germany - West Central","Japan East","Japan West","North Central US","North Europe","Norway - East","South Africa North","South Central US","South India","Southeast Asia","Switzerland - North","West Central US","West Europe","West India","West US","West US 2","UAE - North","UK West","UK South","Brazil South","Korea South","Korea Central"],"apiVersions":["2020-04-01","2020-03-01","2019-12-12","2019-08-01-preview","2019-08-01","2016-03-31","2016-03-19","2015-11-06","2015-04-08","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-04-08"}],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["Australia - Central","Australia East","Australia Southeast","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","France Central","Germany - West Central","Japan East","Japan West","North Central US","North Europe","Norway - East","South Africa North","South Central US","South India","Southeast Asia","Switzerland - North","West Central US","West Europe","West India","West US","West US 2","UAE - North","UK West","UK South","Brazil South","Korea South","Korea Central"],"apiVersions":["2020-04-01","2020-03-01","2019-12-12","2019-08-01-preview","2019-08-01","2016-03-31","2016-03-19","2015-11-06","2015-04-08","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-04-08"}],"capabilities":"None"},{"resourceType":"locations","locations":["Australia - Central","Australia East","Australia Southeast","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","France Central","Germany - West Central","Japan East","Japan West","North Central US","North Europe","Norway - East","South Africa North","South Central US","South India","Southeast Asia","Switzerland - North","West Central US","West Europe","West India","West US","West US 2","UAE - North","UK West","UK South","Brazil South","Korea South","Korea Central"],"apiVersions":["2020-04-01","2020-03-01","2019-12-12","2019-08-01-preview","2019-08-01","2016-03-31","2016-03-19","2015-11-06","2015-04-08","2014-04-01"],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["Australia - Central","Australia East","Australia Southeast","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","France Central","Germany - West Central","Japan East","Japan West","North Central US","North Europe","Norway - East","South Africa North","South Central US","South India","Southeast Asia","Switzerland - North","West Central US","West Europe","West India","West US","West US 2","UAE - North","UK West","UK South","Brazil South","Korea South","Korea Central"],"apiVersions":["2020-04-01","2020-03-01","2019-12-12","2019-08-01-preview","2019-08-01","2016-03-31","2016-03-19","2015-11-06","2015-04-08","2014-04-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ServiceFabric","namespace":"Microsoft.ServiceFabric","authorization":{"applicationId":"74cb6831-0dbb-4be1-8206-fd4df301cdc2","roleDefinitionId":"e55cc65f-6903-4917-b4ef-f8d4640b57f5","managedByRoleDefinitionId":"9e3af657-a8ff-583c-a75c-2fe7c4bcb635"},"resourceTypes":[{"resourceType":"clusters","locations":["West - US","West US 2","West Central US","East US","East US 2","Central US","West - Europe","North Europe","UK West","UK South","Australia East","Australia Southeast","North - Central US","East Asia","Southeast Asia","Japan West","Japan East","South - India","West India","Central India","Brazil South","South Central US","Korea - Central","Korea South","Canada Central","Canada East","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-03-01","2019-11-01-privatepreview","2019-11-01-preview","2019-06-01-preview","2019-03-01-privatepreview","2019-03-01-preview","2019-03-01","2018-02-01-privatepreview","2018-02-01","2017-07-01-privatepreview","2017-07-01-preview","2016-09-01","2016-03-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"clusters/applications","locations":["West - US","West US 2","West Central US","East US","East US 2","Central US","West - Europe","North Europe","UK West","UK South","Australia East","Australia Southeast","North - Central US","East Asia","Southeast Asia","Japan West","Japan East","South - India","West India","Central India","Brazil South","South Central US","Korea - Central","Korea South","Canada Central","Canada East","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-03-01","2019-11-01-privatepreview","2019-11-01-preview","2019-06-01-preview","2019-03-01-privatepreview","2019-03-01-preview","2019-03-01","2017-07-01-preview","2016-09-01","2016-03-01"],"capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"locations","locations":[],"apiVersions":["2020-03-01","2020-02-01-privatepreview","2020-02-01-preview","2019-11-01-privatepreview","2019-11-01-preview","2019-06-01-preview","2019-03-01-privatepreview","2019-03-01-preview","2019-03-01","2018-02-01-privatepreview","2018-02-01","2017-07-01-privatepreview","2017-07-01-preview","2016-09-01","2016-03-01"],"capabilities":"None"},{"resourceType":"locations/clusterVersions","locations":["West - US","West US 2","West Central US","East US","East US 2","Central US","West - Europe","North Europe","UK West","UK South","Australia East","Australia Southeast","North - Central US","East Asia","Southeast Asia","Japan West","Japan East","South - India","West India","Central India","Brazil South","South Central US","Korea - Central","Korea South","Canada Central","Canada East","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-03-01","2020-02-01-privatepreview","2020-02-01-preview","2019-11-01-privatepreview","2019-11-01-preview","2019-06-01-preview","2019-03-01-privatepreview","2019-03-01-preview","2019-03-01","2018-02-01-privatepreview","2018-02-01","2017-07-01-privatepreview","2017-07-01-preview","2016-09-01","2016-03-01"],"capabilities":"None"},{"resourceType":"locations/environments","locations":["West - US","West US 2","West Central US","East US","East US 2","Central US","West - Europe","North Europe","UK West","UK South","Australia East","Australia Southeast","North - Central US","East Asia","Southeast Asia","Japan West","Japan East","South - India","West India","Central India","Brazil South","South Central US","Korea - Central","Korea South","Canada Central","Canada East","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-03-01","2020-02-01-privatepreview","2020-02-01-preview","2019-11-01-privatepreview","2019-11-01-preview","2019-06-01-preview","2019-03-01-privatepreview","2019-03-01-preview","2019-03-01","2018-02-01-privatepreview","2018-02-01","2017-07-01-privatepreview","2017-07-01-preview","2016-09-01","2016-03-01"],"capabilities":"None"},{"resourceType":"locations/operations","locations":["West - US","West US 2","West Central US","East US","East US 2","Central US","West - Europe","North Europe","UK West","UK South","Australia East","Australia Southeast","North - Central US","East Asia","Southeast Asia","Japan West","Japan East","South - India","West India","Central India","Brazil South","South Central US","Korea - Central","Korea South","Canada Central","Canada East","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-03-01","2020-02-01-privatepreview","2020-02-01-preview","2019-11-01-privatepreview","2019-11-01-preview","2019-06-01-preview","2019-03-01-privatepreview","2019-03-01-preview","2019-03-01","2018-02-01-privatepreview","2018-02-01","2017-07-01-privatepreview","2017-07-01-preview","2016-09-01","2016-03-01"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["West - US","West US 2","West Central US","East US","East US 2","Central US","West - Europe","North Europe","UK West","UK South","Australia East","Australia Southeast","North - Central US","East Asia","Southeast Asia","Japan West","Japan East","South - India","West India","Central India","Brazil South","South Central US","Korea - Central","Korea South","Canada Central","Canada East","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-03-01","2020-02-01-privatepreview","2020-02-01-preview","2019-11-01-privatepreview","2019-11-01-preview","2019-06-01-preview","2019-03-01-privatepreview","2019-03-01-preview","2019-03-01","2018-02-01-privatepreview","2018-02-01","2017-07-01-privatepreview","2017-07-01-preview","2016-09-01","2016-03-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-03-01","2020-02-01-privatepreview","2020-02-01-preview","2019-11-01-privatepreview","2019-11-01-preview","2019-06-01-preview","2019-03-01-privatepreview","2019-03-01-preview","2019-03-01","2018-02-01-privatepreview","2018-02-01","2017-07-01-privatepreview","2017-07-01-preview","2016-09-01","2016-03-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DataLakeAnalytics","namespace":"Microsoft.DataLakeAnalytics","resourceTypes":[{"resourceType":"accounts","locations":["East - US 2","North Europe","Central US","West Europe"],"apiVersions":["2016-11-01","2015-10-01-preview"],"defaultApiVersion":"2016-11-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"accounts/dataLakeStoreAccounts","locations":["East - US 2","North Europe","Central US","West Europe"],"apiVersions":["2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"accounts/storageAccounts","locations":["East - US 2","North Europe","Central US","West Europe"],"apiVersions":["2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"accounts/storageAccounts/containers","locations":["East - US 2","North Europe","Central US","West Europe"],"apiVersions":["2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"accounts/storageAccounts/containers/listSasTokens","locations":["East - US 2","North Europe","Central US","West Europe"],"apiVersions":["2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2019-11-01-preview","2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationresults","locations":[],"apiVersions":["2019-11-01-preview","2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":[],"apiVersions":["2019-11-01-preview","2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/capability","locations":[],"apiVersions":["2019-11-01-preview","2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/usages","locations":[],"apiVersions":["2019-11-01-preview","2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2019-11-01-preview","2016-11-01","2015-10-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Maps","namespace":"Microsoft.Maps","authorizations":[{"applicationId":"608f6f31-fed0-4f7b-809f-90f6c9b3de78","roleDefinitionId":"3431F0E6-63BC-482D-A96E-0AB819610A5F"},{"applicationId":"ba1ea022-5807-41d5-bbeb-292c7e1cf5f6","roleDefinitionId":"48195074-b752-4868-be0f-7c324a224aa1"}],"resourceTypes":[{"resourceType":"accounts","locations":["Global"],"apiVersions":["2020-02-01-preview","2018-05-01","2017-01-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"accounts/privateAtlases","locations":["United - States"],"apiVersions":["2020-02-01-preview"],"defaultApiVersion":"2020-02-01-preview","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"accounts/eventGridFilters","locations":[],"apiVersions":["2020-02-01-preview","2018-05-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-02-01-preview","2018-05-01","2017-01-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ServiceBus","namespace":"Microsoft.ServiceBus","authorizations":[{"applicationId":"80a10ef9-8168-493d-abf9-3297c4ef6e3c","roleDefinitionId":"2b7763f7-bbe2-4e19-befe-28c79f1cf7f7"},{"applicationId":"eb070ea5-bd17-41f1-ad68-5851f6e71774"}],"resourceTypes":[{"resourceType":"namespaces","locations":["Australia - East","Australia Southeast","Central US","East US","East US 2","West US 2","West - US","North Central US","South Central US","West Central US","East Asia","Southeast - Asia","Brazil South","Japan East","Japan West","North Europe","West Europe","Central - India","South India","West India","Canada Central","Canada East","UK West","UK - South","Korea Central","Korea South","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2018-01-01-preview","2017-04-01","2015-08-01","2014-09-01"],"defaultApiVersion":"2017-04-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"namespaces/authorizationrules","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/networkrulesets","locations":[],"apiVersions":["2018-01-01-preview","2017-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/queues","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/queues/authorizationrules","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/topics","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/topics/authorizationrules","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/topics/subscriptions","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/topics/subscriptions/rules","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"checkNamespaceAvailability","locations":[],"apiVersions":["2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-08-01"}],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"sku","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"premiumMessagingRegions","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/eventgridfilters","locations":["Australia - East","Australia Southeast","Central US","East US","East US 2","West US 2","West - US","North Central US","South Central US","West Central US","East Asia","Southeast - Asia","Brazil South","Japan East","Japan West","North Europe","West Europe","Central - India","South India","West India","Canada Central","Canada East","UK West","UK - South","Korea Central","Korea South","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/disasterrecoveryconfigs","locations":[],"apiVersions":["2017-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/disasterrecoveryconfigs/checkNameAvailability","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2018-01-01-preview","2017-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":[],"apiVersions":["2018-01-01-preview","2017-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.OperationalInsights","namespace":"Microsoft.OperationalInsights","authorizations":[{"applicationId":"d2a0a418-0aac-4541-82b2-b3142c89da77","roleDefinitionId":"86695298-2eb9-48a7-9ec3-2fdb38b6878b"},{"applicationId":"ca7f3f0b-7d91-482c-8e09-c5d840d0eac5","roleDefinitionId":"5d5a2e56-9835-44aa-93db-d2f19e155438"}],"resourceTypes":[{"resourceType":"workspaces","locations":["East - US","West Europe","Southeast Asia","Australia Southeast","West Central US","Japan - East","UK South","Central India","Canada Central","West US 2","Australia Central","Australia - East","France Central","Korea Central","North Europe","Central US","East Asia","East - US 2","South Central US","North Central US","West US","UK West","South Africa - North","Brazil South","Switzerland North","Switzerland West","Germany West - Central","Australia Central 2","UAE Central"],"apiVersions":["2020-03-01-preview","2017-04-26-preview","2017-03-15-preview","2017-03-03-preview","2017-01-01-preview","2015-11-01-preview","2015-03-20"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2020-03-01-preview","2019-08-01-preview","2017-04-26-preview","2017-03-15-preview","2017-03-03-preview","2017-01-01-preview","2015-11-01-preview","2015-03-20"],"defaultApiVersion":"2015-11-01-preview","capabilities":"None"},{"resourceType":"locations/operationStatuses","locations":["East - US","West Europe","Southeast Asia","Australia Southeast","West Central US","Japan - East","UK South","Central India","Canada Central","West US 2","Australia Central","Australia - East","France Central","Korea Central","North Europe","Central US","East Asia","East - US 2","South Central US","North Central US","West US","UK West","South Africa - North","Brazil South","Switzerland North","Switzerland West","Germany West - Central","Australia Central 2","UAE Central"],"apiVersions":["2020-03-01-preview","2019-08-01-preview","2017-04-26-preview","2017-03-15-preview","2017-03-03-preview","2017-01-01-preview","2015-11-01-preview","2015-03-20"],"defaultApiVersion":"2015-11-01-preview","capabilities":"None"},{"resourceType":"workspaces/scopedPrivateLinkProxies","locations":["East - US","West Europe","Southeast Asia","Australia Southeast","West Central US","Japan - East","UK South","Central India","Canada Central","West US 2","Australia Central","Australia - East","France Central","Korea Central","North Europe","Central US","East Asia","East - US 2","South Central US","North Central US","West US","UK West","South Africa - North","Brazil South","Switzerland North","Switzerland West","Germany West - Central","Australia Central 2","UAE Central"],"apiVersions":["2020-03-01-preview","2019-08-01-preview","2015-11-01-preview"],"defaultApiVersion":"2015-11-01-preview","capabilities":"None"},{"resourceType":"workspaces/query","locations":[],"apiVersions":["2017-10-01"],"capabilities":"None"},{"resourceType":"workspaces/metadata","locations":[],"apiVersions":["2017-10-01"],"capabilities":"None"},{"resourceType":"workspaces/dataSources","locations":["East - US","West Europe","Southeast Asia","Australia Southeast","West Central US","Japan - East","UK South","Central India","Canada Central","West US 2","Australia Central","Australia - East","France Central","Korea Central","North Europe","Central US","East Asia","East - US 2","South Central US","North Central US","West US","UK West","South Africa - North","Brazil South","Switzerland North","Switzerland West","Germany West - Central","Australia Central 2","UAE Central"],"apiVersions":["2020-03-01-preview","2015-11-01-preview"],"defaultApiVersion":"2015-11-01-preview","capabilities":"None"},{"resourceType":"workspaces/linkedStorageAccounts","locations":["East - US","West Europe","Southeast Asia","Australia Southeast","West Central US","Japan - East","UK South","Central India","Canada Central","West US 2","Australia Central","Australia - East","France Central","Korea Central","North Europe","Central US","East Asia","East - US 2","South Central US","North Central US","West US","UK West","South Africa - North","Brazil South","Switzerland North","Switzerland West","Germany West - Central","Australia Central 2","UAE Central"],"apiVersions":["2020-03-01-preview","2019-08-01-preview"],"defaultApiVersion":"2019-08-01-preview","capabilities":"None"},{"resourceType":"storageInsightConfigs","locations":[],"apiVersions":["2020-03-01-preview","2014-10-10"],"capabilities":"SupportsExtension"},{"resourceType":"workspaces/linkedServices","locations":["East - US","West Europe","Southeast Asia","Australia Southeast","West Central US","Japan - East","UK South","Central India","Canada Central","West US 2","Australia Central","Australia - East","France Central","Korea Central","North Europe","Central US","East Asia","East - US 2","South Central US","North Central US","West US","UK West","South Africa - North","Brazil South","Switzerland North","Switzerland West","Germany West - Central","Australia Central 2","UAE Central"],"apiVersions":["2020-03-01-preview","2019-08-01-preview","2015-11-01-preview"],"defaultApiVersion":"2015-11-01-preview","capabilities":"None"},{"resourceType":"linkTargets","locations":["East - US"],"apiVersions":["2020-03-01-preview","2015-03-20"],"capabilities":"None"},{"resourceType":"deletedWorkspaces","locations":["East - US","West Europe","Southeast Asia","Australia Southeast","West Central US","Japan - East","UK South","Central India","Canada Central","West US 2","Australia Central","Australia - East","France Central","Korea Central","North Europe","Central US","East Asia","East - US 2","South Central US","North Central US","West US","UK West","South Africa - North","Brazil South","Switzerland North","Switzerland West","Germany West - Central","Australia Central 2","UAE Central"],"apiVersions":["2020-03-01-preview"],"defaultApiVersion":"2020-03-01-preview","capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-03-01-preview","2015-11-01-preview","2014-11-10"],"defaultApiVersion":"2015-11-01-preview","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.OperationsManagement","namespace":"Microsoft.OperationsManagement","authorization":{"applicationId":"d2a0a418-0aac-4541-82b2-b3142c89da77","roleDefinitionId":"aa249101-6816-4966-aafa-08175d795f14"},"resourceTypes":[{"resourceType":"solutions","locations":["East - US","West Europe","Southeast Asia","Australia Southeast","West Central US","Japan - East","UK South","Central India","Canada Central","West US 2","Australia East","Australia - Central","France Central","Korea Central","North Europe","Central Us","East - Us 2","East Asia","West Us","South Central Us","North Central US","UK West","South - Africa North","Brazil South","Switzerland North","Switzerland West","UAE Central","Australia - Central 2","Germany West Central"],"apiVersions":["2015-11-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"managementconfigurations","locations":["East - US","West Europe","Southeast Asia","Australia Southeast","West Central US","Japan - East","UK South","Central India","Canada Central","West US 2","Australia East","Australia - Central","France Central","Korea Central","North Europe","Central Us","East - Us 2","East Asia","West Us","South Central Us","North Central US","UK West","South - Africa North","Brazil South","Switzerland North","Switzerland West"],"apiVersions":["2015-11-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"managementassociations","locations":[],"apiVersions":["2015-11-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"views","locations":["East - US","West Europe","Southeast Asia","Australia Southeast","West Central US","Japan - East","UK South","Central India","Canada Central","West US 2","Australia East","Australia - Central","France Central","Korea Central","North Europe","Central Us","East - Us 2","East Asia","West Us","South Central Us","North Central US","UK West","South - Africa North","Brazil South","Switzerland North","Switzerland West"],"apiVersions":["2017-08-21-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2015-11-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Automation","namespace":"Microsoft.Automation","authorizations":[{"applicationId":"fc75330b-179d-49af-87dd-3b1acf6827fa","roleDefinitionId":"95fd5de3-d071-4362-92bf-cf341c1de832"}],"resourceTypes":[{"resourceType":"automationAccounts","locations":["Japan - East","East US 2","West Europe","South Africa North","Southeast Asia","South - Central US","North Central US","East Asia","Central US","West US","Australia - Central","Australia East","Korea Central","East US","West US 2","Brazil South","UK - South","West Central US","North Europe","Canada Central","Australia Southeast","Central - India","France Central"],"apiVersions":["2020-01-13-preview","2018-06-30","2018-01-15","2017-05-15-preview","2015-10-31","2015-01-01-preview"],"defaultApiVersion":"2018-06-30","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"automationAccounts/runbooks","locations":["Japan - East","East US 2","West Europe","South Africa North","Southeast Asia","South - Central US","North Central US","East Asia","West US","Central US","Australia - Central","Australia East","Korea Central","East US","West US 2","Brazil South","UK - South","West Central US","North Europe","Canada Central","Australia Southeast","Central - India","France Central"],"apiVersions":["2018-06-30","2018-01-15","2017-05-15-preview","2015-10-31","2015-01-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"automationAccounts/configurations","locations":["Japan - East","East US 2","West Europe","South Africa North","West US","Central US","Southeast - Asia","South Central US","North Central US","Australia Central","Australia - East","Korea Central","East US","West US 2","Brazil South","UK South","West - Central US","Central India","Australia Southeast","Canada Central","North - Europe","East Asia","France Central"],"apiVersions":["2018-06-30","2018-01-15","2017-05-15-preview","2015-10-31","2015-01-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"automationAccounts/webhooks","locations":["Japan - East","East US 2","West Europe","South Africa North","Southeast Asia","South - Central US","North Central US","East Asia","Central US","West US","Australia - Central","Korea Central","East US","West US 2","Brazil South","UK South","West - Central US","North Europe","Canada Central","Australia Southeast","Central - India","Australia East","France Central"],"apiVersions":["2018-06-30","2018-01-15","2017-05-15-preview","2015-10-31","2015-01-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["South - Central US"],"apiVersions":["2018-06-30","2018-01-15","2017-05-15-preview","2015-10-31","2015-01-01-preview"],"capabilities":"None"},{"resourceType":"automationAccounts/softwareUpdateConfigurations","locations":["Japan - East","East US 2","West Europe","South Africa North","Southeast Asia","South - Central US","North Central US","East Asia","Central US","West US","Australia - Central","Australia East","Korea Central","East US","West US 2","Brazil South","UK - South","West Central US","North Europe","Canada Central","Australia Southeast","Central - India","France Central"],"apiVersions":["2018-06-30","2018-01-15","2017-05-15-preview"],"capabilities":"None"},{"resourceType":"automationAccounts/jobs","locations":["Japan - East","East US 2","West Europe","South Africa North","Southeast Asia","South - Central US","North Central US","East Asia","Central US","West US","Australia - Central","Australia East","Korea Central","East US","West US 2","Brazil South","UK - South","West Central US","North Europe","Canada Central","Australia Southeast","Central - India","France Central"],"apiVersions":["2018-06-30","2018-01-15","2017-05-15-preview","2015-10-31","2015-01-01-preview"],"capabilities":"None"},{"resourceType":"automationAccounts/privateLinkResources","locations":["Japan - East","East US 2","West Europe","South Africa North","Southeast Asia","South - Central US","North Central US","East Asia","Central US","West US","Australia - Central","Australia East","Korea Central","East US","West US 2","Brazil South","UK - South","West Central US","North Europe","Canada Central","Australia Southeast","Central - India","France Central"],"apiVersions":["2020-01-13-preview"],"capabilities":"None"},{"resourceType":"automationAccounts/privateEndpointConnections","locations":["Japan - East","East US 2","West Europe","South Africa North","Southeast Asia","South - Central US","North Central US","East Asia","Central US","West US","Australia - Central","Australia East","Korea Central","East US","West US 2","Brazil South","UK - South","West Central US","North Europe","Canada Central","Australia Southeast","Central - India","France Central"],"apiVersions":["2020-01-13-preview"],"capabilities":"None"},{"resourceType":"automationAccounts/privateEndpointConnectionProxies","locations":["Japan - East","East US 2","West Europe","South Africa North","Southeast Asia","South - Central US","North Central US","East Asia","Central US","West US","Australia - Central","Australia East","Korea Central","East US","West US 2","Brazil South","UK - South","West Central US","North Europe","Canada Central","Australia Southeast","Central - India","France Central"],"apiVersions":["2020-01-13-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ApiManagement","namespace":"Microsoft.ApiManagement","authorization":{"applicationId":"8602e328-9b72-4f2d-a4ae-1387d013a2b3","roleDefinitionId":"e263b525-2e60-4418-b655-420bae0b172e"},"resourceTypes":[{"resourceType":"service","locations":["East - US","Canada East","North Europe","West Europe","Central India","UAE North","Australia - Central","Germany West Central","West Central US","Norway East","Switzerland - North","Korea South","West India","Korea Central","South Africa North","UK - West","Brazil South","East Asia","South India","Canada Central","Australia - Southeast","Japan East","North Central US","Southeast Asia","West US 2","Central - US","UK South","Australia East","Japan West","West US","France Central","South - Central US","East US 2"],"apiVersions":["2019-12-01-preview","2019-12-01","2019-01-01","2018-06-01-preview","2018-01-01","2017-03-01","2016-10-10","2016-07-07","2015-09-15","2014-02-14"],"defaultApiVersion":"2019-01-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"validateServiceName","locations":[],"apiVersions":["2015-09-15","2014-02-14"],"capabilities":"None"},{"resourceType":"checkServiceNameAvailability","locations":[],"apiVersions":["2015-09-15","2014-02-14"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2019-12-01-preview","2019-12-01","2019-01-01","2018-06-01-preview","2018-01-01","2017-03-01","2016-10-10","2016-07-07","2015-09-15","2014-02-14"],"capabilities":"None"},{"resourceType":"reportFeedback","locations":[],"apiVersions":["2019-12-01-preview","2019-12-01","2019-01-01","2018-06-01-preview","2018-01-01","2017-03-01","2016-10-10","2016-07-07","2015-09-15","2014-02-14"],"capabilities":"None"},{"resourceType":"checkFeedbackRequired","locations":[],"apiVersions":["2019-12-01-preview","2019-12-01","2019-01-01","2018-06-01-preview","2018-01-01","2017-03-01","2016-10-10","2016-07-07","2015-09-15","2014-02-14"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2019-12-01-preview","2019-12-01","2019-01-01","2018-06-01-preview","2018-01-01","2017-03-01","2016-10-10","2016-07-07","2015-09-15","2014-02-14"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"],"capabilities":"None"},{"resourceType":"managementGroups","locations":[],"apiVersions":["2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"],"capabilities":"None"},{"resourceType":"getEntities","locations":[],"apiVersions":["2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"],"capabilities":"None"},{"resourceType":"operationResults","locations":[],"apiVersions":["2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"],"capabilities":"None"},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2020-05-01","2020-02-01","2019-11-01","2018-03-01-beta"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"],"capabilities":"None"},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"],"capabilities":"None"},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.CognitiveServices","namespace":"Microsoft.CognitiveServices","authorizations":[{"applicationId":"7d312290-28c8-473c-a0ed-8e53749b6d6d","roleDefinitionId":"5cb87f79-a7c3-4a95-9414-45b65974b51b"}],"resourceTypes":[{"resourceType":"accounts","locations":["Global","Australia - East","Brazil South","West US","West US 2","West Europe","North Europe","Southeast - Asia","East Asia","West Central US","South Central US","East US","East US - 2","Canada Central","Japan East","Central India","UK South","Japan West","Korea - Central","France Central","North Central US","Central US","South Africa North","UAE - North"],"apiVersions":["2017-04-18","2016-02-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"operations","locations":["Global","Australia - East","Brazil South","West US","West US 2","West Europe","North Europe","Southeast - Asia","East Asia","West Central US","South Central US","East US","East US - 2","Canada Central","Japan East","Central India","UK South","Japan West","Korea - Central","France Central","North Central US","Central US","South Africa North","UAE - North"],"apiVersions":["2017-04-18","2016-02-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["Global","Australia - East","Brazil South","West US","West US 2","West Europe","North Europe","Southeast - Asia","East Asia","West Central US","South Central US","East US","East US - 2","Canada Central","Japan East","Central India","UK South","Japan West","Korea - Central","France Central","North Central US","Central US","South Africa North","UAE - North"],"apiVersions":["2017-04-18","2016-02-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":["Global","Australia - East","Brazil South","West US","West US 2","West Europe","North Europe","Southeast - Asia","East Asia","West Central US","South Central US","East US","East US - 2","Canada Central","Japan East","Central India","UK South","Japan West","Korea - Central","France Central","North Central US","Central US","South Africa North","UAE - North"],"apiVersions":["2017-04-18","2016-02-01-preview"],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["Global","Australia - East","Brazil South","West US","West US 2","West Europe","North Europe","Southeast - Asia","East Asia","West Central US","South Central US","East US","East US - 2","Canada Central","Japan East","Central India","UK South","Japan West","Korea - Central","France Central","North Central US","Central US","South Africa North","UAE - North"],"apiVersions":["2017-04-18","2016-02-01-preview"],"capabilities":"None"},{"resourceType":"locations/checkSkuAvailability","locations":["Global","Australia - East","Brazil South","West US","West US 2","West Europe","North Europe","Southeast - Asia","East Asia","West Central US","South Central US","East US","East US - 2","Canada Central","Japan East","Central India","UK South","Japan West","Korea - Central","France Central","North Central US","Central US","South Africa North","UAE - North"],"apiVersions":["2017-04-18","2016-02-01-preview"],"capabilities":"None"},{"resourceType":"checkDomainAvailability","locations":[],"apiVersions":["2017-04-18"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ContainerService","namespace":"Microsoft.ContainerService","authorizations":[{"applicationId":"7319c514-987d-4e9b-ac3d-d38c4f427f4c","roleDefinitionId":"1b4a0c7f-2217-416f-acfa-cf73452fdc1c","managedByRoleDefinitionId":"9e3af657-a8ff-583c-a75c-2fe7c4bcb635","managedByAuthorization":{"allowManagedByInheritance":true}},{"applicationId":"6dae42f8-4368-4678-94ff-3960e28e3630","roleDefinitionId":"831388fc-33b1-4dd1-b64c-40fdcaf96654"}],"resourceTypes":[{"resourceType":"containerServices","locations":["Japan - East","Central US","East US 2","Japan West","East Asia","South Central US","North - Central US","Australia East","Australia Southeast","Brazil South","Southeast - Asia","West US","West Europe","North Europe","East US","UK West","UK South","West - Central US","West US 2","South India","Central India","West India","Canada - East","Canada Central","Korea South","Korea Central","South Africa North"],"apiVersions":["2017-07-01","2017-01-31","2016-09-30","2016-03-30"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"managedClusters","locations":["East US","West - Europe","France Central","Central US","Canada Central","Canada East","UK South","West - US","West US 2","Australia East","North Europe","Japan East","Japan West","East - US 2","South Central US","North Central US","Southeast Asia","Australia Southeast","UK - West","South India","Central India","East Asia","Korea South","Korea Central","South - Africa North","Brazil South","Germany North","Switzerland North","Switzerland - West","Germany West Central","UAE North","Norway East","Norway West"],"apiVersions":["2020-06-01","2020-04-01","2020-03-01","2020-02-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-06-01","2019-04-01","2019-02-01","2018-08-01-preview","2018-03-31","2017-08-31"],"defaultApiVersion":"2019-04-01","capabilities":"SystemAssignedResourceIdentity, - SupportsTags, SupportsLocation"},{"resourceType":"openShiftManagedClusters","locations":["East - US","East US 2","West US","West US 2","South Central US","Central US","West - Europe","North Europe","UK South","UK West","France Central","Canada East","Canada - Central","Australia East","Australia Southeast","East Asia","Southeast Asia","North - Central US","Brazil South","Japan East","Korea Central","Central India","South - Africa North"],"apiVersions":["2019-09-30-preview","2019-04-30"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"locations/openShiftClusters","locations":["East - US","East US 2","West US","West US 2","South Central US","Central US","West - Europe","North Europe","France Central","UK West","UK South","Canada East","Canada - Central","Australia East","Australia Southeast","East Asia","Southeast Asia","North - Central US","Brazil South","Japan East","Korea Central","Central India","South - Africa North"],"apiVersions":["2019-09-30-preview","2019-04-30","2018-09-30-preview"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2017-08-31","2017-01-31","2016-09-30","2016-03-30","2015-11-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationresults","locations":["East - US","West Europe","France Central","Central US","UK West","West Central US","West - US","West US 2","South India","Central India","West India","Canada East","Canada - Central","Korea South","Korea Central","UK South","Australia East","Australia - Southeast","North Europe","Japan East","Japan West","East US 2","South Central - US","North Central US","Southeast Asia","East Asia","South Africa North","Brazil - South","Germany North","Germany West Central","Switzerland North","Switzerland - West","UAE North","Norway East","Norway West"],"apiVersions":["2017-08-31","2016-03-30"],"capabilities":"None"},{"resourceType":"locations/operations","locations":["Japan - East","Central US","East US 2","Japan West","East Asia","South Central US","North - Central US","Australia East","Australia Southeast","Brazil South","Southeast - Asia","West US","West Europe","France Central","North Europe","East US","Canada - Central","Canada East","UK West","UK South","West Central US","West US 2","South - India","Central India","West India","Korea South","Korea Central","South Africa - North","Germany North","Germany West Central","Switzerland North","Switzerland - West","UAE North","Norway East","Norway West"],"apiVersions":["2016-03-30"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2018-10-31","2018-03-31","2017-08-31","2017-07-01","2017-01-31","2016-09-30","2016-03-30","2015-11-01-preview"],"capabilities":"None"},{"resourceType":"locations/orchestrators","locations":["East - US","West Europe","France Central","Central US","Canada East","Canada Central","UK - South","UK West","West US","West US 2","Australia East","Australia Southeast","North - Europe","Japan East","Japan West","Korea Central","Korea South","East US 2","South - Central US","North Central US","Southeast Asia","South India","Central India","East - Asia","South Africa North","Brazil South","Germany North","Germany West Central","Switzerland - North","Switzerland West","UAE North","Norway East","Norway West"],"apiVersions":["2020-06-01","2020-04-01","2020-03-01","2020-02-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-06-01","2019-04-01","2017-09-30"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Cache","namespace":"Microsoft.Cache","authorization":{"applicationId":"96231a05-34ce-4eb4-aa6a-70759cbb5e83","roleDefinitionId":"4f731528-ba85-45c7-acfb-cd0a9b3cf31b"},"resourceTypes":[{"resourceType":"Redis","locations":["North - Central US","South Central US","Central US","West Europe","North Europe","West - US","East US","East US 2","Japan East","Japan West","Brazil South","Southeast - Asia","East Asia","Australia East","Australia Southeast","Central India","West - India","Canada Central","Canada East","UK South","UK West","West US 2","West - Central US","South India","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-07-01","2018-03-01","2017-10-01","2017-02-01","2016-04-01","2015-08-01","2015-03-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01"}],"zoneMappings":[{"location":"East - US 2","zones":["3","1","2"]},{"location":"Central US","zones":["3","1","2"]},{"location":"West - Europe","zones":["3","1","2"]},{"location":"France Central","zones":["3","1","2"]},{"location":"Southeast - Asia","zones":["3","1","2"]},{"location":"West US 2","zones":["3","1","2"]},{"location":"North - Europe","zones":["3","1","2"]},{"location":"East US","zones":["3","1","2"]},{"location":"UK - South","zones":["3","1","2"]},{"location":"Japan East","zones":["3","1","2"]},{"location":"Australia - East","zones":[]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":[]},{"location":"Canada Central","zones":[]},{"location":"Germany - West Central","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"Redis/privateLinkResources","locations":["Australia - Southeast","Switzerland North","Germany West Central"],"apiVersions":["2019-07-01","2018-03-01","2017-10-01","2017-02-01","2016-04-01","2015-08-01","2015-03-01","2014-04-01-preview","2014-04-01"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-04-01-preview","2019-07-01","2018-03-01","2017-10-01","2017-02-01","2016-04-01","2015-08-01","2015-03-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01"}],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["North - Central US","South Central US","Central US","West Europe","North Europe","West - US","East US","East US 2","Japan East","Japan West","Brazil South","Southeast - Asia","East Asia","Australia East","Australia Southeast","Central India","West - India","South India","Canada Central","Canada East","UK South","UK West","West - US 2","West Central US","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-07-01","2018-03-01","2017-10-01","2017-02-01","2016-04-01","2015-08-01","2015-03-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01"}],"capabilities":"None"},{"resourceType":"locations/operationsStatus","locations":["West - Europe","West US","East US 2"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2020-04-01-preview"}],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2019-07-01","2018-03-01","2017-10-01","2017-02-01","2016-04-01","2015-08-01","2015-03-01","2014-04-01-preview","2014-04-01-alpha","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01"}],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2019-07-01","2018-03-01","2017-10-01","2017-02-01","2016-04-01","2015-08-01","2015-03-01","2014-04-01-preview","2014-04-01-alpha","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01"}],"capabilities":"None"},{"resourceType":"Redis/EventGridFilters","locations":["North - Central US","South Central US","Central US","West Europe","North Europe","West - US","East US","East US 2","Japan East","Japan West","Brazil South","Southeast - Asia","East Asia","Australia East","Australia Southeast","Central India","West - India","South India","Canada Central","Canada East","UK South","UK West","West - US 2","West Central US","Korea Central","Korea South","France South","France - Central","Australia Central","Australia Central 2","South Africa North","South - Africa West","UAE Central","UAE North","Switzerland North","Switzerland West","Germany - North","Germany West Central","Norway East","Norway West"],"apiVersions":["2019-07-01","2018-03-01","2017-10-01","2017-02-01","2016-04-01","2015-08-01","2015-03-01","2014-04-01-preview","2014-04-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DBforPostgreSQL","namespace":"Microsoft.DBforPostgreSQL","authorizations":[{"applicationId":"76cd24bf-a9fc-4344-b1dc-908275de6d6d","roleDefinitionId":"c13b7b9c-2ed1-4901-b8a8-16f35468da29"},{"applicationId":"93efed00-6552-4119-833a-422b297199f9","roleDefinitionId":"a864a0a2-ab66-47a6-97a8-223dc1379f87"},{"applicationId":"123cd850-d9df-40bd-94d5-c9f07b7fa203"}],"resourceTypes":[{"resourceType":"operations","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","Norway East","South Africa North","South Africa West","South Central - US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK - West","West Central US","West Europe","West India","West US","West US 2"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"servers","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"serversv2","locations":["East US 2","East - US","North Central US","Canada Central","Australia East","UK South","West - Europe","Southeast Asia","West US 2","North Europe"],"apiVersions":["2018-03-29-privatepreview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"serverGroups","locations":["East - US 2","East US","North Central US","Canada Central","Australia East","UK South","West - Europe","Southeast Asia","West US 2","North Europe"],"apiVersions":["2018-03-29-privatepreview"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"singleServers","locations":["West US 2","North - Central US","East US","East US 2"],"apiVersions":["2020-02-14-privatepreview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"servers/recoverableServers","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"servers/virtualNetworkRules","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","Norway East","South Africa North","South Africa West","South Central - US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK - West","West Central US","West Europe","West India","West US","West US 2"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","Norway East","South Africa North","South Africa West","South Central - US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK - West","West Central US","West Europe","West India","West US","West US 2"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/azureAsyncOperation","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/administratorOperationResults","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/administratorAzureAsyncOperation","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionProxyOperationResults","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionProxyAzureAsyncOperation","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionOperationResults","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionAzureAsyncOperation","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/performanceTiers","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/securityAlertPoliciesAzureAsyncOperation","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2017-12-01"],"capabilities":"None"},{"resourceType":"locations/securityAlertPoliciesOperationResults","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2017-12-01"],"capabilities":"None"},{"resourceType":"locations/recommendedActionSessionsAzureAsyncOperation","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/recommendedActionSessionsOperationResults","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/topQueryStatistics","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/queryTexts","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/waitStatistics","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/advisors","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/privateLinkResources","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/privateEndpointConnections","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/privateEndpointConnectionProxies","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/keys","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-01-01-privatepreview","2020-01-01-preview","2020-01-01"],"capabilities":"None"},{"resourceType":"locations/serverKeyAzureAsyncOperation","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-01-01-privatepreview","2020-01-01-preview","2020-01-01"],"capabilities":"None"},{"resourceType":"locations/serverKeyOperationResults","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-01-01-privatepreview","2020-01-01-preview","2020-01-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DBforMySQL","namespace":"Microsoft.DBforMySQL","authorizations":[{"applicationId":"76cd24bf-a9fc-4344-b1dc-908275de6d6d","roleDefinitionId":"c13b7b9c-2ed1-4901-b8a8-16f35468da29"},{"applicationId":"123cd850-d9df-40bd-94d5-c9f07b7fa203"}],"resourceTypes":[{"resourceType":"operations","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","Norway East","South Africa North","South Africa West","South Central - US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK - West","West Central US","West Europe","West India","West US","West US 2"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"servers","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"servers/recoverableServers","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central US","Central India","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"servers/virtualNetworkRules","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","Norway East","South Africa North","South Africa West","South Central - US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK - West","West Central US","West Europe","West India","West US","West US 2"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","Norway East","South Africa North","South Africa West","South Central - US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK - West","West Central US","West Europe","West India","West US","West US 2"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/azureAsyncOperation","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/administratorOperationResults","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/administratorAzureAsyncOperation","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionProxyOperationResults","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionProxyAzureAsyncOperation","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionOperationResults","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionAzureAsyncOperation","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/performanceTiers","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","UAE North","Norway East","Switzerland North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/securityAlertPoliciesAzureAsyncOperation","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2017-12-01"],"capabilities":"None"},{"resourceType":"locations/securityAlertPoliciesOperationResults","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2017-12-01"],"capabilities":"None"},{"resourceType":"locations/recommendedActionSessionsAzureAsyncOperation","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/recommendedActionSessionsOperationResults","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/topQueryStatistics","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/queryTexts","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/waitStatistics","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/advisors","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/privateLinkResources","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/privateEndpointConnections","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/privateEndpointConnectionProxies","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/keys","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-01-01-privatepreview","2020-01-01-preview","2020-01-01"],"capabilities":"None"},{"resourceType":"locations/serverKeyAzureAsyncOperation","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-01-01-privatepreview","2020-01-01-preview","2020-01-01"],"capabilities":"None"},{"resourceType":"locations/serverKeyOperationResults","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-01-01-privatepreview","2020-01-01-preview","2020-01-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ContainerRegistry","namespace":"Microsoft.ContainerRegistry","authorizations":[{"applicationId":"6a0ec4d3-30cb-4a83-91c0-ae56bc0e3d26","roleDefinitionId":"78e18383-93eb-418a-9887-bc9271046576"},{"applicationId":"737d58c1-397a-46e7-9d12-7d8c830883c2","roleDefinitionId":"716bb53a-0390-4428-bf41-b1bedde7d751"},{"applicationId":"918d0db8-4a38-4938-93c1-9313bdfe0272","roleDefinitionId":"dcd2d2c9-3f80-4d72-95a8-2593111b4b12"},{"applicationId":"d2fa1650-4805-4a83-bcb9-cf41fe63539c","roleDefinitionId":"c15f8dab-b103-4f8d-9afb-fbe4b8e98de2"},{"applicationId":"a4c95b9e-3994-40cc-8953-5dc66d48348d","roleDefinitionId":"dc88c655-90fa-48d9-8d51-003cc8738508"},{"applicationId":"62c559cd-db0c-4da0-bab2-972528c65d42","roleDefinitionId":"437b639a-6d74-491d-959f-d172e8c5c1fc"}],"resourceTypes":[{"resourceType":"registries","locations":["West - US","East US","South Central US","West Europe","North Europe","UK South","UK - West","Australia East","Australia Southeast","Central India","Korea Central","France - Central","South Africa North","UAE North","East Asia","Japan East","Japan - West","Southeast Asia","South India","Brazil South","Canada East","Canada - Central","Central US","East US 2","North Central US","West Central US","West - US 2","Switzerland North"],"apiVersions":["2019-12-01-preview","2019-05-01","2017-10-01","2017-03-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"registries/scopeMaps","locations":["West - US","East US","South Central US","West Europe","North Europe","UK South","UK - West","Australia East","Australia Southeast","Central India","East Asia","Japan - East","Japan West","Southeast Asia","South India","Brazil South","Canada East","Canada - Central","Central US","East US 2","North Central US","West Central US","West - US 2","Korea Central","France Central","South Africa North","UAE North","Switzerland - North"],"apiVersions":["2019-05-01-preview"],"capabilities":"None"},{"resourceType":"registries/tokens","locations":["West - US","East US","South Central US","West Europe","North Europe","UK South","UK - West","Australia East","Australia Southeast","Central India","East Asia","Japan - East","Japan West","Southeast Asia","South India","Brazil South","Canada East","Canada - Central","Central US","East US 2","North Central US","West Central US","West - US 2","Korea Central","France Central","South Africa North","UAE North","Switzerland - North"],"apiVersions":["2019-05-01-preview"],"capabilities":"None"},{"resourceType":"registries/generateCredentials","locations":["West - US","East US","South Central US","West Europe","North Europe","UK South","UK - West","Australia East","Australia Southeast","Central India","East Asia","Japan - East","Japan West","Southeast Asia","South India","Brazil South","Canada East","Canada - Central","Central US","East US 2","North Central US","West Central US","West - US 2","Korea Central","France Central","South Africa North","UAE North","Switzerland - North"],"apiVersions":["2019-05-01-preview"],"capabilities":"None"},{"resourceType":"registries/privateEndpointConnections","locations":["West - US","East US","South Central US","West Europe","Switzerland North","North - Europe","UK South","UK West","Australia East","Australia Southeast","Central - India","East Asia","Japan East","Japan West","Southeast Asia","South India","Brazil - South","Canada East","Canada Central","Central US","East US 2","North Central - US","West Central US","West US 2","Korea Central","France Central","South - Africa North","UAE North"],"apiVersions":["2019-12-01-preview"],"capabilities":"None"},{"resourceType":"registries/privateEndpointConnectionProxies","locations":["West - US","East US","South Central US","West Europe","Switzerland North","North - Europe","UK South","UK West","Australia East","Australia Southeast","Central - India","East Asia","Japan East","Japan West","Southeast Asia","South India","Brazil - South","Canada East","Canada Central","Central US","East US 2","North Central - US","West Central US","West US 2","Korea Central","France Central","South - Africa North","UAE North"],"apiVersions":["2019-12-01-preview"],"capabilities":"None"},{"resourceType":"registries/privateEndpointConnectionProxies/validate","locations":["West - US","East US","South Central US","West Europe","Switzerland North","North - Europe","UK South","UK West","Australia East","Australia Southeast","Central - India","East Asia","Japan East","Japan West","Southeast Asia","South India","Brazil - South","Canada East","Canada Central","Central US","East US 2","North Central - US","West Central US","West US 2","Korea Central","France Central","South - Africa North","UAE North"],"apiVersions":["2019-12-01-preview"],"capabilities":"None"},{"resourceType":"registries/privateLinkResources","locations":["West - US","East US","South Central US","West Europe","Switzerland North","North - Europe","UK South","UK West","Australia East","Australia Southeast","Central - India","East Asia","Japan East","Japan West","Southeast Asia","South India","Brazil - South","Canada East","Canada Central","Central US","East US 2","North Central - US","West Central US","West US 2","Korea Central","France Central","South - Africa North","UAE North"],"apiVersions":["2019-12-01-preview"],"capabilities":"None"},{"resourceType":"registries/importImage","locations":["South - Central US","West Central US","East US","West Europe","West US","Japan East","North - Europe","Southeast Asia","North Central US","East US 2","West US 2","Brazil - South","Australia East","Central India","Korea Central","France Central","South - Africa North","UAE North","Central US","Canada East","Canada Central","UK - South","UK West","Australia Southeast","East Asia","Japan West","South India","Switzerland - North"],"apiVersions":["2019-12-01-preview","2019-05-01","2017-10-01"],"capabilities":"None"},{"resourceType":"registries/exportPipelines","locations":["West - US","East US","South Central US","West Europe","Switzerland North","North - Europe","UK South","UK West","Australia East","Australia Southeast","Central - India","East Asia","Japan East","Japan West","Southeast Asia","South India","Brazil - South","Canada East","Canada Central","Central US","East US 2","North Central - US","West Central US","West US 2","Korea Central","France Central","South - Africa North","UAE North"],"apiVersions":["2019-12-01-preview"],"capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"registries/importPipelines","locations":["West - US","East US","South Central US","West Europe","Switzerland North","North - Europe","UK South","UK West","Australia East","Australia Southeast","Central - India","East Asia","Japan East","Japan West","Southeast Asia","South India","Brazil - South","Canada East","Canada Central","Central US","East US 2","North Central - US","West Central US","West US 2","Korea Central","France Central","South - Africa North","UAE North"],"apiVersions":["2019-12-01-preview"],"capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"registries/pipelineRuns","locations":["West - US","East US","South Central US","West Europe","Switzerland North","North - Europe","UK South","UK West","Australia East","Australia Southeast","Central - India","East Asia","Japan East","Japan West","Southeast Asia","South India","Brazil - South","Canada East","Canada Central","Central US","East US 2","North Central - US","West Central US","West US 2","Korea Central","France Central","South - Africa North","UAE North"],"apiVersions":["2019-12-01-preview"],"capabilities":"None"},{"resourceType":"registries/listBuildSourceUploadUrl","locations":["East - US","West Europe","West US 2","South Central US","Australia East","Australia - Southeast","Brazil South","Canada Central","Canada East","Central India","Central - US","East Asia","East US 2","Japan East","Japan West","North Central US","North - Europe","Southeast Asia","South India","UK South","UK West","West US","West - Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland - North"],"apiVersions":["2019-06-01-preview","2019-04-01","2018-09-01"],"capabilities":"None"},{"resourceType":"registries/scheduleRun","locations":["East - US","West Europe","West US 2","South Central US","Australia East","Australia - Southeast","Brazil South","Canada Central","Canada East","Central India","Central - US","East Asia","East US 2","Japan East","Japan West","North Central US","North - Europe","Southeast Asia","South India","UK South","UK West","West US","West - Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland - North"],"apiVersions":["2019-06-01-preview","2019-04-01","2018-09-01"],"capabilities":"None"},{"resourceType":"registries/runs","locations":["East - US","West Europe","West US 2","South Central US","Australia East","Australia - Southeast","Brazil South","Canada Central","Canada East","Central India","Central - US","East Asia","East US 2","Japan East","Japan West","North Central US","North - Europe","Southeast Asia","South India","UK South","UK West","West US","West - Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland - North"],"apiVersions":["2019-06-01-preview","2019-04-01","2018-09-01"],"capabilities":"None"},{"resourceType":"registries/taskRuns","locations":["East - US","West Europe","West US 2","South Central US","Australia East","Australia - Southeast","Brazil South","Canada Central","Canada East","Central India","Central - US","East Asia","East US 2","Japan East","Japan West","North Central US","North - Europe","Southeast Asia","South India","UK South","UK West","West US","West - Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland - North"],"apiVersions":["2019-06-01-preview"],"defaultApiVersion":"2019-06-01-preview","capabilities":"None"},{"resourceType":"registries/taskRuns/listDetails","locations":["East - US","West Europe","West US 2","South Central US","Australia East","Australia - Southeast","Brazil South","Canada Central","Canada East","Central India","Central - US","East Asia","East US 2","Japan East","Japan West","North Central US","North - Europe","Southeast Asia","South India","UK South","UK West","West US","West - Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland - North"],"apiVersions":["2019-06-01-preview"],"capabilities":"None"},{"resourceType":"registries/agentPools","locations":["East - US","West US 2","South Central US","East US 2"],"apiVersions":["2019-06-01-preview"],"defaultApiVersion":"2019-06-01-preview","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"registries/agentPools/listQueueStatus","locations":["East - US","West US 2","South Central US","East US 2"],"apiVersions":["2019-06-01-preview"],"capabilities":"None"},{"resourceType":"registries/runs/listLogSasUrl","locations":["East - US","West Europe","West US 2","South Central US","Australia East","Australia - Southeast","Brazil South","Canada Central","Canada East","Central India","Central - US","East Asia","East US 2","Japan East","Japan West","North Central US","North - Europe","Southeast Asia","South India","UK South","UK West","West US","West - Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland - North"],"apiVersions":["2019-06-01-preview","2019-04-01","2018-09-01"],"capabilities":"None"},{"resourceType":"registries/runs/cancel","locations":["East - US","West Europe","West US 2","South Central US","Australia East","Australia - Southeast","Brazil South","Canada Central","Canada East","Central India","Central - US","East Asia","East US 2","Japan East","Japan West","North Central US","North - Europe","Southeast Asia","South India","UK South","UK West","West US","West - Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland - North"],"apiVersions":["2019-06-01-preview","2019-04-01","2018-09-01"],"capabilities":"None"},{"resourceType":"registries/tasks","locations":["East - US","West Europe","West US 2","South Central US","Australia East","Australia - Southeast","Brazil South","Canada Central","Canada East","Central India","Central - US","East Asia","East US 2","Japan East","Japan West","North Central US","North - Europe","Southeast Asia","South India","UK South","UK West","West US","West - Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland - North"],"apiVersions":["2019-06-01-preview","2019-04-01","2018-09-01"],"defaultApiVersion":"2019-04-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"registries/tasks/listDetails","locations":["East - US","West Europe","West US 2","South Central US","Australia East","Australia - Southeast","Brazil South","Canada Central","Canada East","Central India","Central - US","East Asia","East US 2","Japan East","Japan West","North Central US","North - Europe","Southeast Asia","South India","UK South","UK West","West US","West - Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland - North"],"apiVersions":["2019-06-01-preview","2019-04-01","2018-09-01"],"capabilities":"None"},{"resourceType":"registries/getBuildSourceUploadUrl","locations":["East - US","West Europe","West US 2","South Central US","Australia East","Australia - Southeast","Brazil South","Canada Central","Canada East","Central India","Central - US","East Asia","East US 2","Japan East","Japan West","North Central US","North - Europe","Southeast Asia","South India","UK South","UK West","West US","West - Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland - North"],"apiVersions":["2018-02-01-preview"],"capabilities":"None"},{"resourceType":"registries/queueBuild","locations":["East - US","West Europe","West US 2","South Central US","Australia East","Australia - Southeast","Brazil South","Canada Central","Canada East","Central India","Central - US","East Asia","East US 2","Japan East","Japan West","North Central US","North - Europe","Southeast Asia","South India","UK South","UK West","West US","West - Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland - North"],"apiVersions":["2018-02-01-preview"],"capabilities":"None"},{"resourceType":"registries/builds","locations":["East - US","West Europe","West US 2","South Central US","Australia East","Australia - Southeast","Brazil South","Canada Central","Canada East","Central India","Central - US","East Asia","East US 2","Japan East","Japan West","North Central US","North - Europe","Southeast Asia","South India","UK South","UK West","West US","West - Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland - North"],"apiVersions":["2018-02-01-preview"],"capabilities":"None"},{"resourceType":"registries/builds/getLogLink","locations":["East - US","West Europe","West US 2","South Central US","Australia East","Australia - Southeast","Brazil South","Canada Central","Canada East","Central India","Central - US","East Asia","East US 2","Japan East","Japan West","North Central US","North - Europe","Southeast Asia","South India","UK South","UK West","West US","West - Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland - North"],"apiVersions":["2018-02-01-preview"],"capabilities":"None"},{"resourceType":"registries/builds/cancel","locations":["East - US","West Europe","West US 2","South Central US","Australia East","Australia - Southeast","Brazil South","Canada Central","Canada East","Central India","Central - US","East Asia","East US 2","Japan East","Japan West","North Central US","North - Europe","Southeast Asia","South India","UK South","UK West","West US","West - Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland - North"],"apiVersions":["2018-02-01-preview"],"capabilities":"None"},{"resourceType":"registries/buildTasks","locations":["East - US","West Europe","West US 2","South Central US","Australia East","Australia - Southeast","Brazil South","Canada Central","Canada East","Central India","Central - US","East Asia","East US 2","Japan East","Japan West","North Central US","North - Europe","Southeast Asia","South India","UK South","UK West","West US","West - Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland - North"],"apiVersions":["2018-02-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"registries/buildTasks/listSourceRepositoryProperties","locations":["East - US","West Europe","West US 2","South Central US","Australia East","Australia - Southeast","Brazil South","Canada Central","Canada East","Central India","Central - US","East Asia","East US 2","Japan East","Japan West","North Central US","North - Europe","Southeast Asia","South India","UK South","UK West","West US","West - Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland - North"],"apiVersions":["2018-02-01-preview"],"capabilities":"None"},{"resourceType":"registries/buildTasks/steps","locations":["East - US","West Europe","West US 2","South Central US","Australia East","Australia - Southeast","Brazil South","Canada Central","Canada East","Central India","Central - US","East Asia","East US 2","Japan East","Japan West","North Central US","North - Europe","Southeast Asia","South India","UK South","UK West","West US","West - Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland - North"],"apiVersions":["2018-02-01-preview"],"capabilities":"None"},{"resourceType":"registries/buildTasks/steps/listBuildArguments","locations":["East - US","West Europe","West US 2","South Central US","Australia East","Australia - Southeast","Brazil South","Canada Central","Canada East","Central India","Central - US","East Asia","East US 2","Japan East","Japan West","North Central US","North - Europe","Southeast Asia","South India","UK South","UK West","West US","West - Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland - North"],"apiVersions":["2018-02-01-preview"],"capabilities":"None"},{"resourceType":"registries/replications","locations":["South - Central US","West Central US","East US","West Europe","West US","Japan East","North - Europe","Southeast Asia","North Central US","East US 2","West US 2","Brazil - South","Australia East","Central India","Korea Central","South Africa North","UAE - North","France Central","Central US","Canada East","Canada Central","UK South","UK - West","Australia Southeast","East Asia","Japan West","South India","Switzerland - North"],"apiVersions":["2019-12-01-preview","2019-05-01","2017-10-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"registries/webhooks","locations":["West - Central US","East US","West Europe","South Central US","West US","Japan East","North - Europe","Southeast Asia","North Central US","East US 2","West US 2","Brazil - South","Australia East","Central India","Korea Central","South Africa North","UAE - North","France Central","Central US","Canada East","Canada Central","UK South","UK - West","Australia Southeast","East Asia","Japan West","South India","Switzerland - North"],"apiVersions":["2019-12-01-preview","2019-05-01","2017-10-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"registries/webhooks/ping","locations":["West - Central US","East US","West Europe","South Central US","West US","Japan East","North - Europe","Southeast Asia","North Central US","East US 2","West US 2","Brazil - South","Australia East","Central India","Korea Central","South Africa North","UAE - North","France Central","Central US","Canada East","Canada Central","UK South","UK - West","Australia Southeast","East Asia","Japan West","South India","Switzerland - North"],"apiVersions":["2019-12-01-preview","2019-05-01","2017-10-01"],"capabilities":"None"},{"resourceType":"registries/webhooks/getCallbackConfig","locations":["West - Central US","East US","West Europe","South Central US","West US","Japan East","North - Europe","Southeast Asia","North Central US","East US 2","West US 2","Brazil - South","Australia East","Central India","Korea Central","South Africa North","UAE - North","France Central","Central US","Canada East","Canada Central","UK South","UK - West","Australia Southeast","East Asia","Japan West","South India","Switzerland - North"],"apiVersions":["2019-12-01-preview","2019-05-01","2017-10-01"],"capabilities":"None"},{"resourceType":"registries/webhooks/listEvents","locations":["West - Central US","East US","West Europe","South Central US","West US","Japan East","North - Europe","Southeast Asia","North Central US","East US 2","West US 2","Brazil - South","Australia East","Central India","Korea Central","South Africa North","UAE - North","France Central","Central US","Canada East","Canada Central","UK South","UK - West","Australia Southeast","East Asia","Japan West","South India","Switzerland - North"],"apiVersions":["2019-12-01-preview","2019-05-01","2017-10-01"],"capabilities":"None"},{"resourceType":"locations/setupAuth","locations":["East - US","West Europe","West US 2","South Central US","Australia East","Australia - Southeast","Brazil South","Canada Central","Canada East","Central India","Central - US","East Asia","East US 2","Japan East","Japan West","North Central US","North - Europe","Southeast Asia","South India","UK South","UK West","West US","West - Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland - North"],"apiVersions":["2018-02-01-preview"],"capabilities":"None"},{"resourceType":"locations/authorize","locations":["East - US","West Europe","West US 2","South Central US","Australia East","Australia - Southeast","Brazil South","Canada Central","Canada East","Central India","Central - US","East Asia","East US 2","Japan East","Japan West","North Central US","North - Europe","Southeast Asia","South India","UK South","UK West","West US","West - Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland - North"],"apiVersions":["2018-02-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["West - Central US","East US","West Europe","South Central US","West US","Japan East","North - Europe","Southeast Asia","North Central US","East US 2","West US 2","Brazil - South","Australia East","Central India","Korea Central","France Central","Central - US","South Africa North","UAE North","Canada East","Canada Central","UK South","UK - West","Australia Southeast","East Asia","Japan West","South India","Switzerland - North"],"apiVersions":["2019-12-01-preview","2019-05-01-preview","2019-05-01","2017-10-01"],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["West - Central US","East US","West Europe","South Central US","West US","Japan East","North - Europe","Southeast Asia","North Central US","East US 2","West US 2","Brazil - South","Australia East","Central India","Korea Central","South Africa North","UAE - North","France Central","Central US","Canada East","Canada Central","UK South","UK - West","Australia Southeast","East Asia","Japan West","South India","Switzerland - North"],"apiVersions":["2019-05-01","2017-10-01"],"capabilities":"None"},{"resourceType":"registries/GetCredentials","locations":["West - US","East US","South Central US","West Europe"],"apiVersions":["2016-06-27-preview"],"capabilities":"None"},{"resourceType":"registries/listCredentials","locations":["South - Central US","East US","West US","West Europe","North Europe","UK South","UK - West","Australia East","Australia Southeast","Central India","Korea Central","South - Africa North","UAE North","France Central","East Asia","Japan East","Japan - West","Southeast Asia","South India","Brazil South","Canada East","Canada - Central","Central US","East US 2","North Central US","West Central US","West - US 2","Switzerland North"],"apiVersions":["2019-12-01-preview","2019-05-01","2017-10-01","2017-03-01"],"capabilities":"None"},{"resourceType":"registries/regenerateCredential","locations":["South - Central US","West US","East US","West Europe","North Europe","UK South","UK - West","Australia East","Australia Southeast","Central India","Korea Central","South - Africa North","UAE North","France Central","East Asia","Japan East","Japan - West","Southeast Asia","South India","Brazil South","Canada East","Canada - Central","Central US","East US 2","North Central US","West Central US","West - US 2","Switzerland North"],"apiVersions":["2019-12-01-preview","2019-05-01","2017-10-01","2017-03-01"],"capabilities":"None"},{"resourceType":"registries/listUsages","locations":["West - Central US","East US","West Europe","South Central US","West US","Japan East","North - Europe","Southeast Asia","North Central US","East US 2","West US 2","Brazil - South","Australia East","Central India","Korea Central","South Africa North","UAE - North","France Central","Central US","Canada East","Canada Central","UK South","UK - West","Australia Southeast","East Asia","Japan West","South India","Switzerland - North"],"apiVersions":["2019-12-01-preview","2019-05-01","2017-10-01"],"capabilities":"None"},{"resourceType":"registries/listPolicies","locations":["West - US","East US","South Central US","West Europe","North Europe","UK South","UK - West","Australia East","Australia Southeast","Central India","Korea Central","South - Africa North","UAE North","France Central","East Asia","Japan East","Japan - West","Southeast Asia","South India","Brazil South","Canada East","Canada - Central","Central US","East US 2","North Central US","West Central US","West - US 2","Switzerland North"],"apiVersions":["2017-10-01"],"capabilities":"None"},{"resourceType":"registries/updatePolicies","locations":["West - US","East US","South Central US","West Europe","North Europe","UK South","UK - West","Australia East","Australia Southeast","Central India","Korea Central","South - Africa North","UAE North","France Central","East Asia","Japan East","Japan - West","Southeast Asia","South India","Brazil South","Canada East","Canada - Central","Central US","East US 2","North Central US","West Central US","West - US 2","Switzerland North"],"apiVersions":["2017-10-01"],"capabilities":"None"},{"resourceType":"registries/regenerateCredentials","locations":["West - US","East US","South Central US","West Europe"],"apiVersions":["2016-06-27-preview"],"capabilities":"None"},{"resourceType":"registries/eventGridFilters","locations":["South - Central US","West Central US","East US","West Europe","West US","Japan East","North - Europe","Southeast Asia","North Central US","East US 2","West US 2","Brazil - South","Australia East","Central India","Korea Central","South Africa North","UAE - North","France Central","Central US","Canada East","Canada Central","UK South","UK - West","Australia Southeast","East Asia","Japan West","South India","Switzerland - North"],"apiVersions":["2019-05-01","2017-10-01"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["South - Central US","East US","West US","Central US","East US 2","North Central US","West - Central US","West US 2","Brazil South","Canada East","Canada Central","West - Europe","North Europe","UK South","UK West","Australia East","Australia Southeast","Central - India","East Asia","Japan East","Japan West","Southeast Asia","South India","Korea - Central","France Central","South Africa North","UAE North","Switzerland North"],"apiVersions":["2019-12-01-preview","2019-05-01","2017-10-01","2017-06-01-preview","2017-03-01","2016-06-27-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["South - Central US","East US","West US","Central US","East US 2","North Central US","West - Central US","West US 2","Brazil South","Canada East","Canada Central","West - Europe","North Europe","UK South","UK West","Australia East","Australia Southeast","Central - India","East Asia","Japan East","Japan West","Southeast Asia","South India","Korea - Central","France Central","South Africa North","UAE North","Switzerland North"],"apiVersions":["2019-12-01-preview","2019-05-01","2017-10-01","2017-06-01-preview","2017-03-01"],"capabilities":"None"},{"resourceType":"locations","locations":["South - Central US","East US","West US","Central US","East US 2","North Central US","West - Central US","West US 2","Brazil South","Canada East","Canada Central","West - Europe","North Europe","UK South","UK West","Australia East","Australia Southeast","Central - India","East Asia","Japan East","Japan West","Southeast Asia","South India","Korea - Central","France Central","South Africa North","UAE North","Switzerland North"],"apiVersions":["2019-12-01-preview","2019-05-01-preview","2019-05-01","2017-10-01","2017-06-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AzureStack","namespace":"Microsoft.AzureStack","resourceTypes":[{"resourceType":"operations","locations":["Global"],"apiVersions":["2017-06-01"],"capabilities":"None"},{"resourceType":"registrations","locations":["West - Central US","Global"],"apiVersions":["2017-06-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"registrations/products","locations":["West - Central US","Global"],"apiVersions":["2017-06-01","2016-01-01"],"capabilities":"None"},{"resourceType":"registrations/customerSubscriptions","locations":["West - Central US","Global"],"apiVersions":["2017-06-01"],"capabilities":"None"},{"resourceType":"cloudManifestFiles","locations":["Global"],"apiVersions":["2017-06-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.StorageSync","namespace":"Microsoft.StorageSync","authorizations":[{"applicationId":"9469b9f5-6722-4481-a2b2-14ed560b706f","roleDefinitionId":"4cd49d82-1f4d-43fc-af0c-1c1203668e5a"}],"resourceTypes":[{"resourceType":"storageSyncServices","locations":["West - Central US","West US","West Europe","North Europe","Southeast Asia","East - Asia","Australia East","Australia Southeast","East US","Canada Central","Canada - East","Central US","East US 2","UK South","UK West","Central India","South - India","North Central US","South Central US","Brazil South","Japan East","Japan - West","West US 2","Korea Central","Korea South","France Central","France South","South - Africa North","South Africa West","UAE North","UAE Central"],"apiVersions":["2020-03-01","2019-10-01","2019-06-01","2019-03-01","2019-02-01","2018-10-01","2018-07-01","2018-04-02","2018-01-01-preview","2017-06-05-preview"],"defaultApiVersion":"2018-04-02","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"storageSyncServices/syncGroups","locations":["West - Central US","West US","West Europe","North Europe","Southeast Asia","East - Asia","Australia East","Australia Southeast","East US","Canada Central","Canada - East","Central US","East US 2","UK South","UK West","Central India","South - India","North Central US","South Central US","Brazil South","Japan East","Japan - West","West US 2","Korea Central","Korea South","France Central","France South","South - Africa North","South Africa West","UAE North","UAE Central"],"apiVersions":["2020-03-01","2019-10-01","2019-06-01","2019-03-01","2019-02-01","2018-10-01","2018-07-01","2018-04-02","2018-01-01-preview","2017-06-05-preview"],"defaultApiVersion":"2017-06-05-preview","capabilities":"None"},{"resourceType":"storageSyncServices/syncGroups/cloudEndpoints","locations":["West - Central US","West US","West Europe","North Europe","Southeast Asia","East - Asia","Australia East","Australia Southeast","East US","Canada Central","Canada - East","Central US","East US 2","UK South","UK West","Central India","South - India","North Central US","South Central US","Brazil South","Japan East","Japan - West","West US 2","Korea Central","Korea South","France Central","France South","South - Africa North","South Africa West","UAE North","UAE Central"],"apiVersions":["2020-03-01","2019-10-01","2019-06-01","2019-03-01","2019-02-01","2018-10-01","2018-07-01","2018-04-02","2018-01-01-preview","2017-06-05-preview"],"defaultApiVersion":"2017-06-05-preview","capabilities":"None"},{"resourceType":"storageSyncServices/syncGroups/serverEndpoints","locations":["West - Central US","West US","West Europe","North Europe","Southeast Asia","East - Asia","Australia East","Australia Southeast","East US","Canada Central","Canada - East","Central US","East US 2","UK South","UK West","Central India","South - India","North Central US","South Central US","Brazil South","Japan East","Japan - West","West US 2","Korea Central","Korea South","France Central","France South","South - Africa North","South Africa West","UAE North","UAE Central"],"apiVersions":["2020-03-01","2019-10-01","2019-06-01","2019-03-01","2019-02-01","2018-10-01","2018-07-01","2018-04-02","2018-01-01-preview","2017-06-05-preview"],"defaultApiVersion":"2017-06-05-preview","capabilities":"None"},{"resourceType":"storageSyncServices/registeredServers","locations":["West - Central US","West US","West Europe","North Europe","Southeast Asia","East - Asia","Australia East","Australia Southeast","East US","Canada Central","Canada - East","Central US","East US 2","UK South","UK West","Central India","South - India","North Central US","South Central US","Brazil South","Japan East","Japan - West","West US 2","Korea Central","Korea South","France Central","France South","South - Africa North","South Africa West","UAE North","UAE Central"],"apiVersions":["2020-03-01","2019-10-01","2019-06-01","2019-03-01","2019-02-01","2018-10-01","2018-07-01","2018-04-02","2018-01-01-preview","2017-06-05-preview"],"defaultApiVersion":"2017-06-05-preview","capabilities":"None"},{"resourceType":"storageSyncServices/workflows","locations":["West - Central US","West US","West Europe","North Europe","Southeast Asia","East - Asia","Australia East","Australia Southeast","East US","Canada Central","Canada - East","Central US","East US 2","UK South","UK West","Central India","South - India","North Central US","South Central US","Brazil South","Japan East","Japan - West","West US 2","Korea Central","Korea South","France Central","France South","South - Africa North","South Africa West","UAE North","UAE Central"],"apiVersions":["2020-03-01","2019-10-01","2019-06-01","2019-03-01","2019-02-01","2018-10-01","2018-07-01","2018-04-02","2018-01-01-preview","2017-06-05-preview"],"defaultApiVersion":"2017-06-05-preview","capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-03-01","2019-10-01","2019-06-01","2019-03-01","2019-02-01","2018-10-01","2018-07-01","2018-04-02","2018-01-01-preview","2017-06-05-preview"],"defaultApiVersion":"2017-06-05-preview","capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-03-01","2019-10-01","2019-06-01","2019-03-01","2019-02-01","2018-10-01","2018-07-01","2018-04-02"],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["West - US","West Europe","North Europe","Southeast Asia","East Asia","Australia East","Australia - Southeast","East US","Canada Central","Canada East","Central US","East US - 2","UK South","UK West","Central India","South India","North Central US","South - Central US","Brazil South","Japan East","Japan West","West Central US","West - US 2","Korea Central","Korea South","France Central","France South","South - Africa North","South Africa West","UAE North","UAE Central"],"apiVersions":["2020-03-01","2019-10-01","2019-06-01","2019-03-01","2019-02-01","2018-10-01","2018-07-01","2018-04-02"],"defaultApiVersion":"2018-04-02","capabilities":"None"},{"resourceType":"locations/workflows","locations":["West - US","West Europe","North Europe","Southeast Asia","East Asia","Australia East","Australia - Southeast","East US","Canada Central","Canada East","Central US","East US - 2","UK South","UK West","Central India","South India","West Central US","West - US 2","North Central US","South Central US","Brazil South","Japan East","Japan - West","Korea Central","Korea South","France Central","France South","South - Africa North","South Africa West","UAE North","UAE Central"],"apiVersions":["2020-03-01","2019-10-01","2019-06-01","2019-03-01","2019-02-01","2018-10-01","2018-07-01","2018-04-02"],"defaultApiVersion":"2018-04-02","capabilities":"None"},{"resourceType":"locations/operations","locations":["West - Central US","West US","West Europe","North Europe","Southeast Asia","East - Asia","Australia East","Australia Southeast","East US","Canada Central","Canada - East","Central US","East US 2","UK South","UK West","Central India","South - India","North Central US","South Central US","Brazil South","Japan East","Japan - West","West US 2","Korea Central","Korea South","France Central","France South","South - Africa North","South Africa West","UAE North","UAE Central"],"apiVersions":["2020-03-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations/operationResults","locations":["West - Central US","West US","West Europe","North Europe","Southeast Asia","East - Asia","Australia East","Australia Southeast","East US","Canada Central","Canada - East","Central US","East US 2","UK South","UK West","Central India","South - India","North Central US","South Central US","Brazil South","Japan East","Japan - West","West US 2","Korea Central","Korea South","France Central","France South","South - Africa North","South Africa West","UAE North","UAE Central"],"apiVersions":["2020-03-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ImportExport","namespace":"Microsoft.ImportExport","authorization":{"applicationId":"7de4d5c5-5b32-4235-b8a9-33b34d6bcd2a","roleDefinitionId":"9f7aa6bb-9454-46b6-8c01-a4b0f33ca151"},"resourceTypes":[{"resourceType":"jobs","locations":["Australia - East","Australia Southeast","Brazil South","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","Japan East","Japan - West","Korea Central","North Central US","North Europe","South Central US","Southeast - Asia","South India","UK South","UK West","West Central US","West Europe","West - India","West US","West US 2"],"apiVersions":["2016-11-01","2016-07-01-preview"],"defaultApiVersion":"2016-11-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-11-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"locations","locations":["Australia East","Australia - Southeast","Brazil South","Canada Central","Canada East","Central India","Central - US","East Asia","East US","East US 2","Japan East","Japan West","Korea Central","North - Central US","North Europe","South Central US","Southeast Asia","South India","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2016-11-01","2016-07-01-preview"],"defaultApiVersion":"2016-11-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-11-01"}],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["Australia - East","Australia Southeast","Brazil South","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","Japan East","Japan - West","Korea Central","North Central US","North Europe","South Central US","Southeast - Asia","South India","UK South","UK West","West Central US","West Europe","West - India","West US","West US 2"],"apiVersions":["2016-11-01","2016-07-01-preview"],"defaultApiVersion":"2016-11-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-11-01"}],"capabilities":"None"},{"resourceType":"operations","locations":["Australia - East","Australia Southeast","Brazil South","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","Japan East","Japan - West","Korea Central","North Central US","North Europe","South Central US","Southeast - Asia","South India","UK South","UK West","West Central US","West Europe","West - India","West US","West US 2"],"apiVersions":["2016-11-01","2016-07-01-preview"],"defaultApiVersion":"2016-11-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-11-01"}],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.BotService","namespace":"Microsoft.BotService","authorization":{"applicationId":"f3723d34-6ff5-4ceb-a148-d99dcd2511fc","roleDefinitionId":"71213c26-43ed-41d8-9905-3c12971517a3"},"resourceTypes":[{"resourceType":"botServices","locations":["Global"],"apiVersions":["2018-07-12","2017-12-01"],"defaultApiVersion":"2017-12-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-12-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-07-12"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"botServices/channels","locations":["Global"],"apiVersions":["2018-07-12","2017-12-01"],"defaultApiVersion":"2017-12-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-12-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-07-12"}],"capabilities":"None"},{"resourceType":"botServices/connections","locations":["Global"],"apiVersions":["2018-07-12","2017-12-01"],"defaultApiVersion":"2017-12-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-12-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-07-12"}],"capabilities":"None"},{"resourceType":"listAuthServiceProviders","locations":["Global"],"apiVersions":["2018-07-12","2017-12-01"],"defaultApiVersion":"2017-12-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-12-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-07-12"}],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["Global"],"apiVersions":["2018-07-12","2017-12-01"],"defaultApiVersion":"2017-12-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-12-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-07-12"}],"capabilities":"None"},{"resourceType":"operations","locations":["Global"],"apiVersions":["2018-07-12","2017-12-01"],"defaultApiVersion":"2017-12-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-12-01"}],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Kusto","namespace":"Microsoft.Kusto","authorizations":[{"applicationId":"2746ea77-4702-4b45-80ca-3c97e680e8b7","roleDefinitionId":"dd9d4347-f397-45f2-b538-85f21c90037c"}],"resourceTypes":[{"resourceType":"clusters","locations":["Central - US","West Europe","North Europe","East US 2","West Central US","Germany West - Central","West US","Southeast Asia","East US","West US 2","South Central US","North - Central US","East Asia","Japan East","Canada Central","UK South","Australia - East","Brazil South","Japan West","South India","Central India","West India","Canada - East","Korea Central","France Central","UK West","Korea South","France South","Australia - Southeast","South Africa North","South Africa West","Australia Central","Switzerland - North","UAE North"],"apiVersions":["2020-02-15","2019-11-09","2019-09-07","2019-05-15","2019-01-21","2018-09-07-preview","2017-09-07-privatepreview"],"defaultApiVersion":"2019-05-15","zoneMappings":[{"location":"East - US 2","zones":["3","1","2"]},{"location":"Central US","zones":["3","1","2"]},{"location":"West - Europe","zones":["3","1","2"]},{"location":"France Central","zones":["3","1","2"]},{"location":"Southeast - Asia","zones":["3","1","2"]},{"location":"West US 2","zones":["3","1","2"]},{"location":"North - Europe","zones":["3","1","2"]},{"location":"East US","zones":["3","1","2"]},{"location":"UK - South","zones":["3","1","2"]},{"location":"Japan East","zones":["3","1","2"]},{"location":"Australia - East","zones":[]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":[]},{"location":"Canada Central","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"clusters/databases","locations":["Central - US","West Europe","North Europe","East US 2","West Central US","Germany West - Central","West US","Southeast Asia","East US","West US 2","South Central US","North - Central US","East Asia","Japan East","Canada Central","UK South","Australia - East","Brazil South","Japan West","South India","Central India","West India","Canada - East","Korea Central","France Central","UK West","Korea South","France South","Australia - Southeast","South Africa North","South Africa West","Australia Central","Switzerland - North","UAE North"],"apiVersions":["2020-02-15","2019-11-09","2019-09-07","2019-05-15","2019-01-21","2018-09-07-preview","2017-09-07-privatepreview"],"defaultApiVersion":"2019-05-15","capabilities":"None"},{"resourceType":"clusters/attacheddatabaseconfigurations","locations":["Central - US","West Europe","North Europe","East US 2","West Central US","Germany West - Central","West US","Southeast Asia","East US","West US 2","South Central US","North - Central US","East Asia","Japan East","Canada Central","UK South","Australia - East","Brazil South","Japan West","South India","Central India","West India","Canada - East","Korea Central","France Central","UK West","Korea South","France South","Australia - Southeast","South Africa North","South Africa West","Australia Central","Switzerland - North","UAE North"],"apiVersions":["2020-02-15","2019-11-09","2019-09-07","2019-05-15","2019-01-21","2018-09-07-preview","2017-09-07-privatepreview"],"defaultApiVersion":"2019-05-15","capabilities":"None"},{"resourceType":"clusters/principalassignments","locations":["Central - US","West Europe","North Europe","East US 2","West Central US","Germany West - Central","West US","Southeast Asia","East US","West US 2","South Central US","North - Central US","East Asia","Japan East","Canada Central","UK South","Australia - East","Brazil South","Japan West","South India","Central India","West India","Canada - East","Korea Central","France Central","UK West","Korea South","France South","Australia - Southeast","South Africa North","South Africa West","Australia Central","Switzerland - North","UAE North"],"apiVersions":["2020-02-15","2019-11-09"],"defaultApiVersion":"2019-11-09","capabilities":"None"},{"resourceType":"clusters/databases/eventhubconnections","locations":["Central - US","West Europe","North Europe","East US 2","West Central US","Germany West - Central","West US","Southeast Asia","East US","West US 2","South Central US","North - Central US","East Asia","Japan East","Canada Central","UK South","Australia - East","Brazil South","Japan West","South India","Central India","West India","Canada - East","Korea Central","France Central","UK West","Korea South","France South","Australia - Southeast","South Africa North","South Africa West","Australia Central","Switzerland - North","UAE North"],"apiVersions":["2020-02-15","2019-11-09","2019-09-07","2019-05-15","2019-01-21","2018-09-07-preview","2017-09-07-privatepreview"],"defaultApiVersion":"2019-05-15","capabilities":"None"},{"resourceType":"clusters/databases/dataconnections","locations":["Central - US","West Europe","North Europe","East US 2","West Central US","Germany West - Central","West US","Southeast Asia","East US","West US 2","South Central US","North - Central US","East Asia","Japan East","Canada Central","UK South","Australia - East","Brazil South","Japan West","South India","Central India","West India","Canada - East","Korea Central","France Central","UK West","Korea South","France South","Australia - Southeast","South Africa North","South Africa West","Australia Central","Switzerland - North","UAE North"],"apiVersions":["2020-02-15","2019-11-09","2019-09-07","2019-05-15","2019-01-21","2018-09-07-preview","2017-09-07-privatepreview"],"defaultApiVersion":"2019-05-15","capabilities":"None"},{"resourceType":"clusters/databases/principalassignments","locations":["Central - US","West Europe","North Europe","East US 2","West Central US","Germany West - Central","West US","Southeast Asia","East US","West US 2","South Central US","North - Central US","East Asia","Japan East","Canada Central","UK South","Australia - East","Brazil South","Japan West","South India","Central India","West India","Canada - East","Korea Central","France Central","UK West","Korea South","France South","Australia - Southeast","South Africa North","South Africa West","Australia Central","Switzerland - North","UAE North"],"apiVersions":["2020-02-15","2019-11-09"],"defaultApiVersion":"2019-11-09","capabilities":"None"},{"resourceType":"locations/operationResults","locations":["Central - US","West Europe","North Europe","East US 2","West Central US","Germany West - Central","West US","Southeast Asia","East US","West US 2","South Central US","North - Central US","East Asia","Japan East","Canada Central","UK South","Australia - East","Brazil South","Japan West","South India","Central India","West India","Canada - East","Korea Central","France Central","UK West","Korea South","France South","Australia - Southeast","South Africa North","South Africa West","Australia Central","Switzerland - North","UAE North"],"apiVersions":["2020-02-15","2019-11-09","2019-09-07","2019-05-15","2019-01-21","2018-09-07-preview","2017-09-07-privatepreview"],"defaultApiVersion":"2019-05-15","capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-02-15","2019-11-09","2019-09-07","2019-05-15","2019-01-21","2018-09-07-preview","2017-09-07-privatepreview"],"defaultApiVersion":"2019-05-15","capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["Central - US","West Europe","North Europe","East US 2","West Central US","Germany West - Central","West US","Southeast Asia","East US","West US 2","South Central US","North - Central US","East Asia","Japan East","Canada Central","UK South","Australia - East","Brazil South","Japan West","South India","Central India","West India","Canada - East","Korea Central","France Central","UK West","Korea South","France South","Australia - Southeast","South Africa North","South Africa West","Australia Central","Switzerland - North","UAE North"],"apiVersions":["2020-02-15","2019-11-09","2019-09-07","2019-05-15","2019-01-21","2018-09-07-preview","2017-09-07-privatepreview"],"defaultApiVersion":"2019-05-15","capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-02-15","2019-11-09","2019-09-07","2019-05-15","2019-01-21","2018-09-07-preview","2017-09-07-privatepreview"],"defaultApiVersion":"2019-05-15","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AnalysisServices","namespace":"Microsoft.AnalysisServices","authorization":{"applicationId":"4ac7d521-0382-477b-b0f8-7e1d95f85ca2","roleDefinitionId":"490d5987-bcf6-4be6-b6b2-056a78cb693a"},"resourceTypes":[{"resourceType":"servers","locations":["West - US","North Europe","South Central US","West Europe","West Central US","Southeast - Asia","East US 2","North Central US","Brazil South","Canada Central","Australia - Southeast","Japan East","UK South","West India","West US 2","Central US","East - US","Australia East"],"apiVersions":["2017-08-01-beta","2017-08-01","2017-07-14","2016-05-16"],"defaultApiVersion":"2017-08-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-08-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2017-08-01-beta","2017-08-01","2017-07-14","2016-05-16"],"defaultApiVersion":"2017-08-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-08-01"}],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["West - US","North Europe","South Central US","West Europe","West Central US","Southeast - Asia","East US 2","North Central US","Brazil South","Canada Central","Australia - Southeast","Japan East","UK South","West India","West US 2","Central US","East - US","Australia East"],"apiVersions":["2017-08-01-beta","2017-08-01","2017-07-14","2016-05-16"],"defaultApiVersion":"2017-08-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-08-01"}],"capabilities":"None"},{"resourceType":"locations/operationresults","locations":["West - US","North Europe","South Central US","West Europe","West Central US","Southeast - Asia","East US 2","North Central US","Brazil South","Canada Central","Australia - Southeast","Japan East","UK South","West India","West US 2","Central US","East - US","Australia East"],"apiVersions":["2017-08-01-beta","2017-08-01","2017-07-14","2016-05-16"],"defaultApiVersion":"2017-08-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-08-01"}],"capabilities":"None"},{"resourceType":"locations/operationstatuses","locations":["West - US","North Europe","South Central US","West Europe","West Central US","Southeast - Asia","East US 2","North Central US","Brazil South","Canada Central","Australia - Southeast","Japan East","UK South","West India","West US 2","Central US","East - US","Australia East"],"apiVersions":["2017-08-01-beta","2017-08-01","2017-07-14","2016-05-16"],"defaultApiVersion":"2017-08-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-08-01"}],"capabilities":"None"},{"resourceType":"operations","locations":["East - US 2","West Central US","West US 2"],"apiVersions":["2017-08-01-beta","2017-08-01","2017-07-14","2016-05-16"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-08-01"}],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Batch","namespace":"Microsoft.Batch","authorization":{"applicationId":"ddbf3205-c6bd-46ae-8127-60eb93363864","roleDefinitionId":"b7f84953-1d03-4eab-9ea4-45f065258ff8"},"resourceTypes":[{"resourceType":"batchAccounts","locations":["West - Europe","East US","East US 2","West US","North Central US","Brazil South","North - Europe","Central US","East Asia","Japan East","Australia Southeast","Japan - West","Korea South","Korea Central","Southeast Asia","South Central US","Australia - East","South India","Central India","West India","Canada Central","Canada - East","UK South","UK West","West Central US","West US 2","France Central","South - Africa North","UAE North","Australia Central","Germany West Central","Switzerland - North","Norway East"],"apiVersions":["2020-05-01","2020-03-01-preview","2020-03-01","2019-08-01","2019-04-01","2018-12-01","2017-09-01","2017-05-01","2017-01-01","2015-12-01","2015-09-01","2015-07-01","2014-05-01-privatepreview"],"defaultApiVersion":"2020-05-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-09-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"operations","locations":["West Europe","East - US","East US 2","West US","North Central US","Brazil South","North Europe","Central - US","East Asia","Japan East","Australia Southeast","Japan West","Korea South","Korea - Central","Southeast Asia","South Central US","Australia East","South India","Central - India","West India","Canada Central","Canada East","UK South","UK West","West - Central US","West US 2","France Central","South Africa North","UAE North","Australia - Central","Germany West Central","Switzerland North","Norway East"],"apiVersions":["2020-05-01","2020-03-01-preview","2020-03-01","2019-08-01","2019-04-01","2018-12-01","2017-09-01","2017-05-01","2017-01-01","2015-12-01","2015-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-09-01"}],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-05-01","2020-03-01-preview","2020-03-01","2019-08-01","2019-04-01","2018-12-01","2017-09-01","2017-05-01","2017-01-01","2015-12-01","2015-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-09-01"}],"capabilities":"None"},{"resourceType":"locations/quotas","locations":["West - Europe","East US","East US 2","West US","North Central US","Brazil South","North - Europe","Central US","East Asia","Japan East","Australia Southeast","Japan - West","Korea South","Korea Central","Southeast Asia","South Central US","Australia - East","South India","Central India","West India","Canada Central","Canada - East","UK South","UK West","West Central US","West US 2","France Central","South - Africa North","UAE North","Australia Central","Germany West Central","Switzerland - North","Norway East"],"apiVersions":["2020-05-01","2020-03-01-preview","2020-03-01","2019-08-01","2019-04-01","2018-12-01","2017-09-01","2017-05-01","2017-01-01","2015-12-01","2015-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-09-01"}],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["West - Europe","East US","East US 2","West US","North Central US","Brazil South","North - Europe","Central US","East Asia","Japan East","Australia Southeast","Japan - West","Korea South","Korea Central","Southeast Asia","South Central US","Australia - East","South India","Central India","West India","Canada Central","Canada - East","UK South","UK West","West Central US","West US 2","France Central","South - Africa North","UAE North","Australia Central","Germany West Central","Switzerland - North","Norway East"],"apiVersions":["2020-05-01","2020-03-01-preview","2020-03-01","2019-08-01","2019-04-01","2018-12-01","2017-09-01","2017-05-01"],"defaultApiVersion":"2017-05-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-09-01"}],"capabilities":"None"},{"resourceType":"locations/accountOperationResults","locations":["West - Europe","East US","East US 2","West US","North Central US","Brazil South","North - Europe","Central US","East Asia","Japan East","Australia Southeast","Japan - West","Korea South","Korea Central","Southeast Asia","South Central US","Australia - East","South India","Central India","West India","Canada Central","Canada - East","UK South","UK West","West Central US","West US 2","France Central","South - Africa North","UAE North","Australia Central","Germany West Central","Switzerland - North","Norway East"],"apiVersions":["2020-05-01","2020-03-01-preview","2020-03-01","2019-08-01","2019-04-01","2018-12-01","2017-09-01","2017-05-01","2017-01-01","2015-12-01","2015-09-01","2015-07-01","2014-05-01-privatepreview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DataFactory","namespace":"Microsoft.DataFactory","authorizations":[{"applicationId":"0947a342-ab4a-43be-93b3-b8243fc161e5","roleDefinitionId":"f0a6aa2a-e9d8-4bae-bcc2-36b405e8a5da"},{"applicationId":"5d13f7d7-0567-429c-9880-320e9555e5fc","roleDefinitionId":"956a8f20-9168-4c71-8e27-3c0460ac39a4"}],"resourceTypes":[{"resourceType":"dataFactories","locations":["West - US","North Europe","East US","West Central US"],"apiVersions":["2015-10-01","2015-09-01","2015-08-01","2015-07-01-preview","2015-05-01-preview","2015-01-01-preview","2014-04-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"factories","locations":["East - US","East US 2","Central US","South Central US","Japan East","Canada Central","Australia - East","Central India","France Central","Korea Central","Brazil South","West - Europe","North Europe","UK South","West Central US","West US","West US 2","Southeast - Asia","East Asia","North Central US","South Africa North","Australia Southeast"],"apiVersions":["2018-06-01","2017-09-01-preview"],"defaultApiVersion":"2018-06-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"factories/integrationRuntimes","locations":["East - US","East US 2","West US 2","West US","Central US","South Central US","Japan - East","Central India","Brazil South","France Central","Korea Central","Australia - East","Canada Central","West Central US","North Europe","UK South","West Europe","Southeast - Asia","East Asia","North Central US","South Africa North","Australia Southeast"],"apiVersions":["2018-06-01","2017-09-01-preview"],"defaultApiVersion":"2018-06-01","capabilities":"None"},{"resourceType":"dataFactories/diagnosticSettings","locations":["North - Europe","East US","West US","West Central US"],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"dataFactories/metricDefinitions","locations":["North - Europe","East US","West US","West Central US"],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"checkDataFactoryNameAvailability","locations":[],"apiVersions":["2015-05-01-preview","2015-01-01-preview"],"capabilities":"None"},{"resourceType":"checkAzureDataFactoryNameAvailability","locations":["West - US","North Europe","East US","West Central US"],"apiVersions":["2015-10-01","2015-09-01","2015-08-01","2015-07-01-preview","2015-05-01-preview","2015-01-01-preview"],"capabilities":"None"},{"resourceType":"dataFactorySchema","locations":["West - US","North Europe","East US","West Central US"],"apiVersions":["2015-10-01","2015-09-01","2015-08-01","2015-07-01-preview","2015-05-01-preview","2015-01-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["West - US","North Europe","East US","West Central US"],"apiVersions":["2018-06-01","2017-09-01-preview","2017-03-01-preview","2015-10-01","2015-09-01","2015-08-01","2015-07-01-preview","2015-05-01-preview","2015-01-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2018-06-01","2017-09-01-preview"],"defaultApiVersion":"2018-06-01","capabilities":"None"},{"resourceType":"locations/configureFactoryRepo","locations":["East - US","East US 2","West US 2","West US","Central US","South Central US","Japan - East","Australia East","Canada Central","Central India","Brazil South","France - Central","Korea Central","West Europe","North Europe","UK South","West Central - US","Southeast Asia","East Asia","North Central US","South Africa North","Australia - Southeast"],"apiVersions":["2018-06-01","2017-09-01-preview"],"defaultApiVersion":"2018-06-01","capabilities":"None"},{"resourceType":"locations/getFeatureValue","locations":["East - US","East US 2","West Europe","North Europe","UK South","West Central US","West - US","Central US","South Central US","Japan East","Australia East","Canada - Central","Central India","Brazil South","France Central","Korea Central","West - US 2","Southeast Asia","East Asia","North Central US","South Africa North","Australia - Southeast"],"apiVersions":["2018-06-01"],"defaultApiVersion":"2018-06-01","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.HealthcareApis","namespace":"Microsoft.HealthcareApis","authorizations":[{"applicationId":"4f6778d8-5aef-43dc-a1ff-b073724b9495"},{"applicationId":"3274406e-4e0a-4852-ba4f-d7226630abb7","roleDefinitionId":"e39edba5-cde8-4529-ba1f-159138220220"}],"resourceTypes":[{"resourceType":"services","locations":["UK - West","North Central US","West US 2","Australia East","Southeast Asia","UK - South","East US","West Europe","South Central US","East US 2","North Europe"],"apiVersions":["2019-09-16","2018-08-20-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"locations","locations":["UK West","North - Central US","West US 2","Australia East","Southeast Asia","UK South","East - US","West Europe","South Central US","East US 2","North Europe"],"apiVersions":["2019-09-16","2018-08-20-preview"],"capabilities":"None"},{"resourceType":"locations/operationresults","locations":["UK - West","North Central US","West US 2","Australia East","Southeast Asia","UK - South","East US","West Europe","South Central US","East US 2","North Europe"],"apiVersions":["2019-09-16","2018-08-20-preview"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["UK - West","North Central US","West US 2","Australia East","Southeast Asia","UK - South","East US","West Europe","South Central US","East US 2","North Europe"],"apiVersions":["2019-09-16","2018-08-20-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["UK - West","North Central US","West US 2","Australia East","Southeast Asia","UK - South","East US","West Europe","South Central US","East US 2","North Europe"],"apiVersions":["2019-09-16","2018-08-20-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DBforMariaDB","namespace":"Microsoft.DBforMariaDB","authorizations":[{"applicationId":"76cd24bf-a9fc-4344-b1dc-908275de6d6d","roleDefinitionId":"c13b7b9c-2ed1-4901-b8a8-16f35468da29"},{"applicationId":"123cd850-d9df-40bd-94d5-c9f07b7fa203"}],"resourceTypes":[{"resourceType":"operations","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","Norway East","South Africa North","South Africa West","South Central - US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK - West","West Central US","West Europe","West India","West US","West US 2"],"apiVersions":["2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-preview","2018-06-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"servers/recoverableServers","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central US","Central India","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/virtualNetworkRules","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","Norway East","South Africa North","South Africa West","South Central - US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK - West","West Central US","West Europe","West India","West US","West US 2"],"apiVersions":["2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","Norway East","South Africa North","South Africa West","South Central - US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK - West","West Central US","West Europe","West India","West US","West US 2"],"apiVersions":["2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/azureAsyncOperation","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/performanceTiers","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/securityAlertPoliciesAzureAsyncOperation","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionProxyOperationResults","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionProxyAzureAsyncOperation","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionOperationResults","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionAzureAsyncOperation","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/securityAlertPoliciesOperationResults","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01"],"capabilities":"None"},{"resourceType":"locations/recommendedActionSessionsAzureAsyncOperation","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/recommendedActionSessionsOperationResults","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/topQueryStatistics","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/queryTexts","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/waitStatistics","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/advisors","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/privateLinkResources","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/privateEndpointConnections","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/privateEndpointConnectionProxies","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/serverKeyAzureAsyncOperation","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Norway East","Switzerland North","UAE North","UK - South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-01-01-privatepreview","2020-01-01-preview","2020-01-01"],"capabilities":"None"},{"resourceType":"locations/serverKeyOperationResults","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","France Central","France South","Germany West Central","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West - Central US","West Europe","West India","West US","West US 2"],"apiVersions":["2020-01-01-privatepreview","2020-01-01-preview","2020-01-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.SignalRService","namespace":"Microsoft.SignalRService","authorizations":[{"applicationId":"cdad765c-f191-43ba-b9f5-7aef392f811d","roleDefinitionId":"346b504e-4aec-45d1-be25-a6e10f3cb4fe"}],"resourceTypes":[{"resourceType":"SignalR","locations":["East - US","West US","Southeast Asia","West Europe","West US 2","East US 2","North - Europe","Australia East","Canada East","Central US","Japan East","UK South","South - Central US","Brazil South","France Central","Korea Central"],"apiVersions":["2020-05-01","2018-10-01","2018-03-01-preview"],"defaultApiVersion":"2020-05-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2020-05-01","2018-10-01","2018-03-01-preview"],"defaultApiVersion":"2018-10-01","capabilities":"None"},{"resourceType":"locations/operationResults","locations":["East - US","West US","Southeast Asia","West Europe","West US 2","East US 2","North - Europe","Australia East","Canada East","Central US","Japan East","UK South","South - Central US","Brazil South","France Central","Korea Central"],"apiVersions":["2020-05-01","2018-10-01","2018-03-01-preview"],"defaultApiVersion":"2018-10-01","capabilities":"None"},{"resourceType":"locations/operationStatuses","locations":["East - US","West US","Southeast Asia","West Europe","West US 2","East US 2","North - Europe","Australia East","Canada East","Central US","Japan East","UK South","South - Central US","Brazil South","France Central","Korea Central"],"apiVersions":["2020-05-01","2018-10-01","2018-03-01-preview"],"defaultApiVersion":"2018-10-01","capabilities":"None"},{"resourceType":"operations","locations":["West - US 2","East US","East US 2","West US","Central US"],"apiVersions":["2020-05-01","2018-10-01","2018-03-01-preview"],"defaultApiVersion":"2018-10-01","capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["East - US","West US","Southeast Asia","West Europe","West US 2","East US 2","North - Europe","Australia East","Canada East","Central US","Japan East","UK South","South - Central US","Brazil South","France Central","Korea Central"],"apiVersions":["2020-05-01","2018-10-01","2018-03-01-preview"],"defaultApiVersion":"2018-10-01","capabilities":"None"},{"resourceType":"locations/usages","locations":["East - US","West US","Southeast Asia","West Europe","West US 2","East US 2","North - Europe","Australia East","Canada East","Central US","Japan East","UK South","South - Central US","Brazil South","France Central","Korea Central"],"apiVersions":["2020-05-01","2018-10-01","2018-03-01-preview"],"defaultApiVersion":"2018-10-01","capabilities":"None"},{"resourceType":"SignalR/eventGridFilters","locations":["East - US","West US","Southeast Asia","West Europe","West US 2","East US 2","North - Europe","Australia East","Canada East","Central US","Japan East","UK South","South - Central US","Brazil South","France Central","Korea Central"],"apiVersions":["2020-05-01","2018-10-01","2018-03-01-preview"],"defaultApiVersion":"2018-10-01","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Migrate","namespace":"Microsoft.Migrate","authorizations":[{"applicationId":"e3bfd6ac-eace-4438-9dc1-eed439e738de","roleDefinitionId":"e88f4159-1d71-4b12-8ef0-38c039cb051e"},{"applicationId":"51df634f-ddb4-4901-8a2d-52f6393a796b","roleDefinitionId":"d7568dc2-2265-41f7-9c0f-1e9c7862ca62"}],"resourceTypes":[{"resourceType":"projects","locations":["West - Central US","East US","West Europe","North Europe","Southeast Asia","East - Asia"],"apiVersions":["2018-02-02","2017-11-11-preview","2017-09-25-privatepreview"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"migrateprojects","locations":["Central - US","East Asia","Southeast Asia","North Europe","West Europe","West US 2","Australia - Southeast","UK South","UK West","Canada Central","Central India","South India","Japan - East","Japan West","Brazil South","Korea South","Korea Central","France Central"],"apiVersions":["2020-05-01","2019-06-01","2018-09-01-preview"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"assessmentProjects","locations":["Central - US","West Europe","UK South","UK West","North Europe","West US 2","Southeast - Asia","East Asia","Central India","South India","Canada Central","Australia - Southeast","Japan West","Japan East","Brazil South","Korea Central","Korea - South","France Central"],"apiVersions":["2020-05-01-preview","2019-10-01","2019-05-01","2018-06-30-preview"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"operations","locations":["West Central - US"],"apiVersions":["2018-02-02","2017-11-11-preview","2017-09-25-privatepreview"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2018-02-02","2017-11-11-preview","2017-09-25-privatepreview"],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["West - Central US","East US","West Europe","North Europe","Southeast Asia","East - Asia"],"apiVersions":["2018-02-02","2017-11-11-preview","2017-09-25-privatepreview"],"capabilities":"None"},{"resourceType":"locations/assessmentOptions","locations":["West - Central US","East US","West Europe","North Europe","Southeast Asia","East - Asia"],"apiVersions":["2018-02-02","2017-11-11-preview","2017-09-25-privatepreview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DataMigration","namespace":"Microsoft.DataMigration","authorization":{"applicationId":"a4bad4aa-bf02-4631-9f78-a64ffdba8150","roleDefinitionId":"b831a21d-db98-4760-89cb-bef871952df1","managedByRoleDefinitionId":"6256fb55-9e59-4018-a9e1-76b11c0a4c89"},"resourceTypes":[{"resourceType":"locations","locations":[],"apiVersions":["2018-07-15-preview","2018-04-19","2018-03-31-preview","2018-03-15-preview","2017-11-15-privatepreview","2017-11-15-preview","2017-04-15-privatepreview"],"capabilities":"None"},{"resourceType":"services","locations":["Brazil - South","West Europe","Australia East","East US","East US 2","Canada Central","East - Asia","Central India","West India","Japan East","Korea South","North Central - US","Australia Southeast","Canada East","Central US","South India","Japan - West","Korea Central","North Europe","South Central US","Southeast Asia","UK - West","West US","UK South","West US 2","South Africa North","UAE North","France - Central"],"apiVersions":["2018-07-15-preview","2018-04-19","2018-03-31-preview","2018-03-15-preview","2017-11-15-privatepreview","2017-11-15-preview","2017-04-15-privatepreview"],"defaultApiVersion":"2018-07-15-preview","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"services/projects","locations":["Brazil - South","West Europe","Australia East","East US","East US 2","Canada Central","East - Asia","Central India","West India","Japan East","Korea South","North Central - US","Australia Southeast","Canada East","Central US","South India","Japan - West","Korea Central","North Europe","South Central US","Southeast Asia","UK - West","West US","UK South","West US 2","South Africa North","UAE North","France - Central"],"apiVersions":["2018-07-15-preview","2018-04-19","2018-03-31-preview","2018-03-15-preview","2017-11-15-privatepreview","2017-11-15-preview","2017-04-15-privatepreview"],"defaultApiVersion":"2018-07-15-preview","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"locations/operationResults","locations":["Brazil - South","West Europe","Australia East","East US","East US 2","Canada Central","East - Asia","Central India","West India","Japan East","Korea South","North Central - US","Australia Southeast","Canada East","Central US","South India","Japan - West","Korea Central","North Europe","South Central US","Southeast Asia","UK - West","West US","UK South","West US 2","South Africa North","UAE North","France - Central"],"apiVersions":["2018-07-15-preview","2018-04-19","2018-03-31-preview","2018-03-15-preview","2017-11-15-privatepreview","2017-11-15-preview","2017-04-15-privatepreview"],"capabilities":"None"},{"resourceType":"locations/operationStatuses","locations":["Brazil - South","West Europe","Australia East","East US","East US 2","Canada Central","East - Asia","Central India","West India","Japan East","Korea South","North Central - US","Australia Southeast","Canada East","Central US","South India","Japan - West","Korea Central","North Europe","South Central US","Southeast Asia","UK - West","West US","UK South","West US 2","South Africa North","UAE North","France - Central"],"apiVersions":["2018-07-15-preview","2018-04-19","2018-03-31-preview","2018-03-15-preview","2017-11-15-privatepreview","2017-11-15-preview","2017-04-15-privatepreview"],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["Brazil - South","West Europe","Australia East","East US","East US 2","Canada Central","East - Asia","Central India","West India","Japan East","Korea South","North Central - US","Australia Southeast","Canada East","Central US","South India","Japan - West","Korea Central","North Europe","South Central US","Southeast Asia","UK - West","West US","UK South","West US 2","South Africa North","UAE North","France - Central"],"apiVersions":["2018-07-15-preview","2018-04-19","2018-03-31-preview","2018-03-15-preview","2017-11-15-privatepreview","2017-11-15-preview","2017-04-15-privatepreview"],"capabilities":"None"},{"resourceType":"operations","locations":["Brazil - South","West Europe","Australia East","East US","East US 2","Canada Central","East - Asia","Central India","West India","Japan East","Korea South","North Central - US","Australia Southeast","Canada East","Central US","South India","Japan - West","Korea Central","North Europe","South Central US","Southeast Asia","UK - West","West US","UK South","West US 2","South Africa North","UAE North","France - Central"],"apiVersions":["2018-07-15-preview","2018-04-19","2018-03-31-preview","2018-03-15-preview","2017-11-15-privatepreview","2017-11-15-preview","2017-04-15-privatepreview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DataShare","namespace":"Microsoft.DataShare","authorization":{"applicationId":"799f1985-1517-4fe1-af2b-ba3d87d4996b","roleDefinitionId":"0146496b-e06f-439a-83be-49fac884edf5"},"resourceTypes":[{"resourceType":"accounts","locations":["East - US 2","North Europe","East US","UK South","Australia East","West Europe","Southeast - Asia","West US 2","South Central US"],"apiVersions":["2019-11-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"accounts/shares","locations":["East US - 2","North Europe","East US","UK South","Australia East","West Europe","Southeast - Asia","West US 2","South Central US"],"apiVersions":["2019-11-01"],"capabilities":"None"},{"resourceType":"accounts/shares/datasets","locations":["East - US 2","North Europe","East US","UK South","Australia East","West Europe","Southeast - Asia","West US 2","South Central US"],"apiVersions":["2019-11-01"],"capabilities":"None"},{"resourceType":"accounts/shares/synchronizationSettings","locations":["East - US 2","North Europe","East US","UK South","Australia East","West Europe","Southeast - Asia","West US 2","South Central US"],"apiVersions":["2019-11-01"],"capabilities":"None"},{"resourceType":"accounts/shares/invitations","locations":["East - US 2","North Europe","East US","UK South","Australia East","West Europe","Southeast - Asia","West US 2","South Central US"],"apiVersions":["2019-11-01"],"capabilities":"None"},{"resourceType":"accounts/sharesubscriptions","locations":["East - US 2","North Europe","East US","UK South","Australia East","West Europe","Southeast - Asia","West US 2","South Central US"],"apiVersions":["2019-11-01"],"capabilities":"None"},{"resourceType":"accounts/shares/providersharesubscriptions","locations":["East - US 2","North Europe","East US","UK South","Australia East","West Europe","Southeast - Asia","West US 2","South Central US"],"apiVersions":["2019-11-01"],"capabilities":"None"},{"resourceType":"accounts/sharesubscriptions/datasetmappings","locations":["East - US 2","North Europe","East US","UK South","Australia East","West Europe","Southeast - Asia","West US 2","South Central US"],"apiVersions":["2019-11-01"],"capabilities":"None"},{"resourceType":"accounts/sharesubscriptions/triggers","locations":["East - US 2","North Europe","East US","UK South","Australia East","West Europe","Southeast - Asia","West US 2","South Central US"],"apiVersions":["2019-11-01"],"capabilities":"None"},{"resourceType":"accounts/sharesubscriptions/consumerSourceDataSets","locations":["East - US 2","North Europe","East US","UK South","Australia East","West Europe","Southeast - Asia","West US 2","South Central US"],"apiVersions":["2019-11-01"],"capabilities":"None"},{"resourceType":"listinvitations","locations":["East - US 2","East US","Australia East","Southeast Asia","West US 2","North Europe","UK - South","West Central US"],"apiVersions":["2018-11-01-alpha"],"capabilities":"None"},{"resourceType":"locations","locations":["East - US 2"],"apiVersions":["2019-11-01","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["East - US 2","North Europe","East US","UK South","Australia East","West Europe","Southeast - Asia","West Central US","West US 2","South Central US"],"apiVersions":["2019-11-01"],"capabilities":"None"},{"resourceType":"locations/rejectInvitation","locations":["East - US 2","East US","Australia East","West US 2","North Europe","UK South","West - Europe","Southeast Asia","West Central US","South Central US"],"apiVersions":["2019-11-01","2018-11-01-alpha"],"capabilities":"None"},{"resourceType":"locations/consumerInvitations","locations":["East - US 2","East US","Australia East","West US 2","North Europe","UK South","West - Europe","Southeast Asia","West Central US","South Central US"],"apiVersions":["2019-11-01","2018-11-01-alpha"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2019-11-01","2018-11-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.CustomProviders","namespace":"Microsoft.CustomProviders","authorization":{"applicationId":"bf8eb16c-7ba7-4b47-86be-ac5e4b2007a5","roleDefinitionId":"FACF09C9-A5D0-4D34-8B1F-B623AC29C6F7"},"resourceTypes":[{"resourceType":"resourceProviders","locations":["Australia - East","Australia Southeast","East US","West US 2","West Europe","North Europe","Canada - Central","Canada East"],"apiVersions":["2018-09-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"associations","locations":[],"apiVersions":["2018-09-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"operations","locations":[],"apiVersions":["2018-09-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2018-09-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationStatuses","locations":["Australia - East","Australia Southeast","East US","West US 2","West Europe","North Europe","Canada - Central","Canada East"],"apiVersions":["2018-09-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.PowerBIDedicated","namespace":"Microsoft.PowerBIDedicated","authorization":{"applicationId":"4ac7d521-0382-477b-b0f8-7e1d95f85ca2","roleDefinitionId":"490d5987-bcf6-4be6-b6b2-056a78cb693a"},"resourceTypes":[{"resourceType":"capacities","locations":["Australia - Southeast","Brazil South","Canada Central","UAE North","UAE Central","France - Central","France South","Korea Central","Korea South","Japan West","South - Africa North","Switzerland North","Switzerland West","Canada East","South - Africa West","UK West","Central US","Central India","Australia East","East - Asia","East US","East US 2","West India","Japan East","West Central US","North - Central US","North Europe","South Central US","Southeast Asia","UK South","West - Europe","West US","West US 2"],"apiVersions":["2017-10-01","2017-01-01-preview"],"defaultApiVersion":"2017-01-01-preview","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2017-01-01-preview"],"defaultApiVersion":"2017-01-01-preview","capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["Australia - Southeast","Brazil South","Canada Central","UAE North","UAE Central","France - Central","France South","Korea Central","Korea South","Japan West","Switzerland - North","Switzerland West","Canada East","UK West","Central US","Central India","Australia - East","East Asia","East US","East US 2","West India","Japan East","West Central - US","North Central US","North Europe","South Africa North","South Central - US","Southeast Asia","South Africa West","UK South","West Europe","West US","West - US 2"],"apiVersions":["2017-10-01","2017-01-01-preview"],"defaultApiVersion":"2017-01-01-preview","capabilities":"None"},{"resourceType":"locations/operationresults","locations":["Australia - Southeast","Brazil South","Canada Central","UAE North","UAE Central","France - Central","France South","Korea Central","Korea South","Japan West","Switzerland - North","Switzerland West","Canada East","UK West","Central US","Central India","Australia - East","East Asia","East US","East US 2","West India","Japan East","West Central - US","North Central US","North Europe","South Central US","Southeast Asia","UK - South","West Europe","West US","South Africa North","South Africa West","West - US 2"],"apiVersions":["2017-10-01","2017-01-01-preview"],"defaultApiVersion":"2017-01-01-preview","capabilities":"None"},{"resourceType":"locations/operationstatuses","locations":["Australia - Southeast","Brazil South","Canada Central","UAE North","UAE Central","France - Central","France South","Korea Central","Korea South","Japan West","Switzerland - North","Switzerland West","Canada East","UK West","Central US","Central India","Australia - East","East Asia","East US","East US 2","West India","Japan East","West Central - US","North Central US","North Europe","South Central US","Southeast Asia","UK - South","West Europe","West US","West US 2","South Africa North","South Africa - West"],"apiVersions":["2017-10-01","2017-01-01-preview"],"defaultApiVersion":"2017-01-01-preview","capabilities":"None"},{"resourceType":"operations","locations":["East - US 2"],"apiVersions":["2018-09-01-preview","2017-10-01","2017-01-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.MixedReality","namespace":"Microsoft.MixedReality","authorizations":[{"applicationId":"c7ddd9b4-5172-4e28-bd29-1e0792947d18","roleDefinitionId":"b67ee066-e058-4ddb-92bc-83cdd74bc38a"},{"applicationId":"a15bc1de-f777-408f-9d2b-a27ed19c72ba"}],"resourceTypes":[{"resourceType":"locations","locations":[],"apiVersions":["2020-05-01","2020-04-06-preview","2019-12-02-preview","2019-02-28-preview"],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["East - US","East US 2","Southeast Asia","West Europe","West US 2"],"apiVersions":["2020-05-01","2020-04-06-preview","2019-12-02-preview","2019-02-28-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-05-01","2020-04-06-preview","2019-12-02-preview","2019-02-28-preview"],"capabilities":"None"},{"resourceType":"spatialAnchorsAccounts","locations":["East - US 2"],"apiVersions":["2020-05-01","2019-12-02-preview","2019-02-28-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"remoteRenderingAccounts","locations":["East - US","East US 2","Southeast Asia","West Europe","West US 2"],"apiVersions":["2020-04-06-preview","2019-12-02-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Solutions","namespace":"Microsoft.Solutions","authorization":{"applicationId":"ba4bc2bd-843f-4d61-9d33-199178eae34e","roleDefinitionId":"6cb99a0b-29a8-49bc-b57b-057acc68cd9a","managedByRoleDefinitionId":"9e3af657-a8ff-583c-a75c-2fe7c4bcb635","managedByAuthorization":{"managedByResourceRoleDefinitionId":"9e3af657-a8ff-583c-a75c-2fe7c4bcb635"}},"resourceTypes":[{"resourceType":"applications","locations":["South - Central US","North Central US","West Central US","West US","West US 2","East - US","East US 2","Central US","West Europe","North Europe","East Asia","Southeast - Asia","Brazil South","Japan West","Japan East","Australia East","Australia - Southeast","South India","West India","Central India","Canada Central","Canada - East","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-07-01","2018-09-01-preview","2018-06-01","2018-03-01","2018-02-01","2017-12-01","2017-09-01"],"defaultApiVersion":"2019-07-01","capabilities":"SystemAssignedResourceIdentity, - SupportsTags, SupportsLocation"},{"resourceType":"applicationDefinitions","locations":["South - Central US","North Central US","West Central US","West US","West US 2","East - US","East US 2","Central US","West Europe","North Europe","East Asia","Southeast - Asia","Brazil South","Japan West","Japan East","Australia East","Australia - Southeast","South India","West India","Central India","Canada Central","Canada - East","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-07-01","2018-09-01-preview","2018-06-01","2018-03-01","2018-02-01","2017-12-01","2017-09-01"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"locations","locations":["West Central - US"],"apiVersions":["2019-07-01","2018-09-01-preview","2018-06-01","2018-03-01","2018-02-01","2017-12-01","2017-09-01","2016-09-01-preview"],"capabilities":"None"},{"resourceType":"jitRequests","locations":["South - Central US","North Central US","West Central US","West US","West US 2","East - US","East US 2","Central US","West Europe","North Europe","East Asia","Southeast - Asia","Brazil South","Japan West","Japan East","Australia East","Australia - Southeast","South India","West India","Central India","Canada Central","Canada - East","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-07-01","2018-09-01-preview"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"locations/operationstatuses","locations":["South - Central US","North Central US","West Central US","West US","West US 2","East - US","East US 2","Central US","West Europe","North Europe","East Asia","Southeast - Asia","Brazil South","Japan West","Japan East","Australia East","Australia - Southeast","South India","West India","Central India","Canada Central","Canada - East","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-07-01","2018-09-01-preview","2018-06-01","2018-03-01","2018-02-01","2017-12-01","2017-09-01","2016-09-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2019-07-01","2018-09-01-preview","2018-06-01","2018-03-01","2018-02-01","2017-12-01","2017-09-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.MachineLearningServices","namespace":"Microsoft.MachineLearningServices","authorizations":[{"applicationId":"0736f41a-0425-4b46-bdb5-1563eff02385","roleDefinitionId":"376aa7d7-51a9-463d-bd4d-7e1691345612","managedByRoleDefinitionId":"91d00862-cf55-46a5-9dce-260bbd92ce25"},{"applicationId":"18a66f5f-dbdf-4c17-9dd7-1634712a9cbe","roleDefinitionId":"8b910db7-60f9-4c04-af30-71aab18eda90","managedByRoleDefinitionId":"91d00862-cf55-46a5-9dce-260bbd92ce25"}],"resourceTypes":[{"resourceType":"workspaces","locations":["Canada - Central","North Central US","UK South","West US","Central US","East Asia","Japan - East","East US","North Europe","Korea Central","Brazil South","France Central","Australia - East","East US 2","West US 2","West Central US","Southeast Asia","West Europe","South - Central US"],"apiVersions":["2020-05-15-preview","2020-05-01-preview","2020-04-01-preview","2020-04-01","2020-03-01","2020-02-18-preview","2020-02-02","2020-01-01","2019-11-01","2019-10-01","2019-06-01","2019-05-01","2018-11-19","2018-03-01-preview"],"defaultApiVersion":"2018-03-01-preview","capabilities":"SystemAssignedResourceIdentity, - SupportsTags, SupportsLocation"},{"resourceType":"workspaces/computes","locations":["North - Central US","Canada Central","UK South","West US","Central US","East Asia","Japan - East","East US","North Europe","Korea Central","Brazil South","France Central","Australia - East","East US 2","West US 2","West Central US","Southeast Asia","West Europe","South - Central US"],"apiVersions":["2020-05-15-preview","2020-05-01-preview","2020-04-01-preview","2020-04-01","2020-03-01","2020-02-18-preview","2020-02-02","2020-01-01","2019-11-01","2019-06-01","2019-05-01","2018-11-19","2018-03-01-preview"],"capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"workspaces/eventGridFilters","locations":["North - Central US","Canada Central","UK South","West US","Central US","East Asia","Japan - East","East US","North Europe","Korea Central","Brazil South","France Central","Australia - East","East US 2","West US 2","West Central US","Southeast Asia","West Europe","South - Central US"],"apiVersions":["2020-05-15-preview","2020-05-01-preview","2020-04-01-preview","2020-04-01","2020-03-01","2020-02-18-preview","2020-02-02","2019-06-01","2019-05-01","2018-11-19","2018-03-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["East - US 2"],"apiVersions":["2020-05-15-preview","2020-05-01-preview","2020-04-01-preview","2020-04-01","2020-03-01","2020-02-18-preview","2020-02-02","2020-01-01","2019-11-01","2019-06-01","2019-05-01","2018-11-19","2018-03-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":["East - US 2"],"apiVersions":["2020-05-15-preview","2020-05-01-preview","2020-04-01-preview","2020-04-01","2020-03-01","2020-02-18-preview","2020-02-02","2020-01-01","2019-11-01","2019-06-01","2019-05-01","2018-11-19","2018-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/computeOperationsStatus","locations":["North - Central US","Canada Central","UK South","West US","Central US","East Asia","Japan - East","East US","Australia East","East US 2","West US 2","West Central US","Southeast - Asia","West Europe","South Central US","North Europe","Korea Central","Brazil - South","France Central"],"apiVersions":["2020-05-15-preview","2020-05-01-preview","2020-04-01-preview","2020-04-01","2020-03-01","2020-02-18-preview","2020-02-02","2020-01-01","2019-11-01","2019-06-01","2019-05-01","2018-11-19","2018-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/workspaceOperationsStatus","locations":["North - Central US","Canada Central","UK South","West US","Central US","East Asia","Japan - East","East US","North Europe","Korea Central","Brazil South","France Central","Australia - East","East US 2","West US 2","West Central US","Southeast Asia","West Europe","South - Central US"],"apiVersions":["2020-05-15-preview","2020-05-01-preview","2020-04-01-preview","2020-04-01","2020-03-01","2020-02-18-preview","2020-02-02","2020-01-01","2019-11-01","2019-06-01","2019-05-01","2018-11-19","2018-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/usages","locations":["North - Central US","Canada Central","UK South","West US","Central US","East Asia","Japan - East","East US","North Europe","Korea Central","Brazil South","France Central","Australia - East","East US 2","West US 2","West Central US","Southeast Asia","West Europe","South - Central US"],"apiVersions":["2020-05-15-preview","2020-05-01-preview","2020-04-01-preview","2020-04-01","2020-03-01","2020-02-18-preview","2020-02-02","2020-01-01","2019-11-01","2019-06-01","2019-05-01","2018-11-19"],"capabilities":"None"},{"resourceType":"locations/vmsizes","locations":["North - Central US","Canada Central","UK South","West US","Central US","East Asia","Japan - East","East US","North Europe","Korea Central","Brazil South","France Central","Australia - East","East US 2","West US 2","West Central US","Southeast Asia","West Europe","South - Central US"],"apiVersions":["2020-05-15-preview","2020-05-01-preview","2020-04-01-preview","2020-04-01","2020-03-01","2020-02-18-preview","2020-02-02","2020-01-01","2019-11-01","2019-06-01","2019-05-01","2018-11-19"],"capabilities":"None"},{"resourceType":"locations/quotas","locations":["North - Central US","Canada Central","UK South","West US","Central US","East Asia","Japan - East","East US","North Europe","Korea Central","Brazil South","France Central","Australia - East","East US 2","West US 2","West Central US","Southeast Asia","West Europe","South - Central US"],"apiVersions":["2020-05-15-preview","2020-05-01-preview","2020-04-01-preview","2020-04-01","2020-03-01","2020-02-18-preview","2020-02-02","2020-01-01","2019-11-01","2019-06-01"],"capabilities":"None"},{"resourceType":"locations/updatequotas","locations":["North - Central US","Canada Central","UK South","West US","Central US","East Asia","Japan - East","East US","North Europe","Korea Central","Brazil South","France Central","Australia - East","East US 2","West US 2","West Central US","Southeast Asia","West Europe","South - Central US"],"apiVersions":["2020-05-15-preview","2020-05-01-preview","2020-04-01-preview","2020-04-01","2020-03-01","2020-02-18-preview","2020-02-02","2020-01-01","2019-11-01","2019-06-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.WindowsIoT","namespace":"Microsoft.WindowsIoT","resourceTypes":[{"resourceType":"DeviceServices","locations":["West - US","East US"],"apiVersions":["2019-06-01","2018-02-16-preview"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"operations","locations":["West US","East - US","West Central US"],"apiVersions":["2019-06-01","2018-02-16-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.NetApp","namespace":"Microsoft.NetApp","authorizations":[{"applicationId":"12fb057d-b751-47cd-857c-f2934bb677b4","roleDefinitionId":"e4796bef-6b6d-4cbc-ba1e-27f1a308d860"}],"resourceTypes":[{"resourceType":"operations","locations":["Australia - East","Australia Southeast","Canada Central","Canada East","Central India","Central - US","East US","East US 2","Germany North","Germany West Central","Japan East","Japan - West","North Europe","South Central US","South India","Southeast Asia","UAE - Central","UK South","UK West","West Central US","West Europe","West US","West - US 2","West US (Stage)","West US 2 (Stage)","South Central US (Stage)"],"apiVersions":["2020-05-01","2020-03-01","2020-02-01","2019-11-01","2019-10-01","2019-08-01","2019-07-01","2019-06-01","2019-05-01","2017-08-15"],"capabilities":"None"},{"resourceType":"netAppAccounts","locations":["Australia - East","Australia Southeast","Canada Central","Canada East","Central India","Central - US","East US","East US 2","Germany West Central","Japan East","Japan West","North - Europe","South Central US","South India","Southeast Asia","UAE Central","UK - South","UK West","West Europe","West US","West US 2"],"apiVersions":["2020-03-01","2020-02-01","2019-11-01","2019-10-01","2019-08-01","2019-07-01","2019-06-01","2019-05-01","2017-08-15"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"netAppAccounts/capacityPools","locations":["Australia - East","Australia Southeast","Canada Central","Canada East","Central India","Central - US","East US","East US 2","Germany West Central","Japan East","Japan West","North - Europe","South Central US","South India","Southeast Asia","UAE Central","UK - South","UK West","West Europe","West US","West US 2"],"apiVersions":["2020-03-01","2020-02-01","2019-11-01","2019-10-01","2019-08-01","2019-07-01","2019-06-01","2019-05-01","2017-08-15"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"netAppAccounts/capacityPools/volumes","locations":["Australia - East","Australia Southeast","Canada Central","Canada East","Central India","Central - US","East US","East US 2","Germany West Central","Japan East","Japan West","North - Europe","South Central US","South India","Southeast Asia","UAE Central","UK - South","UK West","West Europe","West US","West US 2"],"apiVersions":["2020-03-01","2020-02-01","2019-11-01","2019-10-01","2019-08-01","2019-07-01","2019-06-01","2019-05-01","2017-08-15"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"netAppAccounts/capacityPools/volumes/mountTargets","locations":["Australia - East","Australia Southeast","Canada Central","Canada East","Central India","Central - US","East US","East US 2","Germany West Central","Japan East","Japan West","North - Europe","South Central US","South India","Southeast Asia","UAE Central","UK - South","UK West","West Europe","West US","West US 2"],"apiVersions":["2019-10-01","2019-08-01","2019-07-01","2019-06-01","2019-05-01","2017-08-15"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"netAppAccounts/capacityPools/volumes/snapshots","locations":["Australia - East","Australia Southeast","Canada Central","Canada East","Central India","Central - US","East US","East US 2","Germany West Central","Japan East","Japan West","North - Europe","South Central US","South India","Southeast Asia","UAE Central","UK - South","UK West","West Europe","West US","West US 2"],"apiVersions":["2020-03-01","2020-02-01","2019-11-01","2019-10-01","2019-08-01","2019-07-01","2019-06-01","2019-05-01","2017-08-15"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"locations","locations":["Australia East","Australia - Southeast","Canada Central","Canada East","Central India","Central US","East - US","East US 2","Germany West Central","Japan East","Japan West","North Europe","South - Central US","South India","Southeast Asia","UAE Central","UK South","UK West","West - US","West US 2","West Europe"],"apiVersions":["2020-03-01","2020-02-01","2019-11-01","2019-10-01","2019-08-01","2019-07-01","2019-06-01","2019-05-01","2017-08-15"],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["Australia - East","Australia Southeast","Canada Central","Canada East","Central India","Central - US","East US","East US 2","Germany West Central","Japan East","Japan West","North - Europe","South Central US","South India","Southeast Asia","UAE Central","UK - South","UK West","West Europe","West US","West US 2"],"apiVersions":["2020-03-01","2020-02-01","2019-11-01","2019-10-01","2019-08-01","2019-07-01","2019-06-01","2019-05-01","2017-08-15"],"capabilities":"None"},{"resourceType":"locations/checkFilePathAvailability","locations":["Australia - East","Australia Southeast","Canada Central","Canada East","Central India","Central - US","East US","East US 2","Germany West Central","Japan East","Japan West","North - Europe","South Central US","South India","Southeast Asia","UAE Central","UK - South","UK West","West Europe","West US","West US 2"],"apiVersions":["2020-03-01","2020-02-01","2019-11-01","2019-10-01","2019-08-01","2019-07-01","2019-06-01","2019-05-01","2017-08-15"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["Australia - East","Australia Southeast","Canada Central","Canada East","Central India","Central - US","East US","East US 2","Germany West Central","Japan East","Japan West","North - Europe","South Central US","South India","Southeast Asia","UAE Central","UK - South","UK West","West Europe","West US","West US 2"],"apiVersions":["2020-03-01","2020-02-01","2019-11-01","2019-10-01","2019-08-01","2019-07-01","2019-06-01","2019-05-01","2017-08-15"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AppPlatform","namespace":"Microsoft.AppPlatform","authorizations":[{"applicationId":"03b39d0f-4213-4864-a245-b1476ec03169"},{"applicationId":"b61cc489-e138-4a69-8bf3-c2c5855c8784","roleDefinitionId":"462ddd96-910a-44f5-adfa-644d99942778"},{"applicationId":"e8de9221-a19c-4c81-b814-fd37c6caf9d2"}],"resourceTypes":[{"resourceType":"Spring","locations":["West - Europe","East US","West US 2","Southeast Asia"],"apiVersions":["2019-05-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"Spring/apps","locations":["West - Europe","East US","West US 2","Southeast Asia"],"apiVersions":["2019-05-01-preview"],"defaultApiVersion":"2019-05-01-preview","capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"Spring/apps/deployments","locations":["West - Europe","East US","West US 2","Southeast Asia"],"apiVersions":["2019-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["West - Europe","East US","West US 2","Southeast Asia"],"apiVersions":["2019-05-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2019-05-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2019-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["West - Europe","East US","West US 2","Southeast Asia"],"apiVersions":["2019-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationStatus","locations":["West - Europe","East US","West US 2","Southeast Asia"],"apiVersions":["2019-05-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DevOps","namespace":"Microsoft.DevOps","authorization":{"applicationId":"499b84ac-1321-427f-aa17-267ca6975798","roleDefinitionId":"6a18f445-86f0-4e2e-b8a9-6b9b5677e3d8"},"resourceTypes":[{"resourceType":"pipelines","locations":["East - Asia","Southeast Asia","Australia East","Brazil South","Canada Central","Japan - East","Japan West","North Europe","West Europe","West India","Central India","South - India","Central US","East US","East US 2","North Central US","South Central - US","West Central US","UK South","West US","West US 2"],"apiVersions":["2019-07-01-preview"],"defaultApiVersion":"2019-07-01-preview","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.VirtualMachineImages","namespace":"Microsoft.VirtualMachineImages","authorizations":[{"applicationId":"cf32a0cc-373c-47c9-9156-0db11f6a6dfc","roleDefinitionId":"0ee55a0b-f45f-4392-92ec-e8bf1b4b5da5","managedByRoleDefinitionId":"9e3af657-a8ff-583c-a75c-2fe7c4bcb635"}],"resourceTypes":[{"resourceType":"imageTemplates","locations":["East - US","East US 2","West Central US","West US","West US 2","South Central US","North - Europe","West Europe"],"apiVersions":["2020-02-14","2019-05-01-preview","2019-02-01-preview","2018-02-01-preview"],"defaultApiVersion":"2020-02-14","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"imageTemplates/runOutputs","locations":["East - US","East US 2","West Central US","West US","West US 2","South Central US","North - Europe","West Europe"],"apiVersions":["2020-02-14","2019-05-01-preview","2019-02-01-preview","2018-02-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":["East - US","East US 2","West Central US","West US","West US 2","North Europe","West - Europe","South Central US"],"apiVersions":["2020-02-14","2019-05-01-preview","2019-02-01-preview","2018-02-01-preview"],"capabilities":"None"},{"resourceType":"locations/operations","locations":["East - US","East US 2","West Central US","West US","West US 2","South Central US","North - Europe","West Europe"],"apiVersions":["2020-02-14","2019-05-01-preview","2019-02-01-preview","2018-02-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["East - US","East US 2","West Central US","West US","West US 2","South Central US","North - Europe","West Europe"],"apiVersions":["2020-02-14","2019-05-01-preview","2019-02-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.SecurityInsights","namespace":"Microsoft.SecurityInsights","authorizations":[{"applicationId":"98785600-1bb7-4fb9-b9fa-19afe2c8a360","roleDefinitionId":"ef1c46aa-ae81-4091-ab83-f75f28efb7b8"}],"resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2020-01-01","2019-01-01-preview"],"capabilities":"None"},{"resourceType":"alertRules","locations":["West - Europe","North Europe","France Central","UK South","UK West","France South","Switzerland - North","Switzerland West"],"apiVersions":["2020-01-01","2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"alertRuleTemplates","locations":["West - Europe","North Europe","France Central","UK South","UK West","France South","Switzerland - North","Switzerland West"],"apiVersions":["2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"cases","locations":["West - Europe","North Europe","France Central","UK South","UK West","France South","Switzerland - North","Switzerland West"],"apiVersions":["2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"bookmarks","locations":["West - Europe","North Europe","France Central","UK South","UK West","France South","Switzerland - North","Switzerland West"],"apiVersions":["2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"dataConnectors","locations":["West - Europe","North Europe","France Central","UK South","UK West","France South","Switzerland - North","Switzerland West"],"apiVersions":["2020-01-01","2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"dataConnectorsCheckRequirements","locations":["West - Europe","North Europe","France Central","UK South","UK West","France South","Switzerland - North","Switzerland West"],"apiVersions":["2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"entities","locations":["West - Europe","North Europe","France Central","UK South","UK West","France South","Switzerland - North","Switzerland West"],"apiVersions":["2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"incidents","locations":["West - Europe","North Europe","France Central","UK South","UK West","France South","Switzerland - North","Switzerland West"],"apiVersions":["2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"officeConsents","locations":["West - Europe","North Europe","France Central","UK South","UK West","France South","Switzerland - North","Switzerland West"],"apiVersions":["2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"settings","locations":["West - Europe","North Europe","France Central","UK South","UK West","France South","Switzerland - North","Switzerland West"],"apiVersions":["2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"aggregations","locations":["West - Europe","North Europe","France Central","UK South","UK West","France South","Switzerland - North","Switzerland West"],"apiVersions":["2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"entityQueries","locations":["West - Europe","North Europe","France Central","UK South","UK West","France South","Switzerland - North","Switzerland West"],"apiVersions":["2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"threatIntelligence","locations":["West - Europe","North Europe","France Central","UK South","UK West","France South","Switzerland - North","Switzerland West"],"apiVersions":["2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"automationRules","locations":["West - Europe","North Europe","France Central","UK South","UK West","France South","Switzerland - North","Switzerland West"],"apiVersions":["2019-01-01-preview"],"capabilities":"SupportsExtension"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DesktopVirtualization","namespace":"Microsoft.DesktopVirtualization","authorizations":[{"applicationId":"50e95039-b200-4007-bc97-8d5790743a63","roleDefinitionId":"CAD30215-AD1C-43BF-BE90-7BFA8B493E62"},{"applicationId":"9cdead84-a844-4324-93f2-b2e6bb768d07"},{"applicationId":"a85cf173-4192-42f8-81fa-777a763e6e2c"}],"resourceTypes":[{"resourceType":"workspaces","locations":["East - US","East US 2","West US","West US 2","North Central US","South Central US","West - Central US","Central US"],"apiVersions":["2019-12-10-preview","2019-09-24-preview","2019-01-23-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"applicationgroups","locations":["East - US","East US 2","West US","West US 2","North Central US","South Central US","West - Central US","Central US"],"apiVersions":["2019-12-10-preview","2019-09-24-preview","2019-01-23-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"applicationgroups/applications","locations":["East - US","East US 2","West US","West US 2","North Central US","South Central US","West - Central US","Central US"],"apiVersions":["2019-12-10-preview","2019-09-24-preview","2019-01-23-preview"],"capabilities":"None"},{"resourceType":"applicationgroups/desktops","locations":["East - US","East US 2","West US","West US 2","North Central US","South Central US","West - Central US","Central US"],"apiVersions":["2019-12-10-preview","2019-09-24-preview","2019-01-23-preview"],"capabilities":"None"},{"resourceType":"applicationgroups/startmenuitems","locations":["East - US","East US 2","West US","West US 2","North Central US","South Central US","West - Central US","Central US"],"apiVersions":["2019-12-10-preview","2019-09-24-preview","2019-01-23-preview"],"capabilities":"None"},{"resourceType":"hostpools","locations":["East - US","East US 2","West US","West US 2","North Central US","South Central US","West - Central US","Central US"],"apiVersions":["2019-12-10-preview","2019-09-24-preview","2019-01-23-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"hostpools/sessionhosts","locations":["East - US","East US 2","West US","West US 2","North Central US","South Central US","West - Central US","Central US"],"apiVersions":["2019-12-10-preview","2019-09-24-preview","2019-01-23-preview"],"capabilities":"None"},{"resourceType":"hostpools/sessionhosts/usersessions","locations":["East - US","East US 2","West US","West US 2","North Central US","South Central US","West - Central US","Central US"],"apiVersions":["2019-12-10-preview","2019-09-24-preview","2019-01-23-preview"],"capabilities":"None"},{"resourceType":"hostpools/usersessions","locations":["East - US","East US 2","West US","West US 2","North Central US","South Central US","West - Central US","Central US"],"apiVersions":["2019-12-10-preview","2019-09-24-preview","2019-01-23-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2019-12-10-preview","2019-09-24-preview","2019-01-23-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.GuestConfiguration","namespace":"Microsoft.GuestConfiguration","authorizations":[{"applicationId":"e935b4a5-8968-416d-8414-caed51c782a9","roleDefinitionId":"9c6ffa40-421e-4dc0-9739-76b0699a11de"}],"resourceTypes":[{"resourceType":"guestConfigurationAssignments","locations":[],"apiVersions":["2018-11-20","2018-06-30-preview","2018-01-20-preview"],"capabilities":"SupportsExtension"},{"resourceType":"software","locations":["East - US 2","South Central US"],"apiVersions":["2018-06-30-preview"],"capabilities":"SupportsExtension"},{"resourceType":"softwareUpdates","locations":["East - US 2","South Central US"],"apiVersions":["2018-06-30-preview"],"capabilities":"SupportsExtension"},{"resourceType":"softwareUpdateProfile","locations":["East - US 2","South Central US"],"apiVersions":["2018-06-30-preview"],"capabilities":"SupportsExtension"},{"resourceType":"operations","locations":[],"apiVersions":["2018-11-20","2018-06-30-preview","2018-01-20-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.HybridCompute","namespace":"Microsoft.HybridCompute","resourceTypes":[{"resourceType":"machines","locations":["West - US 2","West Europe","Southeast Asia","East US"],"apiVersions":["2020-03-11-preview","2019-12-12","2019-08-02-preview","2019-03-18-preview"],"defaultApiVersion":"2019-12-12","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"machines/extensions","locations":["West - Europe","West US 2","Southeast Asia","East US"],"apiVersions":["2020-03-11-preview","2019-12-12","2019-08-02-preview"],"defaultApiVersion":"2019-12-12","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations","locations":["West - Europe"],"apiVersions":["2020-03-11-preview","2019-12-12","2019-08-02-preview"],"defaultApiVersion":"2019-12-12","capabilities":"None"},{"resourceType":"locations/operationStatus","locations":["West - Europe","West US 2","Southeast Asia","East US"],"apiVersions":["2020-03-11-preview","2019-12-12","2019-08-02-preview"],"defaultApiVersion":"2019-12-12","capabilities":"None"},{"resourceType":"locations/operationResults","locations":["West - Europe","West US 2","Southeast Asia","East US"],"apiVersions":["2020-03-11-preview","2019-12-12","2019-08-02-preview"],"defaultApiVersion":"2019-12-12","capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-03-11-preview","2019-12-12","2019-08-02-preview","2019-03-18-preview"],"defaultApiVersion":"2019-12-12","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ManagedServices","namespace":"Microsoft.ManagedServices","authorization":{"applicationId":"66c6d0d1-f2e7-4a18-97a9-ed10f3347016","roleDefinitionId":"1e86f807-6ec0-40b3-8b5f-686b7e43a0a2"},"resourceTypes":[{"resourceType":"registrationDefinitions","locations":[],"apiVersions":["2020-02-01-preview","2019-09-01","2019-06-01","2019-04-01-preview","2018-06-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"registrationAssignments","locations":[],"apiVersions":["2020-02-01-preview","2019-09-01","2019-06-01","2019-04-01-preview","2018-06-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"operations","locations":[],"apiVersions":["2020-02-01-preview","2019-09-01","2019-06-01","2019-04-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"marketplaceRegistrationDefinitions","locations":[],"apiVersions":["2020-02-01-preview","2019-09-01","2019-06-01","2019-04-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"operationStatuses","locations":[],"apiVersions":["2020-02-01-preview","2019-09-01","2019-06-01","2019-04-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.OffAzure","namespace":"Microsoft.OffAzure","authorizations":[{"applicationId":"728a93e3-065d-4678-93b1-3cc281223341","roleDefinitionId":"b9967bf7-a345-4af8-95f0-49916f760fc6"}],"resourceTypes":[{"resourceType":"VMwareSites","locations":["Central - US","West Europe","UK South","UK West","North Europe","West US 2","Southeast - Asia","East Asia","Central India","South India","Canada Central","Australia - Southeast","Japan West","Japan East","Brazil South","Korea Central","Korea - South","France Central"],"apiVersions":["2020-01-01-preview","2020-01-01","2019-06-06","2019-05-01-preview","2018-05-01-preview"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"HyperVSites","locations":["Central US","West - Europe","UK South","UK West","North Europe","West US 2","Southeast Asia","East - Asia","Central India","South India","Canada Central","Australia Southeast","Japan - West","Japan East","Brazil South","Korea Central","Korea South","France Central"],"apiVersions":["2020-01-01","2019-06-06","2018-05-01-preview"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"ServerSites","locations":["Central US","West - Europe","UK South","UK West","North Europe","West US 2","Southeast Asia","East - Asia","Central India","South India","Canada Central","Australia Southeast","Japan - West","Japan East","Brazil South","Korea Central","Korea South","France Central"],"apiVersions":["2020-01-01-preview","2019-05-01-preview"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"ImportSites","locations":["Central US","West - Europe","UK South","UK West","North Europe","West US 2","Southeast Asia","East - Asia","Central India","South India","Canada Central","Australia Southeast","Japan - West","Japan East","Brazil South","Korea Central","Korea South","France Central"],"apiVersions":["2020-02-01","2020-01-01-preview","2019-05-01-preview"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"operations","locations":["Southeast Asia"],"apiVersions":["2020-01-01","2019-06-06","2018-05-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ResourceHealth","namespace":"Microsoft.ResourceHealth","authorizations":[{"applicationId":"8bdebf23-c0fe-4187-a378-717ad86f6a53","roleDefinitionId":"cc026344-c8b1-4561-83ba-59eba84b27cc"}],"resourceTypes":[{"resourceType":"availabilityStatuses","locations":[],"apiVersions":["2020-05-01-preview","2020-05-01","2018-08-01-rc","2018-08-01-preview","2018-07-01-rc","2018-07-01-preview","2017-07-01","2015-01-01"],"capabilities":"SupportsExtension"},{"resourceType":"childAvailabilityStatuses","locations":[],"apiVersions":["2018-11-06-beta","2018-08-01-rc","2018-08-01-preview","2018-07-01-rc","2018-07-01-preview","2018-07-01-beta","2017-07-01-rc","2017-07-01-preview","2017-07-01-beta","2015-01-01-rc","2015-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"childResources","locations":[],"apiVersions":["2018-11-06-beta","2018-08-01-rc","2018-08-01-preview","2018-07-01-rc","2018-07-01-preview","2018-07-01-beta","2017-07-01-rc","2017-07-01-preview","2017-07-01-beta","2015-01-01-rc","2015-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"events","locations":[],"apiVersions":["2018-07-01-rc","2018-07-01"],"capabilities":"SupportsExtension"},{"resourceType":"metadata","locations":[],"apiVersions":["2018-07-01-rc","2018-07-01-preview","2018-07-01-beta","2018-07-01-alpha"],"capabilities":"None"},{"resourceType":"emergingissues","locations":[],"apiVersions":["2018-11-06-beta","2018-07-01-rc","2018-07-01-preview","2018-07-01-beta","2018-07-01-alpha","2018-07-01","2017-07-01-beta"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2018-07-01","2015-01-01"],"capabilities":"None"},{"resourceType":"notifications","locations":["Australia - Southeast"],"apiVersions":["2016-09-01","2016-06-01"],"capabilities":"SupportsExtension"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DevTestLab","namespace":"Microsoft.DevTestLab","authorization":{"applicationId":"1a14be2a-e903-4cec-99cf-b2e209259a0f","roleDefinitionId":"8f2de81a-b9aa-49d8-b24c-11814d3ab525","managedByRoleDefinitionId":"8f2de81a-b9aa-49d8-b24c-11814d3ab525"},"resourceTypes":[{"resourceType":"labs/environments","locations":["Southeast - Asia","East US","West US","West Europe","East Asia","East US 2","Japan East","Japan - West","Central US"],"apiVersions":["2015-05-21-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"labs","locations":["West - Central US","South Central US","Central US","Australia Central","Australia - Southeast","Canada Central","Central India","East Asia","East US","France - Central","Japan East","Korea Central","North Europe","South Africa North","UK - West","West India","Switzerland North","Australia Central 2","Australia East","Brazil - South","Canada East","East US 2","France South","Japan West","Korea South","North - Central US","South India","Southeast Asia","Switzerland West","UK South","West - Europe","West US","West US 2"],"apiVersions":["2018-10-15-preview","2018-09-15","2017-04-26-preview","2016-05-15","2015-05-21-preview"],"defaultApiVersion":"2018-10-15-preview","capabilities":"CrossResourceGroupResourceMove, - SystemAssignedResourceIdentity, SupportsTags, SupportsLocation"},{"resourceType":"schedules","locations":["West - Central US","South Central US","Central US","Australia Central","Australia - Southeast","Canada Central","Central India","East Asia","East US","France - Central","Japan East","Korea Central","North Europe","South Africa North","UK - West","West India","Switzerland North","Australia Central 2","Australia East","Brazil - South","Canada East","East US 2","France South","Japan West","Korea South","North - Central US","South India","Southeast Asia","Switzerland West","UK South","West - Europe","West US","West US 2"],"apiVersions":["2018-10-15-preview","2018-09-15","2017-04-26-preview","2016-05-15","2015-05-21-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"labs/virtualMachines","locations":["West - Central US","South Central US","Central US","Australia Central","Australia - Southeast","Canada Central","Central India","East Asia","East US","France - Central","Japan East","Korea Central","North Europe","South Africa North","UK - West","West India","Switzerland North","Australia Central 2","Australia East","Brazil - South","Canada East","East US 2","France South","Japan West","Korea South","North - Central US","South India","Southeast Asia","Switzerland West","UK South","West - Europe","West US","West US 2"],"apiVersions":["2018-10-15-preview","2018-09-15","2017-04-26-preview","2016-05-15","2015-05-21-preview"],"capabilities":"CrossResourceGroupResourceMove, - SupportsTags, SupportsLocation"},{"resourceType":"labs/serviceRunners","locations":["West - Central US","South Central US","Central US","Australia Central","Australia - Southeast","Canada Central","Central India","East Asia","East US","France - Central","Japan East","Korea Central","North Europe","South Africa North","UK - West","West India","Switzerland North","Australia Central 2","Australia East","Brazil - South","Canada East","East US 2","France South","Japan West","Korea South","North - Central US","South India","Southeast Asia","Switzerland West","UK South","West - Europe","West US","West US 2"],"apiVersions":["2018-10-15-preview","2018-09-15","2017-04-26-preview","2016-05-15"],"defaultApiVersion":"2016-05-15","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2018-10-15-preview","2018-09-15","2017-04-26-preview","2016-05-15","2015-05-21-preview"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2018-10-15-preview","2018-09-15","2017-04-26-preview","2016-05-15","2015-05-21-preview"],"capabilities":"None"},{"resourceType":"locations/operations","locations":["West - Central US","South Central US","Central US","Australia Central","Australia - Southeast","Canada Central","Central India","East Asia","East US","France - Central","Japan East","Korea Central","North Europe","South Africa North","UK - West","West India","Switzerland North","Australia Central 2","Australia East","Brazil - South","Canada East","East US 2","France South","Japan West","Korea South","North - Central US","South India","Southeast Asia","Switzerland West","UK South","West - Europe","West US","West US 2"],"apiVersions":["2018-10-15-preview","2018-09-15","2017-04-26-preview","2016-05-15","2015-05-21-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.EventGrid","namespace":"Microsoft.EventGrid","authorizations":[{"applicationId":"4962773b-9cdb-44cf-a8bf-237846a00ab7","roleDefinitionId":"7FE036D8-246F-48BF-A78F-AB3EE699C8F3"}],"resourceTypes":[{"resourceType":"locations","locations":[],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2019-01-01","2018-09-15-preview","2018-05-01-preview","2018-01-01","2017-09-15-preview","2017-06-15-preview"],"capabilities":"None"},{"resourceType":"locations/eventSubscriptions","locations":["West - US 2","East US","West US","Central US","East US 2","West Central US","Australia - East","Australia Southeast","Australia Central","Japan East","Japan West","West - Europe","North Europe","Southeast Asia","East Asia","North Central US","South - Central US","Brazil South","Canada Central","Canada East","Central India","South - India","West India","France Central","UK West","UK South","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2019-01-01","2018-09-15-preview","2018-05-01-preview","2018-01-01","2017-09-15-preview","2017-06-15-preview"],"capabilities":"None"},{"resourceType":"eventSubscriptions","locations":["West - US 2","East US","West US","Central US","East US 2","West Central US","Australia - East","Australia Southeast","Australia Central","Japan East","Japan West","West - Europe","North Europe","Southeast Asia","East Asia","North Central US","South - Central US","Brazil South","Canada Central","Canada East","Central India","South - India","West India","France Central","UK West","UK South","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2019-01-01","2018-09-15-preview","2018-05-01-preview","2018-01-01","2017-09-15-preview","2017-06-15-preview"],"capabilities":"SupportsExtension"},{"resourceType":"topics","locations":["West - US 2","East US","West US","Central US","East US 2","West Central US","Australia - East","Australia Southeast","Australia Central","Japan East","Japan West","West - Europe","North Europe","Southeast Asia","East Asia","North Central US","South - Central US","Brazil South","Canada Central","Canada East","Central India","South - India","West India","France Central","UK West","UK South","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2019-01-01","2018-09-15-preview","2018-05-01-preview","2018-01-01","2017-09-15-preview","2017-06-15-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"domains","locations":["Central US","West - US 2","East US","West US","East US 2","West Central US","Australia East","Australia - Southeast","Australia Central","Japan East","Japan West","West Europe","North - Europe","Southeast Asia","East Asia","North Central US","South Central US","Brazil - South","Canada Central","Canada East","Central India","South India","West - India","France Central","UK West","UK South","Korea Central","Korea South","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2018-09-15-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"domains/topics","locations":["Central - US","West US 2","East US","West US","East US 2","West Central US","Australia - East","Australia Southeast","Australia Central","Japan East","Japan West","West - Europe","North Europe","Southeast Asia","East Asia","North Central US","South - Central US","Brazil South","Canada Central","Canada East","Central India","South - India","West India","France Central","UK West","UK South","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2018-09-15-preview"],"capabilities":"None"},{"resourceType":"topicTypes","locations":["West - US 2","East US","West US","Central US","East US 2","West Central US","Australia - East","Australia Southeast","Australia Central","Japan East","Japan West","West - Europe","North Europe","Southeast Asia","East Asia","North Central US","South - Central US","Brazil South","Canada Central","Canada East","Central India","South - India","West India","France Central","UK West","UK South","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2019-01-01","2018-09-15-preview","2018-05-01-preview","2018-01-01","2017-09-15-preview","2017-06-15-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["West - US 2","East US","West US","Central US","East US 2","West Central US","Australia - East","Australia Southeast","Australia Central","Japan East","Japan West","West - Europe","North Europe","Southeast Asia","East Asia","North Central US","South - Central US","Brazil South","Canada Central","Canada East","Central India","South - India","West India","France Central","UK West","UK South","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2019-01-01","2018-09-15-preview","2018-05-01-preview","2018-01-01","2017-09-15-preview","2017-06-15-preview"],"capabilities":"None"},{"resourceType":"locations/operationsStatus","locations":["West - US 2","East US","West US","Central US","East US 2","West Central US","Australia - East","Australia Southeast","Australia Central","Japan East","Japan West","West - Europe","North Europe","Southeast Asia","East Asia","North Central US","South - Central US","Brazil South","Canada Central","Canada East","Central India","South - India","West India","France Central","UK West","UK South","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2019-01-01","2018-09-15-preview","2018-05-01-preview","2018-01-01","2017-09-15-preview","2017-06-15-preview"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["West - US 2","East US","West US","Central US","East US 2","West Central US","Australia - East","Australia Southeast","Australia Central","Japan East","Japan West","West - Europe","North Europe","Southeast Asia","East Asia","North Central US","South - Central US","Brazil South","Canada Central","Canada East","Central India","South - India","West India","France Central","UK West","UK South","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2019-01-01","2018-09-15-preview","2018-05-01-preview","2018-01-01","2017-09-15-preview","2017-06-15-preview"],"capabilities":"None"},{"resourceType":"locations/topicTypes","locations":["West - US 2","East US","West US","Central US","East US 2","West Central US","Australia - East","Australia Southeast","Australia Central","Japan East","Japan West","West - Europe","North Europe","Southeast Asia","East Asia","North Central US","South - Central US","Brazil South","Canada Central","Canada East","Central India","South - India","West India","France Central","UK West","UK South","Korea Central","Korea - South","South Africa North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2019-01-01","2018-09-15-preview","2018-05-01-preview","2018-01-01","2017-09-15-preview","2017-06-15-preview"],"capabilities":"None"},{"resourceType":"extensionTopics","locations":["West - US 2","East US","West US","Central US","East US 2","West Central US","Australia - East","Australia Southeast","Australia Central","Japan East","Japan West","West - Europe","North Europe","Southeast Asia","East Asia","North Central US","South - Central US","Brazil South","Canada Central","Canada East","Central India","South - India","West India","France Central","UK West","UK South","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2019-01-01","2018-09-15-preview","2018-05-01-preview","2018-01-01","2017-09-15-preview","2017-06-15-preview"],"capabilities":"SupportsExtension"},{"resourceType":"operationResults","locations":[],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2019-01-01","2018-09-15-preview","2018-05-01-preview","2018-01-01","2017-09-15-preview","2017-06-15-preview"],"capabilities":"None"},{"resourceType":"operationsStatus","locations":[],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2019-01-01","2018-09-15-preview","2018-05-01-preview","2018-01-01","2017-09-15-preview","2017-06-15-preview"],"capabilities":"None"},{"resourceType":"systemTopics","locations":["global","West - Central US","Central US","West US 2","East US","West US","East US 2","Australia - East","Australia Southeast","Australia Central","Japan East","Japan West","West - Europe","North Europe","Southeast Asia","East Asia","North Central US","South - Central US","Brazil South","Canada Central","Canada East","Central India","South - India","West India","France Central","UK West","UK South","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-04-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"systemTopics/eventSubscriptions","locations":["global","West - Central US","Central US","West US 2","East US","West US","East US 2","Australia - East","Australia Southeast","Australia Central","Japan East","Japan West","West - Europe","North Europe","Southeast Asia","East Asia","North Central US","South - Central US","Brazil South","Canada Central","Canada East","Central India","South - India","West India","France Central","UK West","UK South","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-04-01-preview"],"capabilities":"None"},{"resourceType":"partnerNamespaces","locations":["West - Central US","Central US","West US 2","East US","West US","East US 2","Australia - East","Australia Southeast","Australia Central","Japan East","Japan West","West - Europe","North Europe","Southeast Asia","East Asia","North Central US","South - Central US","Brazil South","Canada Central","Canada East","Central India","South - India","West India","France Central","UK West","UK South","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-04-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"partnerTopics","locations":["West - Central US","Central US","West US 2","East US","West US","East US 2","Australia - East","Australia Southeast","Australia Central","Japan East","Japan West","West - Europe","North Europe","Southeast Asia","East Asia","North Central US","South - Central US","Brazil South","Canada Central","Canada East","Central India","South - India","West India","France Central","UK West","UK South","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-04-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"partnerTopics/eventSubscriptions","locations":["West - Central US","Central US","West US 2","East US","West US","East US 2","Australia - East","Australia Southeast","Australia Central","Japan East","Japan West","West - Europe","North Europe","Southeast Asia","East Asia","North Central US","South - Central US","Brazil South","Canada Central","Canada East","Central India","South - India","West India","France Central","UK West","UK South","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-04-01-preview"],"capabilities":"None"},{"resourceType":"partnerNamespaces/eventChannels","locations":["West - Central US","Central US","West US 2","East US","West US","East US 2","Australia - East","Australia Southeast","Australia Central","Japan East","Japan West","West - Europe","North Europe","Southeast Asia","East Asia","North Central US","South - Central US","Brazil South","Canada Central","Canada East","Central India","South - India","West India","France Central","UK West","UK South","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-04-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.PolicyInsights","namespace":"Microsoft.PolicyInsights","authorizations":[{"applicationId":"1d78a85d-813d-46f0-b496-dd72f50a3ec0","roleDefinitionId":"63d2b225-4c34-4641-8768-21a1f7c68ce8"},{"applicationId":"8cae6e77-e04e-42ce-b5cb-50d82bce26b1","roleDefinitionId":"4a2d3d6b-a6ea-45e2-9882-c9ba3e726ed7"}],"resourceTypes":[{"resourceType":"policyEvents","locations":[],"apiVersions":["2019-10-01","2018-07-01-preview","2018-04-04","2017-12-12-preview","2017-10-17-preview","2017-08-09-preview"],"capabilities":"SupportsExtension"},{"resourceType":"policyStates","locations":[],"apiVersions":["2019-10-01","2018-07-01-preview","2018-04-04","2017-12-12-preview","2017-10-17-preview","2017-08-09-preview"],"capabilities":"SupportsExtension"},{"resourceType":"operations","locations":[],"apiVersions":["2019-10-01","2018-07-01-preview","2018-04-04","2017-12-12-preview","2017-10-17-preview","2017-08-09-preview"],"capabilities":"None"},{"resourceType":"asyncOperationResults","locations":[],"apiVersions":["2019-10-01","2018-07-01-preview"],"capabilities":"None"},{"resourceType":"remediations","locations":[],"apiVersions":["2019-07-01","2018-07-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"policyTrackedResources","locations":[],"apiVersions":["2018-07-01-preview"],"capabilities":"SupportsExtension"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.KeyVault","namespace":"Microsoft.KeyVault","authorizations":[{"applicationId":"cfa8b339-82a2-471a-a3c9-0fc0be7a4093","roleDefinitionId":"1cf9858a-28a2-4228-abba-94e606305b95"},{"applicationId":"589d5083-6f11-4d30-a62a-a4b316a14abf"}],"resourceTypes":[{"resourceType":"vaults","locations":["North - Central US","East US","North Europe","West Europe","East Asia","Southeast - Asia","East US 2","Central US","South Central US","West US","Japan East","Japan - West","Australia East","Australia Southeast","Brazil South","Central India","South - India","West India","Canada Central","Canada East","UK South","UK West","West - Central US","West US 2","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-09-01","2018-02-14-preview","2018-02-14","2016-10-01","2015-06-01"],"defaultApiVersion":"2019-09-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-10-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-10-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"vaults/secrets","locations":["North - Central US","East US","North Europe","West Europe","East Asia","Southeast - Asia","East US 2","Central US","South Central US","West US","Japan East","Japan - West","Australia East","Australia Southeast","Brazil South","Central India","South - India","West India","Canada Central","Canada East","UK South","UK West","West - Central US","West US 2","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-09-01","2018-02-14-preview","2018-02-14","2016-10-01","2015-06-01"],"defaultApiVersion":"2019-09-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-10-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-10-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-10-01"}],"capabilities":"None"},{"resourceType":"vaults/accessPolicies","locations":["North - Central US","East US","North Europe","West Europe","East Asia","Southeast - Asia","East US 2","Central US","South Central US","West US","Japan East","Japan - West","Australia East","Australia Southeast","Brazil South","Central India","South - India","West India","Canada Central","Canada East","UK South","UK West","West - Central US","West US 2","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-09-01","2018-02-14-preview","2018-02-14","2016-10-01","2015-06-01"],"defaultApiVersion":"2019-09-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-10-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-10-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-10-01"}],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2019-09-01","2018-02-14-preview","2018-02-14","2016-10-01","2015-06-01","2014-12-19-preview"],"defaultApiVersion":"2019-09-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-10-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-10-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-10-01"}],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2019-09-01","2018-02-14-preview","2018-02-14","2016-10-01","2015-06-01"],"defaultApiVersion":"2019-09-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-10-01"}],"capabilities":"None"},{"resourceType":"deletedVaults","locations":["North - Central US","East US","North Europe","West Europe","East Asia","Southeast - Asia","East US 2","Central US","South Central US","West US","Japan East","Japan - West","Australia East","Australia Southeast","Brazil South","Central India","South - India","West India","Canada Central","Canada East","UK South","UK West","West - Central US","West US 2","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-09-01","2018-02-14-preview","2018-02-14","2016-10-01"],"defaultApiVersion":"2019-09-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-10-01"}],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2019-09-01","2018-02-14-preview","2018-02-14","2016-10-01"],"defaultApiVersion":"2019-09-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-10-01"}],"capabilities":"None"},{"resourceType":"locations/deletedVaults","locations":["North - Central US","East US","North Europe","West Europe","East Asia","Southeast - Asia","East US 2","Central US","South Central US","West US","Japan East","Japan - West","Australia East","Australia Southeast","Brazil South","Central India","South - India","West India","Canada Central","Canada East","UK South","UK West","West - Central US","West US 2","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-09-01","2018-02-14-preview","2018-02-14","2016-10-01"],"defaultApiVersion":"2019-09-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-10-01"}],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["East - US","North Central US","West Europe","North Europe","East Asia","Southeast - Asia","East US 2","Central US","South Central US","West Central US","West - US 2","West US","Japan East","Japan West","Australia East","Australia Southeast","Australia - Central","Brazil South","Central India","South India","West India","Canada - Central","Canada East","UK South","UK West","Korea Central","Korea South","France - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-09-01","2018-02-14-preview","2018-02-14","2016-10-01"],"defaultApiVersion":"2019-09-01","capabilities":"None"},{"resourceType":"locations/operationResults","locations":["North - Central US","East US","North Europe","West Europe","East Asia","Southeast - Asia","East US 2","Central US","South Central US","West US","Japan East","Japan - West","Australia East","Australia Southeast","Brazil South","Central India","South - India","West India","Canada Central","Canada East","UK South","UK West","West - Central US","West US 2","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-09-01","2018-02-14-preview","2018-02-14","2016-10-01"],"defaultApiVersion":"2019-09-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-10-01"}],"capabilities":"None"},{"resourceType":"vaults/eventGridFilters","locations":["North - Central US","East US","North Europe","West Europe","East Asia","Southeast - Asia","East US 2","Central US","South Central US","West US","Japan East","Japan - West","Australia East","Australia Southeast","Brazil South","Central India","South - India","West India","Canada Central","Canada East","UK South","UK West","West - Central US","West US 2","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-09-01","2018-02-14-preview","2018-02-14"],"defaultApiVersion":"2019-09-01","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.MachineLearning","namespace":"Microsoft.MachineLearning","authorization":{"applicationId":"0736f41a-0425-4b46-bdb5-1563eff02385","roleDefinitionId":"1cc297bc-1829-4524-941f-966373421033"},"resourceTypes":[{"resourceType":"Workspaces","locations":["South - Central US","West Europe","Southeast Asia","Japan East","West Central US"],"apiVersions":["2016-04-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"webServices","locations":["South Central - US","West Europe","Southeast Asia","Japan East","East US 2","West Central - US"],"apiVersions":["2017-01-01","2016-05-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":["South - Central US"],"apiVersions":["2017-01-01","2016-05-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":["South - Central US"],"apiVersions":["2017-01-01","2016-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/operations","locations":["South - Central US","West Europe","Southeast Asia","Japan East","East US 2","West - Central US"],"apiVersions":["2017-01-01","2016-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationsStatus","locations":["South - Central US","West Europe","Southeast Asia","Japan East","East US 2","West - Central US"],"apiVersions":["2017-01-01","2016-05-01-preview"],"capabilities":"None"},{"resourceType":"commitmentPlans","locations":["South - Central US","West Europe","Southeast Asia","Japan East","East US 2","West - Central US"],"apiVersions":["2017-01-01","2016-05-01-preview"],"capabilities":"SupportsTags, - SupportsLocation"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ManagedIdentity","namespace":"Microsoft.ManagedIdentity","resourceTypes":[{"resourceType":"Identities","locations":["South - Africa North","South Africa West","UAE North","Australia Central","Australia - East","Australia Southeast","Canada Central","Canada East","Brazil South","Central - India","West India","South India","Japan West","Japan East","East Asia","Southeast - Asia","Korea Central","Korea South","North Europe","West Europe","UK West","UK - South","Switzerland North","Germany West Central","Central US","North Central - US","East US","East US 2","South Central US","West US","West US 2","West Central - US","France Central","Norway East"],"apiVersions":["2018-11-30","2015-08-31-PREVIEW"],"capabilities":"SupportsExtension"},{"resourceType":"userAssignedIdentities","locations":["South - Africa North","South Africa West","UAE North","Australia Central","Australia - East","Australia Southeast","Canada Central","Canada East","Brazil South","Central - India","West India","South India","Japan West","Japan East","East Asia","Southeast - Asia","Korea Central","Korea South","North Europe","West Europe","UK West","UK - South","Switzerland North","Germany West Central","Central US","North Central - US","East US","East US 2","South Central US","West US","West US 2","West Central - US","France Central","Norway East"],"apiVersions":["2018-11-30","2015-08-31-PREVIEW"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"operations","locations":["South Africa - North","South Africa West","UAE North","Australia Central","Australia East","Australia - Southeast","Canada Central","Canada East","Brazil South","Central India","West - India","South India","Japan West","Japan East","East Asia","Southeast Asia","Korea - Central","Korea South","North Europe","West Europe","UK West","UK South","Switzerland - North","Germany West Central","Central US","North Central US","East US","East - US 2","South Central US","West US","West US 2","West Central US","France Central","Norway - East"],"apiVersions":["2018-11-30","2015-08-31-PREVIEW"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Storage","namespace":"Microsoft.Storage","authorizations":[{"applicationId":"a6aa9161-5291-40bb-8c5c-923b567bee3b","roleDefinitionId":"070ab87f-0efc-4423-b18b-756f3bdb0236"},{"applicationId":"e406a681-f3d4-42a8-90b6-c2b029497af1"}],"resourceTypes":[{"resourceType":"storageAccounts","locations":["East - US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan - East","Japan West","North Central US","South Central US","Central US","North - Europe","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","Canada East","Canada Central","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-05-01","2016-01-01","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2019-06-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2017-03-09-profile","apiVersion":"2016-01-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-01-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"operations","locations":["East US","East - US 2","West US","West Europe","East Asia","Southeast Asia","Japan East","Japan - West","North Central US","South Central US","Central US","North Europe","Brazil - South","Australia East","Australia Southeast","South India","Central India","West - India","Canada East","Canada Central","West US 2","West Central US","UK South","UK - West","Korea Central","Korea South","France Central","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central"],"apiVersions":["2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-05-01","2016-01-01","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2019-06-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2017-03-09-profile","apiVersion":"2016-01-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-01-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"locations/asyncoperations","locations":["East - US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan - East","Japan West","North Central US","South Central US","Central US","North - Europe","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","Canada East","Canada Central","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-05-01","2016-01-01","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2019-06-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-01-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-01-01"}],"capabilities":"None"},{"resourceType":"storageAccounts/listAccountSas","locations":["East - US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan - East","Japan West","North Central US","South Central US","Central US","North - Europe","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","Canada East","Canada Central","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-05-01"],"defaultApiVersion":"2019-06-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"storageAccounts/listServiceSas","locations":["East - US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan - East","Japan West","North Central US","South Central US","Central US","North - Europe","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","Canada East","Canada Central","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-05-01"],"defaultApiVersion":"2019-06-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"storageAccounts/blobServices","locations":["East - US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan - East","Japan West","North Central US","South Central US","Central US","North - Europe","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","Canada East","Canada Central","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-05-01"],"defaultApiVersion":"2019-06-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"storageAccounts/tableServices","locations":["East - US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan - East","Japan West","North Central US","South Central US","Central US","North - Europe","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","Canada East","Canada Central","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-05-01"],"defaultApiVersion":"2019-06-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"storageAccounts/queueServices","locations":["East - US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan - East","Japan West","North Central US","South Central US","Central US","North - Europe","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","Canada East","Canada Central","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-05-01"],"defaultApiVersion":"2019-06-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"storageAccounts/fileServices","locations":["East - US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan - East","Japan West","North Central US","South Central US","Central US","North - Europe","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","Canada East","Canada Central","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-05-01"],"defaultApiVersion":"2019-06-01","capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-07-01","2016-01-01"],"defaultApiVersion":"2019-06-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2017-03-09-profile","apiVersion":"2016-01-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-01-01"}],"capabilities":"None"},{"resourceType":"locations/usages","locations":["East - US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan - East","Japan West","North Central US","South Central US","Central US","North - Europe","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","Canada East","Canada Central","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01"],"defaultApiVersion":"2019-06-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-01-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-01-01"}],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["East - US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan - East","Japan West","North Central US","South Central US","Central US","North - Europe","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","Canada East","Canada Central","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-07-01"],"defaultApiVersion":"2019-06-01","capabilities":"None"},{"resourceType":"usages","locations":[],"apiVersions":["2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-05-01","2016-01-01","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2019-06-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2017-03-09-profile","apiVersion":"2016-01-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-01-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["East - US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan - East","Japan West","North Central US","South Central US","Central US","North - Europe","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","Canada East","Canada Central","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central"],"apiVersions":["2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-05-01","2016-01-01","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2019-06-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2017-03-09-profile","apiVersion":"2016-01-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-01-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["East - US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan - East","Japan West","North Central US","South Central US","Central US","North - Europe","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","Canada East","Canada Central","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-02-01","2017-10-01","2017-06-01","2016-12-01"],"defaultApiVersion":"2019-06-01","capabilities":"None"},{"resourceType":"storageAccounts/services","locations":["East - US","West US","East US 2 (Stage)","West Europe","North Europe","East Asia","Southeast - Asia","Japan East","Japan West","North Central US","South Central US","East - US 2","Central US","Australia East","Australia Southeast","Brazil South","South - India","Central India","West India","Canada East","Canada Central","West US - 2","West Central US","UK South","UK West","Korea Central","Korea South","France - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"storageAccounts/services/metricDefinitions","locations":["East - US","West US","East US 2 (Stage)","West Europe","North Europe","East Asia","Southeast - Asia","Japan East","Japan West","North Central US","South Central US","East - US 2","Central US","Australia East","Australia Southeast","Brazil South","South - India","Central India","West India","Canada East","Canada Central","West US - 2","West Central US","UK South","UK West","Korea Central","Korea South","France - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2014-04-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Security","namespace":"Microsoft.Security","authorizations":[{"applicationId":"8edd93e1-2103-40b4-bd70-6e34e586362d","roleDefinitionId":"855AF4C4-82F6-414C-B1A2-628025628B9A"},{"applicationId":"fc780465-2017-40d4-a0c5-307022471b92"}],"resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"securityStatuses","locations":["Central - US","East US","West Europe","West Central US"],"apiVersions":["2015-06-01-preview"],"capabilities":"None"},{"resourceType":"tasks","locations":["Central - US","East US","West Europe","West Central US"],"apiVersions":["2015-06-01-preview"],"capabilities":"None"},{"resourceType":"secureScores","locations":[],"apiVersions":["2020-01-01-preview"],"capabilities":"None"},{"resourceType":"secureScores/secureScoreControls","locations":[],"apiVersions":["2020-01-01-preview"],"capabilities":"None"},{"resourceType":"secureScoreControls","locations":[],"apiVersions":["2020-01-01-preview"],"capabilities":"None"},{"resourceType":"secureScoreControlDefinitions","locations":[],"apiVersions":["2020-01-01-preview"],"capabilities":"None"},{"resourceType":"regulatoryComplianceStandards","locations":["Central - US","East US"],"apiVersions":["2019-01-01-preview","2019-01-01"],"capabilities":"None"},{"resourceType":"regulatoryComplianceStandards/regulatoryComplianceControls","locations":["Central - US","East US"],"apiVersions":["2019-01-01-preview","2019-01-01"],"capabilities":"None"},{"resourceType":"regulatoryComplianceStandards/regulatoryComplianceControls/regulatoryComplianceAssessments","locations":["Central - US","East US"],"apiVersions":["2019-01-01-preview","2019-01-01"],"capabilities":"None"},{"resourceType":"alerts","locations":["Central - US","East US","West Europe"],"apiVersions":["2019-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"alertsSuppressionRules","locations":[],"apiVersions":["2019-01-01-preview"],"capabilities":"None"},{"resourceType":"autoDismissAlertsRules","locations":[],"apiVersions":["2019-01-01-preview"],"capabilities":"None"},{"resourceType":"dataCollectionAgents","locations":["East - Asia","Southeast Asia","East US","East US 2","West US","North Central US","South - Central US","Central US","North Europe","West Europe","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","Canada Central","Canada East"],"apiVersions":["2015-06-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"pricings","locations":["Central - US","East US"],"apiVersions":["2018-06-01","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"AutoProvisioningSettings","locations":["Central - US","East US"],"apiVersions":["2019-01-01","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"Compliances","locations":["Central - US","East US"],"apiVersions":["2017-08-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"securityContacts","locations":["Central - US","East US"],"apiVersions":["2017-08-01-preview"],"capabilities":"None"},{"resourceType":"workspaceSettings","locations":["Central - US","East US"],"apiVersions":["2019-01-01","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"complianceResults","locations":["Central - US","East US"],"apiVersions":["2017-08-01"],"capabilities":"SupportsExtension"},{"resourceType":"policies","locations":["Central - US","East US"],"apiVersions":["2015-06-01-preview"],"capabilities":"None"},{"resourceType":"assessments","locations":[],"apiVersions":["2020-01-01","2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"assessmentMetadata","locations":[],"apiVersions":["2020-01-01","2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"subAssessments","locations":[],"apiVersions":["2020-01-01","2019-01-01-preview"],"capabilities":"None"},{"resourceType":"securitySolutions","locations":["Central - US","East US","West Europe","West Central US"],"apiVersions":["2015-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/securitySolutions","locations":["Central - US","West Europe","West Central US"],"apiVersions":["2015-06-01-preview"],"capabilities":"None"},{"resourceType":"discoveredSecuritySolutions","locations":["Central - US","East US","West Europe","West Central US"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/discoveredSecuritySolutions","locations":["Central - US","West Europe","West Central US"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"allowedConnections","locations":["Central - US","East US","West Europe","West Central US"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/allowedConnections","locations":["Central - US","West Europe","West Central US"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"topologies","locations":["Central - US","East US","West Europe","West Central US"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/topologies","locations":["Central - US","West Europe","West Central US"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"securitySolutionsReferenceData","locations":["Central - US","East US","West Europe","West Central US"],"apiVersions":["2015-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/securitySolutionsReferenceData","locations":["Central - US","West Europe","West Central US"],"apiVersions":["2015-06-01-preview"],"capabilities":"None"},{"resourceType":"jitNetworkAccessPolicies","locations":["Central - US","East US","North Europe","West Europe","UK South","UK West","France Central","Switzerland - North","Germany West Central","West Central US","West US 2"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/jitNetworkAccessPolicies","locations":["Central - US","East US","North Europe","West Europe","UK South","UK West","France Central","France - South","Switzerland North","Germany West Central","West Central US","West - US 2"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":["Central - US","East US"],"apiVersions":["2015-06-01-preview"],"capabilities":"None"},{"resourceType":"securityStatusesSummaries","locations":["Central - US","East US","West Europe","West Central US"],"apiVersions":["2015-06-01-preview"],"capabilities":"None"},{"resourceType":"applicationWhitelistings","locations":["Central - US","East US","West Central US","West Europe"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/applicationWhitelistings","locations":["Central - US","West Central US","West Europe"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/alerts","locations":["Central - US","West Europe"],"apiVersions":["2019-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/tasks","locations":["Central - US","West Europe","West Central US"],"apiVersions":["2015-06-01-preview"],"capabilities":"None"},{"resourceType":"externalSecuritySolutions","locations":["Central - US","East US","West Europe","West Central US"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/externalSecuritySolutions","locations":["Central - US","West Europe","West Central US"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"InformationProtectionPolicies","locations":["Central - US","East US"],"apiVersions":["2017-08-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"advancedThreatProtectionSettings","locations":["Australia - Central","Australia Central 2","Australia East","Australia Southeast","Brazil - South","Canada Central","Canada East","Central India","Central US","East Asia","East - US 2","East US","Japan East","Japan West","Korea Central","Korea South","North - Central US","North Europe","South Central US","South India","Southeast Asia","UK - South","UK West","West Central US","West Europe","West India","West US 2","West - US","France Central","UAE North","Germany West Central","Switzerland North"],"apiVersions":["2019-01-01","2017-08-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"deviceSecurityGroups","locations":["North - Europe","West Europe","UK South","UK West","France Central","France South","West - Central US"],"apiVersions":["2019-08-01","2017-08-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"iotSecuritySolutions","locations":["East - Asia","Southeast Asia","Central US","East US","East US 2","West US","North - Central US","South Central US","Japan West","Japan East","Brazil South","Australia - East","Australia Southeast","South India","Central India","West India","Canada - Central","Canada East","West US 2","Korea Central","Korea South","Australia - Central","Australia Central 2","UAE Central","UAE North","South Africa North","South - Africa West","North Europe","West Europe","UK South","UK West","France Central","France - South","West Central US"],"apiVersions":["2019-08-01","2017-08-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"iotSecuritySolutions/analyticsModels","locations":["East - Asia","Southeast Asia","Central US","East US","East US 2","West US","North - Central US","South Central US","Japan West","Japan East","Brazil South","Australia - East","Australia Southeast","South India","Central India","West India","Canada - Central","Canada East","West Central US","West US 2","Korea Central","Korea - South","Australia Central","Australia Central 2","UAE Central","UAE North","South - Africa North","South Africa West","North Europe","West Europe","UK South","UK - West","France Central","France South"],"apiVersions":["2019-08-01","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"iotSecuritySolutions/iotAlertTypes","locations":["East - Asia","Southeast Asia","Central US","East US","East US 2","West US","North - Central US","South Central US","Japan West","Japan East","Brazil South","Australia - East","Australia Southeast","South India","Central India","West India","Canada - Central","Canada East","West Central US","West US 2","Korea Central","Korea - South","Australia Central","Australia Central 2","UAE Central","UAE North","South - Africa North","South Africa West","North Europe","West Europe","UK South","UK - West","France Central","France South"],"apiVersions":["2019-08-01"],"capabilities":"None"},{"resourceType":"iotSecuritySolutions/iotAlerts","locations":["East - Asia","Southeast Asia","Central US","East US","East US 2","West US","North - Central US","South Central US","Japan West","Japan East","Brazil South","Australia - East","Australia Southeast","South India","Central India","West India","Canada - Central","Canada East","West Central US","West US 2","Korea Central","Korea - South","Australia Central","Australia Central 2","UAE Central","UAE North","South - Africa North","South Africa West","North Europe","West Europe","UK South","UK - West","France Central","France South"],"apiVersions":["2019-08-01"],"capabilities":"None"},{"resourceType":"iotSecuritySolutions/analyticsModels/aggregatedAlerts","locations":["East - Asia","Southeast Asia","Central US","East US","East US 2","West US","North - Central US","South Central US","Japan West","Japan East","Brazil South","Australia - East","Australia Southeast","South India","Central India","West India","Canada - Central","Canada East","West Central US","West US 2","Korea Central","Korea - South","Australia Central","Australia Central 2","UAE Central","UAE North","South - Africa North","South Africa West","North Europe","West Europe","UK South","UK - West","France Central","France South"],"apiVersions":["2019-08-01","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"iotSecuritySolutions/analyticsModels/aggregatedRecommendations","locations":["East - Asia","Southeast Asia","Central US","East US","East US 2","West US","North - Central US","South Central US","Japan West","Japan East","Brazil South","Australia - East","Australia Southeast","South India","Central India","West India","Canada - Central","Canada East","West Central US","West US 2","Korea Central","Korea - South","Australia Central","Australia Central 2","UAE Central","UAE North","South - Africa North","South Africa West","North Europe","West Europe","UK South","UK - West","France Central","France South"],"apiVersions":["2019-08-01","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"settings","locations":["Central - US","East US"],"apiVersions":["2019-01-01","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"serverVulnerabilityAssessments","locations":["West - Europe","North Europe","UK South","UK West","France Central","France South","Switzerland - North","Germany West Central"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"adaptiveNetworkHardenings","locations":["West - Europe","North Europe","UK South","UK West","France Central","France South","Switzerland - North","Germany West Central"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"automations","locations":["Central - US","East US","East US 2","North Central US","South Central US","West US","West - US 2","West Central US","Canada Central","Canada East","Brazil South","East - Asia","Southeast Asia","Australia Central","Australia Central 2","Australia - East","Australia Southeast","Central India","South India","West India","Japan - East","Japan West","Korea Central","Korea South","South Africa North","South - Africa West","UAE Central","UAE North","North Europe","West Europe","France - Central","France South","UK South","UK West"],"apiVersions":["2019-01-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Advisor","namespace":"Microsoft.Advisor","authorization":{"applicationId":"c39c9bac-9d1f-4dfb-aa29-27f6365e5cb7","roleDefinitionId":"8a63b04c-3731-409b-9765-f1175c047872"},"resourceTypes":[{"resourceType":"suppressions","locations":[],"apiVersions":["2020-01-01","2017-04-19","2017-03-31","2016-07-12-preview","2016-05-09-preview"],"capabilities":"SupportsExtension"},{"resourceType":"configurations","locations":[],"apiVersions":["2020-01-01","2017-04-19","2017-03-31"],"capabilities":"SupportsExtension"},{"resourceType":"recommendations","locations":[],"apiVersions":["2020-01-01","2017-04-19","2017-03-31","2016-07-12-preview","2016-05-09-preview"],"capabilities":"SupportsExtension"},{"resourceType":"generateRecommendations","locations":[],"apiVersions":["2020-01-01","2017-04-19","2017-03-31","2016-07-12-preview","2016-05-09-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-01-01","2017-04-19","2017-03-31","2016-07-12-preview","2016-05-09-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AlertsManagement","namespace":"Microsoft.AlertsManagement","authorizations":[{"applicationId":"3af5a1e8-2459-45cb-8683-bcd6cccbcc13","roleDefinitionId":"b1309299-720d-4159-9897-6158a61aee41"}],"resourceTypes":[{"resourceType":"alerts","locations":[],"apiVersions":["2019-05-05-preview","2019-03-01-preview","2019-03-01","2018-11-02-privatepreview","2018-05-05-preview","2018-05-05","2017-11-15-privatepreview"],"capabilities":"SupportsExtension"},{"resourceType":"alertsSummary","locations":[],"apiVersions":["2019-05-05-preview","2019-03-01-preview","2019-03-01","2018-05-05-preview","2018-05-05","2017-11-15-privatepreview"],"capabilities":"SupportsExtension"},{"resourceType":"smartGroups","locations":[],"apiVersions":["2019-05-05-preview","2018-05-05-preview","2018-05-05","2017-11-15-privatepreview"],"capabilities":"None"},{"resourceType":"smartDetectorAlertRules","locations":["global"],"apiVersions":["2019-06-01","2019-03-01","2018-02-01-privatepreview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"actionRules","locations":["global"],"apiVersions":["2019-05-05-preview","2018-11-02-privatepreview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"alertsList","locations":[],"apiVersions":["2018-11-02-privatepreview"],"capabilities":"None"},{"resourceType":"alertsSummaryList","locations":[],"apiVersions":["2018-11-02-privatepreview"],"capabilities":"None"},{"resourceType":"alertsMetaData","locations":[],"apiVersions":["2019-05-05-preview","2019-03-01-preview","2019-03-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2018-05-05-preview","2018-05-05","2017-11-15-privatepreview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute","namespace":"Microsoft.Compute","authorizations":[{"applicationId":"60e6cd67-9c8c-4951-9b3c-23c25a2169af","roleDefinitionId":"e4770acb-272e-4dc8-87f3-12f44a612224"},{"applicationId":"a303894e-f1d8-4a37-bf10-67aa654a0596","roleDefinitionId":"903ac751-8ad5-4e5a-bfc2-5e49f450a241"},{"applicationId":"a8b6bf88-1d1a-4626-b040-9a729ea93c65","roleDefinitionId":"45c8267c-80ba-4b96-9a43-115b8f49fccd"},{"applicationId":"184909ca-69f1-4368-a6a7-c558ee6eb0bd","roleDefinitionId":"45c8267c-80ba-4b96-9a43-115b8f49fccd"},{"applicationId":"5e5e43d4-54da-4211-86a4-c6e7f3715801","roleDefinitionId":"ffcd6e5b-8772-457d-bb17-89703c03428f"},{"applicationId":"ce6ff14a-7fdc-4685-bbe0-f6afdfcfa8e0","roleDefinitionId":"cb17cddc-dbac-4ae0-ae79-8db34eddfca0"},{"applicationId":"372140e0-b3b7-4226-8ef9-d57986796201","roleDefinitionId":"cb17cddc-dbac-4ae0-ae79-8db34eddfca0"},{"applicationId":"b9a92e36-2cf8-4f4e-bcb3-9d99e00e14ab","roleDefinitionId":"6efa92ca-56b6-40af-a468-5e3d2b5232f0"}],"resourceTypes":[{"resourceType":"availabilitySets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2018-06-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2018-06-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"zoneMappings":[{"location":"East - US 2","zones":["3","1","2"]},{"location":"Central US","zones":["3","1","2"]},{"location":"West - Europe","zones":["3","1","2"]},{"location":"France Central","zones":["3","1","2"]},{"location":"Southeast - Asia","zones":["3","1","2"]},{"location":"West US 2","zones":["3","1","2"]},{"location":"North - Europe","zones":["3","1","2"]},{"location":"East US","zones":["3","1","2"]},{"location":"UK - South","zones":["3","1","2"]},{"location":"Japan East","zones":["3","1","2"]},{"location":"Australia - East","zones":[]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":[]},{"location":"Canada Central","zones":[]},{"location":"Germany - West Central","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"virtualMachines/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2018-06-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"virtualMachineScaleSets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2018-06-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"zoneMappings":[{"location":"East - US 2","zones":["3","1","2"]},{"location":"Central US","zones":["3","1","2"]},{"location":"West - Europe","zones":["3","1","2"]},{"location":"France Central","zones":["3","1","2"]},{"location":"Southeast - Asia","zones":["3","1","2"]},{"location":"West US 2","zones":["3","1","2"]},{"location":"North - Europe","zones":["3","1","2"]},{"location":"East US","zones":["3","1","2"]},{"location":"UK - South","zones":["3","1","2"]},{"location":"Japan East","zones":["3","1","2"]},{"location":"Australia - East","zones":[]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":[]},{"location":"Canada Central","zones":[]},{"location":"Germany - West Central","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"virtualMachineScaleSets/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2015-06-15","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"None"},{"resourceType":"virtualMachineScaleSets/virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2018-06-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"None"},{"resourceType":"virtualMachineScaleSets/networkInterfaces","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"None"},{"resourceType":"virtualMachineScaleSets/virtualMachines/networkInterfaces","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"None"},{"resourceType":"virtualMachineScaleSets/publicIPAddresses","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/operations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"None"},{"resourceType":"locations/vmSizes","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"None"},{"resourceType":"locations/runCommands","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"None"},{"resourceType":"locations/usages","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"None"},{"resourceType":"locations/virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30"],"defaultApiVersion":"2018-06-01","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"None"},{"resourceType":"locations/publishers","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"None"},{"resourceType":"operations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-03-30","2015-06-15","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"restorePointCollections","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"defaultApiVersion":"2018-06-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"restorePointCollections/restorePoints","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"capabilities":"None"},{"resourceType":"proximityPlacementGroups","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01"],"defaultApiVersion":"2018-06-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"sshPublicKeys","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-06-01","2019-12-01"],"defaultApiVersion":"2019-12-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"virtualMachines/metricDefinitions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"sharedVMImages","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central"],"apiVersions":["2017-10-15-preview"],"defaultApiVersion":"2017-10-15-preview","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"sharedVMImages/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central"],"apiVersions":["2017-10-15-preview"],"defaultApiVersion":"2017-10-15-preview","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"locations/artifactPublishers","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"],"capabilities":"None"},{"resourceType":"locations/capsoperations","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2019-12-01","2019-07-01","2019-03-01","2018-06-01","2017-10-15-preview"],"capabilities":"None"},{"resourceType":"galleries","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"defaultApiVersion":"2018-06-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"galleries/images","locations":["West Central - US","South Central US","East US 2","Southeast Asia","West Europe","West US","East - US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"defaultApiVersion":"2018-06-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"galleries/images/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"defaultApiVersion":"2018-06-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"disks","locations":["Southeast Asia","East - US 2","Central US","West Europe","East US","North Central US","South Central - US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"defaultApiVersion":"2018-06-01","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"zoneMappings":[{"location":"East - US 2","zones":["3","1","2"]},{"location":"Central US","zones":["3","1","2"]},{"location":"West - Europe","zones":["3","1","2"]},{"location":"France Central","zones":["3","1","2"]},{"location":"Southeast - Asia","zones":["3","1","2"]},{"location":"West US 2","zones":["3","1","2"]},{"location":"North - Europe","zones":["3","1","2"]},{"location":"East US","zones":["3","1","2"]},{"location":"UK - South","zones":["3","1","2"]},{"location":"Japan East","zones":["3","1","2"]},{"location":"Australia - East","zones":[]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":[]},{"location":"Canada Central","zones":[]},{"location":"Germany - West Central","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"snapshots","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"defaultApiVersion":"2018-06-01","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations/diskoperations","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"None"},{"resourceType":"diskEncryptionSets","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-05-01","2019-11-01","2019-07-01"],"defaultApiVersion":"2019-07-01","capabilities":"SystemAssignedResourceIdentity, - SupportsTags, SupportsLocation"},{"resourceType":"locations/vsmoperations","locations":["East - US","West Central US","South Central US","North Europe","Australia East","Central - US","North Central US","Southeast Asia","West US","East US 2","West Europe","West - India","Australia Central","Australia Central 2","UK West","Brazil South","East - Asia","South India","Australia Southeast","France South","West US 2","Japan - West","France Central","Central India","Korea South","Korea Central","Japan - East","Canada East","Canada Central","South Africa North","UAE North","South - Africa West","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"None"},{"resourceType":"images","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview"],"defaultApiVersion":"2018-06-01","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations/logAnalytics","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01"],"capabilities":"None"},{"resourceType":"hostGroups","locations":["Central - US","East US 2","West Europe","Southeast Asia","France Central","North Europe","West - US 2","East US","UK South","Japan East","Japan West","East Asia","North Central - US","South Central US","Canada East","Korea Central","Brazil South","UK West","Canada - Central","West US","West Central US","Central India","South India","Australia - Southeast","Korea South","West India","South Africa North","UAE North","Australia - Central","Switzerland North","Germany West Central","Norway East","Australia - East"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01"],"defaultApiVersion":"2018-10-01","zoneMappings":[{"location":"East - US 2","zones":["3","1","2"]},{"location":"Central US","zones":["3","1","2"]},{"location":"West - Europe","zones":["3","1","2"]},{"location":"France Central","zones":["3","1","2"]},{"location":"Southeast - Asia","zones":["3","1","2"]},{"location":"West US 2","zones":["3","1","2"]},{"location":"North - Europe","zones":["3","1","2"]},{"location":"East US","zones":["3","1","2"]},{"location":"UK - South","zones":["3","1","2"]},{"location":"Japan East","zones":["3","1","2"]},{"location":"Australia - East","zones":[]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":[]},{"location":"Canada Central","zones":[]},{"location":"Germany - West Central","zones":[]}],"capabilities":"SupportsTags, SupportsLocation"},{"resourceType":"hostGroups/hosts","locations":["Central - US","East US 2","West Europe","Southeast Asia","France Central","North Europe","West - US 2","East US","UK South","Japan East","Japan West","East Asia","North Central - US","South Central US","Canada East","Korea Central","Brazil South","UK West","Canada - Central","West US","West Central US","Central India","South India","Australia - Southeast","Korea South","West India","South Africa North","UAE North","Australia - Central","Switzerland North","Germany West Central","Norway East","Australia - East"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01"],"defaultApiVersion":"2018-10-01","zoneMappings":[{"location":"East - US 2","zones":["3","1","2"]},{"location":"Central US","zones":["3","1","2"]},{"location":"West - Europe","zones":["3","1","2"]},{"location":"France Central","zones":["3","1","2"]},{"location":"Southeast - Asia","zones":["3","1","2"]},{"location":"West US 2","zones":["3","1","2"]},{"location":"North - Europe","zones":["3","1","2"]},{"location":"East US","zones":["3","1","2"]},{"location":"UK - South","zones":["3","1","2"]},{"location":"Japan East","zones":["3","1","2"]},{"location":"Australia - East","zones":[]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":[]},{"location":"Canada Central","zones":[]},{"location":"Germany - West Central","zones":[]}],"capabilities":"SupportsTags, SupportsLocation"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2017-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"defaultApiVersion":"2018-11-01","zoneMappings":[{"location":"East - US 2","zones":["3","1","2"]},{"location":"Central US","zones":["3","1","2"]},{"location":"West - Europe","zones":["3","1","2"]},{"location":"France Central","zones":["3","1","2"]},{"location":"Southeast - Asia","zones":["3","1","2"]},{"location":"West US 2","zones":["3","1","2"]},{"location":"North - Europe","zones":["3","1","2"]},{"location":"East US","zones":["3","1","2"]},{"location":"UK - South","zones":["3","1","2"]},{"location":"Japan East","zones":["3","1","2"]},{"location":"Australia - East","zones":[]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":[]},{"location":"Canada Central","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2017-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["3","1","2"]},{"location":"Central US","zones":["3","1","2"]},{"location":"West - Europe","zones":["3","1","2"]},{"location":"France Central","zones":["3","1","2"]},{"location":"Southeast - Asia","zones":["3","1","2"]},{"location":"West US 2","zones":["3","1","2"]},{"location":"North - Europe","zones":["3","1","2"]},{"location":"East US","zones":["3","1","2"]},{"location":"UK - South","zones":["3","1","2"]},{"location":"Japan East","zones":["3","1","2"]},{"location":"Australia - East","zones":[]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":[]},{"location":"Canada Central","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2017-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"defaultApiVersion":"2019-02-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2019-07-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"loadBalancers","locations":["West US","East - US","North Europe","West Europe","East Asia","Southeast Asia","North Central - US","South Central US","Central US","East US 2","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast","Central India","South India","West - India","Canada Central","Canada East","West Central US","West US 2","UK West","UK - South","Korea Central","Korea South","France Central","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2017-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2017-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2017-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"defaultApiVersion":"2018-01-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2018-04-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2017-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2018-07-01","zoneMappings":[{"location":"East - US 2","zones":["3","1","2"]},{"location":"Central US","zones":["3","1","2"]},{"location":"West - Europe","zones":["3","1","2"]},{"location":"France Central","zones":["3","1","2"]},{"location":"Southeast - Asia","zones":["3","1","2"]},{"location":"West US 2","zones":["3","1","2"]},{"location":"North - Europe","zones":["3","1","2"]},{"location":"East US","zones":["3","1","2"]},{"location":"UK - South","zones":["3","1","2"]},{"location":"Japan East","zones":["3","1","2"]},{"location":"Australia - East","zones":[]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":[]},{"location":"Canada Central","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2018-10-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30"],"defaultApiVersion":"2017-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2017-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2019-07-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2017-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2017-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2017-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2017-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2018-12-01","zoneMappings":[{"location":"East - US 2","zones":["3","1","2"]},{"location":"Central US","zones":["3","1","2"]},{"location":"West - Europe","zones":["3","1","2"]},{"location":"France Central","zones":["3","1","2"]},{"location":"Southeast - Asia","zones":["3","1","2"]},{"location":"West US 2","zones":["3","1","2"]},{"location":"North - Europe","zones":["3","1","2"]},{"location":"East US","zones":["3","1","2"]},{"location":"UK - South","zones":["3","1","2"]},{"location":"Japan East","zones":["3","1","2"]},{"location":"Australia - East","zones":[]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":[]},{"location":"Canada Central","zones":[]}],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"defaultApiVersion":"2018-12-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"locations/operations","locations":[],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":[],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"],"capabilities":"None"},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"capabilities":"None"},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"capabilities":"None"},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"capabilities":"None"},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"capabilities":"None"},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"],"capabilities":"None"},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"],"capabilities":"None"},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01"],"capabilities":"None"},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01"],"capabilities":"None"},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"capabilities":"None"},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"capabilities":"None"},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"capabilities":"None"},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"capabilities":"None"},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-01-01"],"defaultApiVersion":"2020-01-01","capabilities":"None"},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01","capabilities":"None"},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01","capabilities":"None"},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01","capabilities":"None"},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"],"defaultApiVersion":"2018-08-01","capabilities":"None"},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2017-09-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"expressRouteServiceProviders","locations":[],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":[],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"],"capabilities":"None"},{"resourceType":"applicationGatewayAvailableSslOptions","locations":[],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"],"capabilities":"None"},{"resourceType":"applicationGatewayAvailableServerVariables","locations":[],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"capabilities":"None"},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":[],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"capabilities":"None"},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":[],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"capabilities":"None"},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"],"defaultApiVersion":"2016-12-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"bgpServiceCommunities","locations":[],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"],"capabilities":"None"},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2017-09-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"vpnSites","locations":["West US","East - US","North Europe","West Europe","East Asia","Southeast Asia","North Central - US","South Central US","Central US","East US 2","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast","Central India","South India","West - India","Canada Central","Canada East","West Central US","West US 2","UK West","UK - South","Korea Central","Korea South","France Central","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2017-09-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"defaultApiVersion":"2019-08-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"virtualHubs","locations":["West US","East - US","North Europe","West Europe","East Asia","Southeast Asia","North Central - US","South Central US","Central US","East US 2","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast","Central India","South India","West - India","Canada Central","Canada East","West Central US","West US 2","UK West","UK - South","Korea Central","Korea South","France Central","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2017-11-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"vpnGateways","locations":["West US","East - US","North Europe","West Europe","East Asia","Southeast Asia","North Central - US","South Central US","Central US","East US 2","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast","Central India","South India","West - India","Canada Central","Canada East","West Central US","West US 2","UK West","UK - South","Korea Central","Korea South","France Central","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2017-11-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"p2sVpnGateways","locations":["West US","East - US","North Europe","West Europe","East Asia","Southeast Asia","North Central - US","South Central US","Central US","East US 2","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast","Central India","South India","West - India","Canada Central","Canada East","West Central US","West US 2","UK West","UK - South","Korea Central","Korea South","France Central","Australia Central","UAE - North","South Africa North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2019-08-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2018-08-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"firewallPolicies","locations":["UAE North","Australia - Central 2","UAE Central","Germany North","Central India","Korea South","Switzerland - North","Switzerland West","Japan West","France South","South Africa West","West - India","Canada East","South India","Germany West Central","Norway East","Norway - West","South Africa North","East Asia","Southeast Asia","Korea Central","Brazil - South","Japan East","UK West","West US","East US","North Europe","West Europe","West - Central US","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","Central US"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2019-06-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"defaultApiVersion":"2019-08-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-01-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2018-04-01","zoneMappings":[{"location":"East - US 2","zones":["3","1","2"]},{"location":"Central US","zones":["3","1","2"]},{"location":"West - Europe","zones":["3","1","2"]},{"location":"France Central","zones":["3","1","2"]},{"location":"Southeast - Asia","zones":["3","1","2"]},{"location":"West US 2","zones":["3","1","2"]},{"location":"North - Europe","zones":["3","1","2"]},{"location":"East US","zones":["3","1","2"]},{"location":"UK - South","zones":["3","1","2"]},{"location":"Japan East","zones":["3","1","2"]},{"location":"Australia - East","zones":[]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":[]},{"location":"Canada Central","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"azureFirewallFqdnTags","locations":[],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2018-08-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2018-08-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"networkProfiles","locations":["West US","East - US","North Europe","West Europe","East Asia","Southeast Asia","North Central - US","South Central US","Central US","East US 2","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast","Central India","South India","West - India","Canada Central","Canada East","West Central US","West US 2","UK West","UK - South","Korea Central","Korea South","France Central","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"defaultApiVersion":"2018-05-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-01-01","capabilities":"None"},{"resourceType":"frontdoors","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-05-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"frontdoors/frontendEndpoints","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-05-01","capabilities":"None"},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-04-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-04-01","2019-10-01","2019-03-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","West - US 2","North Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast"],"apiVersions":["2019-11-01"],"defaultApiVersion":"2019-11-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"capabilities":"None"},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2018-10-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"virtualRouters","locations":["UAE North","Australia - Central 2","UAE Central","Germany North","Central India","Korea South","Switzerland - North","Switzerland West","Japan West","France South","South Africa West","West - India","Canada East","South India","Germany West Central","Norway East","Norway - West","South Africa North","East Asia","Southeast Asia","Korea Central","Brazil - South","Japan East","UK West","West US","East US","North Europe","West Europe","West - Central US","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","Central US"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2019-07-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-01-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US"],"apiVersions":["2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Web","namespace":"Microsoft.Web","authorization":{"applicationId":"abfa0a7c-a6b6-4736-8310-5855508787cd","roleDefinitionId":"f47ed98b-b063-4a5b-9e10-4b9b44fa7735"},"resourceTypes":[{"resourceType":"publishingUsers","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"ishostnameavailable","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"validate","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT - North Europe","East US 2 (Stage)","East Asia (Stage)","Central US (Stage)","North - Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"isusernameavailable","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"sourceControls","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"availableStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"staticSites","locations":["West - US 2","Central US","East US 2","West Europe","East Asia","West US"],"apiVersions":["2019-12-01-preview","2019-08-01"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"listSitesAssignedToHostName","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"locations/getNetworkPolicies","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","UK West","UK - South","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North - Europe","East US 2 (Stage)","Central US (Stage)","France Central","West Central - US","East Asia (Stage)","North Central US (Stage)"],"apiVersions":["2019-08-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"locations/operations","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East - US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West - Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)"],"apiVersions":["2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2019-01-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East - US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West - Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)"],"apiVersions":["2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2019-01-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"sites/networkConfig","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","East Asia","Japan - East","Australia East","Brazil South","Southeast Asia","Japan West","Central - India","UK South","Canada East","Korea Central","France Central","North Europe","East - US","West India","East US 2","Australia Central","Germany West Central","Norway - East","Switzerland North","North Central US","UK West","Australia Southeast","Korea - South","Canada Central","West Europe","South India","West Central US","East - Asia (Stage)","North Central US (Stage)","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"sites/slots/networkConfig","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","East Asia","Japan - East","Australia East","Brazil South","Southeast Asia","Japan West","Central - India","UK South","Canada East","Korea Central","France Central","North Europe","East - US","West India","East US 2","Australia Central","Germany West Central","Norway - East","Switzerland North","North Central US","UK West","Australia Southeast","Korea - South","Canada Central","West Europe","South India","West Central US","East - Asia (Stage)","North Central US (Stage)","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"sites/hostNameBindings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","East Asia","Japan - East","Australia East","Brazil South","Southeast Asia","Japan West","Central - India","UK South","Canada East","Korea Central","France Central","North Europe","East - US","West India","East US 2","Australia Central","Germany West Central","Norway - East","Switzerland North","North Central US","UK West","Australia Southeast","Korea - South","Canada Central","West Europe","South India","West Central US","East - Asia (Stage)","North Central US (Stage)","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"sites/slots/hostNameBindings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","East Asia","Japan - East","Australia East","Brazil South","Southeast Asia","Japan West","Central - India","UK South","Canada East","Korea Central","France Central","North Europe","East - US","West India","East US 2","Australia Central","Germany West Central","Norway - East","Switzerland North","North Central US","UK West","Australia Southeast","Korea - South","Canada Central","West Europe","South India","West Central US","East - Asia (Stage)","North Central US (Stage)","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"operations","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"certificates","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","East Asia","Japan - East","Australia East","Brazil South","Southeast Asia","Japan West","Central - India","UK South","Canada East","Korea Central","France Central","North Europe","East - US","West India","East US 2","Australia Central","Germany West Central","Norway - East","Switzerland North","North Central US","UK West","Australia Southeast","Korea - South","Canada Central","West Europe","South India","West Central US","East - Asia (Stage)","North Central US (Stage)","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossSubscriptionResourceMove, - SupportsTags, SupportsLocation"},{"resourceType":"serverFarms","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","East US","West India","East US 2","Australia - Central","Germany West Central","Norway East","Switzerland North","North Central - US","UK West","Australia Southeast","Korea South","Canada Central","West Europe","South - India","West Central US","East Asia (Stage)","North Central US (Stage)","East - Asia","Japan East","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"sites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","East US","West India","East US 2","Australia - Central","Germany West Central","Norway East","Switzerland North","North Central - US","UK West","Australia Southeast","Korea South","Canada Central","West Europe","South - India","West Central US","East Asia (Stage)","North Central US (Stage)","East - Asia","Japan East","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"sites/slots","locations":["South Central - US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","East US","West India","East US 2","Australia - Central","Germany West Central","Norway East","Switzerland North","North Central - US","UK West","Australia Southeast","Korea South","Canada Central","West Europe","South - India","West Central US","East Asia (Stage)","North Central US (Stage)","East - Asia","Japan East","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"runtimes","locations":[],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"recommendations","locations":[],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"resourceHealthMetadata","locations":[],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"georegions","locations":[],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"sites/premieraddons","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","East Asia","Japan - East","Australia East","Brazil South","Southeast Asia","Japan West","Central - India","UK South","Canada East","Korea Central","France Central","North Europe","East - US","West India","East US 2","Australia Central","Germany West Central","Norway - East","Switzerland North","North Central US","UK West","Australia Southeast","Korea - South","Canada Central","West Europe","South India","West Central US","East - Asia (Stage)","North Central US (Stage)","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"hostingEnvironments","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","East US 2","East - US","UK South","Southeast Asia","North Europe","Japan East","West Europe","East - Asia","Australia East","Brazil South","Japan West","Central India","Canada - East","Korea Central","France Central","West India","Australia Central","Germany - West Central","Norway East","Switzerland North","North Central US","UK West","Australia - Southeast","Korea South","Canada Central","South India","West Central US","East - Asia (Stage)","North Central US (Stage)","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"zoneMappings":[{"location":"East - US 2","zones":["3","1","2"]},{"location":"Central US","zones":["3","1","2"]},{"location":"West - Europe","zones":["3","1","2"]},{"location":"France Central","zones":["3","1","2"]},{"location":"Southeast - Asia","zones":["3","1","2"]},{"location":"West US 2","zones":["3","1","2"]},{"location":"North - Europe","zones":["3","1","2"]},{"location":"East US","zones":["3","1","2"]},{"location":"UK - South","zones":["3","1","2"]},{"location":"Japan East","zones":["3","1","2"]},{"location":"Australia - East","zones":[]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":[]},{"location":"Canada Central","zones":[]}],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"hostingEnvironments/multiRolePools","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","East Asia","Japan - East","Australia East","Brazil South","Southeast Asia","Japan West","Central - India","UK South","Canada East","Korea Central","France Central","North Europe","East - US","West India","East US 2","Australia Central","Germany West Central","Norway - East","Switzerland North","North Central US","UK West","Australia Southeast","Korea - South","Canada Central","West Europe","South India","West Central US","East - Asia (Stage)","North Central US (Stage)","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"hostingEnvironments/workerPools","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","East Asia","Japan - East","Australia East","Brazil South","Southeast Asia","Japan West","Central - India","UK South","Canada East","Korea Central","France Central","North Europe","East - US","West India","East US 2","Australia Central","Germany West Central","Norway - East","Switzerland North","North Central US","UK West","Australia Southeast","Korea - South","Canada Central","West Europe","South India","West Central US","East - Asia (Stage)","North Central US (Stage)","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"kubeEnvironments","locations":["North - Central US (Stage)"],"apiVersions":["2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"deploymentLocations","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","Central US (Stage)","North - Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"deletedSites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","East Asia","Japan - East","Australia East","Brazil South","Southeast Asia","Japan West","Central - India","UK South","Canada East","Korea Central","France Central","North Europe","East - US","West India","East US 2","Australia Central","Germany West Central","Norway - East","Switzerland North","North Central US","UK West","Australia Southeast","Korea - South","Canada Central","West Europe","South India","West Central US","East - Asia (Stage)","North Central US (Stage)","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"locations/deletedSites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","East Asia","Japan - East","Australia East","Brazil South","Southeast Asia","Japan West","Central - India","UK South","Canada East","Korea Central","France Central","North Europe","East - US","West India","East US 2","Australia Central","Germany West Central","Norway - East","Switzerland North","North Central US","UK West","Australia Southeast","Korea - South","Canada Central","West Europe","South India","West Central US","East - Asia (Stage)","North Central US (Stage)","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"ishostingenvironmentnameavailable","locations":[],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","East US","West India","East US 2","Australia - Central","Germany West Central","Norway East","Switzerland North","North Central - US","UK West","Australia Southeast","Korea South","Canada Central","West Europe","South - India","West Central US","East Asia (Stage)","North Central US (Stage)","East - Asia","Japan East","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-11-01","2016-08-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"connections","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","West US 2","West Central US","Canada Central","Canada - East","UK South","UK West","France Central","France South","Korea Central","Korea - South","South Africa West","South Africa North","UAE Central"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"customApis","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","West US 2","West Central US","Canada Central","Canada - East","UK South","UK West","France Central","France South","Korea Central","Korea - South","South Africa West","South Africa North","UAE Central"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"locations/listWsdlInterfaces","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","West US 2","West Central US","Canada Central","Canada - East","UK South","UK West","France Central","France South","Korea Central","Korea - South","South Africa West","South Africa North","UAE Central"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"locations/extractApiDefinitionFromWsdl","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","West US 2","West Central US","Canada Central","Canada - East","UK South","UK West","France Central","France South","Korea Central","Korea - South","South Africa West","South Africa North","UAE Central"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"locations/managedApis","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","West US 2","West Central US","Canada Central","Canada - East","UK South","UK West","France Central","France South","Korea Central","Korea - South","South Africa West","South Africa North","UAE Central"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"locations/runtimes","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","West US 2","West Central US","Canada Central","Canada - East","UK South","UK West","France Central","France South","Korea Central","Korea - South","South Africa West","South Africa North","UAE Central"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"locations/apiOperations","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","West US 2","West Central US","Canada Central","Canada - East","UK South","UK West","France Central","France South","Korea Central","Korea - South","South Africa West","South Africa North","UAE Central"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"connectionGateways","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","West US 2","West Central US","Canada Central","Canada - East","UK South","UK West","France Central","France South","Korea Central","Korea - South","South Africa West","South Africa North","UAE Central"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations/connectionGatewayInstallations","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","South India","Central - India","West India","West US 2","West Central US","Canada Central","Canada - East","UK South","UK West","France Central","France South","Korea Central","Korea - South","South Africa West","South Africa North","UAE Central"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"billingMeters","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"verifyHostingEnvironmentVnet","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"serverFarms/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","East US","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","West US","Central - US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"capabilities":"None"},{"resourceType":"sites/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","East US","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","West US","Central - US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"capabilities":"None"},{"resourceType":"sites/slots/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","East US","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","West US","Central - US","West US 2"],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"capabilities":"None"},{"resourceType":"hostingEnvironments/eventGridFilters","locations":["North - Central US","South Central US","Brazil South","Canada East","UK West","MSFT - West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central - US (Stage)","South Africa North","East US 2","East US","UK South","Southeast - Asia","North Europe","Japan East","West Europe","East Asia","Australia East","Japan - West","Central India","Korea Central","France Central","West India","Australia - Central","Germany West Central","Norway East","Switzerland North","Australia - Southeast","Korea South","Canada Central","South India","West Central US","East - Asia (Stage)","North Central US (Stage)","West US","Central US","West US 2"],"apiVersions":["2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/microsoft.insights","namespace":"microsoft.insights","authorizations":[{"applicationId":"6bccf540-eb86-4037-af03-7fa058c2db75","roleDefinitionId":"89dcede2-9219-403a-9723-d3c6473f9472"},{"applicationId":"11c174dc-1945-4a9a-a36b-c79a0f246b9b","roleDefinitionId":"dd9d4347-f397-45f2-b538-85f21c90037b"},{"applicationId":"035f9e1d-4f00-4419-bf50-bf2d87eb4878","roleDefinitionId":"323795fe-ba3d-4f5a-ad42-afb4e1ea9485"},{"applicationId":"f5c26e74-f226-4ae8-85f0-b4af0080ac9e","roleDefinitionId":"529d7ae6-e892-4d43-809d-8547aeb90643"},{"applicationId":"b503eb83-1222-4dcc-b116-b98ed5216e05","roleDefinitionId":"68699c37-c689-44d4-9248-494b782d46ae"},{"applicationId":"ca7f3f0b-7d91-482c-8e09-c5d840d0eac5","roleDefinitionId":"5d5a2e56-9835-44aa-93db-d2f19e155438"},{"applicationId":"3af5a1e8-2459-45cb-8683-bcd6cccbcc13","roleDefinitionId":"b1309299-720d-4159-9897-6158a61aee41"},{"applicationId":"6a0a243c-0886-468a-a4c2-eff52c7445da","roleDefinitionId":"d2eda64b-c5e6-4930-8642-2d80ecd7c2e2"},{"applicationId":"707be275-6b9d-4ee7-88f9-c0c2bd646e0f","roleDefinitionId":"fa027d90-6ba0-4c33-9a54-59edaf2327e7"},{"applicationId":"461e8683-5575-4561-ac7f-899cc907d62a","roleDefinitionId":"68699c37-c689-44d4-9248-494b782d46ae"},{"applicationId":"562db366-1b96-45d2-aa4a-f2148cef2240","roleDefinitionId":"4109c8be-c1c8-4be0-af52-9d3c76c140ab"},{"applicationId":"e933bd07-d2ee-4f1d-933c-3752b819567b","roleDefinitionId":"abbcfd44-e662-419a-9b5a-478f8e2f57c9"},{"applicationId":"f6b60513-f290-450e-a2f3-9930de61c5e7","roleDefinitionId":"4ef11659-08ac-48af-98a7-25fb6b1e1bc4"}],"resourceTypes":[{"resourceType":"components","locations":["East - US","South Central US","North Europe","West Europe","Southeast Asia","West - US 2","UK South","Canada Central","Central India","Japan East","Australia - East","Korea Central","France Central","Central US","East US 2","East Asia","West - US","South Africa North","North Central US","Brazil South","Switzerland North","Australia - Southeast","Australia Central 2","Germany West Central","Switzerland West","UAE - Central","UK West"],"apiVersions":["2018-05-01-preview","2015-05-01","2014-12-01-preview","2014-08-01","2014-04-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"components/query","locations":[],"apiVersions":["2018-04-20"],"capabilities":"None"},{"resourceType":"components/metadata","locations":[],"apiVersions":["2018-04-20"],"capabilities":"None"},{"resourceType":"components/metrics","locations":["East - US","South Central US","North Europe","West Europe","Southeast Asia","West - US 2","UK South","Central India","Canada Central","Japan East","Australia - East","Korea Central","France Central","East US 2","East Asia","West US","Central - US","South Africa North","North Central US","Brazil South","Switzerland North","Australia - Southeast"],"apiVersions":["2018-04-20","2014-04-01"],"capabilities":"None"},{"resourceType":"components/events","locations":["East - US","South Central US","North Europe","West Europe","Southeast Asia","West - US 2","UK South","Central India","Canada Central","Japan East","Australia - East","Korea Central","France Central","East US 2","East Asia","West US","Central - US","South Africa North","North Central US"],"apiVersions":["2018-04-20"],"capabilities":"None"},{"resourceType":"webtests","locations":["East - US","South Central US","North Europe","West Europe","Southeast Asia","West - US 2","UK South","Central India","Canada Central","Japan East","Australia - East","Korea Central","France Central","Central US","East US 2","East Asia","West - US","South Africa North","North Central US","Brazil South","Switzerland North","Australia - Southeast","Australia Central 2","Germany West Central","Switzerland West","UAE - Central","UK West"],"apiVersions":["2018-05-01-preview","2015-05-01","2014-08-01","2014-04-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"webtests/getTestResultFile","locations":["East - US","South Central US","North Europe","West Europe","Southeast Asia","West - US 2","UK South","Central India","Canada Central","Japan East","Australia - East","Korea Central","France Central","East US 2","East Asia","West US","Central - US","South Africa North","North Central US"],"apiVersions":["2020-02-10-preview"],"capabilities":"None"},{"resourceType":"scheduledqueryrules","locations":["West - Central US","East US","West Europe","Central India","Canada Central","Australia - Southeast","Japan East","Southeast Asia","UK South","South Central US","North - Europe","West US 2","Australia Central","Australia East","Korea Central","France - Central","Central US","East US 2","East Asia","West US","North Central US","South - Africa North","Brazil South","UK West","Switzerland North","Switzerland West"],"apiVersions":["2018-04-16","2017-09-01-preview"],"defaultApiVersion":"2018-04-16","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"components/pricingPlans","locations":["East - US","South Central US","North Europe","West Europe","Southeast Asia","West - US 2"],"apiVersions":["2017-10-01"],"capabilities":"None"},{"resourceType":"migrateToNewPricingModel","locations":["East - US","South Central US","North Europe","West Europe","Southeast Asia","West - US 2"],"apiVersions":["2017-10-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"rollbackToLegacyPricingModel","locations":["East - US","South Central US","North Europe","West Europe","Southeast Asia","West - US 2"],"apiVersions":["2017-10-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"listMigrationdate","locations":["East - US","South Central US","North Europe","West Europe","Southeast Asia","West - US 2"],"apiVersions":["2017-10-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"logprofiles","locations":[],"apiVersions":["2016-03-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"}],"capabilities":"None"},{"resourceType":"migratealertrules","locations":[],"apiVersions":["2018-03-01"],"capabilities":"None"},{"resourceType":"metricalerts","locations":["Global"],"apiVersions":["2018-03-01","2017-09-01-preview"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"alertrules","locations":["West US","East - US","North Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan - West","North Central US","South Central US","East US 2","Central US","Australia - East","Australia Southeast","Brazil South","UK South","UK West","South India","Central - India","West India","Canada East","Canada Central","West Central US","West - US 2","Korea South","Korea Central","Australia Central","Australia Central - 2","France Central","South Africa North","UAE North"],"apiVersions":["2016-03-01","2015-04-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"autoscalesettings","locations":["West - US","East US","North Europe","South Central US","East US 2","Central US","Australia - Southeast","Brazil South","UK South","UK West","South India","Central India","West - India","Canada East","Canada Central","West Central US","West US 2","Korea - South","Korea Central","Australia Central","Australia Central 2","France Central","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","North Central - US","Australia East","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East"],"apiVersions":["2015-04-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"eventtypes","locations":[],"apiVersions":["2017-03-01-preview","2016-09-01-preview","2015-04-01","2014-11-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-04-01"}],"capabilities":"SupportsExtension"},{"resourceType":"locations","locations":["East - US"],"apiVersions":["2015-04-01","2014-04-01"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":[],"apiVersions":["2015-04-01","2014-04-01"],"capabilities":"None"},{"resourceType":"vmInsightsOnboardingStatuses","locations":[],"apiVersions":["2018-11-27-preview"],"capabilities":"SupportsExtension"},{"resourceType":"operations","locations":[],"apiVersions":["2015-04-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-04-01"}],"capabilities":"None"},{"resourceType":"diagnosticSettings","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","Japan - East","Japan West","North Central US","South Central US","East US 2","Central - US","Australia East","Australia Southeast","Brazil South","UK South","UK West","South - India","Central India","West India","Canada East","Canada Central","West Central - US","West US 2","Korea South","Korea Central","Australia Central","Australia - Central 2","France Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East"],"apiVersions":["2017-05-01-preview","2016-09-01","2015-07-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-09-01"}],"capabilities":"SupportsExtension"},{"resourceType":"diagnosticSettingsCategories","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","Japan - East","Japan West","North Central US","South Central US","East US 2","Central - US","Australia East","Australia Southeast","Brazil South","UK South","UK West","South - India","Central India","West India","Canada East","Canada Central","West Central - US","West US 2","Korea South","Korea Central","Australia Central","Australia - Central 2","France Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East"],"apiVersions":["2017-05-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"extendedDiagnosticSettings","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","Japan - East","Japan West","North Central US","South Central US","East US 2","Central - US","Australia East","Australia Southeast","Brazil South","UK South","UK West","South - India","Central India","West India","Canada East","Canada Central","West Central - US","West US 2","Korea South","Korea Central","Australia Central","Australia - Central 2","France Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East"],"apiVersions":["2017-02-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-02-01"}],"capabilities":"SupportsExtension"},{"resourceType":"metricDefinitions","locations":["East - US","West US","West Europe","East Asia","Southeast Asia","Japan East","Japan - West","North Central US","South Central US","East US 2","Canada East","Canada - Central","Central US","Australia East","Australia Southeast","Australia Central","Australia - Central 2","Brazil South","South India","Central India","West India","North - Europe","West US 2","West Central US","Korea South","Korea Central","UK South","UK - West","France Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East"],"apiVersions":["2018-01-01","2017-12-01-preview","2017-09-01-preview","2017-05-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-01-01"}],"capabilities":"SupportsExtension"},{"resourceType":"logDefinitions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","Japan - East","Japan West","North Central US","South Central US","East US 2","Central - US","Australia East","Australia Southeast","Brazil South","UK South","UK West","South - India","Central India","West India","Canada East","Canada Central","West Central - US","West US 2","Korea South","Korea Central","Australia Central","Australia - Central 2","France Central"],"apiVersions":["2015-07-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-07-01"}],"capabilities":"SupportsExtension"},{"resourceType":"eventCategories","locations":[],"apiVersions":["2015-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-04-01"}],"capabilities":"None"},{"resourceType":"metrics","locations":["East - US","West US","West Europe","East Asia","Southeast Asia","Japan East","Japan - West","North Central US","South Central US","East US 2","Canada East","Canada - Central","Central US","Australia East","Australia Southeast","Australia Central","Australia - Central 2","Brazil South","South India","Central India","West India","North - Europe","West US 2","West Central US","Korea South","Korea Central","UK South","UK - West","France Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East"],"apiVersions":["2019-07-01","2018-01-01","2017-12-01-preview","2017-09-01-preview","2017-05-01-preview","2016-09-01","2016-06-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-01-01"}],"capabilities":"SupportsExtension"},{"resourceType":"metricbatch","locations":[],"apiVersions":["2019-01-01-preview"],"capabilities":"None"},{"resourceType":"metricNamespaces","locations":["East - US","West US","West Europe","East Asia","Southeast Asia","Japan East","Japan - West","North Central US","South Central US","East US 2","Canada East","Canada - Central","Central US","Australia East","Australia Southeast","Australia Central","Australia - Central 2","Brazil South","South India","Central India","West India","North - Europe","West US 2","West Central US","Korea South","Korea Central","UK South","UK - West","France Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East"],"apiVersions":["2018-01-01","2017-12-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"actiongroups","locations":["Global"],"apiVersions":["2019-06-01","2019-03-01","2018-09-01","2018-03-01","2017-04-01","2017-03-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"activityLogAlerts","locations":["Global"],"apiVersions":["2017-04-01","2017-03-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"baseline","locations":["East US","West - US","West Europe","East Asia","Southeast Asia","Japan East","Japan West","North - Central US","South Central US","East US 2","Canada East","Canada Central","Central - US","Australia East","Australia Southeast","Australia Central","Australia - Central 2","Brazil South","South India","Central India","West India","North - Europe","West US 2","West Central US","Korea South","Korea Central","UK South","UK - West","France Central","South Africa North","UAE North"],"apiVersions":["2018-09-01","2017-11-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"metricbaselines","locations":["East - US","West US","West Europe","East Asia","Southeast Asia","Japan East","Japan - West","North Central US","South Central US","East US 2","Canada East","Canada - Central","Central US","Australia East","Australia Southeast","Australia Central","Australia - Central 2","Brazil South","South India","Central India","West India","North - Europe","West US 2","West Central US","Korea South","Korea Central","UK South","UK - West","France Central","South Africa North","UAE North"],"apiVersions":["2019-03-01","2018-09-01"],"capabilities":"SupportsExtension"},{"resourceType":"calculatebaseline","locations":[],"apiVersions":["2018-09-01","2017-11-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"workbooks","locations":["West - Europe","South Central US","East US","North Europe","Southeast Asia","West - US 2","Japan East","Australia East","Korea Central","France Central","Central - US","East US 2","East Asia","West US","Canada Central","Central India","UK - South","South Africa North","North Central US","Brazil South","Switzerland - North","Australia Southeast"],"apiVersions":["2020-02-12","2018-06-17-preview","2018-06-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"workbooktemplates","locations":["West - Europe","South Central US","East US","North Europe","Southeast Asia","West - US 2","Japan East","Australia East","Korea Central","France Central","Central - US","East US 2","East Asia","West US","Canada Central","Central India","UK - South","South Africa North","North Central US","Brazil South","Switzerland - North","Australia Southeast"],"apiVersions":["2019-10-17-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"myWorkbooks","locations":["West - Europe","South Central US","East US","North Europe","Southeast Asia","West - US 2","UK South","Canada Central","Central India","Japan East","Australia - East","Korea Central","France Central","Central US","East US 2","East Asia","West - US","South Africa North","North Central US","Brazil South","Switzerland North","Australia - Southeast"],"apiVersions":["2020-02-12","2018-06-17-preview","2018-06-15-preview","2018-06-01-preview","2016-06-15-preview"],"capabilities":"SupportsExtension"},{"resourceType":"logs","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Brazil South","South India","Central India","West - India","Canada Central","Canada East","West US 2","West Central US","UK South","UK - West","Korea Central","Korea South","France Central","France South","Australia - Central","South Africa North"],"apiVersions":["2018-08-01-preview","2018-03-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"transactions","locations":["East - US","South Central US","North Europe","West Europe","Southeast Asia","West - US 2","UK South","Central India","Canada Central","Japan East","Australia - East","Korea Central","France Central","East US 2","East Asia","West US","Central - US","South Africa North","North Central US"],"apiVersions":["2019-10-17-preview"],"capabilities":"SupportsExtension"},{"resourceType":"topology","locations":["East - US","South Central US","North Europe","West Europe","Southeast Asia","West - US 2","UK South","Central India","Canada Central","Japan East","Australia - East","Korea Central","France Central","East US 2","East Asia","West US","Central - US","South Africa North","North Central US"],"apiVersions":["2019-10-17-preview"],"capabilities":"SupportsExtension"},{"resourceType":"privateLinkScopes/privateEndpointConnections","locations":["Global"],"apiVersions":["2019-10-17-preview"],"capabilities":"None"},{"resourceType":"privateLinkScopes/privateEndpointConnectionProxies","locations":["Global"],"apiVersions":["2019-10-17-preview"],"capabilities":"None"},{"resourceType":"privateLinkScopes/scopedResources","locations":["Global"],"apiVersions":["2019-10-17-preview"],"capabilities":"None"},{"resourceType":"components/linkedstorageaccounts","locations":["East - US","West Central US","South Central US","North Europe","West Europe","Southeast - Asia","West US 2","UK South","Canada Central","Central India","Japan East","Australia - East","Korea Central","France Central","Central US","East US 2","East Asia","West - US","South Africa North","North Central US","Brazil South","Switzerland North","Norway - East","Norway West","Australia Southeast"],"apiVersions":["2020-03-01-preview"],"capabilities":"None"},{"resourceType":"privateLinkScopeOperationStatuses","locations":["Global"],"apiVersions":["2019-10-17-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Sql","namespace":"Microsoft.Sql","authorizations":[{"applicationId":"e4ab13ed-33cb-41b4-9140-6e264582cf85","roleDefinitionId":"ec3ddc95-44dc-47a2-9926-5e9f5ffd44ec"},{"applicationId":"0130cc9f-7ac5-4026-bd5f-80a08a54e6d9","roleDefinitionId":"45e8abf8-0ec4-44f3-9c37-cff4f7779302"},{"applicationId":"76cd24bf-a9fc-4344-b1dc-908275de6d6d","roleDefinitionId":"c13b7b9c-2ed1-4901-b8a8-16f35468da29"},{"applicationId":"76c7f279-7959-468f-8943-3954880e0d8c","roleDefinitionId":"7f7513a8-73f9-4c5f-97a2-c41f0ea783ef"},{"applicationId":"022907d3-0f1b-48f7-badc-1ba6abab6d66"}],"resourceTypes":[{"resourceType":"operations","locations":["Australia + SupportsLocation"},{"resourceType":"registries/tasks/listDetails","locations":["East + US","West Europe","West US 2","South Central US","Australia East","Australia + Southeast","Brazil South","Canada Central","Canada East","Central India","Central + US","East Asia","East US 2","Japan East","Japan West","North Central US","North + Europe","Southeast Asia","South India","UK South","UK West","West US","West + Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland + North","Switzerland West","UAE Central","Brazil Southeast","Germany West Central","East + US 2 EUAP"],"apiVersions":["2019-06-01-preview","2019-04-01","2018-09-01"],"capabilities":"None"},{"resourceType":"registries/getBuildSourceUploadUrl","locations":["East + US","West Europe","West US 2","South Central US","Australia East","Australia + Southeast","Brazil South","Canada Central","Canada East","Central India","Central + US","East Asia","East US 2","Japan East","Japan West","North Central US","North + Europe","Southeast Asia","South India","UK South","UK West","West US","West + Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland + North","Switzerland West","UAE Central","Brazil Southeast","Germany West Central","East + US 2 EUAP"],"apiVersions":["2018-02-01-preview"],"capabilities":"None"},{"resourceType":"registries/queueBuild","locations":["East + US","West Europe","West US 2","South Central US","Australia East","Australia + Southeast","Brazil South","Canada Central","Canada East","Central India","Central + US","East Asia","East US 2","Japan East","Japan West","North Central US","North + Europe","Southeast Asia","South India","UK South","UK West","West US","West + Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland + North","Switzerland West","UAE Central","Brazil Southeast","Germany West Central","East + US 2 EUAP"],"apiVersions":["2018-02-01-preview"],"capabilities":"None"},{"resourceType":"registries/builds","locations":["East + US","West Europe","West US 2","South Central US","Australia East","Australia + Southeast","Brazil South","Canada Central","Canada East","Central India","Central + US","East Asia","East US 2","Japan East","Japan West","North Central US","North + Europe","Southeast Asia","South India","UK South","UK West","West US","West + Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland + North","Switzerland West","UAE Central","Brazil Southeast","Germany West Central","East + US 2 EUAP"],"apiVersions":["2018-02-01-preview"],"capabilities":"None"},{"resourceType":"registries/builds/getLogLink","locations":["East + US","West Europe","West US 2","South Central US","Australia East","Australia + Southeast","Brazil South","Canada Central","Canada East","Central India","Central + US","East Asia","East US 2","Japan East","Japan West","North Central US","North + Europe","Southeast Asia","South India","UK South","UK West","West US","West + Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland + North","Switzerland West","UAE Central","Brazil Southeast","Germany West Central","East + US 2 EUAP"],"apiVersions":["2018-02-01-preview"],"capabilities":"None"},{"resourceType":"registries/builds/cancel","locations":["East + US","West Europe","West US 2","South Central US","Australia East","Australia + Southeast","Brazil South","Canada Central","Canada East","Central India","Central + US","East Asia","East US 2","Japan East","Japan West","North Central US","North + Europe","Southeast Asia","South India","UK South","UK West","West US","West + Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland + North","Switzerland West","UAE Central","Brazil Southeast","Germany West Central","East + US 2 EUAP"],"apiVersions":["2018-02-01-preview"],"capabilities":"None"},{"resourceType":"registries/buildTasks","locations":["East + US","West Europe","West US 2","South Central US","Australia East","Australia + Southeast","Brazil South","Canada Central","Canada East","Central India","Central + US","East Asia","East US 2","Japan East","Japan West","North Central US","North + Europe","Southeast Asia","South India","UK South","UK West","West US","West + Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland + North","Switzerland West","UAE Central","Brazil Southeast","Germany West Central","East + US 2 EUAP"],"apiVersions":["2018-02-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"registries/buildTasks/listSourceRepositoryProperties","locations":["East + US","West Europe","West US 2","South Central US","Australia East","Australia + Southeast","Brazil South","Canada Central","Canada East","Central India","Central + US","East Asia","East US 2","Japan East","Japan West","North Central US","North + Europe","Southeast Asia","South India","UK South","UK West","West US","West + Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland + North","Switzerland West","UAE Central","Brazil Southeast","Germany West Central","East + US 2 EUAP"],"apiVersions":["2018-02-01-preview"],"capabilities":"None"},{"resourceType":"registries/buildTasks/steps","locations":["East + US","West Europe","West US 2","South Central US","Australia East","Australia + Southeast","Brazil South","Canada Central","Canada East","Central India","Central + US","East Asia","East US 2","Japan East","Japan West","North Central US","North + Europe","Southeast Asia","South India","UK South","UK West","West US","West + Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland + North","Switzerland West","UAE Central","Brazil Southeast","Germany West Central","East + US 2 EUAP"],"apiVersions":["2018-02-01-preview"],"capabilities":"None"},{"resourceType":"registries/buildTasks/steps/listBuildArguments","locations":["East + US","West Europe","West US 2","South Central US","Australia East","Australia + Southeast","Brazil South","Canada Central","Canada East","Central India","Central + US","East Asia","East US 2","Japan East","Japan West","North Central US","North + Europe","Southeast Asia","South India","UK South","UK West","West US","West + Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland + North","Switzerland West","UAE Central","Brazil Southeast","Germany West Central","East + US 2 EUAP"],"apiVersions":["2018-02-01-preview"],"capabilities":"None"},{"resourceType":"registries/replications","locations":["South + Central US","West Central US","East US","West Europe","West US","Japan East","North + Europe","Southeast Asia","North Central US","East US 2","West US 2","Brazil + South","Australia East","Central India","Korea Central","South Africa North","UAE + North","France Central","Central US","Canada East","Canada Central","UK South","UK + West","Australia Southeast","East Asia","Japan West","South India","Switzerland + North","UAE Central","Switzerland West","Germany West Central","Brazil Southeast","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2019-12-01-preview","2019-05-01","2017-10-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"registries/webhooks","locations":["West + Central US","East US","West Europe","South Central US","West US","Japan East","North + Europe","Southeast Asia","North Central US","East US 2","West US 2","Brazil + South","Australia East","Central India","Korea Central","South Africa North","UAE + North","France Central","Central US","Canada East","Canada Central","UK South","UK + West","Australia Southeast","East Asia","Japan West","South India","Switzerland + North","UAE Central","Switzerland West","Germany West Central","Brazil Southeast","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2019-12-01-preview","2019-05-01","2017-10-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"registries/webhooks/ping","locations":["West + Central US","East US","West Europe","South Central US","West US","Japan East","North + Europe","Southeast Asia","North Central US","East US 2","West US 2","Brazil + South","Australia East","Central India","Korea Central","South Africa North","UAE + North","France Central","Central US","Canada East","Canada Central","UK South","UK + West","Australia Southeast","East Asia","Japan West","South India","Switzerland + North","UAE Central","Switzerland West","Germany West Central","Brazil Southeast","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2019-12-01-preview","2019-05-01","2017-10-01"],"capabilities":"None"},{"resourceType":"registries/webhooks/getCallbackConfig","locations":["West + Central US","East US","West Europe","South Central US","West US","Japan East","North + Europe","Southeast Asia","North Central US","East US 2","West US 2","Brazil + South","Australia East","Central India","Korea Central","South Africa North","UAE + North","France Central","Central US","Canada East","Canada Central","UK South","UK + West","Australia Southeast","East Asia","Japan West","South India","Switzerland + North","UAE Central","Switzerland West","Germany West Central","Brazil Southeast","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2019-12-01-preview","2019-05-01","2017-10-01"],"capabilities":"None"},{"resourceType":"registries/webhooks/listEvents","locations":["West + Central US","East US","West Europe","South Central US","West US","Japan East","North + Europe","Southeast Asia","North Central US","East US 2","West US 2","Brazil + South","Australia East","Central India","Korea Central","South Africa North","UAE + North","France Central","Central US","Canada East","Canada Central","UK South","UK + West","Australia Southeast","East Asia","Japan West","South India","Switzerland + North","UAE Central","Switzerland West","Germany West Central","Brazil Southeast","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2019-12-01-preview","2019-05-01","2017-10-01"],"capabilities":"None"},{"resourceType":"locations/setupAuth","locations":["East + US","West Europe","West US 2","South Central US","Australia East","Australia + Southeast","Brazil South","Canada Central","Canada East","Central India","Central + US","East Asia","East US 2","Japan East","Japan West","North Central US","North + Europe","Southeast Asia","South India","UK South","UK West","West US","West + Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland + North","Switzerland West","UAE Central","Brazil Southeast","Germany West Central","East + US 2 EUAP"],"apiVersions":["2018-02-01-preview"],"capabilities":"None"},{"resourceType":"locations/authorize","locations":["East + US","West Europe","West US 2","South Central US","Australia East","Australia + Southeast","Brazil South","Canada Central","Canada East","Central India","Central + US","East Asia","East US 2","Japan East","Japan West","North Central US","North + Europe","Southeast Asia","South India","UK South","UK West","West US","West + Central US","France Central","Korea Central","South Africa North","UAE North","Switzerland + North","Switzerland West","UAE Central","Brazil Southeast","Germany West Central","East + US 2 EUAP"],"apiVersions":["2018-02-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["West + Central US","East US","West Europe","South Central US","West US","Japan East","North + Europe","Southeast Asia","North Central US","East US 2","West US 2","Brazil + South","Australia East","Central India","Korea Central","France Central","Central + US","South Africa North","UAE North","Canada East","Canada Central","UK South","UK + West","Australia Southeast","East Asia","Japan West","South India","Switzerland + North","UAE Central","Switzerland West","Germany West Central","Brazil Southeast","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2019-12-01-preview","2019-05-01-preview","2019-05-01","2017-10-01"],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["West + Central US","East US","West Europe","South Central US","West US","Japan East","North + Europe","Southeast Asia","North Central US","East US 2","West US 2","Brazil + South","Australia East","Central India","Korea Central","South Africa North","UAE + North","France Central","Central US","Canada East","Canada Central","UK South","UK + West","Australia Southeast","East Asia","Japan West","South India","Switzerland + North","UAE Central","Switzerland West","Germany West Central","Brazil Southeast","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2019-05-01","2017-10-01"],"capabilities":"None"},{"resourceType":"registries/GetCredentials","locations":["West + US","East US","South Central US","West Europe","East US 2 EUAP","Central US + EUAP"],"apiVersions":["2016-06-27-preview"],"capabilities":"None"},{"resourceType":"registries/listCredentials","locations":["South + Central US","East US","West US","West Europe","North Europe","UK South","UK + West","Australia East","Australia Southeast","Central India","Korea Central","South + Africa North","UAE North","France Central","East Asia","Japan East","Japan + West","Southeast Asia","South India","Brazil South","Canada East","Canada + Central","Central US","East US 2","North Central US","West Central US","West + US 2","Switzerland North","UAE Central","Switzerland West","Germany West Central","Brazil + Southeast","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-12-01-preview","2019-05-01","2017-10-01","2017-03-01"],"capabilities":"None"},{"resourceType":"registries/regenerateCredential","locations":["South + Central US","West US","East US","West Europe","North Europe","UK South","UK + West","Australia East","Australia Southeast","Central India","Korea Central","South + Africa North","UAE North","France Central","East Asia","Japan East","Japan + West","Southeast Asia","South India","Brazil South","Canada East","Canada + Central","Central US","East US 2","North Central US","West Central US","West + US 2","Switzerland North","UAE Central","Switzerland West","Germany West Central","Brazil + Southeast","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-12-01-preview","2019-05-01","2017-10-01","2017-03-01"],"capabilities":"None"},{"resourceType":"registries/listUsages","locations":["West + Central US","East US","West Europe","South Central US","West US","Japan East","North + Europe","Southeast Asia","North Central US","East US 2","West US 2","Brazil + South","Australia East","Central India","Korea Central","South Africa North","UAE + North","France Central","Central US","Canada East","Canada Central","UK South","UK + West","Australia Southeast","East Asia","Japan West","South India","Switzerland + North","UAE Central","Switzerland West","Germany West Central","Brazil Southeast","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2019-12-01-preview","2019-05-01","2017-10-01"],"capabilities":"None"},{"resourceType":"registries/listPolicies","locations":["West + US","East US","South Central US","West Europe","North Europe","UK South","UK + West","Australia East","Australia Southeast","Central India","Korea Central","South + Africa North","UAE North","France Central","East Asia","Japan East","Japan + West","Southeast Asia","South India","Brazil South","Canada East","Canada + Central","Central US","East US 2","North Central US","West Central US","West + US 2","Switzerland North","Switzerland West","UAE Central","Germany West Central","Brazil + Southeast","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-01"],"capabilities":"None"},{"resourceType":"registries/updatePolicies","locations":["West + US","East US","South Central US","West Europe","North Europe","UK South","UK + West","Australia East","Australia Southeast","Central India","Korea Central","South + Africa North","UAE North","France Central","East Asia","Japan East","Japan + West","Southeast Asia","South India","Brazil South","Canada East","Canada + Central","Central US","East US 2","North Central US","West Central US","West + US 2","Switzerland North","Switzerland West","UAE Central","Germany West Central","Brazil + Southeast","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-01"],"capabilities":"None"},{"resourceType":"registries/regenerateCredentials","locations":["West + US","East US","South Central US","West Europe","East US 2 EUAP","Central US + EUAP"],"apiVersions":["2016-06-27-preview"],"capabilities":"None"},{"resourceType":"registries/eventGridFilters","locations":["South + Central US","West Central US","East US","West Europe","West US","Japan East","North + Europe","Southeast Asia","North Central US","East US 2","West US 2","Brazil + South","Australia East","Central India","Korea Central","South Africa North","UAE + North","France Central","Central US","Canada East","Canada Central","UK South","UK + West","Australia Southeast","East Asia","Japan West","South India","Switzerland + North","UAE Central","Switzerland West","Germany West Central","Brazil Southeast","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2019-05-01","2017-10-01"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["South + Central US","East US","West US","Central US","East US 2","North Central US","West + Central US","West US 2","Brazil South","Canada East","Canada Central","West + Europe","North Europe","UK South","UK West","Australia East","Australia Southeast","Central + India","East Asia","Japan East","Japan West","Southeast Asia","South India","Korea + Central","France Central","South Africa North","UAE North","Switzerland North","UAE + Central","Switzerland West","Germany West Central","Brazil Southeast","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2019-12-01-preview","2019-05-01","2017-10-01","2017-06-01-preview","2017-03-01","2016-06-27-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["South + Central US","East US","West US","Central US","East US 2","North Central US","West + Central US","West US 2","Brazil South","Canada East","Canada Central","West + Europe","North Europe","UK South","UK West","Australia East","Australia Southeast","Central + India","East Asia","Japan East","Japan West","Southeast Asia","South India","Korea + Central","France Central","South Africa North","UAE North","Switzerland North","UAE + Central","Switzerland West","Germany West Central","Brazil Southeast","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2019-12-01-preview","2019-05-01","2017-10-01","2017-06-01-preview","2017-03-01"],"capabilities":"None"},{"resourceType":"locations","locations":["South + Central US","East US","West US","Central US","East US 2","North Central US","West + Central US","West US 2","Brazil South","Canada East","Canada Central","West + Europe","North Europe","UK South","UK West","Australia East","Australia Southeast","Central + India","East Asia","Japan East","Japan West","Southeast Asia","South India","Korea + Central","France Central","South Africa North","UAE North","Switzerland North","UAE + Central","Switzerland West","Germany West Central","Brazil Southeast","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2019-12-01-preview","2019-05-01-preview","2019-05-01","2017-10-01","2017-06-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ContainerService","namespace":"Microsoft.ContainerService","authorizations":[{"applicationId":"7319c514-987d-4e9b-ac3d-d38c4f427f4c","roleDefinitionId":"1b4a0c7f-2217-416f-acfa-cf73452fdc1c","managedByRoleDefinitionId":"9e3af657-a8ff-583c-a75c-2fe7c4bcb635","managedByAuthorization":{"allowManagedByInheritance":true}},{"applicationId":"6dae42f8-4368-4678-94ff-3960e28e3630","roleDefinitionId":"831388fc-33b1-4dd1-b64c-40fdcaf96654"}],"resourceTypes":[{"resourceType":"containerServices","locations":["Japan + East","Central US","East US 2","Japan West","East Asia","South Central US","North + Central US","Australia East","Australia Southeast","Brazil South","Southeast + Asia","West US","West Europe","North Europe","East US","UK West","UK South","West + Central US","West US 2","South India","Central India","West India","Canada + East","Canada Central","Korea South","Korea Central","South Africa North","East + US 2 EUAP"],"apiVersions":["2017-07-01","2017-01-31","2016-09-30","2016-03-30"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"managedClusters","locations":["West Central + US","East US","West Europe","France Central","France South","Central US","Canada + Central","Canada East","UK South","West US","West US 2","Australia East","Australia + Central","North Europe","Japan East","Japan West","East US 2","South Central + US","North Central US","Southeast Asia","Australia Southeast","UK West","South + India","Central India","East Asia","Korea South","Korea Central","South Africa + North","Brazil South","Brazil Southeast","Germany North","Switzerland North","Switzerland + West","Germany West Central","UAE North","UAE Central","Norway East","Norway + West","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-09-01","2020-07-01","2020-06-01","2020-04-01","2020-03-01","2020-02-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-06-01","2019-04-01","2019-02-01","2018-08-01-preview","2018-03-31","2017-08-31"],"defaultApiVersion":"2019-04-01","capabilities":"SystemAssignedResourceIdentity, + SupportsTags, SupportsLocation"},{"resourceType":"openShiftManagedClusters","locations":["East + US","East US 2","West US","West US 2","South Central US","Central US","West + Europe","North Europe","UK South","UK West","France Central","Canada East","Canada + Central","Australia East","Australia Southeast","East Asia","Southeast Asia","North + Central US","Brazil South","Japan East","Central India","East US 2 EUAP"],"apiVersions":["2019-09-30-preview","2019-04-30"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"locations/openShiftClusters","locations":["East + US","East US 2","West US","West US 2","South Central US","Central US","West + Europe","North Europe","France Central","UK West","UK South","Canada East","Canada + Central","Australia East","Australia Southeast","East Asia","Southeast Asia","North + Central US","Brazil South","Japan East","Central India","East US 2 EUAP"],"apiVersions":["2019-09-30-preview","2019-04-30","2018-09-30-preview"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2017-08-31","2017-01-31","2016-09-30","2016-03-30","2015-11-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationresults","locations":["East + US","West Europe","France Central","France South","Central US","UK West","West + Central US","West US","West US 2","South India","Central India","West India","Canada + East","Canada Central","Korea South","Korea Central","UK South","Australia + East","Australia Central","Australia Southeast","North Europe","Japan East","Japan + West","East US 2","South Central US","North Central US","Southeast Asia","East + Asia","South Africa North","Brazil South","Brazil Southeast","Germany North","Germany + West Central","Switzerland North","Switzerland West","UAE North","UAE Central","Norway + East","Norway West","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-08-31","2016-03-30"],"capabilities":"None"},{"resourceType":"locations/operations","locations":["France + Central","France South","East US","West Europe","Central US","Canada Central","Canada + East","UK West","UK South","West Central US","West US 2","South India","Central + India","West India","Korea South","Korea Central","West US","Australia East","Australia + Central","Australia Southeast","North Europe","Japan East","Japan West","East + US 2","South Central US","North Central US","Southeast Asia","East Asia","South + Africa North","Brazil South","Brazil Southeast","Germany North","Germany West + Central","Switzerland North","Switzerland West","UAE North","UAE Central","Norway + East","Norway West","East US 2 EUAP","Central US EUAP"],"apiVersions":["2016-03-30"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2018-10-31","2018-03-31","2017-08-31","2017-07-01","2017-01-31","2016-09-30","2016-03-30","2015-11-01-preview"],"capabilities":"None"},{"resourceType":"locations/orchestrators","locations":["East + US","West Europe","France Central","France South","Central US","Canada East","Canada + Central","UK South","UK West","West Central US","West US","West US 2","Australia + East","Australia Central","Australia Southeast","North Europe","Japan East","Japan + West","Korea Central","Korea South","East US 2","South Central US","North + Central US","Southeast Asia","South India","Central India","East Asia","South + Africa North","Brazil South","Brazil Southeast","Germany North","Germany West + Central","Switzerland North","Switzerland West","UAE North","UAE Central","Norway + East","Norway West","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-09-01","2020-07-01","2020-06-01","2020-04-01","2020-03-01","2020-02-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-06-01","2019-04-01","2017-09-30"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DBforMariaDB","namespace":"Microsoft.DBforMariaDB","authorizations":[{"applicationId":"76cd24bf-a9fc-4344-b1dc-908275de6d6d","roleDefinitionId":"c13b7b9c-2ed1-4901-b8a8-16f35468da29"},{"applicationId":"123cd850-d9df-40bd-94d5-c9f07b7fa203"}],"resourceTypes":[{"resourceType":"operations","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","Norway East","South Africa North","South Africa West","South Central + US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK + West","West Central US","West Europe","West India","West US","West US 2","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-preview","2018-06-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"servers/recoverableServers","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central US","Central India","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/virtualNetworkRules","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","Norway East","South Africa North","South Africa West","South Central + US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK + West","West Central US","West Europe","West India","West US","West US 2","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","Norway East","South Africa North","South Africa West","South Central + US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK + West","West Central US","West Europe","West India","West US","West US 2","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/azureAsyncOperation","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/performanceTiers","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/securityAlertPoliciesAzureAsyncOperation","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionProxyOperationResults","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionProxyAzureAsyncOperation","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionOperationResults","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionAzureAsyncOperation","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/securityAlertPoliciesOperationResults","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01"],"capabilities":"None"},{"resourceType":"locations/recommendedActionSessionsAzureAsyncOperation","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/recommendedActionSessionsOperationResults","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/topQueryStatistics","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/queryTexts","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/waitStatistics","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/advisors","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/privateLinkResources","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/privateEndpointConnections","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/privateEndpointConnectionProxies","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/serverKeyAzureAsyncOperation","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-01-01-privatepreview","2020-01-01-preview","2020-01-01"],"capabilities":"None"},{"resourceType":"locations/serverKeyOperationResults","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West + Central US","West Europe","West India","West US","West US 2","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2020-01-01-privatepreview","2020-01-01-preview","2020-01-01"],"capabilities":"None"},{"resourceType":"servers/start","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-01-01-privatepreview","2020-01-01-preview","2020-01-01"],"capabilities":"None"},{"resourceType":"servers/stop","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-01-01-privatepreview","2020-01-01-preview","2020-01-01"],"capabilities":"None"},{"resourceType":"servers/keys","locations":["Central + US EUAP","East US 2 EUAP"],"apiVersions":["2020-01-01-privatepreview","2020-01-01-preview","2020-01-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Sql","namespace":"Microsoft.Sql","authorizations":[{"applicationId":"e4ab13ed-33cb-41b4-9140-6e264582cf85","roleDefinitionId":"ec3ddc95-44dc-47a2-9926-5e9f5ffd44ec"},{"applicationId":"0130cc9f-7ac5-4026-bd5f-80a08a54e6d9","roleDefinitionId":"45e8abf8-0ec4-44f3-9c37-cff4f7779302"},{"applicationId":"76cd24bf-a9fc-4344-b1dc-908275de6d6d","roleDefinitionId":"c13b7b9c-2ed1-4901-b8a8-16f35468da29"},{"applicationId":"76c7f279-7959-468f-8943-3954880e0d8c","roleDefinitionId":"7f7513a8-73f9-4c5f-97a2-c41f0ea783ef"},{"applicationId":"022907d3-0f1b-48f7-badc-1ba6abab6d66"}],"resourceTypes":[{"resourceType":"operations","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2015-05-01","2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"locations","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"locations/capabilities","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2015-05-01","2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"locations/databaseAzureAsyncOperation","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/databaseOperationResults","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/serverKeyAzureAsyncOperation","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/serverKeyOperationResults","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/keys","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/encryptionProtector","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/encryptionProtectorOperationResults","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/encryptionProtectorAzureAsyncOperation","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedInstanceKeyAzureAsyncOperation","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedInstanceKeyOperationResults","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedInstanceEncryptionProtectorOperationResults","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedInstanceEncryptionProtectorAzureAsyncOperation","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"servers/tdeCertificates","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/tdeCertAzureAsyncOperation","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/tdeCertOperationResults","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/serverAzureAsyncOperation","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/serverOperationResults","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/usages","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2015-05-01","2014-04-01-preview"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"servers/databases","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2015-01-01","2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"servers/serviceObjectives","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/communicationLinks","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/administrators","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/administratorOperationResults","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"locations/serverAdministratorAzureAsyncOperation","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/serverAdministratorOperationResults","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"servers/restorableDroppedDatabases","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/recoverableDatabases","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/databases/geoBackupPolicies","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2015-05-01-preview","2014-04-01-preview","2014-04-01"],"capabilities":"None"},{"resourceType":"servers/import","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/importExportOperationResults","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/operationResults","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/databases/backupLongTermRetentionPolicies","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/backupShortTermRetentionPolicies","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"servers/databaseSecurityPolicies","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/automaticTuning","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/automaticTuning","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/transparentDataEncryption","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-03-01-preview","2015-05-01-preview","2014-04-01-preview","2014-04-01"],"capabilities":"None"},{"resourceType":"servers/recommendedElasticPools","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/databases/dataMaskingPolicies","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/databases/dataMaskingPolicies/rules","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/databases/securityAlertPolicies","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/securityAlertPolicies","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/auditingSettings","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/auditingSettings","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/extendedAuditingSettings","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/auditingSettingsAzureAsyncOperation","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/auditingSettingsOperationResults","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/extendedAuditingSettingsAzureAsyncOperation","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/extendedAuditingSettingsOperationResults","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/elasticPoolAzureAsyncOperation","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2015-05-01"],"capabilities":"None"},{"resourceType":"locations/elasticPoolOperationResults","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2015-05-01"],"capabilities":"None"},{"resourceType":"servers/elasticpools","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-09-01-preview","2015-05-01-preview","2015-05-01","2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"servers/jobAccounts","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2015-05-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"servers/jobAgents","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations/jobAgentOperationResults","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/jobAgentAzureAsyncOperation","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"servers/jobAgents/jobs","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"servers/jobAgents/jobs/steps","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2017-03-01-preview","2015-05-01-preview","2015-05-01","2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"locations","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"servers/jobAgents/jobs/executions","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"locations/capabilities","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"servers/disasterRecoveryConfiguration","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2015-05-01","2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"locations/databaseAzureAsyncOperation","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/dnsAliases","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/databaseOperationResults","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/dnsAliasAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/serverKeyAzureAsyncOperation","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/dnsAliasOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/serverKeyOperationResults","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"servers/failoverGroups","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/keys","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/failoverGroupAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/encryptionProtector","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/failoverGroupOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/encryptionProtectorOperationResults","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/firewallRulesOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/encryptionProtectorAzureAsyncOperation","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/firewallRulesAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedInstanceKeyAzureAsyncOperation","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedInstanceKeyOperationResults","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2015-05-01"],"capabilities":"None"},{"resourceType":"servers/virtualNetworkRules","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedInstanceEncryptionProtectorOperationResults","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/virtualNetworkRulesOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedInstanceEncryptionProtectorAzureAsyncOperation","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2015-05-01"],"capabilities":"None"},{"resourceType":"locations/virtualNetworkRulesAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"servers/tdeCertificates","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2015-05-01"],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnetsOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/tdeCertAzureAsyncOperation","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2015-05-01"],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnetsAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/tdeCertOperationResults","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2015-05-01"],"capabilities":"None"},{"resourceType":"locations/databaseRestoreAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/serverAzureAsyncOperation","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"servers/usages","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/serverOperationResults","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/databases/metricDefinitions","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/usages","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/databases/metrics","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2015-05-01","2014-04-01-preview"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/aggregatedDatabaseMetrics","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/elasticpools/metrics","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"servers/databases","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/elasticpools/metricdefinitions","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2015-01-01","2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"servers/serviceObjectives","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/databases/topQueries","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/communicationLinks","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/databases/topQueries/queryText","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/administrators","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/advisors","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/administratorOperationResults","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/elasticPools/advisors","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"locations/serverAdministratorAzureAsyncOperation","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/advisors","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/serverAdministratorOperationResults","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/databases/extensions","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"servers/restorableDroppedDatabases","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/elasticPoolEstimates","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/recoverableDatabases","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/auditRecords","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/databases/geoBackupPolicies","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/VulnerabilityAssessmentScans","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2015-05-01-preview","2014-04-01-preview","2014-04-01"],"capabilities":"None"},{"resourceType":"servers/import","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/workloadGroups","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/importExportOperationResults","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/vulnerabilityAssessments","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/operationResults","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"servers/vulnerabilityAssessments","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/databases/backupLongTermRetentionPolicies","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"managedInstances/databases/vulnerabilityAssessments","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/backupShortTermRetentionPolicies","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"managedInstances/vulnerabilityAssessments","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"servers/databaseSecurityPolicies","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/VulnerabilityAssessmentSettings","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/automaticTuning","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/VulnerabilityAssessment","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/automaticTuning","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/vulnerabilityAssessmentScanAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/transparentDataEncryption","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/vulnerabilityAssessmentScanOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2017-03-01-preview","2015-05-01-preview","2014-04-01-preview","2014-04-01"],"capabilities":"None"},{"resourceType":"servers/recommendedElasticPools","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/recommendedSensitivityLabels","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/databases/dataMaskingPolicies","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/syncGroups","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/databases/dataMaskingPolicies/rules","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/syncGroups/syncMembers","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/databases/securityAlertPolicies","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/syncAgents","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/securityAlertPolicies","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"instancePools","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/auditingSettings","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations/importExportOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/auditingSettings","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview"],"capabilities":"None"},{"resourceType":"locations/importExportAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/extendedAuditingSettings","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview"],"capabilities":"None"},{"resourceType":"locations/instancePoolOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/auditingSettingsAzureAsyncOperation","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/instancePoolAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/auditingSettingsOperationResults","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"managedInstances","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/extendedAuditingSettingsAzureAsyncOperation","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"managedInstances/administrators","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/extendedAuditingSettingsOperationResults","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"managedInstances/databases","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/elasticPoolAzureAsyncOperation","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"managedInstances/recoverableDatabases","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2015-05-01"],"capabilities":"None"},{"resourceType":"locations/elasticPoolOperationResults","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"managedInstances/metrics","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2015-05-01"],"capabilities":"None"},{"resourceType":"servers/elasticpools","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"managedInstances/metricDefinitions","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-09-01-preview","2015-05-01-preview","2015-05-01","2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"servers/jobAccounts","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"managedInstances/databases/backupLongTermRetentionPolicies","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2015-05-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"servers/jobAgents","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"managedInstances/sqlAgent","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations/jobAgentOperationResults","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/managedInstancePrivateEndpointConnectionProxyOperationResults","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedInstancePrivateEndpointConnectionProxyAzureAsyncOperation","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada + East","Central India","Central US","East Asia","East US","East US 2","France + Central","Germany West Central","Japan East","Japan West","Korea Central","Korea + South","North Central US","North Europe","Norway East","South Africa North","South + Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedInstancePrivateEndpointConnectionOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/jobAgentAzureAsyncOperation","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedInstancePrivateEndpointConnectionAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"servers/jobAgents/jobs","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/longTermRetentionManagedInstances","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"servers/jobAgents/jobs/steps","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/longTermRetentionManagedInstanceBackups","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"servers/jobAgents/jobs/executions","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedInstanceLongTermRetentionPolicyOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"servers/disasterRecoveryConfiguration","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedInstanceLongTermRetentionPolicyAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/dnsAliases","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/longTermRetentionManagedInstanceBackupOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/dnsAliasAsyncOperation","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/longTermRetentionManagedInstanceBackupAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/dnsAliasOperationResults","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedDatabaseAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"servers/failoverGroups","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedDatabaseOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/failoverGroupAzureAsyncOperation","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedDatabaseRestoreAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/failoverGroupOperationResults","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedDatabaseRestoreOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/firewallRulesOperationResults","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedDatabaseCompleteRestoreAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/firewallRulesAzureAsyncOperation","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedDatabaseCompleteRestoreOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedServerSecurityAlertPoliciesAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2015-05-01"],"capabilities":"None"},{"resourceType":"servers/virtualNetworkRules","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"managedInstances/tdeCertificates","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/virtualNetworkRulesOperationResults","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedInstanceTdeCertAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2015-05-01"],"capabilities":"None"},{"resourceType":"locations/virtualNetworkRulesAzureAsyncOperation","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedInstanceTdeCertOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2015-05-01"],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnetsOperationResults","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedServerSecurityAlertPoliciesOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2015-05-01"],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnetsAzureAsyncOperation","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/securityAlertPoliciesAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2015-05-01"],"capabilities":"None"},{"resourceType":"locations/databaseRestoreAzureAsyncOperation","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/securityAlertPoliciesOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"servers/usages","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"virtualClusters","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/databases/metricDefinitions","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations/virtualClusterAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/databases/metrics","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/virtualClusterOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/aggregatedDatabaseMetrics","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedInstanceAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/elasticpools/metrics","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedInstanceOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/elasticpools/metricdefinitions","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/administratorAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/databases/topQueries","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/administratorOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/databases/topQueries/queryText","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/syncGroupOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/advisors","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/syncMemberOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/elasticPools/advisors","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/syncAgentOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/advisors","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/syncDatabaseIds","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview","2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/databases/extensions","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/longTermRetentionServers","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2014-04-01-preview","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"servers/elasticPoolEstimates","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/longTermRetentionBackups","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/auditRecords","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/longTermRetentionPolicyOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/VulnerabilityAssessmentScans","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/longTermRetentionPolicyAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/workloadGroups","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/longTermRetentionBackupOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/vulnerabilityAssessments","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/longTermRetentionBackupAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"servers/vulnerabilityAssessments","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/shortTermRetentionPolicyOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"managedInstances/databases/vulnerabilityAssessments","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/shortTermRetentionPolicyAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"managedInstances/vulnerabilityAssessments","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedShortTermRetentionPolicyOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/VulnerabilityAssessmentSettings","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedShortTermRetentionPolicyAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/VulnerabilityAssessment","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/instanceFailoverGroups","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/vulnerabilityAssessmentScanAzureAsyncOperation","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/instanceFailoverGroupAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/vulnerabilityAssessmentScanOperationResults","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/instanceFailoverGroupOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/recommendedSensitivityLabels","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionProxyOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/syncGroups","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionProxyAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/databases/syncGroups/syncMembers","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"servers/syncAgents","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"instancePools","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/notifyAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations/instancePoolOperationResults","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/serverTrustGroups","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/instancePoolAzureAsyncOperation","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview"],"capabilities":"None"},{"resourceType":"locations/serverTrustGroupOperationResults","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"managedInstances","locations":["Australia + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview"],"capabilities":"None"},{"resourceType":"locations/serverTrustGroupAzureAsyncOperation","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-01-preview","2020-02-02-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.StorageCache","namespace":"Microsoft.StorageCache","authorizations":[{"applicationId":"4392ab71-2ce2-4b0d-8770-b352745c73f5","roleDefinitionId":"e27430df-bd6b-4f3a-bd6d-d52ad1a7d075"}],"resourceTypes":[{"resourceType":"caches","locations":["Australia + East","East US","East US 2","Korea Central","North Europe","South Central + US","Southeast Asia","UK South","West Europe","West US","West US 2","East + US 2 EUAP"],"apiVersions":["2020-03-01","2019-11-01","2019-08-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"SystemAssignedResourceIdentity, + SupportsTags, SupportsLocation"},{"resourceType":"caches/storageTargets","locations":["Australia + East","East US","East US 2","Korea Central","North Europe","South Central + US","Southeast Asia","UK South","West Europe","West US","West US 2","East + US 2 EUAP"],"apiVersions":["2020-03-01","2019-11-01","2019-08-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"operations","locations":["Australia + East","East US","East US 2","Korea Central","North Europe","South Central + US","Southeast Asia","UK South","West Europe","West US","West US 2","East + US 2 EUAP"],"apiVersions":["2020-03-01","2019-11-01","2019-08-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"usageModels","locations":["Australia + East","East US","East US 2","Korea Central","North Europe","South Central + US","Southeast Asia","UK South","West Europe","West US","West US 2","East + US 2 EUAP"],"apiVersions":["2020-03-01","2019-11-01","2019-08-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-03-01","2019-11-01","2019-08-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations/ascoperations","locations":["Australia + East","East US","East US 2","Korea Central","North Europe","South Central + US","Southeast Asia","UK South","West Europe","West US","West US 2","East + US 2 EUAP"],"apiVersions":["2020-03-01","2019-11-01","2019-08-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.StorageSync","namespace":"Microsoft.StorageSync","authorizations":[{"applicationId":"9469b9f5-6722-4481-a2b2-14ed560b706f","roleDefinitionId":"4cd49d82-1f4d-43fc-af0c-1c1203668e5a"}],"resourceTypes":[{"resourceType":"storageSyncServices","locations":["West + Central US","West US","West Europe","North Europe","Southeast Asia","East + Asia","Australia East","Australia Southeast","East US","Canada Central","Canada + East","Central US","East US 2","UK South","UK West","Central India","South + India","North Central US","South Central US","Brazil South","Japan East","Japan + West","West US 2","Korea Central","Korea South","France Central","France South","South + Africa North","South Africa West","UAE North","UAE Central","Germany West + Central","Germany North"],"apiVersions":["2020-03-01","2019-10-01","2019-06-01","2019-03-01","2019-02-01","2018-10-01","2018-07-01","2018-04-02","2018-01-01-preview","2017-06-05-preview"],"defaultApiVersion":"2018-04-02","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"storageSyncServices/syncGroups","locations":["West + Central US","West US","West Europe","North Europe","Southeast Asia","East + Asia","Australia East","Australia Southeast","East US","Canada Central","Canada + East","Central US","East US 2","UK South","UK West","Central India","South + India","North Central US","South Central US","Brazil South","Japan East","Japan + West","West US 2","Korea Central","Korea South","France Central","France South","South + Africa North","South Africa West","UAE North","UAE Central","Germany West + Central","Germany North"],"apiVersions":["2020-03-01","2019-10-01","2019-06-01","2019-03-01","2019-02-01","2018-10-01","2018-07-01","2018-04-02","2018-01-01-preview","2017-06-05-preview"],"defaultApiVersion":"2017-06-05-preview","capabilities":"None"},{"resourceType":"storageSyncServices/syncGroups/cloudEndpoints","locations":["West + Central US","West US","West Europe","North Europe","Southeast Asia","East + Asia","Australia East","Australia Southeast","East US","Canada Central","Canada + East","Central US","East US 2","UK South","UK West","Central India","South + India","North Central US","South Central US","Brazil South","Japan East","Japan + West","West US 2","Korea Central","Korea South","France Central","France South","South + Africa North","South Africa West","UAE North","UAE Central","Germany West + Central","Germany North"],"apiVersions":["2020-03-01","2019-10-01","2019-06-01","2019-03-01","2019-02-01","2018-10-01","2018-07-01","2018-04-02","2018-01-01-preview","2017-06-05-preview"],"defaultApiVersion":"2017-06-05-preview","capabilities":"None"},{"resourceType":"storageSyncServices/syncGroups/serverEndpoints","locations":["West + Central US","West US","West Europe","North Europe","Southeast Asia","East + Asia","Australia East","Australia Southeast","East US","Canada Central","Canada + East","Central US","East US 2","UK South","UK West","Central India","South + India","North Central US","South Central US","Brazil South","Japan East","Japan + West","West US 2","Korea Central","Korea South","France Central","France South","South + Africa North","South Africa West","UAE North","UAE Central","Germany West + Central","Germany North"],"apiVersions":["2020-03-01","2019-10-01","2019-06-01","2019-03-01","2019-02-01","2018-10-01","2018-07-01","2018-04-02","2018-01-01-preview","2017-06-05-preview"],"defaultApiVersion":"2017-06-05-preview","capabilities":"None"},{"resourceType":"storageSyncServices/registeredServers","locations":["West + Central US","West US","West Europe","North Europe","Southeast Asia","East + Asia","Australia East","Australia Southeast","East US","Canada Central","Canada + East","Central US","East US 2","UK South","UK West","Central India","South + India","North Central US","South Central US","Brazil South","Japan East","Japan + West","West US 2","Korea Central","Korea South","France Central","France South","South + Africa North","South Africa West","UAE North","UAE Central","Germany West + Central","Germany North"],"apiVersions":["2020-03-01","2019-10-01","2019-06-01","2019-03-01","2019-02-01","2018-10-01","2018-07-01","2018-04-02","2018-01-01-preview","2017-06-05-preview"],"defaultApiVersion":"2017-06-05-preview","capabilities":"None"},{"resourceType":"storageSyncServices/workflows","locations":["West + Central US","West US","West Europe","North Europe","Southeast Asia","East + Asia","Australia East","Australia Southeast","East US","Canada Central","Canada + East","Central US","East US 2","UK South","UK West","Central India","South + India","North Central US","South Central US","Brazil South","Japan East","Japan + West","West US 2","Korea Central","Korea South","France Central","France South","South + Africa North","South Africa West","UAE North","UAE Central","Germany West + Central","Germany North"],"apiVersions":["2020-03-01","2019-10-01","2019-06-01","2019-03-01","2019-02-01","2018-10-01","2018-07-01","2018-04-02","2018-01-01-preview","2017-06-05-preview"],"defaultApiVersion":"2017-06-05-preview","capabilities":"None"},{"resourceType":"operations","locations":["West + Central US","West US","West Europe","North Europe","Southeast Asia","East + Asia","Australia East","Australia Southeast","East US","Canada Central","Canada + East","Central US","East US 2","UK South","UK West","Central India","South + India","Central US EUAP","North Central US","South Central US","Brazil South","Japan + East","Japan West","West US 2","East US 2 EUAP","Korea Central","Korea South","France + Central","France South","South Africa North","South Africa West","UAE North","UAE + Central","Germany West Central","Germany North"],"apiVersions":["2020-03-01","2019-10-01","2019-06-01","2019-03-01","2019-02-01","2018-10-01","2018-07-01","2018-04-02","2018-01-01-preview","2017-06-05-preview"],"defaultApiVersion":"2017-06-05-preview","capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-03-01","2019-10-01","2019-06-01","2019-03-01","2019-02-01","2018-10-01","2018-07-01","2018-04-02"],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["West + US","West Europe","North Europe","Southeast Asia","East Asia","Australia East","Australia + Southeast","East US","Canada Central","Canada East","Central US","East US + 2","UK South","UK West","Central India","South India","North Central US","South + Central US","Brazil South","Japan East","Japan West","West Central US","West + US 2","Korea Central","Korea South","France Central","France South","South + Africa North","South Africa West","UAE North","UAE Central","Germany West + Central","Germany North"],"apiVersions":["2020-03-01","2019-10-01","2019-06-01","2019-03-01","2019-02-01","2018-10-01","2018-07-01","2018-04-02"],"defaultApiVersion":"2018-04-02","capabilities":"None"},{"resourceType":"locations/workflows","locations":["West + US","West Europe","North Europe","Southeast Asia","East Asia","Australia East","Australia + Southeast","East US","Canada Central","Canada East","Central US","East US + 2","UK South","UK West","Central India","South India","West Central US","West + US 2","North Central US","South Central US","Brazil South","Japan East","Japan + West","Korea Central","Korea South","France Central","France South","South + Africa North","South Africa West","UAE North","UAE Central","Germany West + Central","Germany North"],"apiVersions":["2020-03-01","2019-10-01","2019-06-01","2019-03-01","2019-02-01","2018-10-01","2018-07-01","2018-04-02"],"defaultApiVersion":"2018-04-02","capabilities":"None"},{"resourceType":"locations/operations","locations":["West + Central US","West US","West Europe","North Europe","Southeast Asia","East + Asia","Australia East","Australia Southeast","East US","Canada Central","Canada + East","Central US","East US 2","UK South","UK West","Central India","South + India","North Central US","South Central US","Brazil South","Japan East","Japan + West","West US 2","Korea Central","Korea South","France Central","France South","South + Africa North","South Africa West","UAE North","UAE Central","Germany West + Central","Germany North"],"apiVersions":["2020-03-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations/operationResults","locations":["West + Central US","West US","West Europe","North Europe","Southeast Asia","East + Asia","Australia East","Australia Southeast","East US","Canada Central","Canada + East","Central US","East US 2","UK South","UK West","Central India","South + India","North Central US","South Central US","Brazil South","Japan East","Japan + West","West US 2","Korea Central","Korea South","France Central","France South","South + Africa North","South Africa West","UAE North","UAE Central","Germany West + Central","Germany North"],"apiVersions":["2020-03-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.VSOnline","namespace":"Microsoft.VSOnline","authorizations":[{"applicationId":"9bd5ab7f-4031-4045-ace9-6bebbad202f6","roleDefinitionId":"b879ac78-f1e6-448d-ab4c-5908cd5967c1"},{"applicationId":"48ef7923-268f-473d-bcf1-07f0997961f4","roleDefinitionId":"b879ac78-f1e6-448d-ab4c-5908cd5967c1"}],"resourceTypes":[{"resourceType":"accounts","locations":["West + Europe","East US","West Us 2","Southeast Asia"],"apiVersions":["2019-07-01-preview","2019-07-01-beta","2019-07-01-alpha"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"plans","locations":["West + Europe","East US","West Us 2","Southeast Asia"],"apiVersions":["2020-05-26-preview","2020-05-26-beta","2020-05-26-alpha","2019-07-01-preview","2019-07-01-beta","2019-07-01-alpha"],"capabilities":"SystemAssignedResourceIdentity, + SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2020-05-26-privatepreview","2020-05-26-preview","2020-05-26-beta","2020-05-26-alpha","2019-07-01-privatepreview","2019-07-01-preview","2019-07-01-beta","2019-07-01-alpha"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DataFactory","namespace":"Microsoft.DataFactory","authorizations":[{"applicationId":"0947a342-ab4a-43be-93b3-b8243fc161e5","roleDefinitionId":"f0a6aa2a-e9d8-4bae-bcc2-36b405e8a5da"},{"applicationId":"5d13f7d7-0567-429c-9880-320e9555e5fc","roleDefinitionId":"956a8f20-9168-4c71-8e27-3c0460ac39a4"}],"resourceTypes":[{"resourceType":"dataFactories","locations":["West + US","North Europe","East US","West Central US"],"apiVersions":["2015-10-01","2015-09-01","2015-08-01","2015-07-01-preview","2015-05-01-preview","2015-01-01-preview","2014-04-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"factories","locations":["East + US","East US 2","Central US","South Central US","Japan East","Canada Central","Australia + East","Central India","France Central","Korea Central","Brazil South","West + Europe","North Europe","UK South","West Central US","West US","West US 2","Southeast + Asia","East Asia","North Central US","South Africa North","Australia Southeast","East + US 2 EUAP"],"apiVersions":["2018-06-01","2017-09-01-preview"],"defaultApiVersion":"2018-06-01","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"factories/integrationRuntimes","locations":["East + US","East US 2","West US 2","West US","Central US","South Central US","Japan + East","Central India","Brazil South","France Central","Korea Central","Australia + East","Canada Central","West Central US","North Europe","UK South","West Europe","Southeast + Asia","East Asia","North Central US","South Africa North","Australia Southeast","East + US 2 EUAP"],"apiVersions":["2018-06-01","2017-09-01-preview"],"defaultApiVersion":"2018-06-01","capabilities":"None"},{"resourceType":"dataFactories/diagnosticSettings","locations":["North + Europe","East US","West US","West Central US"],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"dataFactories/metricDefinitions","locations":["North + Europe","East US","West US","West Central US"],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"checkDataFactoryNameAvailability","locations":[],"apiVersions":["2015-05-01-preview","2015-01-01-preview"],"capabilities":"None"},{"resourceType":"checkAzureDataFactoryNameAvailability","locations":["West + US","North Europe","East US","West Central US"],"apiVersions":["2015-10-01","2015-09-01","2015-08-01","2015-07-01-preview","2015-05-01-preview","2015-01-01-preview"],"capabilities":"None"},{"resourceType":"dataFactorySchema","locations":["West + US","North Europe","East US","West Central US"],"apiVersions":["2015-10-01","2015-09-01","2015-08-01","2015-07-01-preview","2015-05-01-preview","2015-01-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["West + US","North Europe","East US","West Central US"],"apiVersions":["2018-06-01","2017-09-01-preview","2017-03-01-preview","2015-10-01","2015-09-01","2015-08-01","2015-07-01-preview","2015-05-01-preview","2015-01-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2018-06-01","2017-09-01-preview"],"defaultApiVersion":"2018-06-01","capabilities":"None"},{"resourceType":"locations/configureFactoryRepo","locations":["East + US","East US 2","West US 2","West US","Central US","South Central US","Japan + East","Australia East","Canada Central","Central India","Brazil South","France + Central","Korea Central","West Europe","North Europe","UK South","West Central + US","Southeast Asia","East Asia","North Central US","South Africa North","Australia + Southeast","East US 2 EUAP"],"apiVersions":["2018-06-01","2017-09-01-preview"],"defaultApiVersion":"2018-06-01","capabilities":"None"},{"resourceType":"locations/getFeatureValue","locations":["East + US","East US 2","West Europe","North Europe","UK South","West Central US","West + US","Central US","South Central US","Japan East","Australia East","Canada + Central","Central India","Brazil South","France Central","Korea Central","West + US 2","Southeast Asia","East Asia","North Central US","South Africa North","Australia + Southeast","East US 2 EUAP"],"apiVersions":["2018-06-01"],"defaultApiVersion":"2018-06-01","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.PowerBIDedicated","namespace":"Microsoft.PowerBIDedicated","authorization":{"applicationId":"4ac7d521-0382-477b-b0f8-7e1d95f85ca2","roleDefinitionId":"490d5987-bcf6-4be6-b6b2-056a78cb693a"},"resourceTypes":[{"resourceType":"capacities","locations":["Australia + Southeast","Brazil South","Canada Central","UAE North","UAE Central","Germany + West Central","Germany North","France Central","France South","Korea Central","Korea + South","Japan West","South Africa North","Switzerland North","Switzerland + West","Canada East","South Africa West","UK West","Central US","Central India","Australia + East","East Asia","East US","East US 2","West India","Japan East","West Central + US","North Central US","North Europe","South Central US","Southeast Asia","UK + South","West Europe","West US","West US 2"],"apiVersions":["2018-09-01-preview","2017-10-01","2017-01-01-preview"],"defaultApiVersion":"2017-01-01-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2017-01-01-preview"],"defaultApiVersion":"2017-01-01-preview","capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["Australia + Southeast","Brazil South","Canada Central","UAE North","UAE Central","Germany + West Central","Germany North","France Central","France South","Korea Central","Korea + South","Japan West","Switzerland North","Switzerland West","Canada East","UK + West","Central US","Central India","Australia East","East Asia","East US","East + US 2","West India","Japan East","West Central US","North Central US","North + Europe","South Africa North","South Central US","Southeast Asia","South Africa + West","UK South","West Europe","West US","West US 2"],"apiVersions":["2018-09-01-preview","2017-10-01","2017-01-01-preview"],"defaultApiVersion":"2017-01-01-preview","capabilities":"None"},{"resourceType":"locations/operationresults","locations":["Australia + Southeast","Brazil South","Canada Central","UAE North","UAE Central","Germany + West Central","Germany North","France Central","France South","Korea Central","Korea + South","Japan West","Switzerland North","Switzerland West","Canada East","UK + West","Central US","Central India","Australia East","East Asia","East US","East + US 2","West India","Japan East","West Central US","North Central US","North + Europe","South Central US","Southeast Asia","UK South","West Europe","West + US","South Africa North","South Africa West","West US 2"],"apiVersions":["2018-09-01-preview","2017-10-01","2017-01-01-preview"],"defaultApiVersion":"2017-01-01-preview","capabilities":"None"},{"resourceType":"locations/operationstatuses","locations":["Australia + Southeast","Brazil South","Canada Central","UAE North","UAE Central","Germany + West Central","Germany North","France Central","France South","Korea Central","Korea + South","Japan West","Switzerland North","Switzerland West","Canada East","UK + West","Central US","Central India","Australia East","East Asia","East US","East + US 2","West India","Japan East","West Central US","North Central US","North + Europe","South Central US","Southeast Asia","UK South","West Europe","West + US","West US 2","South Africa North","South Africa West"],"apiVersions":["2018-09-01-preview","2017-10-01","2017-01-01-preview"],"defaultApiVersion":"2017-01-01-preview","capabilities":"None"},{"resourceType":"operations","locations":["East + US 2"],"apiVersions":["2018-09-01-preview","2017-10-01","2017-01-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.MixedReality","namespace":"Microsoft.MixedReality","authorizations":[{"applicationId":"c7ddd9b4-5172-4e28-bd29-1e0792947d18","roleDefinitionId":"b67ee066-e058-4ddb-92bc-83cdd74bc38a"},{"applicationId":"a15bc1de-f777-408f-9d2b-a27ed19c72ba"}],"resourceTypes":[{"resourceType":"locations","locations":[],"apiVersions":["2020-05-01","2020-04-06-preview","2019-12-02-preview","2019-02-28-preview"],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["Australia + East","East US","East US 2","North Europe","South Central US","Southeast Asia","UK + South","West Europe","West US 2"],"apiVersions":["2020-05-01","2020-04-06-preview","2019-12-02-preview","2019-02-28-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-05-01","2020-04-06-preview","2019-12-02-preview","2019-02-28-preview"],"capabilities":"None"},{"resourceType":"spatialAnchorsAccounts","locations":["Australia + East","East US","East US 2","North Europe","West Europe","South Central US","UK + South","Southeast Asia"],"apiVersions":["2020-05-01","2019-12-02-preview","2019-02-28-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"remoteRenderingAccounts","locations":["East + US","East US 2","Southeast Asia","West Europe","West US 2"],"apiVersions":["2020-04-06-preview","2019-12-02-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.PowerBI","namespace":"Microsoft.PowerBI","authorizations":[{"applicationId":"00000009-0000-0000-c000-000000000000","roleDefinitionId":"d2079c0c-4a98-48b1-b511-eae3fc2003ab"}],"resourceTypes":[{"resourceType":"workspaceCollections","locations":["South + Central US","North Central US","East US 2","West US","West Europe","North + Europe","Brazil South","Southeast Asia","Australia Southeast","Canada Central","Japan + East","UK South","West India"],"apiVersions":["2016-01-29"],"defaultApiVersion":"2016-01-29","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2016-01-29"],"defaultApiVersion":"2016-01-29","capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["South + Central US","North Central US","East US 2","West US","West Europe","North + Europe","Brazil South","Southeast Asia","Australia Southeast","Canada Central","Japan + East","UK South","West India"],"apiVersions":["2016-01-29"],"defaultApiVersion":"2016-01-29","capabilities":"None"},{"resourceType":"privateLinkServicesForPowerBI","locations":["global"],"apiVersions":["2020-06-01"],"defaultApiVersion":"2020-06-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"privateLinkServicesForPowerBI/operationResults","locations":["global"],"apiVersions":["2020-06-01"],"defaultApiVersion":"2020-06-01","capabilities":"None"},{"resourceType":"operations","locations":["East + US 2 EUAP"],"apiVersions":["2020-06-01","2016-01-29"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ServiceFabric","namespace":"Microsoft.ServiceFabric","authorization":{"applicationId":"74cb6831-0dbb-4be1-8206-fd4df301cdc2","roleDefinitionId":"e55cc65f-6903-4917-b4ef-f8d4640b57f5","managedByRoleDefinitionId":"9e3af657-a8ff-583c-a75c-2fe7c4bcb635"},"resourceTypes":[{"resourceType":"clusters","locations":["West + US","West US 2","West Central US","East US","East US 2","Central US","West + Europe","North Europe","UK West","UK South","Australia East","Australia Southeast","North + Central US","East Asia","Southeast Asia","Japan West","Japan East","South + India","West India","Central India","Brazil South","South Central US","Korea + Central","Korea South","Canada Central","Canada East","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-12-01-privatepreview","2020-12-01-preview","2020-03-01","2019-11-01-privatepreview","2019-11-01-preview","2019-06-01-preview","2019-03-01-privatepreview","2019-03-01-preview","2019-03-01","2018-02-01-privatepreview","2018-02-01","2017-07-01-privatepreview","2017-07-01-preview","2016-09-01","2016-03-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"clusters/applications","locations":["West + US","West US 2","West Central US","East US","East US 2","Central US","West + Europe","North Europe","UK West","UK South","Australia East","Australia Southeast","North + Central US","East Asia","Southeast Asia","Japan West","Japan East","South + India","West India","Central India","Brazil South","South Central US","Korea + Central","Korea South","Canada Central","Canada East","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-12-01-privatepreview","2020-12-01-preview","2020-03-01","2019-11-01-privatepreview","2019-11-01-preview","2019-06-01-preview","2019-03-01-privatepreview","2019-03-01-preview","2019-03-01","2017-07-01-preview","2016-09-01","2016-03-01"],"capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"locations","locations":[],"apiVersions":["2020-12-15-privatepreview","2020-12-15-preview","2020-12-01-privatepreview","2020-12-01-preview","2020-03-01","2020-02-01-privatepreview","2020-02-01-preview","2019-11-01-privatepreview","2019-11-01-preview","2019-06-01-preview","2019-03-01-privatepreview","2019-03-01-preview","2019-03-01","2018-02-01-privatepreview","2018-02-01","2017-07-01-privatepreview","2017-07-01-preview","2016-09-01","2016-03-01"],"capabilities":"None"},{"resourceType":"locations/clusterVersions","locations":["West + US","West US 2","West Central US","East US","East US 2","Central US","West + Europe","North Europe","UK West","UK South","Australia East","Australia Southeast","North + Central US","East Asia","Southeast Asia","Japan West","Japan East","South + India","West India","Central India","Brazil South","South Central US","Korea + Central","Korea South","Canada Central","Canada East","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-12-15-privatepreview","2020-12-15-preview","2020-12-01-privatepreview","2020-12-01-preview","2020-03-01","2020-02-01-privatepreview","2020-02-01-preview","2019-11-01-privatepreview","2019-11-01-preview","2019-06-01-preview","2019-03-01-privatepreview","2019-03-01-preview","2019-03-01","2018-02-01-privatepreview","2018-02-01","2017-07-01-privatepreview","2017-07-01-preview","2016-09-01","2016-03-01"],"capabilities":"None"},{"resourceType":"locations/environments","locations":["West + US","West US 2","West Central US","East US","East US 2","Central US","West + Europe","North Europe","UK West","UK South","Australia East","Australia Southeast","North + Central US","East Asia","Southeast Asia","Japan West","Japan East","South + India","West India","Central India","Brazil South","South Central US","Korea + Central","Korea South","Canada Central","Canada East","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-12-15-privatepreview","2020-12-15-preview","2020-12-01-privatepreview","2020-12-01-preview","2020-03-01","2020-02-01-privatepreview","2020-02-01-preview","2019-11-01-privatepreview","2019-11-01-preview","2019-06-01-preview","2019-03-01-privatepreview","2019-03-01-preview","2019-03-01","2018-02-01-privatepreview","2018-02-01","2017-07-01-privatepreview","2017-07-01-preview","2016-09-01","2016-03-01"],"capabilities":"None"},{"resourceType":"locations/operations","locations":["West + US","West US 2","West Central US","East US","East US 2","Central US","West + Europe","North Europe","UK West","UK South","Australia East","Australia Southeast","North + Central US","East Asia","Southeast Asia","Japan West","Japan East","South + India","West India","Central India","Brazil South","South Central US","Korea + Central","Korea South","Canada Central","Canada East","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-12-15-privatepreview","2020-12-15-preview","2020-12-01-privatepreview","2020-12-01-preview","2020-03-01","2020-02-01-privatepreview","2020-02-01-preview","2019-11-01-privatepreview","2019-11-01-preview","2019-06-01-preview","2019-03-01-privatepreview","2019-03-01-preview","2019-03-01","2018-02-01-privatepreview","2018-02-01","2017-07-01-privatepreview","2017-07-01-preview","2016-09-01","2016-03-01"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["West + US","West US 2","West Central US","East US","East US 2","Central US","West + Europe","North Europe","UK West","UK South","Australia East","Australia Southeast","North + Central US","East Asia","Southeast Asia","Japan West","Japan East","South + India","West India","Central India","Brazil South","South Central US","Korea + Central","Korea South","Canada Central","Canada East","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-12-15-privatepreview","2020-12-15-preview","2020-12-01-privatepreview","2020-12-01-preview","2020-03-01","2020-02-01-privatepreview","2020-02-01-preview","2019-11-01-privatepreview","2019-11-01-preview","2019-06-01-preview","2019-03-01-privatepreview","2019-03-01-preview","2019-03-01","2018-02-01-privatepreview","2018-02-01","2017-07-01-privatepreview","2017-07-01-preview","2016-09-01","2016-03-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-12-15-privatepreview","2020-12-15-preview","2020-12-01-privatepreview","2020-12-01-preview","2020-03-01","2020-02-01-privatepreview","2020-02-01-preview","2019-11-01-privatepreview","2019-11-01-preview","2019-06-01-preview","2019-03-01-privatepreview","2019-03-01-preview","2019-03-01","2018-02-01-privatepreview","2018-02-01","2017-07-01-privatepreview","2017-07-01-preview","2016-09-01","2016-03-01"],"capabilities":"None"},{"resourceType":"managedclusters","locations":["East + Asia","North Europe","West Central US","East US 2","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2020-01-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"managedclusters/nodetypes","locations":["East + Asia","North Europe","West Central US","East US 2","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2020-01-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedClusterOperations","locations":["East + Asia","North Europe","West Central US","East US 2","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2020-01-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedClusterOperationResults","locations":["East + Asia","North Europe","West Central US","East US 2","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2020-01-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.StreamAnalytics","namespace":"Microsoft.StreamAnalytics","resourceTypes":[{"resourceType":"streamingjobs","locations":["Central + US","West Europe","East US 2","North Europe","Japan East","West US","Southeast + Asia","South Central US","East Asia","Japan West","North Central US","East + US","Australia East","Australia Southeast","Brazil South","Central India","West + Central US","UK South","UK West","Canada Central","Canada East","West US 2","Korea + Central","France Central"],"apiVersions":["2019-06-01","2018-11-01","2017-04-01-preview","2016-03-01","2015-11-01","2015-10-01","2015-09-01","2015-08-01-preview","2015-06-01","2015-05-01","2015-04-01","2015-03-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"clusters","locations":["Central US","West + Europe","East US 2","North Europe","Japan East","West US","Southeast Asia","South + Central US","East Asia","Japan West","North Central US","East US","Australia + East","Australia Southeast","Brazil South","Central India","West Central US","UK + South","UK West","Canada Central","Canada East","West US 2","Korea Central","France + Central"],"apiVersions":["2020-03-01-preview","2020-03-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"clusters/privateEndpoints","locations":["Central + US","West Europe","East US 2","North Europe","Japan East","West US","Southeast + Asia","South Central US","East Asia","Japan West","North Central US","East + US","Australia East","Australia Southeast","Brazil South","Central India","West + Central US","UK South","UK West","Canada Central","Canada East","West US 2","Korea + Central","France Central"],"apiVersions":["2020-03-01-preview","2020-03-01"],"capabilities":"None"},{"resourceType":"locations","locations":["West + Europe","Central US","East US 2","North Europe","Japan East","West US","Southeast + Asia","South Central US","East Asia","Japan West","North Central US","East + US","Australia East","Australia Southeast","Brazil South","Central India","West + Central US","UK South","West US 2","UK West","Canada Central","Canada East","Korea + Central","France Central"],"apiVersions":["2019-06-01","2018-11-01","2017-04-01-preview","2016-03-01","2015-11-01","2015-10-01","2015-09-01","2015-08-01-preview","2015-06-01","2015-05-01","2015-04-01","2015-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/quotas","locations":[],"apiVersions":["2019-06-01","2018-11-01","2017-04-01-preview","2016-03-01","2015-11-01","2015-10-01","2015-09-01","2015-08-01-preview","2015-06-01","2015-05-01","2015-04-01","2015-03-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["West + Europe","West US","Central US","East US 2","North Europe","Japan East","Southeast + Asia","South Central US","East Asia","Japan West","North Central US","East + US","Australia East","Australia Southeast","Brazil South","Central India","West + Central US","UK South","UK West","Canada Central","Canada East","West US 2","Korea + Central","France Central"],"apiVersions":["2019-06-01","2018-11-01","2017-04-01-preview","2016-03-01","2015-11-01","2015-10-01","2015-09-01","2015-08-01-preview","2015-06-01","2015-05-01","2015-04-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Automation","namespace":"Microsoft.Automation","authorizations":[{"applicationId":"fc75330b-179d-49af-87dd-3b1acf6827fa","roleDefinitionId":"95fd5de3-d071-4362-92bf-cf341c1de832"}],"resourceTypes":[{"resourceType":"automationAccounts","locations":["Japan + East","East US 2","West Europe","South Africa North","Switzerland North","Southeast + Asia","South Central US","North Central US","East Asia","Central US","West + US","Australia Central","Australia East","Korea Central","East US","West US + 2","Brazil South","UK South","West Central US","North Europe","Canada Central","Australia + Southeast","Central India","France Central","Central US EUAP"],"apiVersions":["2020-01-13-preview","2019-06-01","2018-06-30","2018-01-15","2017-05-15-preview","2015-10-31","2015-01-01-preview"],"defaultApiVersion":"2018-06-30","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"automationAccounts/runbooks","locations":["Japan + East","East US 2","West Europe","South Africa North","Switzerland North","Southeast + Asia","South Central US","North Central US","East Asia","West US","Central + US","Australia Central","Australia East","Korea Central","East US","West US + 2","Brazil South","UK South","West Central US","North Europe","Canada Central","Australia + Southeast","Central India","France Central","Central US EUAP"],"apiVersions":["2018-06-30","2018-01-15","2017-05-15-preview","2015-10-31","2015-01-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"automationAccounts/configurations","locations":["Japan + East","East US 2","West Europe","South Africa North","West US","Central US","Switzerland + North","Southeast Asia","South Central US","North Central US","Australia Central","Australia + East","Korea Central","East US","West US 2","Brazil South","UK South","West + Central US","Central India","Australia Southeast","Canada Central","North + Europe","East Asia","France Central","Central US EUAP"],"apiVersions":["2018-06-30","2018-01-15","2017-05-15-preview","2015-10-31","2015-01-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"automationAccounts/webhooks","locations":["Japan + East","East US 2","West Europe","South Africa North","Switzerland North","Southeast + Asia","South Central US","North Central US","East Asia","Central US","West + US","Australia Central","Korea Central","East US","West US 2","Brazil South","UK + South","West Central US","North Europe","Canada Central","Australia Southeast","Central + India","Australia East","France Central","Central US EUAP"],"apiVersions":["2018-06-30","2018-01-15","2017-05-15-preview","2015-10-31","2015-01-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["South + Central US"],"apiVersions":["2018-06-30","2018-01-15","2017-05-15-preview","2015-10-31","2015-01-01-preview"],"capabilities":"None"},{"resourceType":"automationAccounts/softwareUpdateConfigurations","locations":["Japan + East","East US 2","West Europe","South Africa North","Switzerland North","Southeast + Asia","South Central US","North Central US","East Asia","Central US","West + US","Australia Central","Australia East","Korea Central","East US","West US + 2","Brazil South","UK South","West Central US","North Europe","Canada Central","Australia + Southeast","Central India","France Central","Central US EUAP"],"apiVersions":["2019-06-01","2018-06-30","2018-01-15","2017-05-15-preview"],"capabilities":"None"},{"resourceType":"automationAccounts/jobs","locations":["Japan + East","East US 2","West Europe","South Africa North","Switzerland North","Southeast + Asia","South Central US","North Central US","East Asia","Central US","West + US","Australia Central","Australia East","Korea Central","East US","West US + 2","Brazil South","UK South","West Central US","North Europe","Canada Central","Australia + Southeast","Central India","France Central","Central US EUAP"],"apiVersions":["2018-06-30","2018-01-15","2017-05-15-preview","2015-10-31","2015-01-01-preview"],"capabilities":"None"},{"resourceType":"automationAccounts/privateLinkResources","locations":["Japan + East","East US 2","West Europe","South Africa North","Switzerland North","Southeast + Asia","South Central US","North Central US","East Asia","Central US","West + US","Australia Central","Australia East","Korea Central","East US","West US + 2","Brazil South","UK South","West Central US","North Europe","Canada Central","Australia + Southeast","Central India","France Central","Central US EUAP"],"apiVersions":["2020-01-13-preview"],"capabilities":"None"},{"resourceType":"automationAccounts/privateEndpointConnections","locations":["Japan + East","East US 2","West Europe","South Africa North","Switzerland North","Southeast + Asia","South Central US","North Central US","East Asia","Central US","West + US","Australia Central","Australia East","Korea Central","East US","West US + 2","Brazil South","UK South","West Central US","North Europe","Canada Central","Australia + Southeast","Central India","France Central","Central US EUAP"],"apiVersions":["2020-01-13-preview"],"capabilities":"None"},{"resourceType":"automationAccounts/privateEndpointConnectionProxies","locations":["Japan + East","East US 2","West Europe","South Africa North","Switzerland North","Southeast + Asia","South Central US","North Central US","East Asia","Central US","West + US","Australia Central","Australia East","Korea Central","East US","West US + 2","Brazil South","UK South","West Central US","North Europe","Canada Central","Australia + Southeast","Central India","France Central","Central US EUAP"],"apiVersions":["2020-01-13-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DevSpaces","namespace":"Microsoft.DevSpaces","resourceTypes":[{"resourceType":"controllers","locations":["East + US","Canada East","West Europe","Canada Central","Central US","West US 2","West + Central US","Southeast Asia","East US 2","North Europe","Australia East","UK + South","South Central US","East Asia","Japan East","Australia SouthEast","East + US 2 EUAP"],"apiVersions":["2019-04-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"controllers/listConnectionDetails","locations":["East + US","Canada East","West Europe","Canada Central","Central US","West US 2","West + Central US","Southeast Asia","East US 2","North Europe","Australia East","UK + South","South Central US","East Asia","Japan East","Australia SouthEast","East + US 2 EUAP"],"apiVersions":["2019-04-01"],"capabilities":"None"},{"resourceType":"operations","locations":["East + US","Canada East","West Europe","Canada Central","Central US","West US 2","West + Central US","Southeast Asia","East US 2","North Europe","Australia East","UK + South","South Central US","East Asia","Japan East","Australia SouthEast","East + US 2 EUAP"],"apiVersions":["2020-05-01","2019-04-01"],"capabilities":"None"},{"resourceType":"locations","locations":["East + US","Canada East","West Europe","Canada Central","Central US","West US 2","West + Central US","Southeast Asia","East US 2","North Europe","Australia East","UK + South","South Central US","East Asia","Japan East","Australia SouthEast","East + US 2 EUAP"],"apiVersions":["2019-04-01"],"capabilities":"None"},{"resourceType":"locations/operationresults","locations":["East + US","Canada East","West Europe","Canada Central","Central US","West US 2","West + Central US","Southeast Asia","East US 2","North Europe","Australia East","UK + South","South Central US","East Asia","Japan East","Australia SouthEast","East + US 2 EUAP"],"apiVersions":["2019-04-01"],"capabilities":"None"},{"resourceType":"locations/checkContainerHostMapping","locations":["East + US","Canada East","West Europe","Canada Central","Central US","West US 2","West + Central US","Southeast Asia","East US 2","North Europe","Australia East","UK + South","South Central US","East Asia","Japan East","Australia SouthEast","East + US 2 EUAP"],"apiVersions":["2019-04-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Databricks","namespace":"Microsoft.Databricks","authorizations":[{"applicationId":"d9327919-6775-4843-9037-3fb0fb0473cb","roleDefinitionId":"f31567d0-b61f-43c2-97a5-a98cdc3bfcb6","managedByRoleDefinitionId":"8e3af657-a8ff-443c-a75c-2fe8c4bcb635"},{"applicationId":"2ff814a6-3304-4ab8-85cb-cd0e6f879c1d","roleDefinitionId":"f31567d0-b61f-43c2-97a5-a98cdc3bfcb6","managedByRoleDefinitionId":"8e3af657-a8ff-443c-a75c-2fe8c4bcb635"}],"resourceTypes":[{"resourceType":"workspaces","locations":["West + US","East US 2","West Europe","East US","North Europe","Southeast Asia","East + Asia","South Central US","North Central US","West US 2","Central US","UK West","UK + South","Australia East","Australia Southeast","Australia Central","Australia + Central 2","Japan East","Japan West","Canada Central","Canada East","Central + India","South India","West India","Korea Central","Korea South","South Africa + West","South Africa North","Brazil South","France Central","UAE North","Central + US EUAP","East US 2 EUAP","Switzerland North"],"apiVersions":["2018-04-01"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"workspaces/virtualNetworkPeerings","locations":["West + US","East US 2","West Europe","North Europe","East US","Southeast Asia","East + Asia","South Central US","North Central US","West US 2","Central US","UK West","UK + South","Australia East","Australia Southeast","Australia Central","Australia + Central 2","Japan East","Japan West","Canada Central","Canada East","Central + India","South India","West India","Korea Central","Korea South","South Africa + North","South Africa West","UAE North","Brazil South","France Central","Central + US EUAP","East US 2 EUAP","Switzerland North"],"apiVersions":["2018-04-01"],"capabilities":"None"},{"resourceType":"workspaces/dbWorkspaces","locations":["West + US","East US 2","West Europe","North Europe","East US","Southeast Asia","East + Asia","South Central US","North Central US","West US 2","Central US","UK West","UK + South","Australia East","Australia Southeast","Australia Central","Australia + Central 2","Japan East","Japan West","Canada Central","Canada East","Central + India","South India","West India","Korea Central","Korea South","South Africa + North","South Africa West","UAE North","Brazil South","France Central","East + US 2 EUAP","Central US EUAP","Switzerland North"],"apiVersions":["2018-04-01","2018-03-15","2018-03-01"],"capabilities":"None"},{"resourceType":"operations","locations":["West + US","East US 2","West Europe","North Europe","East US","Southeast Asia","East + Asia","South Central US","North Central US","Korea South","Korea Central","South + Africa North","South Africa West","Switzerland North","West US 2","Central + US","UK West","UK South","Australia East","Australia Southeast","Australia + Central","Australia Central 2","Japan East","Japan West","Canada Central","Canada + East","Central India","South India","West India","UAE North","Brazil South","France + Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-04-01"],"capabilities":"None"},{"resourceType":"locations","locations":["West + US","East US 2","West Europe","North Europe","East US","Southeast Asia","East + Asia","South Central US","North Central US","West US 2","Central US","UK West","UK + South","Australia East","Australia Southeast","Australia Central","Australia + Central 2","Japan East","Japan West","Canada Central","Canada East","Central + India","South India","West India","Korea Central","Korea South","South Africa + North","South Africa West","UAE North","Brazil South","France Central","Switzerland + North","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-04-01","2018-03-15","2018-03-01","2017-09-01-preview","2017-08-01-preview","2016-09-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationstatuses","locations":["West + US","East US 2","West Europe","East US","North Europe","Southeast Asia","East + Asia","South Central US","North Central US","West US 2","Central US","UK West","UK + South","Australia East","Australia Southeast","Australia Central","Australia + Central 2","Japan East","Japan West","Canada Central","Canada East","Central + India","South India","West India","Korea Central","Korea South","South Africa + West","South Africa North","Brazil South","France Central","UAE North","Central + US EUAP","East US 2 EUAP","Switzerland North"],"apiVersions":["2018-04-01"],"capabilities":"None"},{"resourceType":"locations/getNetworkPolicies","locations":["West + US","East US 2","West Europe","East US","North Europe","Southeast Asia","East + Asia","South Central US","North Central US","West US 2","Central US","UK West","UK + South","Australia East","Australia Southeast","Australia Central","Australia + Central 2","Japan East","Japan West","Canada Central","Canada East","Central + India","South India","West India","Korea Central","Korea South","South Africa + West","South Africa North","Brazil South","France Central","UAE North","East + US 2 EUAP","Central US EUAP","Switzerland North"],"apiVersions":["2018-04-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AnalysisServices","namespace":"Microsoft.AnalysisServices","authorization":{"applicationId":"4ac7d521-0382-477b-b0f8-7e1d95f85ca2","roleDefinitionId":"490d5987-bcf6-4be6-b6b2-056a78cb693a"},"resourceTypes":[{"resourceType":"servers","locations":["West + US","North Europe","South Central US","West Europe","West Central US","Southeast + Asia","East US 2","North Central US","Brazil South","Canada Central","Australia + Southeast","Japan East","UK South","West India","West US 2","Central US","East + US","Australia East","East US 2 EUAP"],"apiVersions":["2017-08-01-beta","2017-08-01","2017-07-14","2016-05-16"],"defaultApiVersion":"2017-08-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-08-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2017-08-01-beta","2017-08-01","2017-07-14","2016-05-16"],"defaultApiVersion":"2017-08-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-08-01"}],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["West + US","North Europe","South Central US","West Europe","West Central US","Southeast + Asia","East US 2","North Central US","Brazil South","Canada Central","Australia + Southeast","Japan East","UK South","West India","West US 2","Central US","East + US","Australia East","East US 2 EUAP"],"apiVersions":["2017-08-01-beta","2017-08-01","2017-07-14","2016-05-16"],"defaultApiVersion":"2017-08-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-08-01"}],"capabilities":"None"},{"resourceType":"locations/operationresults","locations":["West + US","North Europe","South Central US","West Europe","West Central US","Southeast + Asia","East US 2","North Central US","Brazil South","Canada Central","Australia + Southeast","Japan East","UK South","West India","West US 2","Central US","East + US","Australia East","East US 2 EUAP"],"apiVersions":["2017-08-01-beta","2017-08-01","2017-07-14","2016-05-16"],"defaultApiVersion":"2017-08-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-08-01"}],"capabilities":"None"},{"resourceType":"locations/operationstatuses","locations":["West + US","North Europe","South Central US","West Europe","West Central US","Southeast + Asia","East US 2","North Central US","Brazil South","Canada Central","Australia + Southeast","Japan East","UK South","West India","West US 2","Central US","East + US","Australia East","East US 2 EUAP"],"apiVersions":["2017-08-01-beta","2017-08-01","2017-07-14","2016-05-16"],"defaultApiVersion":"2017-08-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-08-01"}],"capabilities":"None"},{"resourceType":"operations","locations":["East + US 2","West Central US","West US 2"],"apiVersions":["2017-08-01-beta","2017-08-01","2017-07-14","2016-05-16"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-08-01"}],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.MachineLearningServices","namespace":"Microsoft.MachineLearningServices","authorizations":[{"applicationId":"0736f41a-0425-4b46-bdb5-1563eff02385","roleDefinitionId":"376aa7d7-51a9-463d-bd4d-7e1691345612","managedByRoleDefinitionId":"91d00862-cf55-46a5-9dce-260bbd92ce25"},{"applicationId":"607ece82-f922-494f-88b8-30effaf12214","roleDefinitionId":"d312a9a6-5102-420b-b8b3-aa6b22670aaa","managedByRoleDefinitionId":"91d00862-cf55-46a5-9dce-260bbd92ce25"},{"applicationId":"18a66f5f-dbdf-4c17-9dd7-1634712a9cbe","roleDefinitionId":"8b910db7-60f9-4c04-af30-71aab18eda90","managedByRoleDefinitionId":"91d00862-cf55-46a5-9dce-260bbd92ce25"}],"resourceTypes":[{"resourceType":"workspaces","locations":["Canada + Central","Central India","North Central US","UK South","West US","Central + US","East Asia","Japan East","East US","North Europe","Korea Central","Brazil + South","France Central","Australia East","East US 2","West US 2","West Central + US","Southeast Asia","West Europe","South Central US","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2020-09-01-preview","2020-08-01","2020-06-01","2020-05-15-preview","2020-05-01-preview","2020-04-01-preview","2020-04-01","2020-03-01","2020-02-18-preview","2020-02-02","2020-01-01","2019-11-01","2019-10-01","2019-06-01","2019-05-01","2018-11-19","2018-03-01-preview"],"defaultApiVersion":"2018-03-01-preview","capabilities":"SystemAssignedResourceIdentity, + SupportsTags, SupportsLocation"},{"resourceType":"workspaces/computes","locations":["North + Central US","Canada Central","Central India","UK South","West US","Central + US","East Asia","Japan East","East US","North Europe","Korea Central","Brazil + South","France Central","Australia East","East US 2","West US 2","West Central + US","Southeast Asia","West Europe","South Central US","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2020-09-01-preview","2020-08-01","2020-06-01","2020-05-15-preview","2020-05-01-preview","2020-04-01-preview","2020-04-01","2020-03-01","2020-02-18-preview","2020-02-02","2020-01-01","2019-11-01","2019-06-01","2019-05-01","2018-11-19","2018-03-01-preview"],"capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"workspaces/datastores","locations":["Canada + Central","Central India","North Central US","UK South","West US","Central + US","East Asia","Japan East","East US","North Europe","Korea Central","Brazil + South","France Central","Australia East","East US 2","West US 2","West Central + US","Southeast Asia","West Europe","South Central US","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2020-05-01-preview"],"capabilities":"None"},{"resourceType":"workspaces/eventGridFilters","locations":["North + Central US","Canada Central","Central India","UK South","West US","Central + US","East Asia","Japan East","East US","North Europe","Korea Central","Brazil + South","France Central","Australia East","East US 2","West US 2","West Central + US","Southeast Asia","West Europe","South Central US","East US 2 EUAP","West + India","Central US EUAP"],"apiVersions":["2020-09-01-preview","2020-08-01","2020-06-01","2020-05-15-preview","2020-05-01-preview","2020-04-01-preview","2020-04-01","2020-03-01","2020-02-18-preview","2020-02-02","2019-06-01","2019-05-01","2018-11-19","2018-03-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["East + US 2","East US 2 EUAP"],"apiVersions":["2020-09-01-preview","2020-08-01","2020-06-01","2020-05-15-preview","2020-05-01-preview","2020-04-01-preview","2020-04-01","2020-03-01","2020-02-18-preview","2020-02-02","2020-01-01","2019-11-01","2019-06-01","2019-05-01","2018-11-19","2018-03-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":["East + US 2","East US 2 EUAP"],"apiVersions":["2020-09-01-preview","2020-08-01","2020-06-01","2020-05-15-preview","2020-05-01-preview","2020-04-01-preview","2020-04-01","2020-03-01","2020-02-18-preview","2020-02-02","2020-01-01","2019-11-01","2019-06-01","2019-05-01","2018-11-19","2018-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/computeOperationsStatus","locations":["North + Central US","Canada Central","Central India","UK South","West US","Central + US","East Asia","Japan East","East US","Australia East","East US 2","West + US 2","West Central US","Southeast Asia","West Europe","South Central US","North + Europe","Korea Central","Brazil South","France Central","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2020-09-01-preview","2020-08-01","2020-06-01","2020-05-15-preview","2020-05-01-preview","2020-04-01-preview","2020-04-01","2020-03-01","2020-02-18-preview","2020-02-02","2020-01-01","2019-11-01","2019-06-01","2019-05-01","2018-11-19","2018-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/workspaceOperationsStatus","locations":["North + Central US","Canada Central","Central India","UK South","West US","Central + US","East Asia","Japan East","East US","North Europe","Korea Central","Brazil + South","France Central","Australia East","East US 2","West US 2","West Central + US","Southeast Asia","West Europe","South Central US","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2020-09-01-preview","2020-08-01","2020-06-01","2020-05-15-preview","2020-05-01-preview","2020-04-01-preview","2020-04-01","2020-03-01","2020-02-18-preview","2020-02-02","2020-01-01","2019-11-01","2019-06-01","2019-05-01","2018-11-19","2018-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/usages","locations":["North + Central US","Canada Central","Central India","UK South","West US","Central + US","East Asia","Japan East","East US","North Europe","Korea Central","Brazil + South","France Central","Australia East","East US 2","West US 2","West Central + US","Southeast Asia","West Europe","South Central US","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2020-09-01-preview","2020-08-01","2020-06-01","2020-05-15-preview","2020-05-01-preview","2020-04-01-preview","2020-04-01","2020-03-01","2020-02-18-preview","2020-02-02","2020-01-01","2019-11-01","2019-06-01","2019-05-01","2018-11-19"],"capabilities":"None"},{"resourceType":"locations/vmsizes","locations":["North + Central US","Canada Central","Central India","UK South","West US","Central + US","East Asia","Japan East","East US","North Europe","Korea Central","Brazil + South","France Central","Australia East","East US 2","West US 2","West Central + US","Southeast Asia","West Europe","South Central US","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2020-09-01-preview","2020-08-01","2020-06-01","2020-05-15-preview","2020-05-01-preview","2020-04-01-preview","2020-04-01","2020-03-01","2020-02-18-preview","2020-02-02","2020-01-01","2019-11-01","2019-06-01","2019-05-01","2018-11-19"],"capabilities":"None"},{"resourceType":"locations/quotas","locations":["North + Central US","Canada Central","Central India","UK South","West US","Central + US","East Asia","Japan East","East US","North Europe","Korea Central","Brazil + South","France Central","Australia East","East US 2","West US 2","West Central + US","Southeast Asia","West Europe","South Central US","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2020-09-01-preview","2020-08-01","2020-06-01","2020-05-15-preview","2020-05-01-preview","2020-04-01-preview","2020-04-01","2020-03-01","2020-02-18-preview","2020-02-02","2020-01-01","2019-11-01","2019-06-01"],"capabilities":"None"},{"resourceType":"locations/updatequotas","locations":["North + Central US","Canada Central","Central India","UK South","West US","Central + US","East Asia","Japan East","East US","North Europe","Korea Central","Brazil + South","France Central","Australia East","East US 2","West US 2","West Central + US","Southeast Asia","West Europe","South Central US","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2020-09-01-preview","2020-08-01","2020-06-01","2020-05-15-preview","2020-05-01-preview","2020-04-01-preview","2020-04-01","2020-03-01","2020-02-18-preview","2020-02-02","2020-01-01","2019-11-01","2019-06-01"],"capabilities":"None"},{"resourceType":"workspaces/linkedServices","locations":["North + Central US","Canada Central","Central India","UK South","West US","Central + US","East Asia","Japan East","East US","North Europe","Korea Central","Brazil + South","France Central","Australia East","East US 2","West US 2","West Central + US","Southeast Asia","West Europe","South Central US","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2020-09-01-preview","2020-05-15-preview","2020-05-01-preview","2020-04-01-preview"],"capabilities":"SystemAssignedResourceIdentity"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DataBox","namespace":"Microsoft.DataBox","authorizations":[{"applicationId":"5613cb5c-a7c9-4099-8034-511fd7616cb2","roleDefinitionId":"382D72D1-63DC-4243-9B99-CB69FDD473D8","managedByRoleDefinitionId":"f4c0a4f9-768c-4927-ab83-d319111d6ef4"}],"resourceTypes":[{"resourceType":"jobs","locations":["West + US","West Europe","Southeast Asia","East Asia","South India","Australia East","Canada + Central","Korea Central","Japan East","South Africa North","Brazil South","UK + South","West Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-04-01","2019-09-01","2018-01-01"],"capabilities":"SystemAssignedResourceIdentity, + SupportsTags, SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2020-04-01","2019-09-01","2018-01-01"],"capabilities":"None"},{"resourceType":"locations/validateAddress","locations":["West + US","West Europe","Southeast Asia","East Asia","South India","Australia East","Canada + Central","Korea Central","Japan East","South Africa North","Brazil South","UK + South","West Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-04-01","2019-09-01","2018-01-01"],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["West + US","West Europe","Southeast Asia","East Asia","South India","Australia East","Canada + Central","Korea Central","Japan East","South Africa North","Brazil South","UK + South","West Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-04-01","2019-09-01","2018-01-01"],"capabilities":"None"},{"resourceType":"locations/operationresults","locations":["West + US","West Europe","Southeast Asia","East Asia","South India","Australia East","Canada + Central","Korea Central","Japan East","South Africa North","Brazil South","UK + South","West Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-04-01","2019-09-01","2018-01-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-04-01","2019-09-01","2018-01-01"],"capabilities":"None"},{"resourceType":"locations/availableSkus","locations":["West + US","West Europe","Southeast Asia","East Asia","South India","Australia East","Canada + Central","Korea Central","Japan East","South Africa North","Brazil South","UK + South","West Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-04-01","2019-09-01","2018-01-01"],"capabilities":"None"},{"resourceType":"locations/validateInputs","locations":["West + US","West Europe","Southeast Asia","East Asia","South India","Australia East","Canada + Central","Korea Central","Japan East","South Africa North","Brazil South","UK + South","West Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-04-01","2019-09-01","2018-01-01"],"capabilities":"None"},{"resourceType":"locations/regionConfiguration","locations":["West + US","West Europe","Southeast Asia","East Asia","South India","Australia East","Canada + Central","Korea Central","Japan East","South Africa North","Brazil South","UK + South","West Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-04-01","2019-09-01","2018-01-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ImportExport","namespace":"Microsoft.ImportExport","authorization":{"applicationId":"7de4d5c5-5b32-4235-b8a9-33b34d6bcd2a","roleDefinitionId":"9f7aa6bb-9454-46b6-8c01-a4b0f33ca151"},"resourceTypes":[{"resourceType":"jobs","locations":["Australia + East","Australia Southeast","Brazil South","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","Japan East","Japan + West","Korea Central","North Central US","North Europe","South Africa North","South + Central US","Southeast Asia","South India","UK South","UK West","West Central + US","West Europe","West India","West US","West US 2"],"apiVersions":["2020-08-01","2016-11-01","2016-07-01-preview"],"defaultApiVersion":"2020-08-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-11-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"locations","locations":["Australia East","Australia + Southeast","Brazil South","Canada Central","Canada East","Central India","Central + US","East Asia","East US","East US 2","Japan East","Japan West","Korea Central","North + Central US","North Europe","South Africa North","South Central US","Southeast + Asia","South India","UK South","UK West","West Central US","West Europe","West + India","West US","West US 2"],"apiVersions":["2020-08-01","2016-11-01","2016-07-01-preview"],"defaultApiVersion":"2020-08-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-11-01"}],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["Australia + East","Australia Southeast","Brazil South","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","Japan East","Japan + West","Korea Central","North Central US","North Europe","South Africa North","South + Central US","Southeast Asia","South India","UK South","UK West","West Central + US","West Europe","West India","West US","West US 2"],"apiVersions":["2020-08-01","2016-11-01","2016-07-01-preview"],"defaultApiVersion":"2020-08-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-11-01"}],"capabilities":"None"},{"resourceType":"operations","locations":["Australia + East","Australia Southeast","Brazil South","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","Japan East","Japan + West","Korea Central","North Central US","North Europe","South Africa North","South + Central US","Southeast Asia","South India","UK South","UK West","West Central + US","West Europe","West India","West US","West US 2"],"apiVersions":["2020-08-01","2016-11-01","2016-07-01-preview"],"defaultApiVersion":"2020-08-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-11-01"}],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Migrate","namespace":"Microsoft.Migrate","authorizations":[{"applicationId":"e3bfd6ac-eace-4438-9dc1-eed439e738de","roleDefinitionId":"e88f4159-1d71-4b12-8ef0-38c039cb051e"},{"applicationId":"51df634f-ddb4-4901-8a2d-52f6393a796b","roleDefinitionId":"d7568dc2-2265-41f7-9c0f-1e9c7862ca62"}],"resourceTypes":[{"resourceType":"projects","locations":["West + Central US","East US","West Europe","North Europe","Southeast Asia","East + Asia","East US 2 EUAP"],"apiVersions":["2018-02-02","2017-11-11-preview","2017-09-25-privatepreview"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"migrateprojects","locations":["Central + US","East Asia","Southeast Asia","North Europe","West Europe","West US 2","Australia + Southeast","UK South","UK West","Canada Central","Central India","South India","Japan + East","Japan West","Brazil South","Korea South","Korea Central","France Central","Switzerland + North","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-05-01","2019-06-01","2018-09-01-preview"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"assessmentProjects","locations":["Central + US","West Europe","UK South","UK West","North Europe","West US 2","Southeast + Asia","East Asia","Central India","South India","Canada Central","Australia + Southeast","Japan West","Japan East","Brazil South","Korea Central","Korea + South","France Central","Switzerland North","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-05-01-preview","2019-10-01","2019-05-01","2018-06-30-preview"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"moveCollections","locations":["East US + 2","North Europe","East US 2 EUAP"],"apiVersions":["2019-10-01-preview"],"defaultApiVersion":"2019-10-01-preview","capabilities":"SystemAssignedResourceIdentity, + SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":["West + Central US"],"apiVersions":["2019-10-01","2019-05-01","2018-06-30-preview","2018-02-02","2017-11-11-preview","2017-09-25-privatepreview"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2018-02-02","2017-11-11-preview","2017-09-25-privatepreview"],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["West + Central US","East US","West Europe","North Europe","Southeast Asia","East + Asia","East US 2 EUAP"],"apiVersions":["2018-02-02","2017-11-11-preview","2017-09-25-privatepreview"],"capabilities":"None"},{"resourceType":"locations/assessmentOptions","locations":["West + Central US","East US","West Europe","North Europe","Southeast Asia","East + Asia","East US 2 EUAP"],"apiVersions":["2018-02-02","2017-11-11-preview","2017-09-25-privatepreview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.TimeSeriesInsights","namespace":"Microsoft.TimeSeriesInsights","authorizations":[{"applicationId":"120d688d-1518-4cf7-bd38-182f158850b6","roleDefinitionId":"5a43abdf-bb87-42c4-9e56-1c24bf364150"}],"resourceTypes":[{"resourceType":"environments","locations":["France + Central","South Central Us","East US 2","West US","East US","North Europe","West + Europe","West US 2","Central US","Southeast Asia","Australia East","Australia + Southeast","East Asia","UK West","UK South"],"apiVersions":["2020-05-15","2018-08-15-preview","2017-11-15","2017-02-28-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"environments/eventsources","locations":["France + Central","South Central Us","East US 2","West US","East US","North Europe","West + Europe","West US 2","Central US","Southeast Asia","Australia East","Australia + Southeast","East Asia","UK West","UK South"],"apiVersions":["2020-05-15","2018-08-15-preview","2017-11-15","2017-02-28-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"environments/referenceDataSets","locations":["France + Central","South Central Us","East US 2","West US","East US","North Europe","West + Europe","West US 2","Central US","Southeast Asia","Australia East","Australia + Southeast","East Asia","UK West","UK South"],"apiVersions":["2020-05-15","2018-08-15-preview","2017-11-15","2017-02-28-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"environments/accessPolicies","locations":["France + Central","South Central Us","East US 2","West US","East US","North Europe","West + Europe","West US 2","Central US","Southeast Asia","Australia East","Australia + Southeast","East Asia","UK West","UK South"],"apiVersions":["2020-05-15","2018-08-15-preview","2017-11-15","2017-02-28-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["France + Central","South Central Us","East US 2","West US","East US","East US 2 EUAP","North + Europe","West Europe","Southeast Asia","Australia East","Australia Southeast","East + Asia","UK West","UK South","West US 2","Central US","West Central US","North + Central US"],"apiVersions":["2020-05-15","2018-08-15-preview","2017-11-15","2017-02-28-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.CustomProviders","namespace":"Microsoft.CustomProviders","authorization":{"applicationId":"bf8eb16c-7ba7-4b47-86be-ac5e4b2007a5","roleDefinitionId":"FACF09C9-A5D0-4D34-8B1F-B623AC29C6F7"},"resourceTypes":[{"resourceType":"resourceProviders","locations":["Australia + East","Australia Southeast","East US","West US 2","West Europe","North Europe","Canada + Central","Canada East","East US 2 EUAP"],"apiVersions":["2018-09-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"associations","locations":["East US 2 + EUAP"],"apiVersions":["2018-09-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"operations","locations":[],"apiVersions":["2018-09-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2018-09-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationStatuses","locations":["Australia + East","Australia Southeast","East US","West US 2","West Europe","North Europe","Canada + Central","Canada East","East US 2 EUAP"],"apiVersions":["2018-09-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DataShare","namespace":"Microsoft.DataShare","authorization":{"applicationId":"799f1985-1517-4fe1-af2b-ba3d87d4996b","roleDefinitionId":"0146496b-e06f-439a-83be-49fac884edf5"},"resourceTypes":[{"resourceType":"accounts","locations":["East + US 2","North Europe","East US","UK South","Australia East","West Europe","Southeast + Asia","West US 2","South Central US","Canada Central","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2019-11-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"accounts/shares","locations":["East US + 2","North Europe","East US","UK South","Australia East","West Europe","Southeast + Asia","West US 2","South Central US","Canada Central","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2019-11-01"],"capabilities":"None"},{"resourceType":"accounts/shares/datasets","locations":["East + US 2","North Europe","East US","UK South","Australia East","West Europe","Southeast + Asia","West US 2","South Central US","Canada Central","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2019-11-01"],"capabilities":"None"},{"resourceType":"accounts/shares/synchronizationSettings","locations":["East + US 2","North Europe","East US","UK South","Australia East","West Europe","Southeast + Asia","West US 2","South Central US","Canada Central","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2019-11-01"],"capabilities":"None"},{"resourceType":"accounts/shares/invitations","locations":["East + US 2","North Europe","East US","UK South","Australia East","West Europe","Southeast + Asia","West US 2","South Central US","Canada Central","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2019-11-01"],"capabilities":"None"},{"resourceType":"accounts/sharesubscriptions","locations":["East + US 2","North Europe","East US","UK South","Australia East","West Europe","Southeast + Asia","West US 2","South Central US","Canada Central","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2019-11-01"],"capabilities":"None"},{"resourceType":"accounts/shares/providersharesubscriptions","locations":["East + US 2","North Europe","East US","UK South","Australia East","West Europe","Southeast + Asia","West US 2","South Central US","Canada Central","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2019-11-01"],"capabilities":"None"},{"resourceType":"accounts/sharesubscriptions/datasetmappings","locations":["East + US 2","North Europe","East US","UK South","Australia East","West Europe","Southeast + Asia","West US 2","South Central US","Canada Central","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2019-11-01"],"capabilities":"None"},{"resourceType":"accounts/sharesubscriptions/triggers","locations":["East + US 2","North Europe","East US","UK South","Australia East","West Europe","Southeast + Asia","West US 2","South Central US","Canada Central","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2019-11-01"],"capabilities":"None"},{"resourceType":"accounts/sharesubscriptions/consumerSourceDataSets","locations":["East + US 2","North Europe","East US","UK South","Australia East","West Europe","Southeast + Asia","West US 2","South Central US","Canada Central","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2019-11-01"],"capabilities":"None"},{"resourceType":"listinvitations","locations":["East + US 2","East US","Australia East","Southeast Asia","West US 2","North Europe","UK + South","Canada Central","West Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-11-01-alpha"],"capabilities":"None"},{"resourceType":"locations","locations":["East + US 2","Central US EUAP"],"apiVersions":["2019-11-01","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["East + US 2","North Europe","East US","UK South","Australia East","West Europe","Southeast + Asia","West Central US","West US 2","South Central US","Canada Central","Central + India","East Asia","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-11-01"],"capabilities":"None"},{"resourceType":"locations/rejectInvitation","locations":["East + US 2","East US","Australia East","West US 2","North Europe","UK South","West + Europe","Southeast Asia","West Central US","South Central US","Canada Central","Central + India","East Asia","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-11-01-alpha"],"capabilities":"None"},{"resourceType":"locations/consumerInvitations","locations":["East + US 2","East US","Australia East","West US 2","North Europe","UK South","West + Europe","Southeast Asia","West Central US","South Central US","Canada Central","Central + India","East Asia","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-11-01-alpha"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2019-11-01","2018-11-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DevOps","namespace":"Microsoft.DevOps","authorization":{"applicationId":"499b84ac-1321-427f-aa17-267ca6975798","roleDefinitionId":"6a18f445-86f0-4e2e-b8a9-6b9b5677e3d8"},"resourceTypes":[{"resourceType":"pipelines","locations":["East + Asia","Southeast Asia","Australia East","Brazil South","Canada Central","Japan + East","Japan West","North Europe","West Europe","West India","Central India","South + India","Central US","East US","East US 2","North Central US","South Central + US","West Central US","UK South","West US","West US 2"],"apiVersions":["2020-07-13-preview","2019-07-01-preview"],"defaultApiVersion":"2019-07-01-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AppPlatform","namespace":"Microsoft.AppPlatform","authorizations":[{"applicationId":"03b39d0f-4213-4864-a245-b1476ec03169"},{"applicationId":"b61cc489-e138-4a69-8bf3-c2c5855c8784","roleDefinitionId":"462ddd96-910a-44f5-adfa-644d99942778"},{"applicationId":"e8de9221-a19c-4c81-b814-fd37c6caf9d2"}],"resourceTypes":[{"resourceType":"Spring","locations":["West + Europe","East US","West US 2","Southeast Asia","Central US","Australia East","UK + South","North Europe","South Central US","East US 2"],"apiVersions":["2020-07-01","2019-05-01-preview"],"defaultApiVersion":"2019-05-01-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"Spring/apps","locations":["West + Europe","East US","West US 2","Southeast Asia","Central US","Australia East","UK + South","North Europe","South Central US","East US 2"],"apiVersions":["2020-07-01","2019-05-01-preview"],"defaultApiVersion":"2019-05-01-preview","capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"Spring/apps/deployments","locations":["West + Europe","East US","West US 2","Southeast Asia","Central US","Australia East","UK + South","North Europe","South Central US","East US 2"],"apiVersions":["2020-07-01","2019-05-01-preview"],"defaultApiVersion":"2019-05-01-preview","capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["West + Europe","East US","West US 2","Southeast Asia","Central US","Australia East","UK + South","North Europe","South Central US","East US 2"],"apiVersions":["2020-07-01","2019-05-01-preview"],"defaultApiVersion":"2019-05-01-preview","capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-07-01","2019-05-01-preview"],"defaultApiVersion":"2019-05-01-preview","capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-07-01","2019-05-01-preview"],"defaultApiVersion":"2019-05-01-preview","capabilities":"None"},{"resourceType":"locations/operationResults","locations":["West + Europe","East US","West US 2","Southeast Asia","Central US","Australia East","UK + South","North Europe","South Central US","East US 2"],"apiVersions":["2020-07-01","2019-05-01-preview"],"defaultApiVersion":"2019-05-01-preview","capabilities":"None"},{"resourceType":"locations/operationStatus","locations":["West + Europe","East US","West US 2","Southeast Asia","Central US","Australia East","UK + South","North Europe","South Central US","East US 2"],"apiVersions":["2020-07-01","2019-05-01-preview"],"defaultApiVersion":"2019-05-01-preview","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.RedHatOpenShift","namespace":"Microsoft.RedHatOpenShift","authorizations":[{"applicationId":"f1dd0a37-89c6-4e07-bcd1-ffd3d43d8875","roleDefinitionId":"640c5ac9-6f32-4891-94f4-d20f7aa9a7e6","managedByRoleDefinitionId":"9e3af657-a8ff-583c-a75c-2fe7c4bcb635","managedByAuthorization":{"allowManagedByInheritance":true}}],"resourceTypes":[{"resourceType":"locations","locations":[],"apiVersions":["2020-04-30","2019-12-31-preview"],"capabilities":"None"},{"resourceType":"locations/operationresults","locations":["Australia + East","Australia Southeast","Brazil South","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","France Central","Germany + West Central","Japan East","Japan West","Korea Central","North Central US","North + Europe","Norway East","South Africa North","South Central US","Southeast Asia","Switzerland + North","Switzerland West","UAE North","UK South","UK West","West Europe","West + US 2","West US"],"apiVersions":["2020-04-30"],"capabilities":"None"},{"resourceType":"locations/operationsstatus","locations":["Australia + East","Australia Southeast","Brazil South","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","France Central","Germany + West Central","Japan East","Japan West","Korea Central","North Central US","North + Europe","Norway East","South Africa North","South Central US","Southeast Asia","Switzerland + North","Switzerland West","UAE North","UK South","UK West","West Europe","West + US 2","West US"],"apiVersions":["2020-04-30"],"capabilities":"None"},{"resourceType":"OpenShiftClusters","locations":["Australia + East","Australia Southeast","Brazil South","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","France Central","Germany + West Central","Japan East","Japan West","Korea Central","North Central US","North + Europe","Norway East","South Africa North","South Central US","Southeast Asia","Switzerland + North","Switzerland West","UAE North","UK South","UK West","West Europe","West + US 2","West US"],"apiVersions":["2020-04-30"],"defaultApiVersion":"2020-04-30","capabilities":"SystemAssignedResourceIdentity, + SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2020-04-30","2019-12-31-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Kubernetes","namespace":"Microsoft.Kubernetes","authorizations":[{"applicationId":"64b12d6e-6549-484c-8cc6-6281839ba394","roleDefinitionId":"1d1d44cf-68a1-4def-a2b6-cd7efc3515af"},{"applicationId":"359431ad-ece5-496b-8768-be4bbfd82f36","roleDefinitionId":"1b5c71b7-9814-4b40-b62a-23018af874d8"}],"resourceTypes":[{"resourceType":"connectedClusters","locations":["East + US","West Europe","East US 2 EUAP"],"apiVersions":["2020-01-01-preview","2019-11-01-preview","2019-09-01-privatepreview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2020-01-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationStatuses","locations":["East + US 2 EUAP","West Europe","East US"],"apiVersions":["2020-01-01-preview"],"capabilities":"None"},{"resourceType":"registeredSubscriptions","locations":[],"apiVersions":["2020-01-01-preview"],"capabilities":"None"},{"resourceType":"Operations","locations":[],"apiVersions":["2020-01-01-preview","2019-11-01-preview","2019-09-01-privatepreview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.SecurityInsights","namespace":"Microsoft.SecurityInsights","authorizations":[{"applicationId":"98785600-1bb7-4fb9-b9fa-19afe2c8a360","roleDefinitionId":"ef1c46aa-ae81-4091-ab83-f75f28efb7b8"}],"resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2020-01-01","2019-01-01-preview"],"capabilities":"None"},{"resourceType":"alertRules","locations":["West + Europe","North Europe","France Central","UK South","UK West","France South","Switzerland + North","Switzerland West"],"apiVersions":["2020-01-01","2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"alertRuleTemplates","locations":["West + Europe","North Europe","France Central","UK South","UK West","France South","Switzerland + North","Switzerland West"],"apiVersions":["2020-01-01","2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"cases","locations":["West + Europe","North Europe","France Central","UK South","UK West","France South","Switzerland + North","Switzerland West"],"apiVersions":["2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"bookmarks","locations":["West + Europe","North Europe","France Central","UK South","UK West","France South","Switzerland + North","Switzerland West"],"apiVersions":["2020-01-01","2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"dataConnectors","locations":["West + Europe","North Europe","France Central","UK South","UK West","France South","Switzerland + North","Switzerland West"],"apiVersions":["2020-01-01","2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"dataConnectorsCheckRequirements","locations":["West + Europe","North Europe","France Central","UK South","UK West","France South","Switzerland + North","Switzerland West"],"apiVersions":["2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"entities","locations":["West + Europe","North Europe","France Central","UK South","UK West","France South","Switzerland + North","Switzerland West"],"apiVersions":["2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"incidents","locations":["West + Europe","North Europe","France Central","UK South","UK West","France South","Switzerland + North","Switzerland West"],"apiVersions":["2020-01-01","2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"officeConsents","locations":["West + Europe","North Europe","France Central","UK South","UK West","France South","Switzerland + North","Switzerland West"],"apiVersions":["2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"settings","locations":["West + Europe","North Europe","France Central","UK South","UK West","France South","Switzerland + North","Switzerland West"],"apiVersions":["2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"aggregations","locations":["West + Europe","North Europe","France Central","UK South","UK West","France South","Switzerland + North","Switzerland West"],"apiVersions":["2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"entityQueries","locations":["West + Europe","North Europe","France Central","UK South","UK West","France South","Switzerland + North","Switzerland West"],"apiVersions":["2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"threatIntelligence","locations":["West + Europe","North Europe","France Central","UK South","UK West","France South","Switzerland + North","Switzerland West"],"apiVersions":["2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"automationRules","locations":["West + Europe","North Europe","France Central","UK South","UK West","France South","Switzerland + North","Switzerland West"],"apiVersions":["2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"watchlists","locations":["West + Europe","North Europe","France Central","UK South","UK West","France South","Switzerland + North","Switzerland West"],"apiVersions":["2019-01-01-preview"],"capabilities":"SupportsExtension"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.CostManagement","namespace":"Microsoft.CostManagement","authorizations":[{"applicationId":"3184af01-7a88-49e0-8b55-8ecdce0aa950"}],"resourceTypes":[{"resourceType":"Connectors","locations":["West + US"],"apiVersions":["2018-08-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"CloudConnectors","locations":[],"apiVersions":["2019-03-01-preview"],"capabilities":"None"},{"resourceType":"ExternalBillingAccounts","locations":[],"apiVersions":["2019-03-01-preview"],"capabilities":"None"},{"resourceType":"ExternalBillingAccounts/Dimensions","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01-preview","2019-04-01-preview","2019-03-01-preview"],"capabilities":"None"},{"resourceType":"ExternalBillingAccounts/Query","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01-preview","2019-04-01-preview","2019-03-01-preview"],"capabilities":"None"},{"resourceType":"ExternalSubscriptions/Dimensions","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01-preview","2019-04-01-preview","2019-03-01-preview"],"capabilities":"None"},{"resourceType":"ExternalSubscriptions/Query","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01-preview","2019-04-01-preview","2019-03-01-preview"],"capabilities":"None"},{"resourceType":"ExternalSubscriptions","locations":[],"apiVersions":["2019-03-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"Forecast","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01-preview","2019-04-01-preview","2019-03-01-preview","2018-12-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"ExternalSubscriptions/Forecast","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01-preview","2019-04-01-preview","2019-03-01-preview","2018-12-01-preview"],"capabilities":"None"},{"resourceType":"ExternalBillingAccounts/Forecast","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01-preview","2019-04-01-preview","2019-03-01-preview","2018-12-01-preview"],"capabilities":"None"},{"resourceType":"Settings","locations":[],"apiVersions":["2019-01-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2019-10-01","2019-01-01","2018-10-01","2018-08-31","2018-08-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"register","locations":[],"apiVersions":["2019-03-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"Query","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01-preview","2019-04-01-preview","2019-03-01-preview","2019-01-01","2018-12-01-preview","2018-10-01-preview","2018-08-31","2018-08-01-preview","2018-05-31"],"capabilities":"SupportsExtension"},{"resourceType":"Dimensions","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01-preview","2019-04-01-preview","2019-03-01-preview","2019-01-01","2018-12-01-preview","2018-10-01-preview","2018-08-31","2018-08-01-preview","2018-05-31"],"capabilities":"SupportsExtension"},{"resourceType":"Budgets","locations":[],"apiVersions":["2019-10-01","2019-04-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"ExternalSubscriptions/Alerts","locations":[],"apiVersions":["2019-10-01","2018-08-01-preview"],"capabilities":"None"},{"resourceType":"ExternalBillingAccounts/Alerts","locations":[],"apiVersions":["2019-10-01","2018-08-01-preview"],"capabilities":"None"},{"resourceType":"Alerts","locations":[],"apiVersions":["2019-10-01","2018-08-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"showbackRules","locations":[],"apiVersions":["2019-03-01-preview","2019-02-03-alpha","2019-02-02-alpha","2019-02-01-alpha"],"capabilities":"SupportsExtension"},{"resourceType":"Exports","locations":[],"apiVersions":["2020-06-01","2020-05-01-preview","2019-11-01","2019-10-01","2019-09-01","2019-01-01-preview","2019-01-01"],"capabilities":"SupportsExtension"},{"resourceType":"Reports","locations":[],"apiVersions":["2018-12-01-preview","2018-08-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"Reportconfigs","locations":[],"apiVersions":["2018-05-31"],"capabilities":"SupportsExtension"},{"resourceType":"BillingAccounts","locations":[],"apiVersions":["2018-03-31"],"capabilities":"None"},{"resourceType":"Departments","locations":[],"apiVersions":["2018-03-31"],"capabilities":"None"},{"resourceType":"EnrollmentAccounts","locations":[],"apiVersions":["2018-03-31"],"capabilities":"None"},{"resourceType":"Views","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-04-01-preview"],"capabilities":"SupportsExtension"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.CostManagementExports","namespace":"Microsoft.CostManagementExports","authorizations":[{"applicationId":"e5408ad0-c4e2-43aa-b6f2-3b4951286d99","roleDefinitionId":"5e4888b3-2747-4e5b-9897-ec0865b91bcf"}],"resourceTypes":[{"resourceType":"Operations","locations":[],"apiVersions":["2019-04-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DesktopVirtualization","namespace":"Microsoft.DesktopVirtualization","authorizations":[{"applicationId":"50e95039-b200-4007-bc97-8d5790743a63","roleDefinitionId":"CAD30215-AD1C-43BF-BE90-7BFA8B493E62"},{"applicationId":"9cdead84-a844-4324-93f2-b2e6bb768d07"},{"applicationId":"a85cf173-4192-42f8-81fa-777a763e6e2c"}],"resourceTypes":[{"resourceType":"workspaces","locations":["East + US","East US 2","West US","West US 2","North Central US","South Central US","West + Central US","Central US"],"apiVersions":["2019-12-10-preview","2019-09-24-preview","2019-01-23-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"applicationgroups","locations":["East + US","East US 2","West US","West US 2","North Central US","South Central US","West + Central US","Central US"],"apiVersions":["2019-12-10-preview","2019-09-24-preview","2019-01-23-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"applicationgroups/applications","locations":["East + US","East US 2","West US","West US 2","North Central US","South Central US","West + Central US","Central US"],"apiVersions":["2019-12-10-preview","2019-09-24-preview","2019-01-23-preview"],"capabilities":"None"},{"resourceType":"applicationgroups/desktops","locations":["East + US","East US 2","West US","West US 2","North Central US","South Central US","West + Central US","Central US"],"apiVersions":["2019-12-10-preview","2019-09-24-preview","2019-01-23-preview"],"capabilities":"None"},{"resourceType":"applicationgroups/startmenuitems","locations":["East + US","East US 2","West US","West US 2","North Central US","South Central US","West + Central US","Central US"],"apiVersions":["2019-12-10-preview","2019-09-24-preview","2019-01-23-preview"],"capabilities":"None"},{"resourceType":"hostpools","locations":["East + US","East US 2","West US","West US 2","North Central US","South Central US","West + Central US","Central US"],"apiVersions":["2019-12-10-preview","2019-09-24-preview","2019-01-23-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"hostpools/msixpackages","locations":["East + US","East US 2","West US","West US 2","North Central US","South Central US","West + Central US","Central US"],"apiVersions":["2019-12-10-preview","2019-09-24-preview","2019-01-23-preview"],"capabilities":"None"},{"resourceType":"hostpools/sessionhosts","locations":["East + US","East US 2","West US","West US 2","North Central US","South Central US","West + Central US","Central US"],"apiVersions":["2019-12-10-preview","2019-09-24-preview","2019-01-23-preview"],"capabilities":"None"},{"resourceType":"hostpools/sessionhosts/usersessions","locations":["East + US","East US 2","West US","West US 2","North Central US","South Central US","West + Central US","Central US"],"apiVersions":["2019-12-10-preview","2019-09-24-preview","2019-01-23-preview"],"capabilities":"None"},{"resourceType":"hostpools/usersessions","locations":["East + US","East US 2","West US","West US 2","North Central US","South Central US","West + Central US","Central US"],"apiVersions":["2019-12-10-preview","2019-09-24-preview","2019-01-23-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2019-12-10-preview","2019-09-24-preview","2019-01-23-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AzureStackHCI","namespace":"Microsoft.AzureStackHCI","authorizations":[{"applicationId":"1412d89f-b8a8-4111-b4fd-e82905cbd85d","roleDefinitionId":"90ffa33f-4875-44d8-b86f-d41c3aa6050e"},{"applicationId":"1322e676-dee7-41ee-a874-ac923822781c","roleDefinitionId":"e91a9804-9f4d-4501-bf85-03bd4ea78451"}],"resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2020-10-01","2020-03-01-preview"],"capabilities":"None"},{"resourceType":"clusters","locations":["East + US","East US 2 EUAP","West Europe"],"apiVersions":["2020-10-01","2020-03-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.GuestConfiguration","namespace":"Microsoft.GuestConfiguration","authorizations":[{"applicationId":"e935b4a5-8968-416d-8414-caed51c782a9","roleDefinitionId":"9c6ffa40-421e-4dc0-9739-76b0699a11de"}],"resourceTypes":[{"resourceType":"guestConfigurationAssignments","locations":[],"apiVersions":["2020-06-25","2018-11-20","2018-06-30-preview","2018-01-20-preview"],"capabilities":"SupportsExtension"},{"resourceType":"software","locations":["East + US 2","South Central US"],"apiVersions":["2018-06-30-preview"],"capabilities":"SupportsExtension"},{"resourceType":"softwareUpdates","locations":["East + US 2","South Central US"],"apiVersions":["2018-06-30-preview"],"capabilities":"SupportsExtension"},{"resourceType":"softwareUpdateProfile","locations":["East + US 2","South Central US"],"apiVersions":["2018-06-30-preview"],"capabilities":"SupportsExtension"},{"resourceType":"operations","locations":[],"apiVersions":["2020-06-25","2018-11-20","2018-06-30-preview","2018-01-20-preview"],"capabilities":"None"},{"resourceType":"configurationProfileAssignments","locations":["Central + US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-30-preview"],"capabilities":"SupportsExtension"},{"resourceType":"autoManagedVmConfigurationProfiles","locations":["Central + US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-30-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"autoManagedAccounts","locations":["Central + US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-30-preview"],"defaultApiVersion":"2018-06-30-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.FootprintMonitoring","namespace":"Microsoft.FootprintMonitoring","authorizations":[],"resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2020-02-01-preview"],"capabilities":"None"},{"resourceType":"profiles","locations":["West + US 2"],"apiVersions":["2020-02-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"profiles/measurementEndpoints","locations":["West + US 2"],"apiVersions":["2020-02-01-preview"],"capabilities":"None"},{"resourceType":"profiles/experiments","locations":["West + US 2"],"apiVersions":["2020-02-01-preview"],"capabilities":"None"},{"resourceType":"profiles/measurementEndpoints/conditions","locations":["West + US 2"],"apiVersions":["2020-02-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.MachineLearning","namespace":"Microsoft.MachineLearning","authorization":{"applicationId":"0736f41a-0425-4b46-bdb5-1563eff02385","roleDefinitionId":"1cc297bc-1829-4524-941f-966373421033"},"resourceTypes":[{"resourceType":"Workspaces","locations":["South + Central US","West Europe","Southeast Asia","Japan East","West Central US","Central + US EUAP"],"apiVersions":["2016-04-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"webServices","locations":["South Central + US","West Europe","Southeast Asia","Japan East","East US 2","West Central + US","Central US EUAP"],"apiVersions":["2017-01-01","2016-05-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":["South + Central US"],"apiVersions":["2017-01-01","2016-05-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":["South + Central US"],"apiVersions":["2017-01-01","2016-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/operations","locations":["South + Central US","West Europe","Southeast Asia","Japan East","East US 2","West + Central US","Central US EUAP"],"apiVersions":["2017-01-01","2016-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationsStatus","locations":["South + Central US","West Europe","Southeast Asia","Japan East","East US 2","West + Central US","Central US EUAP"],"apiVersions":["2017-01-01","2016-05-01-preview"],"capabilities":"None"},{"resourceType":"commitmentPlans","locations":["South + Central US","West Europe","Southeast Asia","Japan East","East US 2","West + Central US","Central US EUAP"],"apiVersions":["2017-01-01","2016-05-01-preview"],"capabilities":"SupportsTags, + SupportsLocation"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Synapse","namespace":"Microsoft.Synapse","authorizations":[{"applicationId":"9e09aefc-b2e5-4d19-9f74-3e3e8b11a57b","roleDefinitionId":"a53b114a-452b-4d20-bcd6-c51c3c8c5878","managedByRoleDefinitionId":"ede175bc-31e5-4074-ba98-e62b895797aa"},{"applicationId":"1ac05c7e-12d2-4605-bf9d-549d7041c6b3","roleDefinitionId":"48e77487-c9fa-4abe-8484-71ebdebdbbc2"},{"applicationId":"ec52d13d-2e85-410e-a89a-8c79fb6a32ac","roleDefinitionId":"c3a447c3-a63a-4905-a125-c6856f9d0e17"},{"applicationId":"5ebe1e69-13dd-4953-84fa-a74ed591db2e","roleDefinitionId":"e8ebe3e8-569b-4ad3-bea1-5b274fe0c49f"},{"applicationId":"2e458d69-0892-4655-b713-4f7b182315dd","roleDefinitionId":"45EA3B16-D4DD-48CA-BF0D-BBE644C0C0AF"}],"resourceTypes":[{"resourceType":"workspaces","locations":["West + US 2","East US","North Europe","West Europe","Southeast Asia","Australia East","West + Central US","South Central US","East US 2","UK South","West US","Australia + Southeast","East Asia","Brazil South","Central US","Central India","East US + 2 EUAP"],"apiVersions":["2019-06-01-preview"],"capabilities":"SystemAssignedResourceIdentity, + SupportsTags, SupportsLocation"},{"resourceType":"workspaces/bigDataPools","locations":["West + US 2","East US","North Europe","West Europe","Southeast Asia","Australia East","West + Central US","South Central US","East US 2","UK South","West US","Australia + Southeast","East Asia","Brazil South","Central US","Central India","East US + 2 EUAP"],"apiVersions":["2019-06-01-preview"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"workspaces/sqlPools","locations":["West + US 2","East US","North Europe","West Europe","Southeast Asia","Australia East","West + Central US","South Central US","East US 2","UK South","West US","Australia + Southeast","East Asia","Brazil South","Central US","Central India","East US + 2 EUAP"],"apiVersions":["2019-06-01-preview"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"workspaces/operationStatuses","locations":["West + US 2","East US","North Europe","West Europe","Southeast Asia","Australia East","West + Central US","South Central US","East US 2","UK South","West US","Australia + Southeast","East Asia","Brazil South","Central US","Central India","East US + 2 EUAP"],"apiVersions":["2019-06-01-preview"],"capabilities":"None"},{"resourceType":"workspaces/operationResults","locations":["West + US 2","East US","North Europe","West Europe","Southeast Asia","Australia East","West + Central US","South Central US","East US 2","UK South","West US","Australia + Southeast","East Asia","Brazil South","Central US","Central India","East US + 2 EUAP"],"apiVersions":["2019-06-01-preview"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2019-06-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["West + US 2","East US","North Europe","West Europe","Southeast Asia","Australia East","West + Central US","South Central US","East US 2","UK South","West US","Australia + Southeast","East Asia","Brazil South","Central US","Central India","EAST US + 2 EUAP"],"apiVersions":["2019-06-01-preview"],"capabilities":"None"},{"resourceType":"privateLinkHubs","locations":["West + US 2","East US","North Europe","West Europe","Southeast Asia","Australia East","West + Central US","South Central US","East US 2","UK South","West US","Australia + Southeast","East Asia","Brazil South","Central US","Central India","East US + 2 EUAP"],"apiVersions":["2019-06-01-preview"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2019-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["West + US 2","East US","North Europe","West Europe","Southeast Asia","Australia East","West + Central US","South Central US","East US 2","UK South","West US","Australia + Southeast","East Asia","Brazil South","Central US","Central India","East US + 2 EUAP"],"apiVersions":["2019-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationStatuses","locations":["West + US 2","East US","North Europe","West Europe","Southeast Asia","Australia East","West + Central US","South Central US","East US 2","UK South","West US","Australia + Southeast","East Asia","Brazil South","Central US","Central India","East US + 2 EUAP"],"apiVersions":["2019-06-01-preview"],"capabilities":"None"},{"resourceType":"workspaces/sqlDatabases","locations":["East + US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"locations/sqlDatabaseAzureAsyncOperation","locations":["East + US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"capabilities":"None"},{"resourceType":"locations/sqlDatabaseOperationResults","locations":["East + US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"capabilities":"None"},{"resourceType":"locations/sqlPoolAzureAsyncOperation","locations":["East + US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"capabilities":"None"},{"resourceType":"locations/sqlPoolOperationResults","locations":["East + US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Swiftlet","namespace":"Microsoft.Swiftlet","resourceTypes":[{"resourceType":"virtualMachines","locations":["East + US","East US 2","West US 2","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-03-01-preview"],"defaultApiVersion":"2020-03-01-preview","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"virtualMachineSnapshots","locations":["East + US","East US 2","West US 2","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-03-01-preview"],"defaultApiVersion":"2020-03-01-preview","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"locations/virtualMachineBundles","locations":["East + US","East US 2","West US 2","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/virtualMachineImages","locations":["East + US","East US 2","West US 2","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-03-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/operations","locations":["East + US","East US 2","West US 2","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-03-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ServiceFabricMesh","namespace":"Microsoft.ServiceFabricMesh","authorizations":[{"applicationId":"d10de03d-5ba3-497a-90e6-7ff8c9736059","roleDefinitionId":"BC13595A-E262-4621-929E-56FF90E6BF18"}],"resourceTypes":[{"resourceType":"applications","locations":["East + US","East US 2","West US","West US 2","South Central US","Central US","France + Central","West Europe","North Europe","UK South","UK West","Australia East","East + Asia","Southeast Asia","Korea Central","West India","Brazil South","Japan + East","Norway East","South Africa North","Switzerland North","Central India","UAE + North","Germany West Central","North Central US"],"apiVersions":["2018-09-01-preview","2018-07-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"networks","locations":["East US","East + US 2","West US","West US 2","South Central US","Central US","France Central","West + Europe","North Europe","UK South","UK West","Australia East","East Asia","Southeast + Asia","Korea Central","West India","Brazil South","Japan East","Norway East","South + Africa North","Switzerland North","Central India","UAE North","Germany West + Central","North Central US"],"apiVersions":["2018-09-01-preview","2018-07-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"volumes","locations":["East + US","East US 2","West US","West US 2","South Central US","Central US","France + Central","West Europe","North Europe","UK South","UK West","Australia East","East + Asia","Southeast Asia","Korea Central","West India","Brazil South","Japan + East","Norway East","South Africa North","Switzerland North","Central India","UAE + North","Germany West Central","North Central US"],"apiVersions":["2018-09-01-preview","2018-07-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"secrets","locations":["East + US","East US 2","West US","West US 2","South Central US","Central US","France + Central","West Europe","North Europe","UK South","UK West","Australia East","East + Asia","Southeast Asia","Korea Central","West India","Brazil South","Japan + East","Norway East","South Africa North","Switzerland North","Central India","UAE + North","Germany West Central","North Central US"],"apiVersions":["2018-09-01-preview","2018-07-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"gateways","locations":["East + US","East US 2","West US","West US 2","South Central US","Central US","France + Central","West Europe","North Europe","UK South","UK West","Australia East","East + Asia","Southeast Asia","Korea Central","West India","Brazil South","Japan + East","Norway East","South Africa North","Switzerland North","Central India","UAE + North","Germany West Central","North Central US"],"apiVersions":["2018-09-01-preview","2018-07-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2018-09-01-preview","2018-07-01-preview"],"capabilities":"None"},{"resourceType":"locations/applicationOperations","locations":["East + US","East US 2","West US","West US 2","South Central US","Central US","France + Central","West Europe","North Europe","UK South","UK West","Australia East","East + Asia","Southeast Asia","Korea Central","West India","Brazil South","Japan + East","Norway East","South Africa North","Switzerland North","Central India","UAE + North","Germany West Central","North Central US"],"apiVersions":["2018-09-01-preview","2018-07-01-preview"],"capabilities":"None"},{"resourceType":"locations/networkOperations","locations":["East + US","East US 2","West US","West US 2","South Central US","Central US","France + Central","West Europe","North Europe","UK South","UK West","Australia East","East + Asia","Southeast Asia","Korea Central","West India","Brazil South","Japan + East","Norway East","South Africa North","Switzerland North","Central India","UAE + North","Germany West Central","North Central US"],"apiVersions":["2018-09-01-preview","2018-07-01-preview"],"capabilities":"None"},{"resourceType":"locations/volumeOperations","locations":["East + US","East US 2","West US","West US 2","South Central US","Central US","France + Central","West Europe","North Europe","UK South","UK West","Australia East","East + Asia","Southeast Asia","Korea Central","West India","Brazil South","Japan + East","Norway East","South Africa North","Switzerland North","Central India","UAE + North","Germany West Central","North Central US"],"apiVersions":["2018-09-01-preview","2018-07-01-preview"],"capabilities":"None"},{"resourceType":"locations/gatewayOperations","locations":["East + US","East US 2","West US","West US 2","South Central US","Central US","France + Central","West Europe","North Europe","UK South","UK West","Australia East","East + Asia","Southeast Asia","Korea Central","West India","Brazil South","Japan + East","Norway East","South Africa North","Switzerland North","Central India","UAE + North","Germany West Central","North Central US"],"apiVersions":["2018-09-01-preview","2018-07-01-preview"],"capabilities":"None"},{"resourceType":"locations/secretOperations","locations":["East + US","East US 2","West US","West US 2","South Central US","Central US","France + Central","West Europe","North Europe","UK South","UK West","Australia East","East + Asia","Southeast Asia","Korea Central","West India","Brazil South","Japan + East","Norway East","South Africa North","Switzerland North","Central India","UAE + North","Germany West Central","North Central US"],"apiVersions":["2018-09-01-preview","2018-07-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2018-09-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Codespaces","namespace":"Microsoft.Codespaces","authorizations":[{"applicationId":"9bd5ab7f-4031-4045-ace9-6bebbad202f6","roleDefinitionId":"59cd8abb-1e79-437f-9a05-4bca235c4c35"},{"applicationId":"48ef7923-268f-473d-bcf1-07f0997961f4","roleDefinitionId":"59cd8abb-1e79-437f-9a05-4bca235c4c35"}],"resourceTypes":[{"resourceType":"plans","locations":["West + Europe","East US","West Us 2","Southeast Asia"],"apiVersions":["2020-07-10-beta","2020-07-10-alpha","2020-06-16-beta","2020-06-16-alpha","2020-06-16"],"capabilities":"SystemAssignedResourceIdentity, + SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2020-07-10-privatepreview","2020-07-10-beta","2020-07-10-alpha","2020-06-16-privatepreview","2020-06-16-beta","2020-06-16-alpha","2020-06-16"],"capabilities":"None"},{"resourceType":"registeredSubscriptions","locations":[],"apiVersions":["2020-07-10-privatepreview","2020-07-10-beta","2020-07-10-alpha","2020-06-16-privatepreview","2020-06-16-beta","2020-06-16-alpha","2020-06-16"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DeploymentManager","namespace":"Microsoft.DeploymentManager","authorizations":[{"applicationId":"5b306cba-9c71-49db-96c3-d17ca2379c4d"}],"resourceTypes":[{"resourceType":"artifactSources","locations":["Central + US","East US","East US 2","West US","West US 2","West Central US","North Central + US","South Central US","North Europe","West Europe","East Asia","Southeast + Asia","Japan East","Japan West","Australia East","Australia Southeast","Australia + Central","Australia Central 2","Brazil South","South India","Central India","West + India","Canada Central","Canada East","UK South","UK West","Korea Central","Korea + South","France Central","France South","South Africa North","South Africa + West","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-11-01-preview","2018-09-01-preview"],"defaultApiVersion":"2018-09-01-preview","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-09-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"serviceTopologies","locations":["Central + US","East US","East US 2","West US","West US 2","West Central US","North Central + US","South Central US","North Europe","West Europe","East Asia","Southeast + Asia","Japan East","Japan West","Australia East","Australia Southeast","Australia + Central","Australia Central 2","Brazil South","South India","Central India","West + India","Canada Central","Canada East","UK South","UK West","Korea Central","Korea + South","France Central","France South","South Africa North","South Africa + West","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-11-01-preview","2018-09-01-preview"],"defaultApiVersion":"2018-09-01-preview","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-09-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"serviceTopologies/services","locations":["Central + US","East US","East US 2","West US","West US 2","West Central US","North Central + US","South Central US","North Europe","West Europe","East Asia","Southeast + Asia","Japan East","Japan West","Australia East","Australia Southeast","Australia + Central","Australia Central 2","Brazil South","South India","Central India","West + India","Canada Central","Canada East","UK South","UK West","Korea Central","Korea + South","France Central","France South","South Africa North","South Africa + West","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-11-01-preview","2018-09-01-preview"],"defaultApiVersion":"2018-09-01-preview","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-09-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"serviceTopologies/services/serviceUnits","locations":["Central + US","East US","East US 2","West US","West US 2","West Central US","North Central + US","South Central US","North Europe","West Europe","East Asia","Southeast + Asia","Japan East","Japan West","Australia East","Australia Southeast","Australia + Central","Australia Central 2","Brazil South","South India","Central India","West + India","Canada Central","Canada East","UK South","UK West","Korea Central","Korea + South","France Central","France South","South Africa North","South Africa + West","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-11-01-preview","2018-09-01-preview"],"defaultApiVersion":"2018-09-01-preview","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-09-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"steps","locations":["Central + US","East US","East US 2","West US","West US 2","West Central US","North Central + US","South Central US","North Europe","West Europe","East Asia","Southeast + Asia","Japan East","Japan West","Australia East","Australia Southeast","Australia + Central","Australia Central 2","Brazil South","South India","Central India","West + India","Canada Central","Canada East","UK South","UK West","Korea Central","Korea + South","France Central","France South","South Africa North","South Africa + West","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-11-01-preview","2018-09-01-preview"],"defaultApiVersion":"2018-09-01-preview","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-09-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"rollouts","locations":["Central + US","East US","East US 2","West US","West US 2","West Central US","North Central + US","South Central US","North Europe","West Europe","East Asia","Southeast + Asia","Japan East","Japan West","Australia East","Australia Southeast","Australia + Central","Australia Central 2","Brazil South","South India","Central India","West + India","Canada Central","Canada East","UK South","UK West","Korea Central","Korea + South","France Central","France South","South Africa North","South Africa + West","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-11-01-preview","2018-09-01-preview"],"defaultApiVersion":"2018-09-01-preview","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-09-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"operationResults","locations":["global"],"apiVersions":["2019-11-01-preview","2018-09-01-preview"],"defaultApiVersion":"2018-09-01-preview","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-09-01-preview"}],"capabilities":"None"},{"resourceType":"operations","locations":["global"],"apiVersions":["2019-11-01-preview","2018-09-01-preview"],"defaultApiVersion":"2018-09-01-preview","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-09-01-preview"}],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ManagedServices","namespace":"Microsoft.ManagedServices","authorization":{"applicationId":"66c6d0d1-f2e7-4a18-97a9-ed10f3347016","roleDefinitionId":"1e86f807-6ec0-40b3-8b5f-686b7e43a0a2"},"resourceTypes":[{"resourceType":"registrationDefinitions","locations":[],"apiVersions":["2020-02-01-preview","2019-09-01","2019-06-01","2019-04-01-preview","2018-06-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"registrationAssignments","locations":[],"apiVersions":["2020-02-01-preview","2019-09-01","2019-06-01","2019-04-01-preview","2018-06-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"marketplaceRegistrationDefinitions","locations":[],"apiVersions":["2020-02-01-preview","2019-09-01","2019-06-01","2019-04-01-preview","2018-06-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AppConfiguration","namespace":"Microsoft.AppConfiguration","authorizations":[{"applicationId":"35ffadb3-7fc1-497e-b61b-381d28e744cc","roleDefinitionId":"fffa409e-a8cc-4cbf-8e1c-6d940b33040e"}],"resourceTypes":[{"resourceType":"configurationStores","locations":["West + Central US","Central US","West US","East US","West Europe","Southeast Asia","Australia + East","Australia Southeast","North Europe","UK South","South Central US","East + US 2","West US 2","Brazil South","Canada Central","Central India","East Asia","France + Central","Japan East","Korea Central","North Central US","East US 2 EUAP"],"apiVersions":["2020-07-01-preview","2020-06-01","2019-11-01-preview","2019-10-01","2019-02-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"configurationStores/keyValues","locations":["West + Central US","Central US","West US","East US","West Europe","Southeast Asia","Australia + East","Australia Southeast","North Europe","UK South","South Central US","East + US 2","West US 2","Brazil South","Canada Central","Central India","East Asia","France + Central","Japan East","Korea Central","North Central US","East US 2 EUAP"],"apiVersions":["2020-07-01-preview"],"capabilities":"None"},{"resourceType":"configurationStores/eventGridFilters","locations":["West + Central US","Central US","West US","East US","West Europe","Southeast Asia","Australia + East","Australia Southeast","North Europe","UK South","South Central US","East + US 2","West US 2","Brazil South","Canada Central","Central India","East Asia","France + Central","Japan East","Korea Central","North Central US","East US 2 EUAP"],"apiVersions":["2020-07-01-preview","2020-06-01","2019-11-01-preview","2019-10-01","2019-02-01-preview"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["West + Central US","Central US","West US","East US","West Europe","Southeast Asia","Australia + East","Australia Southeast","North Europe","UK South","South Central US","East + US 2","West US 2","Brazil South","Canada Central","Central India","East Asia","France + Central","Japan East","Korea Central","North Central US","East US 2 EUAP"],"apiVersions":["2020-07-01-preview","2020-06-01","2019-11-01-preview","2019-10-01","2019-02-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":["West + Central US","Central US","West US","East US","West Europe","Southeast Asia","Australia + East","Australia Southeast","North Europe","UK South","South Central US","East + US 2","West US 2","Brazil South","Canada Central","Central India","East Asia","France + Central","Japan East","Korea Central","North Central US","East US 2 EUAP"],"apiVersions":["2020-07-01-preview","2020-06-01","2019-11-01-preview","2019-10-01","2019-02-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationsStatus","locations":["West + Central US","Central US","West US","East US","West Europe","Southeast Asia","Australia + East","Australia Southeast","North Europe","UK South","South Central US","East + US 2","West US 2","Brazil South","Canada Central","Central India","East Asia","France + Central","Japan East","Korea Central","North Central US","East US 2 EUAP"],"apiVersions":["2020-07-01-preview","2020-06-01","2019-11-01-preview","2019-10-01","2019-02-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["West + Central US","Central US","West US","East US","West Europe","Southeast Asia","Australia + East","Australia Southeast","North Europe","UK South","South Central US","East + US 2","West US 2","Brazil South","Canada Central","Central India","East Asia","France + Central","Japan East","Korea Central","North Central US","East US 2 EUAP"],"apiVersions":["2020-07-01-preview","2020-06-01","2019-11-01-preview","2019-10-01","2019-02-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.VMwareCloudSimple","namespace":"Microsoft.VMwareCloudSimple","authorizations":[{"applicationId":"d96199e7-4674-4bbf-a1c6-ddf93682f5ee","roleDefinitionId":"533012ca-a3e7-44e4-93b4-3143f8b9409d","allowedThirdPartyExtensions":[{"name":"CloudSimpleExtension"}]}],"resourceTypes":[{"resourceType":"virtualMachines","locations":["South + Central US","Switzerland North","Switzerland West","West Europe","East US","West + US"],"apiVersions":["2019-04-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"dedicatedCloudNodes","locations":["South + Central US","Switzerland North","Switzerland West","West Europe","East US","West + US"],"apiVersions":["2019-04-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"dedicatedCloudServices","locations":["South + Central US","Switzerland North","Switzerland West","West Europe","East US","West + US"],"apiVersions":["2019-04-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2019-04-01"],"capabilities":"None"},{"resourceType":"locations/usages","locations":["South + Central US","Switzerland North","Switzerland West","West Europe","East US","West + US"],"apiVersions":["2019-04-01"],"capabilities":"None"},{"resourceType":"locations/availabilities","locations":["South + Central US","Switzerland North","Switzerland West","West Europe","East US","West + US"],"apiVersions":["2019-04-01"],"capabilities":"None"},{"resourceType":"locations/privateClouds","locations":["South + Central US","Switzerland North","Switzerland West","West Europe","East US","West + US"],"apiVersions":["2019-04-01"],"capabilities":"None"},{"resourceType":"locations/privateClouds/virtualNetworks","locations":["South + Central US","Switzerland North","Switzerland West","West Europe","East US","West + US"],"apiVersions":["2019-04-01"],"capabilities":"None"},{"resourceType":"locations/privateClouds/virtualMachineTemplates","locations":["South + Central US","Switzerland North","Switzerland West","West Europe","East US","West + US"],"apiVersions":["2019-04-01"],"capabilities":"None"},{"resourceType":"locations/privateClouds/resourcePools","locations":["South + Central US","Switzerland North","Switzerland West","West Europe","East US","West + US"],"apiVersions":["2019-04-01"],"capabilities":"None"},{"resourceType":"locations/operationresults","locations":["South + Central US","Switzerland North","Switzerland West","West Europe","East US","West + US"],"apiVersions":["2019-04-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2019-04-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Blockchain","namespace":"Microsoft.Blockchain","authorizations":[{"applicationId":"78827f38-7b69-4d5e-a627-d6fdd9c759a0","roleDefinitionId":"9c68eaf3-8315-4e5c-b857-641b16b21f8f"},{"applicationId":"049d4938-2ef2-4274-aa8f-630fc9bc33d1","roleDefinitionId":"c6dd0893-0495-488a-ac21-ee5f1ba89769"},{"applicationId":"911e905a-a50e-4c94-9f7c-48bb12f549ed"}],"resourceTypes":[{"resourceType":"watchers","locations":["East + US","West Europe","East US 2 EUAP"],"apiVersions":["2019-06-01-preview"],"defaultApiVersion":"2019-06-01-preview","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"blockchainMembers","locations":["East + US","Southeast Asia","West Europe","North Europe","West US 2","Japan East","East + US 2 EUAP"],"apiVersions":["2018-06-01-preview"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"locations/watcherOperationResults","locations":["East + US","West Europe","East US 2 EUAP"],"apiVersions":["2019-06-01-preview"],"defaultApiVersion":"2019-06-01-preview","capabilities":"None"},{"resourceType":"locations","locations":["East + US","Southeast Asia","West Europe","North Europe","West US 2","Japan East","West + Central US","East US 2 EUAP"],"apiVersions":["2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/blockchainMemberOperationResults","locations":["East + US","Southeast Asia","West Europe","North Europe","West US 2","Japan East","East + US 2 EUAP"],"apiVersions":["2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["East + US","Southeast Asia","West Europe","North Europe","West US 2","Japan East","East + US 2 EUAP"],"apiVersions":["2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/listConsortiums","locations":["East + US","Southeast Asia","West Europe","North Europe","West US 2","Japan East","East + US 2 EUAP"],"apiVersions":["2018-06-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["East + US","Southeast Asia","West Europe","North Europe","West US 2","Japan East","West + Central US","East US 2 EUAP"],"apiVersions":["2018-06-01-preview"],"capabilities":"None"},{"resourceType":"cordaMembers","locations":["East + US 2 EUAP"],"apiVersions":["2018-06-01-preview"],"defaultApiVersion":"2018-06-01-preview","capabilities":"SupportsTags, + SupportsLocation"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.HealthcareApis","namespace":"Microsoft.HealthcareApis","authorizations":[{"applicationId":"4f6778d8-5aef-43dc-a1ff-b073724b9495"},{"applicationId":"3274406e-4e0a-4852-ba4f-d7226630abb7","roleDefinitionId":"e39edba5-cde8-4529-ba1f-159138220220"},{"applicationId":"894b1496-c6e0-4001-b69c-81b327564ca4","roleDefinitionId":"c69c1f48-8535-41e7-9667-539790b1c663"}],"resourceTypes":[{"resourceType":"services","locations":["UK + West","North Central US","West US 2","Australia East","Southeast Asia","UK + South","East US","West Europe","South Central US","East US 2","North Europe","West + Central US","Japan East","Germany West Central"],"apiVersions":["2020-03-30","2020-03-15","2019-09-16","2018-08-20-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"services/privateEndpointConnectionProxies","locations":["UK + West","North Central US","West US 2","Australia East","Southeast Asia","UK + South","East US","West Europe","South Central US","East US 2","North Europe","West + Central US","Japan East","Germany West Central"],"apiVersions":["2020-03-30"],"capabilities":"None"},{"resourceType":"services/privateEndpointConnections","locations":["UK + West","North Central US","West US 2","Australia East","Southeast Asia","UK + South","East US","West Europe","South Central US","East US 2","North Europe","West + Central US","Japan East","Germany West Central"],"apiVersions":["2020-03-30"],"capabilities":"None"},{"resourceType":"services/privateLinkResources","locations":["UK + West","North Central US","West US 2","Australia East","Southeast Asia","UK + South","East US","West Europe","South Central US","East US 2","North Europe","West + Central US","Japan East","Germany West Central"],"apiVersions":["2020-03-30"],"capabilities":"None"},{"resourceType":"services/iomtconnectors","locations":["West + US 2","UK South","East US 2","UK West","North Central US","Australia East","Southeast + Asia","East US","West Europe","South Central US","North Europe","West Central + US","Japan East","Germany West Central"],"apiVersions":["2020-05-01-preview"],"capabilities":"None"},{"resourceType":"services/iomtconnectors/connections","locations":["West + US 2","UK South","East US 2","UK West","North Central US","Australia East","Southeast + Asia","East US","West Europe","South Central US","North Europe","West Central + US","Japan East","Germany West Central"],"apiVersions":["2020-05-01-preview"],"capabilities":"None"},{"resourceType":"services/iomtconnectors/mappings","locations":["West + US 2","UK South","East US 2","UK West","North Central US","Australia East","Southeast + Asia","East US","West Europe","South Central US","North Europe","West Central + US","Japan East","Germany West Central"],"apiVersions":["2020-05-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":["UK + West","North Central US","West US 2","Australia East","Southeast Asia","UK + South","East US","West Europe","South Central US","East US 2","North Europe","West + Central US","Japan East","Germany West Central"],"apiVersions":["2020-03-30","2020-03-15","2019-09-16","2018-08-20-preview"],"capabilities":"None"},{"resourceType":"locations/operationresults","locations":["UK + West","North Central US","West US 2","Australia East","Southeast Asia","UK + South","East US","West Europe","South Central US","East US 2","North Europe","West + Central US","Japan East","Germany West Central"],"apiVersions":["2020-05-01-preview","2020-03-30","2020-03-15","2019-09-16","2018-08-20-preview"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["UK + West","North Central US","West US 2","Australia East","Southeast Asia","UK + South","East US","West Europe","South Central US","East US 2","North Europe","West + Central US","Japan East","Germany West Central"],"apiVersions":["2020-03-30","2020-03-15","2019-09-16","2018-08-20-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["UK + West","North Central US","West US 2","Australia East","Southeast Asia","UK + South","East US","West Europe","South Central US","East US 2","North Europe","West + Central US","Japan East","Germany West Central"],"apiVersions":["2020-03-30","2020-03-15","2019-09-16","2018-08-20-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.NetApp","namespace":"Microsoft.NetApp","authorizations":[{"applicationId":"12fb057d-b751-47cd-857c-f2934bb677b4","roleDefinitionId":"e4796bef-6b6d-4cbc-ba1e-27f1a308d860"}],"resourceTypes":[{"resourceType":"operations","locations":["Australia + East","Australia Southeast","Canada Central","Canada East","Central India","Central + US","East US","East US 2","Germany North","Germany West Central","Japan East","Japan + West","North Europe","South Central US","South India","Southeast Asia","UAE + Central","UK South","UK West","West Central US","West Europe","West US","West + US 2","West US (Stage)","West US 2 (Stage)","South Central US (Stage)","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2020-07-01","2020-06-01","2020-05-01","2020-03-01","2020-02-01","2019-11-01","2019-10-01","2019-08-01","2019-07-01","2019-06-01","2019-05-01","2017-08-15"],"capabilities":"None"},{"resourceType":"netAppAccounts","locations":["Australia + East","Australia Southeast","Canada Central","Canada East","Central India","Central + US","Central US EUAP","East US","East US 2","Germany North","Germany West + Central","Japan East","Japan West","North Europe","South Central US","South + India","Southeast Asia","UAE Central","UK South","UK West","West Europe","West + US","West US 2"],"apiVersions":["2020-07-01","2020-06-01","2020-05-01","2020-03-01","2020-02-01","2019-11-01","2019-10-01","2019-08-01","2019-07-01","2019-06-01","2019-05-01","2017-08-15"],"capabilities":"SystemAssignedResourceIdentity, + SupportsTags, SupportsLocation"},{"resourceType":"netAppAccounts/capacityPools","locations":["Australia + East","Australia Southeast","Canada Central","Canada East","Central India","Central + US","Central US EUAP","East US","East US 2","Germany North","Germany West + Central","Japan East","Japan West","North Europe","South Central US","South + India","Southeast Asia","UAE Central","UK South","UK West","West Europe","West + US","West US 2"],"apiVersions":["2020-07-01","2020-06-01","2020-05-01","2020-03-01","2020-02-01","2019-11-01","2019-10-01","2019-08-01","2019-07-01","2019-06-01","2019-05-01","2017-08-15"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"netAppAccounts/capacityPools/volumes","locations":["Australia + East","Australia Southeast","Canada Central","Canada East","Central India","Central + US","Central US EUAP","East US","East US 2","Germany North","Germany West + Central","Japan East","Japan West","North Europe","South Central US","South + India","Southeast Asia","UAE Central","UK South","UK West","West Europe","West + US","West US 2"],"apiVersions":["2020-07-01","2020-06-01","2020-05-01","2020-03-01","2020-02-01","2019-11-01","2019-10-01","2019-08-01","2019-07-01","2019-06-01","2019-05-01","2017-08-15"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"netAppAccounts/capacityPools/volumes/mountTargets","locations":["Australia + East","Australia Southeast","Canada Central","Canada East","Central India","Central + US","Central US EUAP","East US","East US 2","Germany North","Germany West + Central","Japan East","Japan West","North Europe","South Central US","South + India","Southeast Asia","UAE Central","UK South","UK West","West Europe","West + US","West US 2"],"apiVersions":["2019-10-01","2019-08-01","2019-07-01","2019-06-01","2019-05-01","2017-08-15"],"capabilities":"None"},{"resourceType":"netAppAccounts/capacityPools/volumes/snapshots","locations":["Australia + East","Australia Southeast","Canada Central","Canada East","Central India","Central + US","Central US EUAP","East US","East US 2","Germany North","Germany West + Central","Japan East","Japan West","North Europe","South Central US","South + India","Southeast Asia","UAE Central","UK South","UK West","West Europe","West + US","West US 2"],"apiVersions":["2020-07-01","2020-06-01","2020-05-01","2020-03-01","2020-02-01","2019-11-01","2019-10-01","2019-08-01","2019-07-01","2019-06-01","2019-05-01","2017-08-15"],"capabilities":"None"},{"resourceType":"locations","locations":["Australia + East","Australia Southeast","Canada Central","Canada East","Central India","Central + US","East US","East US 2","Germany North","Germany West Central","Japan East","Japan + West","North Europe","South Central US","South India","Southeast Asia","UAE + Central","UK South","UK West","West US","West US 2","West Europe","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2020-07-01","2020-06-01","2020-05-01","2020-03-01","2020-02-01","2019-11-01","2019-10-01","2019-08-01","2019-07-01","2019-06-01","2019-05-01","2017-08-15"],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["Australia + East","Australia Southeast","Canada Central","Canada East","Central India","Central + US","Central US EUAP","East US","East US 2","Germany North","Germany West + Central","Japan East","Japan West","North Europe","South Central US","South + India","Southeast Asia","UAE Central","UK South","UK West","West Europe","West + US","West US 2"],"apiVersions":["2020-07-01","2020-06-01","2020-05-01","2020-03-01","2020-02-01","2019-11-01","2019-10-01","2019-08-01","2019-07-01","2019-06-01","2019-05-01","2017-08-15"],"capabilities":"None"},{"resourceType":"locations/checkFilePathAvailability","locations":["Australia + East","Australia Southeast","Canada Central","Canada East","Central India","Central + US","Central US EUAP","East US","East US 2","Germany North","Germany West + Central","Japan East","Japan West","North Europe","South Central US","South + India","Southeast Asia","UAE Central","UK South","UK West","West Europe","West + US","West US 2"],"apiVersions":["2020-07-01","2020-06-01","2020-05-01","2020-03-01","2020-02-01","2019-11-01","2019-10-01","2019-08-01","2019-07-01","2019-06-01","2019-05-01","2017-08-15"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["Australia + East","Australia Southeast","Canada Central","Canada East","Central India","Central + US","Central US EUAP","East US","East US 2","Germany North","Germany West + Central","Japan East","Japan West","North Europe","South Central US","South + India","Southeast Asia","UAE Central","UK South","UK West","West Europe","West + US","West US 2"],"apiVersions":["2020-07-01","2020-06-01","2020-05-01","2020-03-01","2020-02-01","2019-11-01","2019-10-01","2019-08-01","2019-07-01","2019-06-01","2019-05-01","2017-08-15"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.SaaS","namespace":"Microsoft.SaaS","authorizations":[{"applicationId":"f738ef14-47dc-4564-b53b-45069484ccc7","roleDefinitionId":"b131dd2d-387a-4cae-bb9b-3d021f80d1e6"},{"applicationId":"20e940b3-4c77-4b0b-9a53-9e16a1b010a7"}],"resourceTypes":[{"resourceType":"applications","locations":["global"],"apiVersions":["2018-03-01-beta"],"capabilities":"CrossResourceGroupResourceMove, + SupportsTags, SupportsLocation"},{"resourceType":"checknameavailability","locations":["global"],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"checkModernEligibility","locations":["global"],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"saasresources","locations":["global"],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"operationResults","locations":["global"],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"operations","locations":["global"],"apiVersions":["2018-03-01-beta"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Peering","namespace":"Microsoft.Peering","resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2020-04-01","2020-01-01-preview","2019-09-01-preview","2019-08-01-preview"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"peerings","locations":["Japan + East","Japan West","Korea Central","East Asia","Australia Central","Australia + East","Australia Southeast","Brazil South","Southeast Asia","West India","South + India","East US","East US 2","North Central US","South Central US","Canada + Central","West US","West US 2","West Central US","Canada East","West Europe","UK + South","UK West","North Europe","France Central","France South","South Africa + North","South Africa West"],"apiVersions":["2020-04-01","2020-01-01-preview","2019-09-01-preview","2019-08-01-preview"],"defaultApiVersion":"2020-04-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"peeringLocations","locations":[],"apiVersions":["2020-04-01","2020-01-01-preview","2019-09-01-preview","2019-08-01-preview"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"legacyPeerings","locations":[],"apiVersions":["2020-04-01","2020-01-01-preview","2019-09-01-preview","2019-08-01-preview"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"peerAsns","locations":[],"apiVersions":["2020-04-01","2020-01-01-preview","2019-09-01-preview","2019-08-01-preview"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"peeringServices","locations":["Japan + East","Japan West","Korea Central","East Asia","Australia Central","Australia + East","Australia Southeast","Brazil South","Southeast Asia","West India","South + India","East US","East US 2","North Central US","South Central US","Canada + Central","West US","West US 2","West Central US","Canada East","West Europe","UK + South","UK West","North Europe","France Central","France South","South Africa + North","South Africa West"],"apiVersions":["2020-04-01","2020-01-01-preview","2019-09-01-preview","2019-08-01-preview"],"defaultApiVersion":"2020-04-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"peeringServiceLocations","locations":[],"apiVersions":["2020-04-01","2020-01-01-preview","2019-09-01-preview","2019-08-01-preview"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"peeringServiceProviders","locations":[],"apiVersions":["2020-04-01","2020-01-01-preview","2019-09-01-preview","2019-08-01-preview"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"checkServiceProviderAvailability","locations":[],"apiVersions":["2020-04-01","2020-01-01-preview","2019-09-01-preview","2019-08-01-preview"],"defaultApiVersion":"2020-04-01","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Kusto","namespace":"Microsoft.Kusto","authorizations":[{"applicationId":"2746ea77-4702-4b45-80ca-3c97e680e8b7","roleDefinitionId":"dd9d4347-f397-45f2-b538-85f21c90037c"}],"resourceTypes":[{"resourceType":"clusters","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Brazil Southeast","Canada + Central","Canada East","Central India","Central US","East Asia","East US","East + US 2","France Central","France South","Germany West Central","Japan East","Japan + West","Korea Central","Korea South","North Central US","North Europe","Norway + East","South Africa North","South Africa West","South Central US","South India","Southeast + Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West + Europe","West India","West US","West US 2"],"apiVersions":["2020-09-18","2020-06-14","2020-02-15","2019-11-09","2019-09-07","2019-05-15","2019-01-21","2018-09-07-preview","2017-09-07-privatepreview"],"defaultApiVersion":"2019-05-15","zoneMappings":[{"location":"East + US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West + Europe","zones":["2","3","1"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast + Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North + Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK + South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia + East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South + Central US","zones":[]},{"location":"Canada Central","zones":[]},{"location":"Germany + West Central","zones":[]},{"location":"Brazil South","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"clusters/databases","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Brazil Southeast","Canada + Central","Canada East","Central India","Central US","East Asia","East US","East + US 2","France Central","France South","Germany West Central","Japan East","Japan + West","Korea Central","Korea South","North Central US","North Europe","Norway + East","South Africa North","South Africa West","South Central US","South India","Southeast + Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West + Europe","West India","West US","West US 2"],"apiVersions":["2020-09-18","2020-06-14","2020-02-15","2019-11-09","2019-09-07","2019-05-15","2019-01-21","2018-09-07-preview","2017-09-07-privatepreview"],"defaultApiVersion":"2019-05-15","capabilities":"None"},{"resourceType":"clusters/attacheddatabaseconfigurations","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Brazil Southeast","Canada + Central","Canada East","Central India","Central US","East Asia","East US","East + US 2","France Central","France South","Germany West Central","Japan East","Japan + West","Korea Central","Korea South","North Central US","North Europe","Norway + East","South Africa North","South Africa West","South Central US","South India","Southeast + Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West + Europe","West India","West US","West US 2"],"apiVersions":["2020-09-18","2020-06-14","2020-02-15","2019-11-09","2019-09-07","2019-05-15","2019-01-21","2018-09-07-preview","2017-09-07-privatepreview"],"defaultApiVersion":"2019-05-15","capabilities":"None"},{"resourceType":"clusters/principalassignments","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Brazil Southeast","Canada + Central","Canada East","Central India","Central US","East Asia","East US","East + US 2","France Central","France South","Germany West Central","Japan East","Japan + West","Korea Central","Korea South","North Central US","North Europe","Norway + East","South Africa North","South Africa West","South Central US","South India","Southeast + Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West + Europe","West India","West US","West US 2"],"apiVersions":["2020-09-18","2020-06-14","2020-02-15","2019-11-09"],"defaultApiVersion":"2019-11-09","capabilities":"None"},{"resourceType":"clusters/databases/eventhubconnections","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Brazil Southeast","Canada + Central","Canada East","Central India","Central US","East Asia","East US","East + US 2","France Central","France South","Germany West Central","Japan East","Japan + West","Korea Central","Korea South","North Central US","North Europe","Norway + East","South Africa North","South Africa West","South Central US","South India","Southeast + Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West + Europe","West India","West US","West US 2"],"apiVersions":["2020-09-18","2020-06-14","2020-02-15","2019-11-09","2019-09-07","2019-05-15","2019-01-21","2018-09-07-preview","2017-09-07-privatepreview"],"defaultApiVersion":"2019-05-15","capabilities":"None"},{"resourceType":"clusters/databases/dataconnections","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Brazil Southeast","Canada + Central","Canada East","Central India","Central US","East Asia","East US","East + US 2","France Central","France South","Germany West Central","Japan East","Japan + West","Korea Central","Korea South","North Central US","North Europe","Norway + East","South Africa North","South Africa West","South Central US","South India","Southeast + Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West + Europe","West India","West US","West US 2"],"apiVersions":["2020-09-18","2020-06-14","2020-02-15","2019-11-09","2019-09-07","2019-05-15","2019-01-21","2018-09-07-preview","2017-09-07-privatepreview"],"defaultApiVersion":"2019-05-15","capabilities":"None"},{"resourceType":"clusters/databases/principalassignments","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Brazil Southeast","Canada + Central","Canada East","Central India","Central US","East Asia","East US","East + US 2","France Central","France South","Germany West Central","Japan East","Japan + West","Korea Central","Korea South","North Central US","North Europe","Norway + East","South Africa North","South Africa West","South Central US","South India","Southeast + Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West + Europe","West India","West US","West US 2"],"apiVersions":["2020-09-18","2020-06-14","2020-02-15","2019-11-09"],"defaultApiVersion":"2019-11-09","capabilities":"None"},{"resourceType":"locations/operationResults","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Brazil Southeast","Canada + Central","Canada East","Central India","Central US","East Asia","East US","East + US 2","France Central","France South","Germany West Central","Japan East","Japan + West","Korea Central","Korea South","North Central US","North Europe","Norway + East","South Africa North","South Africa West","South Central US","South India","Southeast + Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West + Europe","West India","West US","West US 2"],"apiVersions":["2020-09-18","2020-06-14","2020-02-15","2019-11-09","2019-09-07","2019-05-15","2019-01-21","2018-09-07-preview","2017-09-07-privatepreview"],"defaultApiVersion":"2019-05-15","capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-09-18","2020-06-14","2020-02-15","2019-11-09","2019-09-07","2019-05-15","2019-01-21","2018-09-07-preview","2017-09-07-privatepreview"],"defaultApiVersion":"2019-05-15","capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["Australia + Central","Australia East","Australia Southeast","Brazil South","Brazil Southeast","Canada + Central","Canada East","Central India","Central US","East Asia","East US","East + US 2","France Central","France South","Germany West Central","Japan East","Japan + West","Korea Central","Korea South","North Central US","North Europe","Norway + East","South Africa North","South Africa West","South Central US","South India","Southeast + Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West + Europe","West India","West US","West US 2"],"apiVersions":["2020-09-18","2020-06-14","2020-02-15","2019-11-09","2019-09-07","2019-05-15","2019-01-21","2018-09-07-preview","2017-09-07-privatepreview"],"defaultApiVersion":"2019-05-15","capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-09-18","2020-06-14","2020-02-15","2019-11-09","2019-09-07","2019-05-15","2019-01-21","2018-09-07-preview","2017-09-07-privatepreview"],"defaultApiVersion":"2019-05-15","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/84codes.CloudAMQP","namespace":"84codes.CloudAMQP","resourceTypes":[{"resourceType":"servers","locations":["East + US 2","Central US","East US","North Central US","South Central US","West US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia + East","Australia Southeast"],"apiVersions":["2016-08-01"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2016-08-01"],"capabilities":"None"},{"resourceType":"listCommunicationPreference","locations":[],"apiVersions":["2016-08-01"],"capabilities":"None"},{"resourceType":"updateCommunicationPreference","locations":[],"apiVersions":["2016-08-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.HybridCompute","namespace":"Microsoft.HybridCompute","authorizations":[{"applicationId":"8c420feb-03df-47cc-8a05-55df0cf3064b","roleDefinitionId":"83eeb1c6-47f8-4da2-bbc3-42a7ac767360"}],"resourceTypes":[{"resourceType":"machines","locations":["West + Central US","West US 2","West Europe","Southeast Asia","East US","Australia + East","South Central US","East US 2","North Europe","UK South"],"apiVersions":["2020-08-15-preview","2020-08-02","2020-07-30-preview","2020-03-11-preview","2019-12-12","2019-08-02-preview","2019-03-18-preview"],"defaultApiVersion":"2020-08-02","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"machines/extensions","locations":["West + Central US","West Europe","West US 2","Southeast Asia","East US","Australia + East","South Central US","East US 2","North Europe","UK South"],"apiVersions":["2020-08-15-preview","2020-08-02","2020-07-30-preview","2020-03-11-preview","2019-12-12","2019-08-02-preview"],"defaultApiVersion":"2020-08-02","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations","locations":["West + Europe"],"apiVersions":["2020-08-15-preview","2020-08-02","2020-07-30-preview","2020-03-11-preview","2019-12-12","2019-08-02-preview"],"defaultApiVersion":"2020-08-02","capabilities":"None"},{"resourceType":"locations/operationStatus","locations":["West + Central US","West Europe","West US 2","Southeast Asia","East US","Australia + East","South Central US","East US 2","North Europe","UK South"],"apiVersions":["2020-08-15-preview","2020-08-02","2020-07-30-preview","2020-03-11-preview","2019-12-12","2019-08-02-preview"],"defaultApiVersion":"2020-08-02","capabilities":"None"},{"resourceType":"locations/operationResults","locations":["West + Central US","West Europe","West US 2","Southeast Asia","East US","Australia + East","South Central US","East US 2","North Europe","UK South"],"apiVersions":["2020-08-15-preview","2020-08-02","2020-07-30-preview","2020-03-11-preview","2019-12-12","2019-08-02-preview"],"defaultApiVersion":"2020-08-02","capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-08-15-preview","2020-08-02","2020-07-30-preview","2020-03-11-preview","2019-12-12","2019-08-02-preview","2019-03-18-preview"],"defaultApiVersion":"2020-08-02","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AAD","namespace":"Microsoft.AAD","authorizations":[{"applicationId":"443155a6-77f3-45e3-882b-22b3a8d431fb","roleDefinitionId":"7389DE79-3180-4F07-B2BA-C5BA1F01B03A"},{"applicationId":"abba844e-bc0e-44b0-947a-dc74e5d09022","roleDefinitionId":"63BC473E-7767-42A5-A3BF-08EB71200E04"},{"applicationId":"d87dcbc6-a371-462e-88e3-28ad15ec4e64","roleDefinitionId":"861776c5-e0df-4f95-be4f-ac1eec193323"}],"resourceTypes":[{"resourceType":"DomainServices","locations":["West + US","Central US","East US","South Central US","West Europe","North Europe","East + Asia","Southeast Asia","East US 2","Australia East","Australia Southeast","West + Central US","North Central US","Japan East","Japan West","Brazil South","Central + India","South India","West India","Canada Central","Canada East","West US + 2","Korea Central","France Central","UK South","South Africa North","Switzerland + North","UAE North"],"apiVersions":["2020-01-01","2017-06-01","2017-01-01"],"defaultApiVersion":"2020-01-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"DomainServices/oucontainer","locations":["West + US","Central US","East US","South Central US","West Europe","North Europe","East + Asia","Southeast Asia","East US 2","Australia East","Australia Southeast","West + Central US","North Central US","Japan East","Japan West","Brazil South","Central + India","South India","West India","Canada Central","Canada East","West US + 2","Korea Central","France Central","UK South","South Africa North","Switzerland + North","UAE North"],"apiVersions":["2020-01-01","2017-06-01"],"defaultApiVersion":"2020-01-01","capabilities":"None"},{"resourceType":"locations","locations":["West + US","Central US","East US","South Central US","West Europe","North Europe","East + Asia","Southeast Asia","East US 2","Australia East","Australia Southeast","West + Central US","North Central US","Japan East","Japan West","Brazil South","Central + India","South India","West India","Canada Central","Canada East","West US + 2","Korea Central","France Central","UK South","South Africa North","Switzerland + North","UAE North"],"apiVersions":["2020-01-01","2017-06-01","2017-01-01"],"defaultApiVersion":"2020-01-01","capabilities":"None"},{"resourceType":"locations/operationresults","locations":["West + US","Central US","East US","South Central US","West Europe","North Europe","East + Asia","Southeast Asia","East US 2","Australia East","Australia Southeast","West + Central US","North Central US","Japan East","Japan West","Brazil South","Central + India","South India","West India","Canada Central","Canada East","West US + 2","Korea Central","France Central","UK South","South Africa North","Switzerland + North","UAE North"],"apiVersions":["2020-01-01","2017-06-01","2017-01-01"],"defaultApiVersion":"2020-01-01","capabilities":"None"},{"resourceType":"operations","locations":["West + US","Central US","East US","South Central US","West Europe","North Europe","East + Asia","Southeast Asia","East US 2","Australia East","Australia Southeast","West + Central US","North Central US","Japan East","Japan West","Brazil South","Central + India","South India","West India","Canada Central","Canada East","West US + 2","Korea Central","France Central","UK South","South Africa North","Switzerland + North","UAE North"],"apiVersions":["2020-01-01","2017-06-01","2017-01-01"],"defaultApiVersion":"2020-01-01","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ManagedNetwork","namespace":"Microsoft.ManagedNetwork","authorizations":[{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"}],"resourceTypes":[{"resourceType":"managedNetworks","locations":["East + US 2","West US","West US 2","Central US","East US 2 (Stage)"],"apiVersions":["2019-06-01-preview","2018-10-01-preview"],"defaultApiVersion":"2019-06-01-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"managedNetworks/managedNetworkGroups","locations":["East + US 2","West US","West US 2","Central US","East US 2 (Stage)"],"apiVersions":["2019-06-01-preview","2018-10-01-preview"],"defaultApiVersion":"2019-06-01-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"managedNetworks/managedNetworkPeeringPolicies","locations":["East + US 2","West US","West US 2","Central US","East US 2 (Stage)"],"apiVersions":["2019-06-01-preview","2018-10-01-preview"],"defaultApiVersion":"2019-06-01-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"}],"registrationState":"Registering","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AzureActiveDirectory","namespace":"Microsoft.AzureActiveDirectory","resourceTypes":[{"resourceType":"guestUsages","locations":["Global","United + States","Europe","Asia Pacific"],"apiVersions":["2020-05-01-preview"],"defaultApiVersion":"2020-05-01-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"b2cDirectories","locations":["Global","United + States","Europe","Asia Pacific"],"apiVersions":["2020-05-01-preview","2019-01-01-privatepreview","2019-01-01-preview","2017-01-30","2016-12-13-preview","2016-02-10-privatepreview"],"defaultApiVersion":"2017-01-30","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"checkNameAvailability","locations":["Global","United + States","Europe","Asia Pacific"],"apiVersions":["2020-05-01-preview","2019-01-01-privatepreview","2019-01-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["Global","United + States","Europe","Asia Pacific"],"apiVersions":["2020-05-01-preview","2019-01-01-privatepreview","2019-01-01-preview","2017-01-30","2016-12-13-preview","2016-02-10-privatepreview"],"defaultApiVersion":"2017-01-30","capabilities":"None"},{"resourceType":"b2ctenants","locations":["Global","United + States","Europe","Asia Pacific"],"apiVersions":["2020-05-01-preview","2016-02-10-privatepreview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Attestation","namespace":"Microsoft.Attestation","authorizations":[{"applicationId":"c61423b7-1d1f-430d-b444-0eee53298103","roleDefinitionId":"7299b0b1-11da-4858-8943-7db197005959"}],"resourceTypes":[{"resourceType":"attestationProviders","locations":["East + US 2","Central US","UK South","East US","Canada Central","Canada East"],"apiVersions":["2020-10-01","2018-09-01-preview"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"defaultProviders","locations":["East US + 2","Central US","UK South","East US","Canada Central","Canada East"],"apiVersions":["2020-10-01","2018-09-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-10-01","2018-09-01-preview"],"capabilities":"None"},{"resourceType":"locations/defaultProvider","locations":["East + US 2","Central US","UK South","East US","Canada Central","Canada East"],"apiVersions":["2020-10-01","2018-09-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-10-01","2018-09-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ChangeAnalysis","namespace":"Microsoft.ChangeAnalysis","authorizations":[{"applicationId":"2cfc91a4-7baa-4a8f-a6c9-5f3d279060b8","roleDefinitionId":"f5a6bd90-af71-455c-9030-c486e8c42c95"}],"resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2020-04-01-preview","2019-04-01-preview"],"capabilities":"None"},{"resourceType":"resourceChanges","locations":[],"apiVersions":["2020-04-01-preview"],"capabilities":"SupportsExtension"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.VirtualMachineImages","namespace":"Microsoft.VirtualMachineImages","authorizations":[{"applicationId":"cf32a0cc-373c-47c9-9156-0db11f6a6dfc","roleDefinitionId":"0ee55a0b-f45f-4392-92ec-e8bf1b4b5da5","managedByRoleDefinitionId":"9e3af657-a8ff-583c-a75c-2fe7c4bcb635"}],"resourceTypes":[{"resourceType":"imageTemplates","locations":["East + US","East US 2","West Central US","West US","West US 2","South Central US","North + Europe","West Europe"],"apiVersions":["2020-02-14","2019-05-01-preview","2019-02-01-preview","2018-02-01-preview"],"defaultApiVersion":"2020-02-14","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"imageTemplates/runOutputs","locations":["East + US","East US 2","West Central US","West US","West US 2","South Central US","North + Europe","West Europe"],"apiVersions":["2020-02-14","2019-05-01-preview","2019-02-01-preview","2018-02-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":["East + US","East US 2","West Central US","West US","West US 2","North Europe","West + Europe","South Central US"],"apiVersions":["2020-02-14","2019-05-01-preview","2019-02-01-preview","2018-02-01-preview"],"capabilities":"None"},{"resourceType":"locations/operations","locations":["East + US","East US 2","West Central US","West US","West US 2","South Central US","North + Europe","West Europe"],"apiVersions":["2020-02-14","2019-05-01-preview","2019-02-01-preview","2018-02-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["East + US","East US 2","West Central US","West US","West US 2","South Central US","North + Europe","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-02-14","2019-05-01-preview","2019-02-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Maintenance","namespace":"Microsoft.Maintenance","authorization":{"applicationId":"f18474f2-a66a-4bb0-a3c9-9b8d892092fa","roleDefinitionId":"2f1ef7b0-d5c4-4d3c-98fa-6a9fa8e74aa5"},"resourceTypes":[{"resourceType":"maintenanceConfigurations","locations":["Central + US","East US","East US 2","West US","West US 2","West Central US","North Central + US","South Central US","North Europe","West Europe","East Asia","Southeast + Asia","Japan East","Japan West","Australia East","Australia Southeast","Australia + Central","Australia Central 2","South Africa North","South Africa West","Brazil + South","South India","Central India","West India","Canada Central","Canada + East","UK South","UK West","Korea Central","Korea South","France Central","France + South","UAE North","UAE Central","Germany West Central","Germany North","Switzerland + North","Switzerland West"],"apiVersions":["2020-07-01-preview","2020-04-01","2018-10-01","2018-06-01-preview","2017-04-26","2017-01-01","2016-01-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"updates","locations":["Central + US","East US","East US 2","West US","West US 2","West Central US","North Central + US","South Central US","North Europe","West Europe","East Asia","Southeast + Asia","Japan East","Japan West","Australia East","Australia Southeast","Australia + Central","Australia Central 2","South Africa North","South Africa West","Brazil + South","South India","Central India","West India","Canada Central","Canada + East","UK South","UK West","Korea Central","Korea South","France Central","France + South","UAE North","UAE Central","Germany West Central","Germany North","Switzerland + North","Switzerland West"],"apiVersions":["2020-07-01-preview","2020-04-01","2018-10-01","2018-06-01-preview","2017-04-26","2017-01-01","2016-01-01"],"capabilities":"SupportsExtension"},{"resourceType":"configurationAssignments","locations":["Central + US","East US","East US 2","West US","West US 2","West Central US","North Central + US","South Central US","North Europe","West Europe","East Asia","Southeast + Asia","Japan East","Japan West","Australia East","Australia Southeast","Australia + Central","Australia Central 2","South Africa North","South Africa West","Brazil + South","South India","Central India","West India","Canada Central","Canada + East","UK South","UK West","Korea Central","Korea South","France Central","France + South","UAE North","UAE Central","Germany West Central","Germany North","Switzerland + North","Switzerland West"],"apiVersions":["2020-07-01-preview","2020-04-01","2018-10-01","2018-06-01-preview","2017-04-26","2017-01-01","2016-01-01"],"capabilities":"SupportsExtension"},{"resourceType":"applyUpdates","locations":["Central + US","East US","East US 2","West US","West US 2","West Central US","North Central + US","South Central US","North Europe","West Europe","East Asia","Southeast + Asia","Japan East","Japan West","Australia East","Australia Southeast","Australia + Central","Australia Central 2","South Africa North","South Africa West","Brazil + South","South India","Central India","West India","Canada Central","Canada + East","UK South","UK West","Korea Central","Korea South","France Central","France + South","UAE North","UAE Central","Germany West Central","Germany North","Switzerland + North","Switzerland West"],"apiVersions":["2020-07-01-preview","2020-04-01","2018-10-01","2018-06-01-preview","2017-04-26","2017-01-01","2016-01-01"],"capabilities":"SupportsExtension"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.HDInsight","namespace":"Microsoft.HDInsight","authorizations":[{"applicationId":"9191c4da-09fe-49d9-a5f1-d41cbe92ad95","roleDefinitionId":"d102a6f3-d9cb-4633-8950-1243b975886c","managedByRoleDefinitionId":"346da55d-e1db-4a5a-89db-33ab3cdb6fc6"},{"applicationId":"7865c1d2-f040-46cc-875f-831a1ef6a28a","roleDefinitionId":"e27c0895-d168-46d5-8b65-870eb2350378"}],"resourceTypes":[{"resourceType":"clusters","locations":["East + US 2","South Central US","Australia Southeast","Central India","West Central + US","West US 2","Canada East","Canada Central","Brazil South","UK South","UK + West","East Asia","Australia East","Japan East","Japan West","North Europe","West + Europe","North Central US","Central US","Southeast Asia","East US","Korea + South","Korea Central","West US","South India","France Central","UAE North","UAE + Central","Switzerland North","Switzerland West","South Africa North","Germany + West Central","East US 2 EUAP"],"apiVersions":["2018-06-01-preview","2015-03-01-preview"],"defaultApiVersion":"2015-03-01-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"clusters/applications","locations":["East + US 2","South Central US","Australia Southeast","Central India","West Central + US","West US 2","Canada East","Canada Central","Brazil South","UK South","UK + West","East Asia","Australia East","Japan East","Japan West","North Europe","West + Europe","North Central US","Central US","Southeast Asia","East US","Korea + South","Korea Central","West US","South India","France Central","UAE North","UAE + Central","Switzerland North","Switzerland West","South Africa North","Germany + West Central","East US 2 EUAP"],"apiVersions":["2018-06-01-preview","2015-03-01-preview"],"defaultApiVersion":"2015-03-01-preview","capabilities":"None"},{"resourceType":"clusters/operationresults","locations":["East + US 2","South Central US","Australia Southeast","Central India","West Central + US","West US 2","Canada East","Canada Central","Brazil South","UK South","UK + West","East Asia","Australia East","Japan East","Japan West","North Europe","West + Europe","North Central US","Central US","Southeast Asia","East US","Korea + South","Korea Central","West US","South India","France Central","UAE North","UAE + Central","Switzerland North","Switzerland West","South Africa North","Germany + West Central","East US 2 EUAP"],"apiVersions":["2018-06-01-preview","2015-03-01-preview"],"defaultApiVersion":"2015-03-01-preview","capabilities":"None"},{"resourceType":"locations","locations":["East + Asia","Southeast Asia","East US","East US 2","West US","North Central US","South + Central US","Central US","North Europe","West Europe","Japan East","Japan + West","Australia East","Australia Southeast","Brazil South","Central India"],"apiVersions":["2018-06-01-preview","2015-03-01-preview"],"defaultApiVersion":"2015-03-01-preview","capabilities":"None"},{"resourceType":"locations/capabilities","locations":["East + US 2","South Central US","Australia Southeast","Central India","West Central + US","West US 2","Canada East","Canada Central","Brazil South","UK South","UK + West","East Asia","Australia East","Japan East","Japan West","North Europe","West + Europe","North Central US","Central US","Southeast Asia","East US","Korea + South","Korea Central","West US","South India","France Central","UAE North","UAE + Central","Switzerland North","Switzerland West","South Africa North","Germany + West Central","East US 2 EUAP"],"apiVersions":["2018-06-01-preview","2015-03-01-preview"],"defaultApiVersion":"2015-03-01-preview","capabilities":"None"},{"resourceType":"locations/usages","locations":["East + US 2","South Central US","Australia Southeast","Central India","West Central + US","West US 2","Canada East","Canada Central","Brazil South","UK South","UK + West","East Asia","Australia East","Japan East","Japan West","North Europe","West + Europe","North Central US","Central US","Southeast Asia","East US","Korea + South","Korea Central","West US","South India","France Central","UAE North","UAE + Central","Switzerland North","Switzerland West","South Africa North","Germany + West Central","East US 2 EUAP"],"apiVersions":["2018-06-01-preview","2015-03-01-preview"],"defaultApiVersion":"2015-03-01-preview","capabilities":"None"},{"resourceType":"locations/billingSpecs","locations":["East + US 2","South Central US","Australia Southeast","Central India","West Central + US","West US 2","Canada East","Canada Central","Brazil South","UK South","UK + West","East Asia","Australia East","Japan East","Japan West","North Europe","West + Europe","North Central US","Central US","Southeast Asia","East US","Korea + South","Korea Central","West US","South India","France Central","UAE North","UAE + Central","Switzerland North","Switzerland West","South Africa North","Germany + West Central","East US 2 EUAP"],"apiVersions":["2018-06-01-preview","2015-03-01-preview"],"defaultApiVersion":"2015-03-01-preview","capabilities":"None"},{"resourceType":"locations/operationresults","locations":["East + US 2","South Central US","Australia Southeast","Central India","West Central + US","West US 2","Canada East","Canada Central","Brazil South","UK South","UK + West","East Asia","Australia East","Japan East","Japan West","North Europe","West + Europe","North Central US","Central US","Southeast Asia","East US","Korea + South","Korea Central","West US","South India","France Central","UAE North","UAE + Central","Switzerland North","Switzerland West","South Africa North","Germany + West Central","East US 2 EUAP"],"apiVersions":["2018-06-01-preview","2015-03-01-preview"],"defaultApiVersion":"2015-03-01-preview","capabilities":"None"},{"resourceType":"locations/azureasyncoperations","locations":["East + US 2","South Central US","Australia Southeast","Central India","West Central + US","West US 2","Canada East","Canada Central","Brazil South","UK South","UK + West","East Asia","Australia East","Japan East","Japan West","North Europe","West + Europe","North Central US","Central US","Southeast Asia","East US","Korea + South","Korea Central","West US","South India","France Central","UAE North","UAE + Central","Switzerland North","Switzerland West","South Africa North","Germany + West Central","East US 2 EUAP"],"apiVersions":["2018-06-01-preview","2015-03-01-preview"],"defaultApiVersion":"2015-03-01-preview","capabilities":"None"},{"resourceType":"locations/validateCreateRequest","locations":["East + US 2","South Central US","Australia Southeast","Central India","West Central + US","West US 2","Canada East","Canada Central","Brazil South","UK South","UK + West","East Asia","Australia East","Japan East","Japan West","North Europe","West + Europe","North Central US","Central US","Southeast Asia","East US","Korea + South","Korea Central","West US","South India","France Central","UAE North","UAE + Central","Switzerland North","Switzerland West","South Africa North","Germany + West Central","East US 2 EUAP"],"apiVersions":["2018-06-01-preview","2015-03-01-preview"],"defaultApiVersion":"2015-03-01-preview","capabilities":"None"},{"resourceType":"operations","locations":["East + Asia","Southeast Asia","East US","East US 2","West US","North Central US","South + Central US","Central US","North Europe","West Europe","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India"],"apiVersions":["2018-06-01-preview","2015-03-01-preview"],"defaultApiVersion":"2015-03-01-preview","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ResourceHealth","namespace":"Microsoft.ResourceHealth","authorizations":[{"applicationId":"8bdebf23-c0fe-4187-a378-717ad86f6a53","roleDefinitionId":"cc026344-c8b1-4561-83ba-59eba84b27cc"}],"resourceTypes":[{"resourceType":"availabilityStatuses","locations":[],"apiVersions":["2020-05-01-preview","2020-05-01","2018-08-01-rc","2018-08-01-preview","2018-07-01-rc","2018-07-01-preview","2017-07-01","2015-01-01"],"capabilities":"SupportsExtension"},{"resourceType":"childAvailabilityStatuses","locations":[],"apiVersions":["2018-11-06-beta","2018-08-01-rc","2018-08-01-preview","2018-07-01-rc","2018-07-01-preview","2018-07-01-beta","2017-07-01-rc","2017-07-01-preview","2017-07-01-beta","2015-01-01-rc","2015-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"childResources","locations":[],"apiVersions":["2018-11-06-beta","2018-08-01-rc","2018-08-01-preview","2018-07-01-rc","2018-07-01-preview","2018-07-01-beta","2017-07-01-rc","2017-07-01-preview","2017-07-01-beta","2015-01-01-rc","2015-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"events","locations":[],"apiVersions":["2018-07-01-rc","2018-07-01"],"capabilities":"SupportsExtension"},{"resourceType":"metadata","locations":[],"apiVersions":["2018-07-01-rc","2018-07-01-preview","2018-07-01-beta","2018-07-01-alpha"],"capabilities":"None"},{"resourceType":"emergingissues","locations":[],"apiVersions":["2018-11-06-beta","2018-07-01-rc","2018-07-01-preview","2018-07-01-beta","2018-07-01-alpha","2018-07-01","2017-07-01-beta"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2018-07-01","2015-01-01"],"capabilities":"None"},{"resourceType":"notifications","locations":["Australia + Southeast"],"apiVersions":["2016-09-01","2016-06-01"],"capabilities":"SupportsExtension"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Maps","namespace":"Microsoft.Maps","authorizations":[{"applicationId":"608f6f31-fed0-4f7b-809f-90f6c9b3de78","roleDefinitionId":"3431F0E6-63BC-482D-A96E-0AB819610A5F"},{"applicationId":"ba1ea022-5807-41d5-bbeb-292c7e1cf5f6","roleDefinitionId":"48195074-b752-4868-be0f-7c324a224aa1"}],"resourceTypes":[{"resourceType":"accounts","locations":["Global"],"apiVersions":["2020-02-01-preview","2018-05-01","2017-01-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"accounts/privateAtlases","locations":["United + States"],"apiVersions":["2020-02-01-preview"],"defaultApiVersion":"2020-02-01-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"accounts/eventGridFilters","locations":[],"apiVersions":["2020-02-01-preview","2018-05-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-02-01-preview","2018-05-01","2017-01-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.SqlVirtualMachine","namespace":"Microsoft.SqlVirtualMachine","authorizations":[{"applicationId":"bd93b475-f9e2-476e-963d-b2daf143ffb9","roleDefinitionId":"f96bd990-ffdf-4c17-8ee3-77454d9c3f5d"}],"resourceTypes":[{"resourceType":"SqlVirtualMachineGroups","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US","East US 2","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","Norway East","South Africa North","South Central US","South India","Southeast + Asia","Switzerland North","UAE Central","UAE North","UK South","UK West","West + Central US","West Europe","West India","West US","West US 2","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2017-03-01-preview"],"defaultApiVersion":"2017-03-01-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"SqlVirtualMachines","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US","East US 2","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","Norway East","South Africa North","South Central US","South India","Southeast + Asia","Switzerland North","UAE Central","UAE North","UK South","UK West","West + Central US","West Europe","West India","West US","West US 2","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2017-03-01-preview"],"defaultApiVersion":"2017-03-01-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"SqlVirtualMachineGroups/AvailabilityGroupListeners","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US","East US 2","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","Norway East","South Africa North","South Central US","South India","Southeast + Asia","Switzerland North","UAE Central","UAE North","UK South","UK West","West + Central US","West Europe","West India","West US","West US 2","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2017-03-01-preview"],"defaultApiVersion":"2017-03-01-preview","capabilities":"None"},{"resourceType":"operations","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US","East US 2","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","Norway East","South Africa North","South Central US","South India","Southeast + Asia","Switzerland North","UAE Central","UAE North","UK South","UK West","West + Central US","West Europe","West India","West US","West US 2","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2017-03-01-preview"],"defaultApiVersion":"2017-03-01-preview","capabilities":"None"},{"resourceType":"Locations","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US","East US 2","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","Norway East","South Africa North","South Central US","South India","Southeast + Asia","Switzerland North","UAE Central","UAE North","UK South","UK West","West + Central US","West Europe","West India","West US","West US 2","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2017-03-01-preview"],"defaultApiVersion":"2017-03-01-preview","capabilities":"None"},{"resourceType":"Locations/OperationTypes","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US","East US 2","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","Norway East","South Africa North","South Central US","South India","Southeast + Asia","Switzerland North","UAE Central","UAE North","UK South","UK West","West + Central US","West Europe","West India","West US","West US 2","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2017-03-01-preview"],"defaultApiVersion":"2017-03-01-preview","capabilities":"None"},{"resourceType":"Locations/sqlVirtualMachineOperationResults","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US","East US 2","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","Norway East","South Africa North","South Central US","South India","Southeast + Asia","Switzerland North","UAE Central","UAE North","UK South","UK West","West + Central US","West Europe","West India","West US","West US 2","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2017-03-01-preview"],"defaultApiVersion":"2017-03-01-preview","capabilities":"None"},{"resourceType":"Locations/sqlVirtualMachineGroupOperationResults","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US","East US 2","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","Norway East","South Africa North","South Central US","South India","Southeast + Asia","Switzerland North","UAE Central","UAE North","UK South","UK West","West + Central US","West Europe","West India","West US","West US 2","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2017-03-01-preview"],"defaultApiVersion":"2017-03-01-preview","capabilities":"None"},{"resourceType":"Locations/availabilityGroupListenerOperationResults","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US","East US 2","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","Norway East","South Africa North","South Central US","South India","Southeast + Asia","Switzerland North","UAE Central","UAE North","UK South","UK West","West + Central US","West Europe","West India","West US","West US 2","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2017-03-01-preview"],"defaultApiVersion":"2017-03-01-preview","capabilities":"None"},{"resourceType":"Locations/registerSqlVmCandidate","locations":["East + US 2 EUAP"],"apiVersions":["2017-03-01-preview"],"defaultApiVersion":"2017-03-01-preview","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Cache","namespace":"Microsoft.Cache","authorization":{"applicationId":"96231a05-34ce-4eb4-aa6a-70759cbb5e83","roleDefinitionId":"4f731528-ba85-45c7-acfb-cd0a9b3cf31b"},"resourceTypes":[{"resourceType":"Redis","locations":["North + Central US","South Central US","Central US","West Europe","North Europe","West + US","East US","East US 2","Japan East","Japan West","Brazil South","Southeast + Asia","East Asia","Australia East","Australia Southeast","Central India","West + India","Canada Central","Canada East","UK South","UK West","West US 2","West + Central US","South India","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2019-07-01","2018-03-01","2017-10-01","2017-02-01","2016-04-01","2015-08-01","2015-03-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01"}],"zoneMappings":[{"location":"East + US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West + Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central + US EUAP","zones":[]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast + Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North + Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK + South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia + East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South + Central US","zones":[]},{"location":"Canada Central","zones":[]},{"location":"Germany + West Central","zones":[]},{"location":"Brazil South","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"Redis/privateEndpointConnectionProxies","locations":["North + Central US","South Central US","Central US","West Europe","North Europe","West + US","East US","East US 2","Japan East","Japan West","Brazil South","Southeast + Asia","East Asia","Australia East","Australia Southeast","Central India","West + India","Canada Central","Canada East","UK South","UK West","West US 2","West + Central US","South India","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2019-07-01"],"capabilities":"None"},{"resourceType":"Redis/privateEndpointConnectionProxies/validate","locations":["North + Central US","South Central US","Central US","West Europe","North Europe","West + US","East US","East US 2","Japan East","Japan West","Brazil South","Southeast + Asia","East Asia","Australia East","Australia Southeast","Central India","West + India","Canada Central","Canada East","UK South","UK West","West US 2","West + Central US","South India","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2019-07-01"],"capabilities":"None"},{"resourceType":"Redis/privateEndpointConnections","locations":["North + Central US","South Central US","Central US","West Europe","North Europe","West + US","East US","East US 2","Japan East","Japan West","Brazil South","Southeast + Asia","East Asia","Australia East","Australia Southeast","Central India","West + India","Canada Central","Canada East","UK South","UK West","West US 2","West + Central US","South India","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2019-07-01"],"capabilities":"None"},{"resourceType":"Redis/privateLinkResources","locations":["North + Central US","South Central US","Central US","West Europe","North Europe","West + US","East US","East US 2","Japan East","Japan West","Brazil South","Southeast + Asia","East Asia","Australia East","Australia Southeast","Central India","West + India","Canada Central","Canada East","UK South","UK West","West US 2","West + Central US","South India","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2019-07-01"],"capabilities":"None"},{"resourceType":"locations/asyncOperations","locations":["North + Central US","South Central US","Central US","West Europe","North Europe","West + US","East US","East US 2","Japan East","Japan West","Brazil South","Southeast + Asia","East Asia","Australia East","Australia Southeast","Central India","West + India","Canada Central","Canada East","UK South","UK West","West US 2","West + Central US","South India","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2019-07-01"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-06-01","2020-04-01-preview","2019-07-01","2018-03-01","2017-10-01","2017-02-01","2016-04-01","2015-08-01","2015-03-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01"}],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["North + Central US","South Central US","Central US","West Europe","North Europe","West + US","East US","East US 2","Japan East","Japan West","Brazil South","Southeast + Asia","East Asia","Australia East","Australia Southeast","Central India","West + India","South India","Canada Central","Canada East","UK South","UK West","West + US 2","West Central US","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2019-07-01","2018-03-01","2017-10-01","2017-02-01","2016-04-01","2015-08-01","2015-03-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01"}],"capabilities":"None"},{"resourceType":"locations/operationsStatus","locations":["East + US","West Europe","West US","East US 2","West US 2","South Central US","UK + South","Southeast Asia","Australia East","North Europe","Central US EUAP"],"apiVersions":["2020-10-01-preview","2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2020-04-01-preview"}],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2020-06-01","2019-07-01","2018-03-01","2017-10-01","2017-02-01","2016-04-01","2015-08-01","2015-03-01","2014-04-01-preview","2014-04-01-alpha","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01"}],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-06-01","2019-07-01","2018-03-01","2017-10-01","2017-02-01","2016-04-01","2015-08-01","2015-03-01","2014-04-01-preview","2014-04-01-alpha","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01"}],"capabilities":"None"},{"resourceType":"redisEnterprise","locations":["East + US","West Europe","West US","East US 2","West US 2","South Central US","UK + South","Southeast Asia","Australia East","North Europe","Central US EUAP"],"apiVersions":["2020-10-01-preview","2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2020-04-01-preview"}],"zoneMappings":[{"location":"East + US 2","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"Central + US EUAP","zones":["1","2"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"West + US 2","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"East + US","zones":["2","3","1"]},{"location":"UK South","zones":["2","3","1"]},{"location":"Australia + East","zones":["2","3","1"]},{"location":"South Central US","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"RedisEnterprise/privateEndpointConnectionProxies","locations":["East + US","West Europe","West US","East US 2","West US 2","South Central US","UK + South","Southeast Asia","Australia East","North Europe","Central US EUAP"],"apiVersions":["2020-10-01-preview","2020-04-01-preview"],"capabilities":"None"},{"resourceType":"RedisEnterprise/privateEndpointConnectionProxies/validate","locations":["East + US","West Europe","West US","East US 2","West US 2","South Central US","UK + South","Southeast Asia","Australia East","North Europe","Central US EUAP"],"apiVersions":["2020-10-01-preview","2020-04-01-preview"],"capabilities":"None"},{"resourceType":"RedisEnterprise/privateEndpointConnectionProxies/operationresults","locations":["East + US","West Europe","West US","East US 2","West US 2","South Central US","UK + South","Southeast Asia","Australia East","North Europe","Central US EUAP"],"apiVersions":["2020-10-01-preview","2020-04-01-preview"],"capabilities":"None"},{"resourceType":"RedisEnterprise/privateEndpointConnections","locations":["East + US","West Europe","West US","East US 2","West US 2","South Central US","UK + South","Southeast Asia","Australia East","North Europe","Central US EUAP"],"apiVersions":["2020-10-01-preview","2020-04-01-preview"],"capabilities":"None"},{"resourceType":"RedisEnterprise/privateEndpointConnections/operationresults","locations":["East + US","West Europe","West US","East US 2","West US 2","South Central US","UK + South","Southeast Asia","Australia East","North Europe","Central US EUAP"],"apiVersions":["2020-10-01-preview","2020-04-01-preview"],"capabilities":"None"},{"resourceType":"RedisEnterprise/privateLinkResources","locations":["East + US","West Europe","West US","East US 2","West US 2","South Central US","UK + South","Southeast Asia","Australia East","North Europe","Central US EUAP"],"apiVersions":["2020-10-01-preview","2020-04-01-preview"],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["East + US","West Europe","West US","East US 2","West US 2","South Central US","UK + South","Southeast Asia","Australia East","North Europe","Central US EUAP"],"apiVersions":["2020-10-01-preview","2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview","capabilities":"None"},{"resourceType":"Redis/EventGridFilters","locations":["North + Central US","South Central US","Central US","West Europe","North Europe","West + US","East US","East US 2","Japan East","Japan West","Brazil South","Southeast + Asia","East Asia","Australia East","Australia Southeast","Central India","West + India","South India","Canada Central","Canada East","UK South","UK West","West + US 2","West Central US","Korea Central","Korea South","France South","France + Central","Australia Central","Australia Central 2","South Africa North","South + Africa West","UAE Central","UAE North","Switzerland North","Switzerland West","Germany + North","Germany West Central","Norway East","Norway West","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2020-06-01","2019-07-01","2018-03-01","2017-10-01","2017-02-01","2016-04-01","2015-08-01","2015-03-01","2014-04-01-preview","2014-04-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute","namespace":"Microsoft.Compute","authorizations":[{"applicationId":"60e6cd67-9c8c-4951-9b3c-23c25a2169af","roleDefinitionId":"e4770acb-272e-4dc8-87f3-12f44a612224"},{"applicationId":"a303894e-f1d8-4a37-bf10-67aa654a0596","roleDefinitionId":"903ac751-8ad5-4e5a-bfc2-5e49f450a241"},{"applicationId":"a8b6bf88-1d1a-4626-b040-9a729ea93c65","roleDefinitionId":"45c8267c-80ba-4b96-9a43-115b8f49fccd"},{"applicationId":"184909ca-69f1-4368-a6a7-c558ee6eb0bd","roleDefinitionId":"45c8267c-80ba-4b96-9a43-115b8f49fccd"},{"applicationId":"5e5e43d4-54da-4211-86a4-c6e7f3715801","roleDefinitionId":"ffcd6e5b-8772-457d-bb17-89703c03428f"},{"applicationId":"ce6ff14a-7fdc-4685-bbe0-f6afdfcfa8e0","roleDefinitionId":"cb17cddc-dbac-4ae0-ae79-8db34eddfca0"},{"applicationId":"372140e0-b3b7-4226-8ef9-d57986796201","roleDefinitionId":"cb17cddc-dbac-4ae0-ae79-8db34eddfca0"},{"applicationId":"b9a92e36-2cf8-4f4e-bcb3-9d99e00e14ab","roleDefinitionId":"6efa92ca-56b6-40af-a468-5e3d2b5232f0"}],"resourceTypes":[{"resourceType":"availabilitySets","locations":["East + US","East US 2","West US","Central US","North Central US","South Central US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia + East","Australia Southeast","Australia Central","Brazil South","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2020-06-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"virtualMachines","locations":["East + US","East US 2","West US","Central US","North Central US","South Central US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia + East","Australia Southeast","Australia Central","Brazil South","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2020-06-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"zoneMappings":[{"location":"East + US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West + Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central + US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast + Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North + Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK + South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia + East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South + Central US","zones":[]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany + West Central","zones":[]},{"location":"Brazil South","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"virtualMachines/extensions","locations":["East + US","East US 2","West US","Central US","North Central US","South Central US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia + East","Australia Southeast","Australia Central","Brazil South","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2020-06-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"virtualMachineScaleSets","locations":["East + US","East US 2","West US","Central US","North Central US","South Central US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia + East","Australia Southeast","Australia Central","Brazil South","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2020-06-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"zoneMappings":[{"location":"East + US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West + Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central + US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast + Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North + Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK + South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia + East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South + Central US","zones":[]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany + West Central","zones":[]},{"location":"Brazil South","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"virtualMachineScaleSets/extensions","locations":["East + US","East US 2","West US","Central US","North Central US","South Central US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia + East","Australia Southeast","Australia Central","Brazil South","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2015-06-15","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"None"},{"resourceType":"virtualMachineScaleSets/virtualMachines","locations":["East + US","East US 2","West US","Central US","North Central US","South Central US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia + East","Australia Southeast","Australia Central","Brazil South","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2020-06-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"None"},{"resourceType":"virtualMachineScaleSets/networkInterfaces","locations":["East + US","East US 2","West US","Central US","North Central US","South Central US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia + East","Australia Southeast","Australia Central","Brazil South","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"None"},{"resourceType":"virtualMachineScaleSets/virtualMachines/networkInterfaces","locations":["East + US","East US 2","West US","Central US","North Central US","South Central US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia + East","Australia Southeast","Australia Central","Brazil South","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"None"},{"resourceType":"virtualMachineScaleSets/publicIPAddresses","locations":["East + US","East US 2","West US","Central US","North Central US","South Central US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia + East","Australia Southeast","Australia Central","Brazil South","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/operations","locations":["East + US","East US 2","West US","Central US","North Central US","South Central US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia + East","Australia Southeast","Australia Central","Brazil South","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"None"},{"resourceType":"locations/vmSizes","locations":["East + US","East US 2","West US","Central US","North Central US","South Central US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia + East","Australia Southeast","Australia Central","Brazil South","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"None"},{"resourceType":"locations/runCommands","locations":["East + US","East US 2","West US","Central US","North Central US","South Central US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia + East","Australia Southeast","Australia Central","Brazil South","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"None"},{"resourceType":"locations/usages","locations":["East + US","East US 2","West US","Central US","North Central US","South Central US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia + East","Australia Southeast","Australia Central","Brazil South","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"None"},{"resourceType":"locations/virtualMachines","locations":["East + US","East US 2","West US","Central US","North Central US","South Central US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia + East","Australia Southeast","Australia Central","Brazil South","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30"],"defaultApiVersion":"2020-06-01","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"None"},{"resourceType":"locations/publishers","locations":["East + US","East US 2","West US","Central US","North Central US","South Central US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia + East","Australia Southeast","Australia Central","Brazil South","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"}],"capabilities":"None"},{"resourceType":"operations","locations":["East + US","East US 2","West US","Central US","North Central US","South Central US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia + East","Australia Southeast","Australia Central","Brazil South","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-03-30","2015-06-15","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"restorePointCollections","locations":["Southeast + Asia","East US 2","Central US","West Europe","East US","North Central US","South + Central US","West US","North Europe","East Asia","Brazil South","West US 2","West + Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada + East","Central India","South India","Australia East","Australia Southeast","Korea + Central","Korea South","West India","France Central","South Africa North","UAE + North","Australia Central","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"defaultApiVersion":"2020-06-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"restorePointCollections/restorePoints","locations":["Southeast + Asia","East US 2","Central US","West Europe","East US","North Central US","South + Central US","West US","North Europe","East Asia","Brazil South","West US 2","West + Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada + East","Central India","South India","Australia East","Australia Southeast","Korea + Central","Korea South","West India","France Central","South Africa North","UAE + North","Australia Central","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"capabilities":"None"},{"resourceType":"proximityPlacementGroups","locations":["East + US","East US 2","West US","Central US","North Central US","South Central US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia + East","Australia Southeast","Australia Central","Brazil South","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01"],"defaultApiVersion":"2020-06-01","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"sshPublicKeys","locations":["East + US","East US 2","West US","Central US","North Central US","South Central US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia + East","Australia Southeast","Australia Central","Brazil South","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01"],"defaultApiVersion":"2020-06-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"virtualMachines/metricDefinitions","locations":["East + US","East US 2","West US","Central US","North Central US","South Central US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia + East","Australia Southeast","Australia Central","Brazil South","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"locations/spotEvictionRates","locations":["East + US","East US 2","West US","Central US","North Central US","South Central US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia + East","Australia Southeast","Australia Central","Brazil South","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01"],"defaultApiVersion":"2020-06-01","capabilities":"None"},{"resourceType":"locations/spotPriceHistory","locations":["East + US","East US 2","West US","Central US","North Central US","South Central US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia + East","Australia Southeast","Australia Central","Brazil South","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01"],"defaultApiVersion":"2020-06-01","capabilities":"None"},{"resourceType":"sharedVMImages","locations":["West + Central US","South Central US","East US 2","Southeast Asia","West Europe","West + US","East US","Canada Central","North Europe","North Central US","Brazil South","UK + West","West India","East Asia","Australia East","Japan East","Korea South","West + US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan + West","Korea Central","France Central","Central US","Australia Central","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"],"defaultApiVersion":"2017-10-15-preview","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"sharedVMImages/versions","locations":["West + Central US","South Central US","East US 2","Southeast Asia","West Europe","West + US","East US","Canada Central","North Europe","North Central US","Brazil South","UK + West","West India","East Asia","Australia East","Japan East","Korea South","West + US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan + West","Korea Central","France Central","Central US","Australia Central","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"],"defaultApiVersion":"2017-10-15-preview","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"locations/artifactPublishers","locations":["West + Central US","South Central US","East US 2","Southeast Asia","West Europe","West + US","East US","Canada Central","North Europe","North Central US","Brazil South","UK + West","West India","East Asia","Australia East","Japan East","Korea South","West + US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan + West","Korea Central","France Central","Central US","Australia Central","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"],"capabilities":"None"},{"resourceType":"locations/capsoperations","locations":["West + Central US","South Central US","East US 2","Southeast Asia","West Europe","West + US","East US","Canada Central","North Europe","North Central US","Brazil South","UK + West","West India","East Asia","Australia East","Japan East","Korea South","West + US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan + West","Korea Central","France Central","Central US","Australia Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01","2017-10-15-preview"],"capabilities":"None"},{"resourceType":"galleries","locations":["West + Central US","South Central US","East US 2","Southeast Asia","West Europe","West + US","East US","Canada Central","North Europe","North Central US","Brazil South","UK + West","West India","East Asia","Australia East","Japan East","Korea South","West + US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan + West","Korea Central","France Central","Central US","Australia Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"defaultApiVersion":"2018-06-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"galleries/images","locations":["West Central + US","South Central US","East US 2","Southeast Asia","West Europe","West US","East + US","Canada Central","North Europe","North Central US","Brazil South","UK + West","West India","East Asia","Australia East","Japan East","Korea South","West + US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan + West","Korea Central","France Central","Central US","Australia Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"defaultApiVersion":"2018-06-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"galleries/images/versions","locations":["West + Central US","South Central US","East US 2","Southeast Asia","West Europe","West + US","East US","Canada Central","North Europe","North Central US","Brazil South","UK + West","West India","East Asia","Australia East","Japan East","Korea South","West + US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan + West","Korea Central","France Central","Central US","Australia Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"defaultApiVersion":"2018-06-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"locations/galleries","locations":["West + Central US","South Central US","East US 2","Southeast Asia","West Europe","West + US","East US","Canada Central","North Europe","North Central US","Brazil South","UK + West","West India","East Asia","Australia East","Japan East","Korea South","West + US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan + West","Korea Central","France Central","Central US","Australia Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"defaultApiVersion":"2018-06-01","capabilities":"None"},{"resourceType":"disks","locations":["Southeast + Asia","East US 2","Central US","West Europe","East US","North Central US","South + Central US","West US","North Europe","East Asia","Brazil South","West US 2","West + Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada + East","Central India","South India","Australia East","Australia Southeast","Korea + Central","Korea South","West India","France Central","South Africa North","UAE + North","Australia Central","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"defaultApiVersion":"2020-06-30","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"zoneMappings":[{"location":"East + US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West + Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central + US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast + Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North + Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK + South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia + East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South + Central US","zones":[]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany + West Central","zones":[]},{"location":"Brazil South","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"snapshots","locations":["Southeast + Asia","East US 2","Central US","West Europe","East US","North Central US","South + Central US","West US","North Europe","East Asia","Brazil South","West US 2","West + Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada + East","Central India","South India","Australia East","Australia Southeast","Korea + Central","Korea South","West India","France Central","South Africa North","UAE + North","Australia Central","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"defaultApiVersion":"2020-06-30","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations/diskoperations","locations":["Southeast + Asia","East US 2","Central US","West Europe","East US","North Central US","South + Central US","West US","North Europe","East Asia","Brazil South","West US 2","West + Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada + East","Central India","South India","Australia East","Australia Southeast","Korea + Central","Korea South","West India","France Central","South Africa North","UAE + North","Australia Central","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"None"},{"resourceType":"diskEncryptionSets","locations":["Southeast + Asia","East US 2","Central US","West Europe","East US","North Central US","South + Central US","West US","North Europe","East Asia","Brazil South","West US 2","West + Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada + East","Central India","South India","Australia East","Australia Southeast","Korea + Central","Korea South","West India","France Central","South Africa North","UAE + North","Australia Central","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-30","2020-05-01","2019-11-01","2019-07-01"],"defaultApiVersion":"2020-06-30","capabilities":"SystemAssignedResourceIdentity, + SupportsTags, SupportsLocation"},{"resourceType":"diskAccesses","locations":["Southeast + Asia","East US 2","Central US","West Europe","East US","North Central US","South + Central US","West US","North Europe","East Asia","Brazil South","West US 2","West + Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada + East","Central India","South India","Australia East","Australia Southeast","Korea + Central","Korea South","West India","France Central","South Africa North","UAE + North","Australia Central","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-30","2020-05-01"],"defaultApiVersion":"2020-06-30","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"images","locations":["Southeast Asia","East + US 2","Central US","West Europe","East US","North Central US","South Central + US","West US","North Europe","East Asia","Brazil South","West US 2","West + Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada + East","Central India","South India","Australia East","Australia Southeast","Korea + Central","Korea South","West India","France Central","South Africa North","UAE + North","Australia Central","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview"],"defaultApiVersion":"2020-06-01","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations/logAnalytics","locations":["East + US","East US 2","West US","Central US","North Central US","South Central US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia + East","Australia Southeast","Australia Central","Brazil South","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01"],"capabilities":"None"},{"resourceType":"hostGroups","locations":["Central + US","East US 2","West Europe","Southeast Asia","France Central","North Europe","West + US 2","East US","UK South","Japan East","Japan West","East Asia","North Central + US","South Central US","Canada East","Korea Central","Brazil South","UK West","Canada + Central","West US","West Central US","Central India","South India","Australia + Southeast","Korea South","West India","South Africa North","UAE North","Australia + Central","Switzerland North","Germany West Central","Norway East","Australia + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01"],"defaultApiVersion":"2020-06-01","zoneMappings":[{"location":"East + US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West + Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central + US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast + Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North + Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK + South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia + East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South + Central US","zones":[]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany + West Central","zones":[]},{"location":"Brazil South","zones":[]}],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"hostGroups/hosts","locations":["Central + US","East US 2","West Europe","Southeast Asia","France Central","North Europe","West + US 2","East US","UK South","Japan East","Japan West","East Asia","North Central + US","South Central US","Canada East","Korea Central","Brazil South","UK West","Canada + Central","West US","West Central US","Central India","South India","Australia + Southeast","Korea South","West India","South Africa North","UAE North","Australia + Central","Switzerland North","Germany West Central","Norway East","Australia + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01"],"defaultApiVersion":"2020-06-01","zoneMappings":[{"location":"East + US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West + Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central + US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast + Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North + Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK + South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia + East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South + Central US","zones":[]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany + West Central","zones":[]},{"location":"Brazil South","zones":[]}],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"sharedVMExtensions","locations":["East + US 2 EUAP","Central US EUAP","West Central US","South Central US"],"apiVersions":["2019-12-01"],"defaultApiVersion":"2019-12-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"sharedVMExtensions/versions","locations":["East + US 2 EUAP","Central US EUAP","West Central US","South Central US"],"apiVersions":["2019-12-01"],"defaultApiVersion":"2019-12-01","capabilities":"SupportsTags, + SupportsLocation"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"natGateways","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East + US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West + Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central + US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast + Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North + Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK + South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia + East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South + Central US","zones":[]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany + West Central","zones":[]},{"location":"Brazil South","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"publicIPAddresses","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East + US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West + Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central + US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast + Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North + Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK + South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia + East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South + Central US","zones":[]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany + West Central","zones":[]},{"location":"Brazil South","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"customIpPrefixes","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01"],"defaultApiVersion":"2020-06-01","zoneMappings":[{"location":"East + US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West + Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central + US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast + Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North + Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK + South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia + East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South + Central US","zones":[]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany + West Central","zones":[]},{"location":"Brazil South","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"networkInterfaces","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"privateEndpoints","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"privateEndpointRedirectMaps","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"loadBalancers","locations":["West US","East + US","North Europe","West Europe","East Asia","Southeast Asia","North Central + US","South Central US","Central US","East US 2","Japan East","Japan West","Brazil + South","Australia East","Australia Southeast","Central India","South India","West + India","Canada Central","Canada East","West Central US","West US 2","UK West","UK + South","Korea Central","Korea South","France Central","Australia Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"networkSecurityGroups","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"applicationSecurityGroups","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"serviceEndpointPolicies","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"networkIntentPolicies","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","France + South","Australia Central","South Africa North","UAE North","Switzerland North","Germany + West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"routeTables","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"publicIPPrefixes","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East + US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West + Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central + US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast + Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North + Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK + South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia + East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South + Central US","zones":[]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany + West Central","zones":[]},{"location":"Brazil South","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"masterCustomIpPrefixes","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01"],"defaultApiVersion":"2020-06-01","zoneMappings":[{"location":"East + US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West + Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central + US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast + Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North + Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK + South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia + East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South + Central US","zones":[]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany + West Central","zones":[]},{"location":"Brazil South","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"ddosCustomPolicies","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"networkWatchers","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"networkWatchers/flowLogs","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"networkWatchers/pingMeshes","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"virtualNetworkGateways","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"localNetworkGateways","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"connections","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"applicationGateways","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East + US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West + Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central + US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast + Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North + Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK + South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia + East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South + Central US","zones":[]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany + West Central","zones":[]},{"location":"Brazil South","zones":[]}],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"defaultApiVersion":"2020-03-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"locations/operations","locations":[],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":[],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01"],"capabilities":"None"},{"resourceType":"locations/usages","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"],"capabilities":"None"},{"resourceType":"locations/availableDelegations","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"capabilities":"None"},{"resourceType":"locations/serviceTags","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"capabilities":"None"},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"capabilities":"None"},{"resourceType":"locations/availableServiceAliases","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"capabilities":"None"},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"],"capabilities":"None"},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"],"capabilities":"None"},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01"],"capabilities":"None"},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01"],"capabilities":"None"},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"capabilities":"None"},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"capabilities":"None"},{"resourceType":"locations/validateResourceOwnership","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"capabilities":"None"},{"resourceType":"locations/setResourceOwnership","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"capabilities":"None"},{"resourceType":"locations/effectiveResourceOwnership","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","capabilities":"None"},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-01-01"],"defaultApiVersion":"2020-01-01","capabilities":"None"},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01","capabilities":"None"},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01","capabilities":"None"},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01","capabilities":"None"},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"],"defaultApiVersion":"2018-08-01","capabilities":"None"},{"resourceType":"expressRouteCircuits","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"expressRouteServiceProviders","locations":[],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":[],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"],"capabilities":"None"},{"resourceType":"applicationGatewayAvailableSslOptions","locations":[],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"],"capabilities":"None"},{"resourceType":"applicationGatewayAvailableServerVariables","locations":[],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"capabilities":"None"},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":[],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"capabilities":"None"},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":[],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"capabilities":"None"},{"resourceType":"routeFilters","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"],"defaultApiVersion":"2020-03-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"bgpServiceCommunities","locations":[],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"],"capabilities":"None"},{"resourceType":"virtualWans","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"vpnSites","locations":["West US","East + US","North Europe","West Europe","East Asia","Southeast Asia","North Central + US","South Central US","Central US","East US 2","Japan East","Japan West","Brazil + South","Australia East","Australia Southeast","Central India","South India","West + India","Canada Central","Canada East","West Central US","West US 2","UK West","UK + South","Korea Central","Korea South","France Central","Australia Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"vpnServerConfigurations","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","South + Africa North","Switzerland North","Germany West Central","Norway East","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"virtualHubs","locations":["West US","East + US","North Europe","West Europe","East Asia","Southeast Asia","North Central + US","South Central US","Central US","East US 2","Japan East","Japan West","Brazil + South","Australia East","Australia Southeast","Central India","South India","West + India","Canada Central","Canada East","West Central US","West US 2","UK West","UK + South","Korea Central","Korea South","France Central","Australia Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"vpnGateways","locations":["West US","East + US","North Europe","West Europe","East Asia","Southeast Asia","North Central + US","South Central US","Central US","East US 2","Japan East","Japan West","Brazil + South","Australia East","Australia Southeast","Central India","South India","West + India","Canada Central","Canada East","West Central US","West US 2","UK West","UK + South","Korea Central","Korea South","France Central","Australia Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"p2sVpnGateways","locations":["West US","East + US","North Europe","West Europe","East Asia","Southeast Asia","North Central + US","South Central US","Central US","East US 2","Japan East","Japan West","Brazil + South","Australia East","Australia Southeast","Central India","South India","West + India","Canada Central","Canada East","West Central US","West US 2","UK West","UK + South","Korea Central","Korea South","France Central","Australia Central","UAE + North","South Africa North","Switzerland North","Germany West Central","Norway + East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"expressRouteGateways","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"firewallPolicies","locations":["UAE North","Australia + Central 2","UAE Central","Germany North","Central India","Korea South","Switzerland + North","Switzerland West","Japan West","France South","South Africa West","West + India","Canada East","South India","Germany West Central","Norway East","Norway + West","South Africa North","East Asia","Southeast Asia","Korea Central","Brazil + South","Japan East","UK West","West US","East US","North Europe","West Europe","West + Central US","South Central US","Australia East","Australia Central","Australia + Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France + Central","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"ipGroups","locations":["UAE North","Australia + Central 2","UAE Central","Germany North","Central India","Korea South","Switzerland + North","Switzerland West","Japan West","France South","South Africa West","West + India","Canada East","South India","Germany West Central","Norway East","Norway + West","South Africa North","East Asia","Southeast Asia","Korea Central","Brazil + South","Japan East","UK West","West US","East US","North Europe","West Europe","South + Central US","Australia East","Australia Central","Australia Southeast","UK + South","East US 2","West US 2","North Central US","Canada Central","France + Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"defaultApiVersion":"2019-08-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"securityPartnerProviders","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Central US + EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"azureFirewalls","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Brazil South","Australia + East","Australia Southeast","Central India","South India","West India","Canada + Central","Canada East","West Central US","West US 2","UK West","UK South","France + Central","Australia Central","Japan West","Japan East","Korea Central","Korea + South","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East + US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West + Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central + US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast + Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North + Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK + South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia + East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South + Central US","zones":[]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany + West Central","zones":[]},{"location":"Brazil South","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"azureFirewallFqdnTags","locations":[],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"virtualNetworkTaps","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"privateLinkServices","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"ddosProtectionPlans","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"networkProfiles","locations":["West US","East + US","North Europe","West Europe","East Asia","Southeast Asia","North Central + US","South Central US","Central US","East US 2","Japan East","Japan West","Brazil + South","Australia East","Australia Southeast","Central India","South India","West + India","Canada Central","Canada East","West Central US","West US 2","UK West","UK + South","Korea Central","Korea South","France Central","Australia Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"defaultApiVersion":"2020-03-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central + US","East US","East US 2","North Central US","South Central US","West US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil + South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01","capabilities":"None"},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central + US","East US","East US 2","North Central US","South Central US","West US","North + Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil + South","Australia East","Australia Southeast"],"apiVersions":["2020-04-01","2019-10-01","2019-03-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"locations/bareMetalTenants","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"capabilities":"None"},{"resourceType":"bastionHosts","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"virtualRouters","locations":["UAE North","Australia + Central 2","UAE Central","Germany North","Central India","Korea South","Switzerland + North","Switzerland West","Japan West","France South","South Africa West","West + India","Canada East","South India","Germany West Central","Norway East","Norway + West","South Africa North","East Asia","Southeast Asia","Korea Central","Brazil + South","Japan East","UK West","West US","East US","North Europe","West Europe","West + Central US","South Central US","Australia East","Australia Central","Australia + Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France + Central","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2019-07-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"networkVirtualAppliances","locations":["UAE + North","Australia Central 2","UAE Central","Germany North","Central India","Korea + South","Switzerland North","Switzerland West","Japan West","France South","South + Africa West","West India","Canada East","South India","Germany West Central","Norway + East","Norway West","South Africa North","East Asia","Southeast Asia","Korea + Central","Brazil South","Japan East","UK West","West US","East US","North + Europe","West Europe","West Central US","South Central US","Australia East","Australia + Central","Australia Southeast","UK South","East US 2","West US 2","North Central + US","Canada Central","France Central","Central US","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"defaultApiVersion":"2019-12-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"ipAllocations","locations":["West US","East + US","North Europe","West Europe","East Asia","Southeast Asia","North Central + US","South Central US","Central US","East US 2","Japan East","Japan West","Brazil + South","Australia East","Australia Southeast","Central India","South India","West + India","Canada Central","Canada East","West Central US","West US 2","UK West","UK + South","Korea Central","Korea South","France Central","Australia Central","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West + Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"],"capabilities":"None"},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"networkWatchers/lenses","locations":["Central + US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-07-01","capabilities":"None"},{"resourceType":"frontdoors","locations":["Central + US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North + Central US","South Central US","West US","North Europe","West Europe","East + Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia + East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central + US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North + Central US","South Central US","West US","North Europe","West Europe","East + Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia + East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01","capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central + US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North + Central US","South Central US","West US","North Europe","West Europe","East + Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia + East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01","capabilities":"None"},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East + US 2 EUAP","global","Central US","East US","East US 2","North Central US","South + Central US","West US","North Europe","West Europe","East Asia","Southeast + Asia","Japan East","Japan West","Brazil South","Australia East","Australia + Southeast"],"apiVersions":["2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-04-01","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"networkExperimentProfiles","locations":["Central + US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North + Central US","South Central US","West US","West US 2","North Europe","West + Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia + East","Australia Southeast"],"apiVersions":["2019-11-01"],"defaultApiVersion":"2019-11-01","capabilities":"SupportsTags, + SupportsLocation"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Providers.Test","namespace":"Providers.Test","resourceTypes":[{"resourceType":"statelessResources","locations":["West + US","West US 2","East US","Central US","North Central US","South Central US","West + Central US","West Europe","North Europe","East Asia","Southeast Asia","West + India","South India","Central India","Canada Central","Canada East","UK South","UK + West","France Central","Australia Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"statefulResources","locations":["West + US","West US 2","East US","North Central US","South Central US","West Central + US","North Europe","East Asia","Southeast Asia","West India","South India","Central + India","Canada Central","Canada East","UK South","UK West","France Central","Australia + Central","Central US","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01"],"zoneMappings":[{"location":"Central + US","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"East + US 2 EUAP","zones":[]},{"location":"Central US EUAP","zones":[]},{"location":"France + Central","zones":[]},{"location":"Southeast Asia","zones":[]},{"location":"West + US 2","zones":[]},{"location":"North Europe","zones":[]},{"location":"East + US","zones":[]},{"location":"UK South","zones":[]},{"location":"South Central + US","zones":[]},{"location":"Canada Central","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"statefulResources/nestedResources","locations":["West + US","West US 2","East US","Central US","North Central US","South Central US","West + Central US","West Europe","North Europe","East Asia","Southeast Asia","West + India","South India","Central India","Canada Central","Canada East","UK South","UK + West","France Central","Australia Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"statefulIbizaEngines","locations":["West + US","West US 2","East US","Central US","North Central US","South Central US","West + Central US","West Europe","North Europe","East Asia","Southeast Asia","West + India","South India","Central India","Canada Central","Canada East","UK South","UK + West","France Central","Australia Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2014-04-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"statefulResources/metricDefinitions","locations":[],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"statefulResources/metrics","locations":[],"apiVersions":["2014-04-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Web","namespace":"Microsoft.Web","authorization":{"applicationId":"abfa0a7c-a6b6-4736-8310-5855508787cd","roleDefinitionId":"f47ed98b-b063-4a5b-9e10-4b9b44fa7735"},"resourceTypes":[{"resourceType":"publishingUsers","locations":["Central + US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West + US","East US","Japan West","Japan East","East Asia","East US 2","North Central + US","South Central US","Brazil South","Australia East","Australia Southeast","West + India","Central India","South India","Canada Central","Canada East","West + Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT + East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central + US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia + Central","Switzerland North","Germany West Central","Norway East","UAE North","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"ishostnameavailable","locations":["Central + US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West + US","East US","Japan West","Japan East","East Asia","East US 2","North Central + US","South Central US","Brazil South","Australia East","Australia Southeast","West + India","Central India","South India","Canada Central","Canada East","West + Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT + East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central + US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia + Central","Switzerland North","Germany West Central","Norway East","UAE North","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"validate","locations":["Central + US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West + US","East US","Japan West","Japan East","East Asia","East US 2","North Central + US","South Central US","Brazil South","Australia East","Australia Southeast","West + India","Central India","South India","Canada Central","Canada East","West + Central US","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT + North Europe","East US 2 (Stage)","East Asia (Stage)","Central US (Stage)","North + Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland + North","Germany West Central","Norway East","UAE North","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"isusernameavailable","locations":["Central + US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West + US","East US","Japan West","Japan East","East Asia","East US 2","North Central + US","South Central US","Brazil South","Australia East","Australia Southeast","West + India","Central India","South India","Canada Central","Canada East","West + Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT + East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central + US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia + Central","Switzerland North","Germany West Central","Norway East","UAE North","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"sourceControls","locations":["Central + US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West + US","East US","Japan West","Japan East","East Asia","East US 2","North Central + US","South Central US","Brazil South","Australia East","Australia Southeast","West + India","Central India","South India","Canada Central","Canada East","West + Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT + East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central + US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia + Central","Switzerland North","Germany West Central","Norway East","UAE North","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"availableStacks","locations":["Central + US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West + US","East US","Japan West","Japan East","East Asia","East US 2","North Central + US","South Central US","Brazil South","Australia East","Australia Southeast","West + India","Central India","South India","Canada Central","Canada East","West + Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT + East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central + US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia + Central","Switzerland North","Germany West Central","Norway East","UAE North","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"staticSites","locations":["West + US 2","Central US","East US 2","West Europe","East Asia","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2020-06-01","2019-12-01-preview","2019-08-01"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"locations/previewStaticSiteWorkflowFile","locations":["West + US 2","Central US","East US 2","West Europe","East Asia","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2020-06-01","2019-12-01-preview","2019-08-01"],"defaultApiVersion":"2020-06-01","capabilities":"None"},{"resourceType":"listSitesAssignedToHostName","locations":["Central + US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West + US","East US","Japan West","Japan East","East Asia","East US 2","North Central + US","South Central US","Brazil South","Australia East","Australia Southeast","West + India","Central India","South India","Canada Central","Canada East","West + Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT + East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central + US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia + Central","Switzerland North","Germany West Central","Norway East","UAE North","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"locations/getNetworkPolicies","locations":["Central + US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West + US","East US","Japan West","Japan East","East Asia","East US 2","North Central + US","South Central US","Brazil South","Australia East","Australia Southeast","West + India","Central India","South India","Canada Central","Canada East","UK West","UK + South","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North + Europe","East US 2 (Stage)","Central US (Stage)","France Central","West Central + US","East Asia (Stage)","North Central US (Stage)","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"locations/operations","locations":["South + Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East + US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East + US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West + Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan + West","Central India","Canada East","Korea Central","France Central","West + India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","South India","West Central US","East Asia (Stage)","North Central + US (Stage)","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2019-01-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["South + Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East + US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East + US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West + Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan + West","Central India","Canada East","Korea Central","France Central","West + India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","South India","West Central US","East Asia (Stage)","North Central + US (Stage)","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2019-01-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"sites/networkConfig","locations":["South + Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East + US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia + East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada + East","Korea Central","France Central","North Europe","West India","East US + 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"sites/slots/networkConfig","locations":["South + Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East + US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia + East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada + East","Korea Central","France Central","North Europe","West India","East US + 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"sites/hostNameBindings","locations":["South + Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East + US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia + East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada + East","Korea Central","France Central","North Europe","West India","East US + 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"sites/slots/hostNameBindings","locations":["South + Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East + US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia + East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada + East","Korea Central","France Central","North Europe","West India","East US + 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"operations","locations":["Central + US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West + US","East US","Japan West","Japan East","East Asia","East US 2","North Central + US","South Central US","Brazil South","Australia East","Australia Southeast","West + India","Central India","South India","Canada Central","Canada East","West + Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT + East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central + US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia + Central","Switzerland North","Germany West Central","Norway East","UAE North","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"certificates","locations":["South + Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East + US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia + East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada + East","Korea Central","France Central","North Europe","West India","East US + 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","East Asia","East US 2 EUAP","Central US EUAP","West US","Central + US","West US 2","East US"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossSubscriptionResourceMove, + SupportsTags, SupportsLocation"},{"resourceType":"serverFarms","locations":["South + Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East + US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil + South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea + Central","France Central","North Europe","West India","East US 2","Australia + Central","Germany West Central","Norway East","UAE North","Switzerland North","North + Central US","UK West","Australia Southeast","Korea South","Canada Central","West + Europe","South India","West Central US","East Asia (Stage)","North Central + US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central + US","West US 2","East US","East Asia"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"sites","locations":["South + Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East + US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil + South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea + Central","France Central","North Europe","West India","East US 2","Australia + Central","Germany West Central","Norway East","UAE North","Switzerland North","North + Central US","UK West","Australia Southeast","Korea South","Canada Central","West + Europe","South India","West Central US","East Asia (Stage)","North Central + US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central + US","West US 2","East US","East Asia"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"sites/slots","locations":["South Central + US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East + US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil + South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea + Central","France Central","North Europe","West India","East US 2","Australia + Central","Germany West Central","Norway East","UAE North","Switzerland North","North + Central US","UK West","Australia Southeast","Korea South","Canada Central","West + Europe","South India","West Central US","East Asia (Stage)","North Central + US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central + US","West US 2","East US","East Asia"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"runtimes","locations":[],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"recommendations","locations":[],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"resourceHealthMetadata","locations":[],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"georegions","locations":[],"apiVersions":["2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"sites/premieraddons","locations":["South + Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East + US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia + East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada + East","Korea Central","France Central","North Europe","West India","East US + 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","East Asia","East US 2 EUAP","Central US EUAP","West US","Central + US","West US 2","East US"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"hostingEnvironments","locations":["South + Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East + US 2 (Stage)","Central US (Stage)","South Africa North","East US 2","UK South","Southeast + Asia","North Europe","Japan East","West Europe","Australia East","Brazil South","Japan + West","Central India","Canada East","Korea Central","France Central","West + India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","South India","West Central US","East Asia (Stage)","North Central + US (Stage)","East Asia","West US","Central US","West US 2","East US","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"zoneMappings":[{"location":"East + US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West + Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central + US EUAP","zones":[]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast + Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North + Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK + South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia + East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South + Central US","zones":[]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany + West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]}],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"hostingEnvironments/multiRolePools","locations":["South + Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East + US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia + East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada + East","Korea Central","France Central","North Europe","West India","East US + 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"hostingEnvironments/workerPools","locations":["South + Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East + US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia + East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada + East","Korea Central","France Central","North Europe","West India","East US + 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"kubeEnvironments","locations":["North + Central US (Stage)"],"apiVersions":["2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"deploymentLocations","locations":["Central + US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West + US","East US","Japan West","Japan East","East Asia","East US 2","North Central + US","South Central US","Brazil South","Australia East","Australia Southeast","West + India","Central India","South India","Canada Central","Canada East","West + Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT + East Asia","MSFT North Europe","East US 2 (Stage)","Central US (Stage)","North + Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland + North","Germany West Central","Norway East","UAE North"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"deletedSites","locations":["South + Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East + US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia + East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada + East","Korea Central","France Central","North Europe","West India","East US + 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"locations/deletedSites","locations":["South + Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East + US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia + East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada + East","Korea Central","France Central","North Europe","West India","East US + 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"ishostingenvironmentnameavailable","locations":[],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["South + Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East + US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil + South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea + Central","France Central","North Europe","West India","East US 2","Australia + Central","Germany West Central","Norway East","UAE North","Switzerland North","North + Central US","UK West","Australia Southeast","Korea South","Canada Central","West + Europe","South India","West Central US","East Asia (Stage)","North Central + US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central + US","West US 2","East US","East Asia"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-11-01","2016-08-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"connections","locations":["North + Central US","Central US","South Central US","North Europe","West Europe","East + Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan + East","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","West US 2","West Central US","Canada Central","Canada + East","UK South","UK West","France Central","France South","Korea Central","Korea + South","South Africa West","South Africa North","UAE Central","Switzerland + North","Germany North","Germany West Central","Central US EUAP","East US 2 + EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"customApis","locations":["North + Central US","Central US","South Central US","North Europe","West Europe","East + Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan + East","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","West US 2","West Central US","Canada Central","Canada + East","UK South","UK West","France Central","France South","Korea Central","Korea + South","South Africa West","South Africa North","UAE Central","Switzerland + North","Germany North","Germany West Central","Central US EUAP","East US 2 + EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"locations/listWsdlInterfaces","locations":["North + Central US","Central US","South Central US","North Europe","West Europe","East + Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan + East","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","West US 2","West Central US","Canada Central","Canada + East","UK South","UK West","France Central","France South","Korea Central","Korea + South","South Africa West","South Africa North","UAE Central","Switzerland + North","Germany North","Germany West Central","Central US EUAP","East US 2 + EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"locations/extractApiDefinitionFromWsdl","locations":["North + Central US","Central US","South Central US","North Europe","West Europe","East + Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan + East","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","West US 2","West Central US","Canada Central","Canada + East","UK South","UK West","France Central","France South","Korea Central","Korea + South","South Africa West","South Africa North","UAE Central","Switzerland + North","Germany North","Germany West Central","Central US EUAP","East US 2 + EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"locations/managedApis","locations":["North + Central US","Central US","South Central US","North Europe","West Europe","East + Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan + East","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","West US 2","West Central US","Canada Central","Canada + East","UK South","UK West","France Central","France South","Korea Central","Korea + South","South Africa West","South Africa North","UAE Central","Switzerland + North","Germany North","Germany West Central","Central US EUAP","East US 2 + EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"locations/runtimes","locations":["North + Central US","Central US","South Central US","North Europe","West Europe","East + Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan + East","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","West US 2","West Central US","Canada Central","Canada + East","UK South","UK West","France Central","France South","Korea Central","Korea + South","South Africa West","South Africa North","UAE Central","Switzerland + North","Germany North","Germany West Central","Central US EUAP","East US 2 + EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"locations/apiOperations","locations":["North + Central US","Central US","South Central US","North Europe","West Europe","East + Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan + East","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","West US 2","West Central US","Canada Central","Canada + East","UK South","UK West","France Central","France South","Korea Central","Korea + South","South Africa West","South Africa North","UAE Central","Switzerland + North","Germany North","Germany West Central","Central US EUAP","East US 2 + EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"connectionGateways","locations":["North + Central US","Central US","South Central US","North Europe","West Europe","East + Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan + East","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","West US 2","West Central US","Canada Central","Canada + East","UK South","UK West","France Central","France South","Korea Central","Korea + South","South Africa West","South Africa North","UAE Central","Switzerland + North","Germany North","Germany West Central","Central US EUAP","East US 2 + EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations/connectionGatewayInstallations","locations":["North + Central US","Central US","South Central US","North Europe","West Europe","East + Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan + East","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","West US 2","West Central US","Canada Central","Canada + East","UK South","UK West","France Central","France South","Korea Central","Korea + South","South Africa West","South Africa North","UAE Central","Switzerland + North","Germany North","Germany West Central","Central US EUAP","East US 2 + EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["Central + US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West + US","East US","Japan West","Japan East","East Asia","East US 2","North Central + US","South Central US","Brazil South","Australia East","Australia Southeast","West + India","Central India","South India","Canada Central","Canada East","West + Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT + East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central + US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia + Central","Switzerland North","Germany West Central","Norway East","UAE North","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"billingMeters","locations":["Central + US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West + US","East US","Japan West","Japan East","East Asia","East US 2","North Central + US","South Central US","Brazil South","Australia East","Australia Southeast","West + India","Central India","South India","Canada Central","Canada East","West + Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT + East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central + US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia + Central","Switzerland North","Germany West Central","Norway East","UAE North","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"verifyHostingEnvironmentVnet","locations":["Central + US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West + US","East US","Japan West","Japan East","East Asia","East US 2","North Central + US","South Central US","Brazil South","Australia East","Australia Southeast","West + India","Central India","South India","Canada Central","Canada East","West + Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT + East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central + US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia + Central","Switzerland North","Germany West Central","Norway East","UAE North","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"serverFarms/eventGridFilters","locations":["South + Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East + US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil + South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea + Central","France Central","North Europe","West India","East US 2","Australia + Central","Germany West Central","Norway West","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central + US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"capabilities":"None"},{"resourceType":"sites/eventGridFilters","locations":["South + Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East + US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil + South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea + Central","France Central","North Europe","West India","East US 2","Australia + Central","Germany West Central","Norway West","Norway East","UAE North","Switzerland + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central + US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"capabilities":"None"},{"resourceType":"sites/slots/eventGridFilters","locations":["South + Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East + US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil + South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea + Central","France Central","North Europe","West India","East US 2","Australia + Central","Germany West Central","Norway West","Norway East","Switzerland North","UAE + North","North Central US","UK West","Australia Southeast","Korea South","Canada + Central","West Europe","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central + US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"capabilities":"None"},{"resourceType":"hostingEnvironments/eventGridFilters","locations":["North + Central US","South Central US","Brazil South","Canada East","UK West","MSFT + West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central + US (Stage)","South Africa North","East US 2","UK South","Southeast Asia","North + Europe","Japan East","West Europe","Australia East","Japan West","Central + India","Korea Central","France Central","West India","Australia Central","Germany + West Central","Norway East","Switzerland North","UAE North","Australia Southeast","Korea + South","Canada Central","South India","West Central US","East Asia (Stage)","North + Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"capabilities":"None"},{"resourceType":"serverFarms/firstPartyApps","locations":["South + Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East + US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia + East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK + South","Canada East","Korea Central","France Central","North Europe","West + US 2","East US","West India","East US 2","Australia Central","Germany West + Central","Norway West","Norway East","UAE North","Switzerland North","North + Central US","UK West","Australia Southeast","Korea South","Canada Central","West + Europe","South India","West Central US","East Asia (Stage)","North Central + US (Stage)","East Asia","Japan East","South Africa West","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"capabilities":"None"},{"resourceType":"serverFarms/firstPartyApps/keyVaultSettings","locations":["South + Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East + US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia + East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK + South","Canada East","Korea Central","France Central","North Europe","West + US 2","East US","West India","East US 2","Australia Central","Germany West + Central","Norway West","Norway East","UAE North","Switzerland North","North + Central US","UK West","Australia Southeast","Korea South","Canada Central","West + Europe","South India","West Central US","East Asia (Stage)","North Central + US (Stage)","East Asia","Japan East","South Africa West","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/microsoft.insights","namespace":"microsoft.insights","authorizations":[{"applicationId":"6bccf540-eb86-4037-af03-7fa058c2db75","roleDefinitionId":"89dcede2-9219-403a-9723-d3c6473f9472"},{"applicationId":"11c174dc-1945-4a9a-a36b-c79a0f246b9b","roleDefinitionId":"dd9d4347-f397-45f2-b538-85f21c90037b"},{"applicationId":"035f9e1d-4f00-4419-bf50-bf2d87eb4878","roleDefinitionId":"323795fe-ba3d-4f5a-ad42-afb4e1ea9485"},{"applicationId":"f5c26e74-f226-4ae8-85f0-b4af0080ac9e","roleDefinitionId":"529d7ae6-e892-4d43-809d-8547aeb90643"},{"applicationId":"b503eb83-1222-4dcc-b116-b98ed5216e05","roleDefinitionId":"68699c37-c689-44d4-9248-494b782d46ae"},{"applicationId":"ca7f3f0b-7d91-482c-8e09-c5d840d0eac5","roleDefinitionId":"5d5a2e56-9835-44aa-93db-d2f19e155438"},{"applicationId":"3af5a1e8-2459-45cb-8683-bcd6cccbcc13","roleDefinitionId":"b1309299-720d-4159-9897-6158a61aee41"},{"applicationId":"6a0a243c-0886-468a-a4c2-eff52c7445da","roleDefinitionId":"d2eda64b-c5e6-4930-8642-2d80ecd7c2e2"},{"applicationId":"707be275-6b9d-4ee7-88f9-c0c2bd646e0f","roleDefinitionId":"fa027d90-6ba0-4c33-9a54-59edaf2327e7"},{"applicationId":"461e8683-5575-4561-ac7f-899cc907d62a","roleDefinitionId":"68699c37-c689-44d4-9248-494b782d46ae"},{"applicationId":"562db366-1b96-45d2-aa4a-f2148cef2240","roleDefinitionId":"4109c8be-c1c8-4be0-af52-9d3c76c140ab"},{"applicationId":"e933bd07-d2ee-4f1d-933c-3752b819567b","roleDefinitionId":"abbcfd44-e662-419a-9b5a-478f8e2f57c9"},{"applicationId":"f6b60513-f290-450e-a2f3-9930de61c5e7","roleDefinitionId":"4ef11659-08ac-48af-98a7-25fb6b1e1bc4"},{"applicationId":"12743ff8-d3de-49d0-a4ce-6c91a4245ea0","roleDefinitionId":"207b20a7-6802-4ae4-aaa2-1a36dd45bba0"}],"resourceTypes":[{"resourceType":"components","locations":["East + US","South Central US","North Europe","West Europe","Southeast Asia","West + US 2","UK South","Canada Central","Central India","Japan East","Australia + East","Korea Central","France Central","Central US","East US 2","East Asia","West + US","South Africa North","North Central US","Brazil South","Switzerland North","Australia + Southeast","Australia Central 2","Germany West Central","Switzerland West","UK + West","Australia Central","West Central US"],"apiVersions":["2020-02-02-preview","2018-05-01-preview","2015-05-01","2014-12-01-preview","2014-08-01","2014-04-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"components/query","locations":["West + Central US"],"apiVersions":["2018-04-20"],"capabilities":"None"},{"resourceType":"components/metadata","locations":["West + Central US"],"apiVersions":["2018-04-20"],"capabilities":"None"},{"resourceType":"components/metrics","locations":["East + US","South Central US","North Europe","West Europe","Southeast Asia","West + US 2","UK South","Central India","Canada Central","Japan East","Australia + East","Korea Central","France Central","East US 2","East Asia","West US","Central + US","South Africa North","North Central US","Brazil South","Switzerland North","Australia + Southeast","West Central US"],"apiVersions":["2018-04-20","2014-04-01"],"capabilities":"None"},{"resourceType":"components/events","locations":["East + US","South Central US","North Europe","West Europe","Southeast Asia","West + US 2","UK South","Central India","Canada Central","Japan East","Australia + East","Korea Central","France Central","East US 2","East Asia","West US","Central + US","South Africa North","North Central US","West Central US"],"apiVersions":["2018-04-20"],"capabilities":"None"},{"resourceType":"webtests","locations":["East + US","South Central US","North Europe","West Europe","Southeast Asia","West + US 2","UK South","Central India","Canada Central","Japan East","Australia + East","Korea Central","France Central","Central US","East US 2","East Asia","West + US","South Africa North","North Central US","Brazil South","Switzerland North","Australia + Southeast","Australia Central 2","Germany West Central","Switzerland West","UK + West","Australia Central","West Central US"],"apiVersions":["2018-05-01-preview","2015-05-01","2014-08-01","2014-04-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"webtests/getTestResultFile","locations":["East + US","South Central US","North Europe","West Europe","Southeast Asia","West + US 2","UK South","Central India","Canada Central","Japan East","Australia + East","Korea Central","France Central","East US 2","East Asia","West US","Central + US","South Africa North","North Central US","West Central US"],"apiVersions":["2020-02-10-preview"],"capabilities":"None"},{"resourceType":"scheduledqueryrules","locations":["West + Central US","East US","West Europe","Central India","Canada Central","Australia + Southeast","Japan East","Southeast Asia","UK South","South Central US","North + Europe","West US 2","Australia Central","Australia East","Korea Central","France + Central","Central US","East US 2","East Asia","West US","North Central US","South + Africa North","Brazil South","UK West","Switzerland North","Switzerland West","UAE + Central","Germany West Central","Australia Central 2","Brazil SouthEast","Norway + East","East US 2 EUAP"],"apiVersions":["2018-04-16"],"defaultApiVersion":"2018-04-16","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"components/pricingPlans","locations":["East + US","South Central US","North Europe","West Europe","Southeast Asia","West + US 2","West Central US"],"apiVersions":["2017-10-01"],"capabilities":"None"},{"resourceType":"migrateToNewPricingModel","locations":["East + US","South Central US","North Europe","West Europe","Southeast Asia","West + US 2","West Central US"],"apiVersions":["2017-10-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"rollbackToLegacyPricingModel","locations":["East + US","South Central US","North Europe","West Europe","Southeast Asia","West + US 2","West Central US"],"apiVersions":["2017-10-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"listMigrationdate","locations":["East + US","South Central US","North Europe","West Europe","Southeast Asia","West + US 2","West Central US"],"apiVersions":["2017-10-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"logprofiles","locations":[],"apiVersions":["2016-03-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"}],"capabilities":"None"},{"resourceType":"migratealertrules","locations":[],"apiVersions":["2018-03-01"],"capabilities":"None"},{"resourceType":"metricalerts","locations":["Global"],"apiVersions":["2018-03-01","2017-09-01-preview"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"alertrules","locations":["West US","East + US","North Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan + West","North Central US","South Central US","East US 2","Central US","Australia + East","Australia Southeast","Brazil South","UK South","UK West","South India","Central + India","West India","Canada East","Canada Central","West Central US","West + US 2","Korea South","Korea Central","Australia Central","Australia Central + 2","France Central","South Africa North","UAE North","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2016-03-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"autoscalesettings","locations":["West + US","East US","North Europe","South Central US","East US 2","Central US","Australia + Southeast","Brazil South","UK South","UK West","South India","Central India","West + India","Canada East","Canada Central","West Central US","West US 2","Korea + South","Korea Central","Australia Central","Australia Central 2","France Central","West + Europe","East Asia","Southeast Asia","Japan East","Japan West","North Central + US","Australia East","South Africa North","UAE North","Switzerland North","Germany + West Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2015-04-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-04-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"eventtypes","locations":[],"apiVersions":["2017-03-01-preview","2016-09-01-preview","2015-04-01","2014-11-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-04-01"}],"capabilities":"SupportsExtension"},{"resourceType":"locations","locations":["East + US"],"apiVersions":["2015-04-01","2014-04-01"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":[],"apiVersions":["2015-04-01","2014-04-01"],"capabilities":"None"},{"resourceType":"vmInsightsOnboardingStatuses","locations":[],"apiVersions":["2018-11-27-preview"],"capabilities":"SupportsExtension"},{"resourceType":"operations","locations":[],"apiVersions":["2015-04-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-04-01"}],"capabilities":"None"},{"resourceType":"diagnosticSettings","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","Japan + East","Japan West","North Central US","South Central US","East US 2","Central + US","Australia East","Australia Southeast","Brazil South","UK South","UK West","South + India","Central India","West India","Canada East","Canada Central","West Central + US","West US 2","Korea South","Korea Central","Australia Central","Australia + Central 2","France Central","South Africa North","UAE North","Switzerland + North","Germany West Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-05-01-preview","2016-09-01","2015-07-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-09-01"}],"capabilities":"SupportsExtension"},{"resourceType":"diagnosticSettingsCategories","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","Japan + East","Japan West","North Central US","South Central US","East US 2","Central + US","Australia East","Australia Southeast","Brazil South","UK South","UK West","South + India","Central India","West India","Canada East","Canada Central","West Central + US","West US 2","Korea South","Korea Central","Australia Central","Australia + Central 2","France Central","South Africa North","UAE North","Switzerland + North","Germany West Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-05-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"extendedDiagnosticSettings","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","Japan + East","Japan West","North Central US","South Central US","East US 2","Central + US","Australia East","Australia Southeast","Brazil South","UK South","UK West","South + India","Central India","West India","Canada East","Canada Central","West Central + US","West US 2","Korea South","Korea Central","Australia Central","Australia + Central 2","France Central","South Africa North","UAE North","Switzerland + North","Germany West Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-02-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-02-01"}],"capabilities":"SupportsExtension"},{"resourceType":"metricDefinitions","locations":["East + US","West US","West Europe","East Asia","Southeast Asia","Japan East","Japan + West","North Central US","South Central US","East US 2","Canada East","Canada + Central","Central US","Australia East","Australia Southeast","Australia Central","Australia + Central 2","Brazil South","Brazil Southeast","South India","Central India","West + India","North Europe","West US 2","West Central US","Korea South","Korea Central","UK + South","UK West","France Central","South Africa North","South Africa West","UAE + North","Switzerland North","Germany West Central","Norway East","East US 2 + EUAP","Central US EUAP"],"apiVersions":["2018-01-01","2017-12-01-preview","2017-09-01-preview","2017-05-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-01-01"}],"capabilities":"SupportsExtension"},{"resourceType":"logDefinitions","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","Japan + East","Japan West","North Central US","South Central US","East US 2","Central + US","Australia East","Australia Southeast","Brazil South","UK South","UK West","South + India","Central India","West India","Canada East","Canada Central","West Central + US","West US 2","Korea South","Korea Central","Australia Central","Australia + Central 2","France Central","East US 2 EUAP","Central US EUAP"],"apiVersions":["2015-07-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-07-01"}],"capabilities":"SupportsExtension"},{"resourceType":"eventCategories","locations":[],"apiVersions":["2015-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-04-01"}],"capabilities":"None"},{"resourceType":"metrics","locations":["East + US","West US","West Europe","East Asia","Southeast Asia","Japan East","Japan + West","North Central US","South Central US","East US 2","Canada East","Canada + Central","Central US","Australia East","Australia Southeast","Australia Central","Australia + Central 2","Brazil South","Brazil Southeast","South India","Central India","West + India","North Europe","West US 2","West Central US","Korea South","Korea Central","UK + South","UK West","France Central","South Africa North","South Africa West","UAE + North","Switzerland North","Germany West Central","Norway East","East US 2 + EUAP","Central US EUAP"],"apiVersions":["2019-07-01","2018-01-01","2017-12-01-preview","2017-09-01-preview","2017-05-01-preview","2016-09-01","2016-06-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-01-01"}],"capabilities":"SupportsExtension"},{"resourceType":"metricbatch","locations":[],"apiVersions":["2019-01-01-preview"],"capabilities":"None"},{"resourceType":"metricNamespaces","locations":["East + US","West US","West Europe","East Asia","Southeast Asia","Japan East","Japan + West","North Central US","South Central US","East US 2","Canada East","Canada + Central","Central US","Australia East","Australia Southeast","Australia Central","Australia + Central 2","Brazil South","Brazil Southeast","South India","Central India","West + India","North Europe","West US 2","West Central US","Korea South","Korea Central","UK + South","UK West","France Central","South Africa North","South Africa West","UAE + North","Switzerland North","Germany West Central","Norway East","East US 2 + EUAP","Central US EUAP"],"apiVersions":["2018-01-01","2017-12-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"actiongroups","locations":["Global"],"apiVersions":["2019-06-01","2019-03-01","2018-09-01","2018-03-01","2017-04-01","2017-03-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"activityLogAlerts","locations":["Global"],"apiVersions":["2017-04-01","2017-03-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"baseline","locations":["East US","West + US","West Europe","East Asia","Southeast Asia","Japan East","Japan West","North + Central US","South Central US","East US 2","Canada East","Canada Central","Central + US","Australia East","Australia Southeast","Australia Central","Australia + Central 2","Brazil South","South India","Central India","West India","North + Europe","Norway East","Germany West Central","Switzerland North","West US + 2","West Central US","Korea South","Korea Central","UK South","UK West","France + Central","South Africa North","UAE North","East US 2 EUAP","Central US EUAP"],"apiVersions":["2018-09-01","2017-11-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"metricbaselines","locations":["East + US","West US","West Europe","East Asia","Southeast Asia","Japan East","Japan + West","North Central US","South Central US","East US 2","Canada East","Canada + Central","Central US","Australia East","Australia Southeast","Australia Central","Australia + Central 2","Brazil South","South India","Central India","West India","North + Europe","Norway East","Germany West Central","Switzerland North","West US + 2","West Central US","Korea South","Korea Central","UK South","UK West","France + Central","South Africa North","UAE North","East US 2 EUAP","Central US EUAP"],"apiVersions":["2019-03-01","2018-09-01"],"capabilities":"SupportsExtension"},{"resourceType":"calculatebaseline","locations":[],"apiVersions":["2018-09-01","2017-11-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"workbooks","locations":["West + Europe","South Central US","East US","North Europe","Southeast Asia","West + US 2","Japan East","Australia East","Korea Central","France Central","Central + US","East US 2","East Asia","West US","Canada Central","Central India","UK + South","South Africa North","North Central US","Brazil South","Switzerland + North","Australia Southeast","West Central US","Central US EUAP","East US + 2 EUAP"],"apiVersions":["2020-02-12","2018-06-17-preview","2018-06-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"workbooktemplates","locations":["West + Europe","South Central US","East US","North Europe","Southeast Asia","West + US 2","Japan East","Australia East","Korea Central","France Central","Central + US","East US 2","East Asia","West US","Canada Central","Central India","UK + South","South Africa North","North Central US","Brazil South","Switzerland + North","Australia Southeast","West Central US"],"apiVersions":["2019-10-17-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"myWorkbooks","locations":["West + Europe","South Central US","East US","North Europe","Southeast Asia","West + US 2","UK South","Canada Central","Central India","Japan East","Australia + East","Korea Central","France Central","Central US","East US 2","East Asia","West + US","South Africa North","North Central US","Brazil South","Switzerland North","Australia + Southeast","West Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-02-12","2018-06-17-preview","2018-06-15-preview","2018-06-01-preview","2016-06-15-preview"],"capabilities":"SystemAssignedResourceIdentity, + SupportsExtension"},{"resourceType":"logs","locations":["East US","East US + 2","West US","Central US","North Central US","South Central US","North Europe","West + Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia + East","Australia Southeast","Brazil South","South India","Central India","West + India","Canada Central","Canada East","West US 2","West Central US","UK South","UK + West","Korea Central","Korea South","France Central","France South","Australia + Central","South Africa North","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"transactions","locations":["East + US","South Central US","North Europe","West Europe","Southeast Asia","West + US 2","UK South","Central India","Canada Central","Japan East","Australia + East","Korea Central","France Central","East US 2","East Asia","West US","Central + US","South Africa North","North Central US","West Central US"],"apiVersions":["2019-10-17-preview"],"capabilities":"SupportsExtension"},{"resourceType":"topology","locations":["East + US","South Central US","North Europe","West Europe","Southeast Asia","West + US 2","UK South","Central India","Canada Central","Japan East","Australia + East","Korea Central","France Central","East US 2","East Asia","West US","Central + US","South Africa North","North Central US","West Central US"],"apiVersions":["2019-10-17-preview"],"capabilities":"SupportsExtension"},{"resourceType":"generateLiveToken","locations":["West + Central US"],"apiVersions":["2020-06-02-preview"],"capabilities":"SupportsExtension"},{"resourceType":"dataCollectionRules","locations":["Australia + Southeast","East US","Central US","West Europe","West US 2","Southeast Asia","East + US 2","UK South","North Europe","West US","East US 2 EUAP"],"apiVersions":["2019-11-01-preview"],"defaultApiVersion":"2019-11-01-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"dataCollectionRuleAssociations","locations":["Australia + Southeast","East US","Central US","West Europe","West US 2","Southeast Asia","East + US 2","UK South","North Europe","West US","East US 2 EUAP"],"apiVersions":["2019-11-01-preview"],"defaultApiVersion":"2019-11-01-preview","capabilities":"SupportsExtension"},{"resourceType":"components/linkedstorageaccounts","locations":["East + US","South Central US","North Europe","West Europe","Southeast Asia","West + US 2","UK South","Canada Central","Central India","Japan East","Australia + East","Korea Central","France Central","Central US","East US 2","East Asia","West + US","South Africa North","North Central US","Brazil South","Switzerland North","Norway + East","Norway West","Australia Southeast","West Central US"],"apiVersions":["2020-03-01-preview"],"capabilities":"None"},{"resourceType":"querypacks","locations":["West + Central US"],"apiVersions":["2019-09-01-preview"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"privateLinkScopes","locations":["Global"],"apiVersions":["2019-10-17-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"privateLinkScopes/privateEndpointConnections","locations":["Global"],"apiVersions":["2019-10-17-preview"],"capabilities":"None"},{"resourceType":"privateLinkScopes/privateEndpointConnectionProxies","locations":["Global"],"apiVersions":["2019-10-17-preview"],"capabilities":"None"},{"resourceType":"privateLinkScopes/scopedResources","locations":["Global"],"apiVersions":["2019-10-17-preview"],"capabilities":"None"},{"resourceType":"privateLinkScopeOperationStatuses","locations":["Global"],"apiVersions":["2019-10-17-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.SignalRService","namespace":"Microsoft.SignalRService","authorizations":[{"applicationId":"cdad765c-f191-43ba-b9f5-7aef392f811d","roleDefinitionId":"346b504e-4aec-45d1-be25-a6e10f3cb4fe"}],"resourceTypes":[{"resourceType":"SignalR","locations":["East + US","West US","Southeast Asia","West Europe","West US 2","East US 2","North + Europe","Australia East","Canada East","Central US","Japan East","UK South","South + Central US","Brazil South","France Central","Korea Central","Central US EUAP"],"apiVersions":["2020-07-01-preview","2020-05-01","2018-10-01","2018-03-01-preview"],"defaultApiVersion":"2020-07-01-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2020-07-01-preview","2020-05-01","2018-10-01","2018-03-01-preview"],"defaultApiVersion":"2020-07-01-preview","capabilities":"None"},{"resourceType":"locations/operationResults","locations":["East + US","West US","Southeast Asia","West Europe","West US 2","East US 2","North + Europe","Australia East","Canada East","Central US","Japan East","UK South","South + Central US","Brazil South","France Central","Korea Central","Central US EUAP"],"apiVersions":["2020-07-01-preview","2020-05-01","2018-10-01","2018-03-01-preview"],"defaultApiVersion":"2020-07-01-preview","capabilities":"None"},{"resourceType":"locations/operationStatuses","locations":["East + US","West US","Southeast Asia","West Europe","West US 2","East US 2","North + Europe","Australia East","Canada East","Central US","Japan East","UK South","South + Central US","Brazil South","France Central","Korea Central","Central US EUAP"],"apiVersions":["2020-07-01-preview","2020-05-01","2018-10-01","2018-03-01-preview"],"defaultApiVersion":"2020-07-01-preview","capabilities":"None"},{"resourceType":"operations","locations":["West + US","East US","East US 2","West US 2","Central US"],"apiVersions":["2020-07-01-preview","2020-05-01","2018-10-01","2018-03-01-preview"],"defaultApiVersion":"2020-07-01-preview","capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["East + US","West US","Southeast Asia","West Europe","West US 2","East US 2","North + Europe","Australia East","Canada East","Central US","Japan East","UK South","South + Central US","Brazil South","France Central","Korea Central","Central US EUAP"],"apiVersions":["2020-07-01-preview","2020-05-01","2018-10-01","2018-03-01-preview"],"defaultApiVersion":"2020-07-01-preview","capabilities":"None"},{"resourceType":"locations/usages","locations":["East + US","West US","Southeast Asia","West Europe","West US 2","East US 2","North + Europe","Australia East","Canada East","Central US","Japan East","UK South","South + Central US","Brazil South","France Central","Korea Central","Central US EUAP"],"apiVersions":["2020-07-01-preview","2020-05-01","2018-10-01","2018-03-01-preview"],"defaultApiVersion":"2020-07-01-preview","capabilities":"None"},{"resourceType":"SignalR/eventGridFilters","locations":["East + US","West US","Southeast Asia","West Europe","West US 2","East US 2","North + Europe","Australia East","Canada East","Central US","Japan East","UK South","South + Central US","Brazil South","France Central","Korea Central","Central US EUAP"],"apiVersions":["2020-07-01-preview","2020-05-01","2018-10-01","2018-03-01-preview"],"defaultApiVersion":"2020-07-01-preview","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Blueprint","namespace":"Microsoft.Blueprint","authorizations":[{"applicationId":"f71766dc-90d9-4b7d-bd9d-4499c4331c3f","roleDefinitionId":"cb180127-cf6d-4672-9e75-e29a487f9658"}],"resourceTypes":[{"resourceType":"blueprints","locations":[],"apiVersions":["2018-11-01-preview","2018-11-01-alpha","2017-11-11-preview","2017-11-11-alpha"],"capabilities":"SupportsExtension"},{"resourceType":"blueprints/artifacts","locations":[],"apiVersions":["2018-11-01-preview","2018-11-01-alpha","2017-11-11-preview","2017-11-11-alpha"],"capabilities":"None"},{"resourceType":"blueprints/versions","locations":[],"apiVersions":["2018-11-01-preview","2018-11-01-alpha","2017-11-11-preview","2017-11-11-alpha"],"capabilities":"None"},{"resourceType":"blueprints/versions/artifacts","locations":[],"apiVersions":["2018-11-01-preview","2018-11-01-alpha","2017-11-11-preview","2017-11-11-alpha"],"capabilities":"None"},{"resourceType":"blueprintAssignments","locations":[],"apiVersions":["2018-11-01-preview","2018-11-01-alpha","2017-11-11-preview","2017-11-11-alpha"],"capabilities":"SystemAssignedResourceIdentity, + SupportsExtension"},{"resourceType":"blueprintAssignments/operations","locations":[],"apiVersions":["2017-11-11-preview","2017-11-11-alpha"],"capabilities":"None"},{"resourceType":"blueprintAssignments/assignmentOperations","locations":[],"apiVersions":["2018-11-01-preview","2018-11-01-alpha"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2018-11-01-preview","2018-11-01-alpha","2017-11-11-preview","2017-11-11-alpha"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AlertsManagement","namespace":"Microsoft.AlertsManagement","authorizations":[{"applicationId":"3af5a1e8-2459-45cb-8683-bcd6cccbcc13","roleDefinitionId":"b1309299-720d-4159-9897-6158a61aee41"}],"resourceTypes":[{"resourceType":"alerts","locations":["Central + US EUAP","East US 2 EUAP"],"apiVersions":["2019-05-05-preview","2019-03-01-preview","2019-03-01","2018-11-02-privatepreview","2018-05-05-preview","2018-05-05","2017-11-15-privatepreview"],"capabilities":"SupportsExtension"},{"resourceType":"alertsSummary","locations":["Central + US EUAP","East US 2 EUAP"],"apiVersions":["2019-05-05-preview","2019-03-01-preview","2019-03-01","2018-05-05-preview","2018-05-05","2017-11-15-privatepreview"],"capabilities":"SupportsExtension"},{"resourceType":"smartGroups","locations":["Central + US EUAP","East US 2 EUAP"],"apiVersions":["2019-05-05-preview","2018-05-05-preview","2018-05-05","2017-11-15-privatepreview"],"capabilities":"None"},{"resourceType":"smartDetectorAlertRules","locations":["global"],"apiVersions":["2019-06-01","2019-03-01","2018-02-01-privatepreview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"actionRules","locations":["global","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2019-05-05-preview","2018-11-02-privatepreview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"alertsList","locations":["Central + US EUAP","East US 2 EUAP"],"apiVersions":["2018-11-02-privatepreview"],"capabilities":"None"},{"resourceType":"alertsSummaryList","locations":["Central + US EUAP","East US 2 EUAP"],"apiVersions":["2018-11-02-privatepreview"],"capabilities":"None"},{"resourceType":"alertsMetaData","locations":["Central + US EUAP","East US 2 EUAP"],"apiVersions":["2019-05-05-preview","2019-03-01-preview","2019-03-01"],"capabilities":"None"},{"resourceType":"operations","locations":["Central + US EUAP","East US 2 EUAP"],"apiVersions":["2018-05-05-preview","2018-05-05","2017-11-15-privatepreview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ApiManagement","namespace":"Microsoft.ApiManagement","authorization":{"applicationId":"8602e328-9b72-4f2d-a4ae-1387d013a2b3","roleDefinitionId":"e263b525-2e60-4418-b655-420bae0b172e"},"resourceTypes":[{"resourceType":"service","locations":["Central + India","UAE North","Australia Central","Germany West Central","West Central + US","Norway East","Switzerland North","Korea South","West India","Korea Central","South + Africa North","UK West","Brazil South","East Asia","South India","Canada Central","Canada + East","Australia Southeast","Japan East","North Central US","Southeast Asia","West + US 2","Central US","UK South","Australia East","Japan West","West US","France + Central","South Central US","East US 2","East US","North Europe","West Europe","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01-preview","2019-12-01-preview","2019-12-01","2019-01-01","2018-06-01-preview","2018-01-01","2017-03-01","2016-10-10","2016-07-07","2015-09-15","2014-02-14"],"defaultApiVersion":"2019-12-01","zoneMappings":[{"location":"East + US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West + Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central + US EUAP","zones":[]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast + Asia","zones":[]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North + Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK + South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia + East","zones":[]},{"location":"South Africa North","zones":[]},{"location":"South + Central US","zones":[]},{"location":"Canada Central","zones":[]},{"location":"Germany + West Central","zones":[]},{"location":"Brazil South","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"validateServiceName","locations":[],"apiVersions":["2015-09-15","2014-02-14"],"capabilities":"None"},{"resourceType":"checkServiceNameAvailability","locations":[],"apiVersions":["2015-09-15","2014-02-14"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["Central + India","UAE North","Australia Central","Germany West Central","West Central + US","Norway East","Switzerland North","Korea South","West India","Korea Central","South + Africa North","UK West","Brazil South","East Asia","South India","Canada Central","Canada + East","Australia Southeast","Japan East","North Central US","Southeast Asia","West + US 2","Central US","UK South","Australia East","Japan West","West US","France + Central","South Central US","East US 2","East US","North Europe","West Europe","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01-preview","2019-12-01-preview","2019-12-01","2019-01-01","2018-06-01-preview","2018-01-01","2017-03-01","2016-10-10","2016-07-07","2015-09-15","2014-02-14"],"defaultApiVersion":"2019-12-01","capabilities":"None"},{"resourceType":"reportFeedback","locations":[],"apiVersions":["2020-06-01-preview","2019-12-01-preview","2019-12-01","2019-01-01","2018-06-01-preview","2018-01-01","2017-03-01","2016-10-10","2016-07-07","2015-09-15","2014-02-14"],"capabilities":"None"},{"resourceType":"checkFeedbackRequired","locations":[],"apiVersions":["2020-06-01-preview","2019-12-01-preview","2019-12-01","2019-01-01","2018-06-01-preview","2018-01-01","2017-03-01","2016-10-10","2016-07-07","2015-09-15","2014-02-14"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-06-01-preview","2019-12-01-preview","2019-12-01","2019-01-01","2018-06-01-preview","2018-01-01","2017-03-01","2016-10-10","2016-07-07","2015-09-15","2014-02-14"],"defaultApiVersion":"2019-12-01","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization","namespace":"Microsoft.Authorization","authorizations":[{"applicationId":"de926fbf-e23b-41f9-ae15-c943a9cfa630"}],"resourceTypes":[{"resourceType":"roleAssignments","locations":[],"apiVersions":["2020-04-01-preview","2020-03-01-preview","2019-04-01-preview","2018-12-01-preview","2018-09-01-preview","2018-07-01","2018-01-01-preview","2017-10-01-preview","2017-09-01","2017-05-01","2016-07-01","2015-07-01","2015-06-01","2015-05-01-preview","2014-10-01-preview","2014-07-01-preview","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-09-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2015-07-01"}],"capabilities":"SupportsExtension"},{"resourceType":"roleDefinitions","locations":[],"apiVersions":["2018-07-01","2018-01-01-preview","2017-09-01","2017-05-01","2016-07-01","2015-07-01","2015-06-01","2015-05-01-preview","2014-10-01-preview","2014-07-01-preview","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-05-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2015-07-01"}],"capabilities":"SupportsExtension"},{"resourceType":"classicAdministrators","locations":[],"apiVersions":["2015-06-01","2015-05-01-preview","2014-10-01-preview","2014-07-01-preview","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-06-01"}],"capabilities":"None"},{"resourceType":"permissions","locations":[],"apiVersions":["2018-07-01","2018-01-01-preview","2017-05-01","2016-07-01","2015-07-01","2015-06-01","2015-05-01-preview","2014-10-01-preview","2014-07-01-preview","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-05-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2015-07-01"}],"capabilities":"SupportsExtension"},{"resourceType":"denyAssignments","locations":[],"apiVersions":["2019-03-01-preview","2018-07-01-preview","2018-07-01"],"capabilities":"SupportsExtension"},{"resourceType":"locks","locations":[],"apiVersions":["2017-04-01","2016-09-01","2015-06-01","2015-05-01-preview","2015-01-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-09-01"}],"capabilities":"SupportsExtension"},{"resourceType":"operations","locations":[],"apiVersions":["2017-05-01","2016-07-01","2015-07-01","2015-01-01","2014-10-01-preview","2014-06-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-05-01"}],"capabilities":"None"},{"resourceType":"policyDefinitions","locations":[],"apiVersions":["2020-09-01","2020-08-01","2020-03-01","2019-09-01","2019-06-01","2019-01-01","2018-05-01","2018-03-01","2016-12-01","2016-04-01","2015-10-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-12-01"}],"capabilities":"SupportsExtension"},{"resourceType":"policySetDefinitions","locations":[],"apiVersions":["2020-09-01","2020-08-01","2020-03-01","2019-09-01","2019-06-01","2019-01-01","2018-05-01","2018-03-01","2017-06-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01"}],"capabilities":"SupportsExtension"},{"resourceType":"policyAssignments","locations":[],"apiVersions":["2020-09-01","2020-08-01","2020-03-01","2019-09-01","2019-06-01","2019-01-01","2018-05-01","2018-03-01","2017-06-01-preview","2016-12-01","2016-04-01","2015-10-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-12-01"}],"capabilities":"SystemAssignedResourceIdentity, + SupportsExtension"},{"resourceType":"policyExemptions","locations":[],"apiVersions":["2020-07-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"dataAliases","locations":[],"apiVersions":["2020-03-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"providerOperations","locations":[],"apiVersions":["2018-07-01","2018-01-01-preview","2017-05-01","2016-07-01","2015-07-01-preview","2015-07-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-05-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2015-07-01"}],"capabilities":"None"},{"resourceType":"elevateAccess","locations":[],"apiVersions":["2017-05-01","2016-07-01","2015-07-01","2015-06-01","2015-05-01-preview","2014-10-01-preview","2014-07-01-preview","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-05-01"}],"capabilities":"None"},{"resourceType":"checkAccess","locations":[],"apiVersions":["2018-09-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-09-01-preview"}],"capabilities":"SupportsExtension"},{"resourceType":"findOrphanRoleAssignments","locations":[],"apiVersions":["2019-04-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"roleAssignmentsUsageMetrics","locations":[],"apiVersions":["2019-08-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"privateLinkAssociations","locations":[],"apiVersions":["2020-05-01"],"capabilities":"SupportsExtension"},{"resourceType":"resourceManagementPrivateLinks","locations":["global"],"apiVersions":["2020-05-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"operationStatus","locations":[],"apiVersions":["2020-05-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Batch","namespace":"Microsoft.Batch","authorization":{"applicationId":"ddbf3205-c6bd-46ae-8127-60eb93363864","roleDefinitionId":"b7f84953-1d03-4eab-9ea4-45f065258ff8"},"resourceTypes":[{"resourceType":"batchAccounts","locations":["West + Europe","East US","East US 2","West US","North Central US","Brazil South","North + Europe","Central US","East Asia","Japan East","Australia Southeast","Japan + West","Korea South","Korea Central","Southeast Asia","South Central US","Australia + East","South India","Central India","West India","Canada Central","Canada + East","UK South","UK West","West Central US","West US 2","France Central","South + Africa North","UAE North","Australia Central","Germany West Central","Switzerland + North","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-09-01","2020-05-01","2020-03-01-preview","2020-03-01","2019-08-01","2019-04-01","2018-12-01","2017-09-01","2017-05-01","2017-01-01","2015-12-01","2015-09-01","2015-07-01","2014-05-01-privatepreview"],"defaultApiVersion":"2020-09-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-09-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"batchAccounts/pools","locations":["West + Europe","East US","East US 2","West US","North Central US","Brazil South","North + Europe","Central US","East Asia","Japan East","Australia Southeast","Japan + West","Korea South","Korea Central","Southeast Asia","South Central US","Australia + East","South India","Central India","West India","Canada Central","Canada + East","UK South","UK West","West Central US","West US 2","France Central","South + Africa North","UAE North","Australia Central","Germany West Central","Switzerland + North","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-09-01","2020-05-01","2020-03-01-preview","2020-03-01","2019-08-01","2019-04-01","2018-12-01","2017-09-01"],"defaultApiVersion":"2020-09-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-09-01"}],"capabilities":"None"},{"resourceType":"batchAccounts/certificates","locations":["West + Europe","East US","East US 2","West US","North Central US","Brazil South","North + Europe","Central US","East Asia","Japan East","Australia Southeast","Japan + West","Korea South","Korea Central","Southeast Asia","South Central US","Australia + East","South India","Central India","West India","Canada Central","Canada + East","UK South","UK West","West Central US","West US 2","France Central","South + Africa North","UAE North","Australia Central","Germany West Central","Switzerland + North","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-09-01","2020-05-01","2020-03-01-preview","2020-03-01","2019-08-01","2019-04-01","2018-12-01","2017-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-09-01"}],"capabilities":"None"},{"resourceType":"operations","locations":["West + Europe","East US","East US 2","West US","North Central US","Brazil South","North + Europe","Central US","East Asia","Japan East","Australia Southeast","Japan + West","Korea South","Korea Central","Southeast Asia","South Central US","Australia + East","South India","Central India","West India","Canada Central","Canada + East","UK South","UK West","West Central US","West US 2","France Central","South + Africa North","UAE North","Australia Central","Germany West Central","Switzerland + North","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-09-01","2020-05-01","2020-03-01-preview","2020-03-01","2019-08-01","2019-04-01","2018-12-01","2017-09-01","2017-05-01","2017-01-01","2015-12-01","2015-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-09-01"}],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-09-01","2020-05-01","2020-03-01-preview","2020-03-01","2019-08-01","2019-04-01","2018-12-01","2017-09-01","2017-05-01","2017-01-01","2015-12-01","2015-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-09-01"}],"capabilities":"None"},{"resourceType":"locations/quotas","locations":["West + Europe","East US","East US 2","West US","North Central US","Brazil South","North + Europe","Central US","East Asia","Japan East","Australia Southeast","Japan + West","Korea South","Korea Central","Southeast Asia","South Central US","Australia + East","South India","Central India","West India","Canada Central","Canada + East","UK South","UK West","West Central US","West US 2","France Central","South + Africa North","UAE North","Australia Central","Germany West Central","Switzerland + North","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-09-01","2020-05-01","2020-03-01-preview","2020-03-01","2019-08-01","2019-04-01","2018-12-01","2017-09-01","2017-05-01","2017-01-01","2015-12-01","2015-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-09-01"}],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["West + Europe","East US","East US 2","West US","North Central US","Brazil South","North + Europe","Central US","East Asia","Japan East","Australia Southeast","Japan + West","Korea South","Korea Central","Southeast Asia","South Central US","Australia + East","South India","Central India","West India","Canada Central","Canada + East","UK South","UK West","West Central US","West US 2","France Central","South + Africa North","UAE North","Australia Central","Germany West Central","Switzerland + North","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-09-01","2020-05-01","2020-03-01-preview","2020-03-01","2019-08-01","2019-04-01","2018-12-01","2017-09-01","2017-05-01"],"defaultApiVersion":"2017-05-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-09-01"}],"capabilities":"None"},{"resourceType":"locations/accountOperationResults","locations":["West + Europe","East US","East US 2","West US","North Central US","Brazil South","North + Europe","Central US","East Asia","Japan East","Australia Southeast","Japan + West","Korea South","Korea Central","Southeast Asia","South Central US","Australia + East","South India","Central India","West India","Canada Central","Canada + East","UK South","UK West","West Central US","West US 2","France Central","South + Africa North","UAE North","Australia Central","Germany West Central","Switzerland + North","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-09-01","2020-05-01","2020-03-01-preview","2020-03-01","2019-08-01","2019-04-01","2018-12-01","2017-09-01","2017-05-01","2017-01-01","2015-12-01","2015-09-01","2015-07-01","2014-05-01-privatepreview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.BatchAI","namespace":"Microsoft.BatchAI","authorization":{"applicationId":"9fcb3732-5f52-4135-8c08-9d4bbaf203ea","roleDefinitionId":"703B89C7-CE2C-431B-BDD8-FA34E39AF696","managedByRoleDefinitionId":"90B8E153-EBFF-4073-A95F-4DAD56B14C78"},"resourceTypes":[{"resourceType":"workspaces","locations":["West + US","East US","West US 2","West Europe","East US 2","North Europe","Australia + East","East US 2 EUAP","West Central US","Southeast Asia","South Central US"],"apiVersions":["2018-05-01"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"workspaces/clusters","locations":["West + US","East US","West US 2","West Europe","East US 2","North Europe","Australia + East","East US 2 EUAP","West Central US","Southeast Asia","South Central US"],"apiVersions":["2018-05-01"],"capabilities":"None"},{"resourceType":"workspaces/fileservers","locations":["West + US","East US","West US 2","West Europe","East US 2","North Europe","Australia + East","East US 2 EUAP","West Central US","Southeast Asia","South Central US"],"apiVersions":["2018-05-01"],"capabilities":"None"},{"resourceType":"workspaces/experiments","locations":["West + US","East US","West US 2","West Europe","East US 2","North Europe","Australia + East","East US 2 EUAP","West Central US","Southeast Asia","South Central US"],"apiVersions":["2018-05-01"],"capabilities":"None"},{"resourceType":"workspaces/experiments/jobs","locations":["West + US","East US","West US 2","West Europe","East US 2","North Europe","Australia + East","East US 2 EUAP","West Central US","Southeast Asia","South Central US"],"apiVersions":["2018-05-01"],"capabilities":"None"},{"resourceType":"operations","locations":["East + US","West US 2","West Europe","East US 2","North Europe","Australia East","West + Central US","Southeast Asia","South Central US","West US","East US 2 EUAP"],"apiVersions":["2018-05-01","2018-03-01","2017-09-01-preview"],"capabilities":"None"},{"resourceType":"clusters","locations":["East + US","West US 2","West Europe","East US 2","North Europe","Australia East","East + US 2 EUAP","West Central US","Southeast Asia","South Central US"],"apiVersions":["2018-03-01","2017-09-01-preview"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"jobs","locations":["East US","West US + 2","West Europe","East US 2","North Europe","Australia East","East US 2 EUAP","West + Central US","Southeast Asia","South Central US"],"apiVersions":["2018-03-01","2017-09-01-preview"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"fileservers","locations":["East US","West + US 2","West Europe","East US 2","North Europe","Australia East","East US 2 + EUAP","West Central US","Southeast Asia","South Central US"],"apiVersions":["2018-03-01","2017-09-01-preview"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2018-05-01","2018-03-01","2017-09-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationresults","locations":["East + US","West US 2","West Europe","East US 2","North Europe","Australia East","East + US 2 EUAP","West Central US","Southeast Asia","South Central US"],"apiVersions":["2018-05-01","2018-03-01","2017-09-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationstatuses","locations":["East + US","West US 2","West Europe","East US 2","North Europe","Australia East","East + US 2 EUAP","West Central US","Southeast Asia","South Central US"],"apiVersions":["2018-05-01","2018-03-01","2017-09-01-preview"],"capabilities":"None"},{"resourceType":"locations/usages","locations":["East + US","West US 2","West Europe","East US 2","North Europe","Australia East","East + US 2 EUAP","West Central US","Southeast Asia","South Central US"],"apiVersions":["2018-05-01","2018-03-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Cdn","namespace":"Microsoft.Cdn","authorizations":[],"resourceTypes":[{"resourceType":"profiles","locations":["global","Australia + East","Australia Southeast","Brazil South","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","Japan East","Japan + West","North Central US","North Europe","South Central US","South India","Southeast + Asia","West Europe","West India","West US","West Central US","Central US EUAP"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02","2016-04-02","2015-06-01"],"defaultApiVersion":"2017-10-12","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"profiles/endpoints","locations":["global","Australia + East","Australia Southeast","Brazil South","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","Japan East","Japan + West","North Central US","North Europe","South Central US","South India","Southeast + Asia","West Europe","West India","West US","West Central US","Central US EUAP"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02","2016-04-02","2015-06-01"],"defaultApiVersion":"2017-10-12","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"profiles/endpoints/origins","locations":["global","Australia + East","Australia Southeast","Brazil South","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","Japan East","Japan + West","North Central US","North Europe","South Central US","South India","Southeast + Asia","West Europe","West India","West US","West Central US","Central US EUAP"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02","2016-04-02","2015-06-01"],"defaultApiVersion":"2017-10-12","capabilities":"None"},{"resourceType":"profiles/endpoints/origingroups","locations":["global","Australia + East","Australia Southeast","Brazil South","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","Japan East","Japan + West","North Central US","North Europe","South Central US","South India","Southeast + Asia","West Europe","West India","West US","West Central US","Central US EUAP"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31"],"defaultApiVersion":"2019-12-31","capabilities":"None"},{"resourceType":"profiles/endpoints/customdomains","locations":["global","Australia + East","Australia Southeast","Brazil South","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","Japan East","Japan + West","North Central US","North Europe","South Central US","South India","Southeast + Asia","West Europe","West India","West US","West Central US","Central US EUAP"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02","2016-04-02","2015-06-01"],"defaultApiVersion":"2017-10-12","capabilities":"None"},{"resourceType":"operationresults/profileresults/endpointresults/origingroupresults","locations":["global","Australia + East","Australia Southeast","Brazil South","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","Japan East","Japan + West","North Central US","North Europe","South Central US","South India","Southeast + Asia","West Europe","West India","West US","Central US EUAP"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31"],"defaultApiVersion":"2019-12-31","capabilities":"None"},{"resourceType":"operationresults","locations":["global","Australia + East","Australia Southeast","Brazil South","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","Japan East","Japan + West","North Central US","North Europe","South Central US","South India","Southeast + Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02","2016-04-02","2015-06-01"],"defaultApiVersion":"2017-10-12","capabilities":"None"},{"resourceType":"operationresults/profileresults","locations":["global","Australia + East","Australia Southeast","Brazil South","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","Japan East","Japan + West","North Central US","North Europe","South Central US","South India","Southeast + Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02","2016-04-02","2015-06-01"],"defaultApiVersion":"2017-10-12","capabilities":"None"},{"resourceType":"operationresults/profileresults/endpointresults","locations":["global","Australia + East","Australia Southeast","Brazil South","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","Japan East","Japan + West","North Central US","North Europe","South Central US","South India","Southeast + Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02","2016-04-02","2015-06-01"],"defaultApiVersion":"2017-10-12","capabilities":"None"},{"resourceType":"operationresults/profileresults/endpointresults/originresults","locations":["global","Australia + East","Australia Southeast","Brazil South","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","Japan East","Japan + West","North Central US","North Europe","South Central US","South India","Southeast + Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02","2016-04-02","2015-06-01"],"defaultApiVersion":"2017-10-12","capabilities":"None"},{"resourceType":"operationresults/profileresults/endpointresults/customdomainresults","locations":["global","Australia + East","Australia Southeast","Brazil South","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","Japan East","Japan + West","North Central US","North Europe","South Central US","South India","Southeast + Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02","2016-04-02","2015-06-01"],"defaultApiVersion":"2017-10-12","capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["global","Australia + East","Australia Southeast","Brazil South","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","Japan East","Japan + West","North Central US","North Europe","South Central US","South India","Southeast + Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02","2016-04-02","2015-06-01"],"defaultApiVersion":"2017-10-12","capabilities":"None"},{"resourceType":"checkResourceUsage","locations":["global","Australia + East","Australia Southeast","Brazil South","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","Japan East","Japan + West","North Central US","North Europe","South Central US","South India","Southeast + Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02"],"defaultApiVersion":"2017-10-12","capabilities":"None"},{"resourceType":"validateProbe","locations":["global","Australia + East","Australia Southeast","Brazil South","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","Japan East","Japan + West","North Central US","North Europe","South Central US","South India","Southeast + Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02"],"defaultApiVersion":"2017-10-12","capabilities":"None"},{"resourceType":"operations","locations":["global","Australia + East","Australia Southeast","Brazil South","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","Japan East","Japan + West","North Central US","North Europe","South Central US","South India","Southeast + Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02","2016-04-02","2015-06-01"],"defaultApiVersion":"2017-10-12","capabilities":"None"},{"resourceType":"edgenodes","locations":["global","Australia + East","Australia Southeast","Brazil South","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","Japan East","Japan + West","North Central US","North Europe","South Central US","South India","Southeast + Asia","West Europe","West India","West US","West Central US"],"apiVersions":["2020-04-15","2020-03-31","2019-12-31","2019-06-15-preview","2019-04-15","2018-04-02","2017-10-12","2017-04-02","2016-10-02","2016-04-02","2015-06-01"],"defaultApiVersion":"2017-10-12","capabilities":"None"},{"resourceType":"CdnWebApplicationFirewallPolicies","locations":["global"],"apiVersions":["2020-04-15","2019-06-15-preview"],"defaultApiVersion":"2019-06-15-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"CdnWebApplicationFirewallManagedRuleSets","locations":[],"apiVersions":["2020-04-15","2019-06-15-preview"],"defaultApiVersion":"2019-06-15-preview","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.BotService","namespace":"Microsoft.BotService","authorizations":[{"applicationId":"f3723d34-6ff5-4ceb-a148-d99dcd2511fc","roleDefinitionId":"71213c26-43ed-41d8-9905-3c12971517a3"},{"applicationId":"27a762be-14e7-4f92-899c-151877d6d497","roleDefinitionId":"aab320d1-5b9b-4748-982e-be803163df77"}],"resourceTypes":[{"resourceType":"botServices","locations":["Global"],"apiVersions":["2018-07-12","2017-12-01"],"defaultApiVersion":"2017-12-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-12-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-07-12"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"botServices/channels","locations":["Global"],"apiVersions":["2018-07-12","2017-12-01"],"defaultApiVersion":"2017-12-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-12-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-07-12"}],"capabilities":"None"},{"resourceType":"botServices/connections","locations":["Global"],"apiVersions":["2018-07-12","2017-12-01"],"defaultApiVersion":"2017-12-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-12-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-07-12"}],"capabilities":"None"},{"resourceType":"listAuthServiceProviders","locations":["Global"],"apiVersions":["2018-07-12","2017-12-01"],"defaultApiVersion":"2017-12-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-12-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-07-12"}],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["Global"],"apiVersions":["2018-07-12","2017-12-01"],"defaultApiVersion":"2017-12-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-12-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-07-12"}],"capabilities":"None"},{"resourceType":"operations","locations":["Global"],"apiVersions":["2018-07-12","2017-12-01"],"defaultApiVersion":"2017-12-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-12-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-07-12"}],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.CertificateRegistration","namespace":"Microsoft.CertificateRegistration","authorization":{"applicationId":"f3c21649-0979-4721-ac85-b0216b2cf413","roleDefinitionId":"933fba7e-2ed3-4da8-973d-8bd8298a9b40"},"resourceTypes":[{"resourceType":"certificateOrders","locations":["global"],"apiVersions":["2020-06-01","2019-08-01","2018-02-01","2015-08-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2018-02-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"certificateOrders/certificates","locations":["global"],"apiVersions":["2020-06-01","2019-08-01","2018-02-01","2015-08-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2018-02-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"validateCertificateRegistrationInformation","locations":["global"],"apiVersions":["2020-06-01","2019-08-01","2018-02-01","2015-08-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2018-02-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"operations","locations":["global"],"apiVersions":["2020-06-01","2019-08-01","2018-02-01","2015-08-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2018-02-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicCompute","namespace":"Microsoft.ClassicCompute","resourceTypes":[{"resourceType":"domainNames","locations":["East + Asia","Southeast Asia","East US","East US 2","West US","West US 2","North + Central US","South Central US","West Central US","Central US","North Europe","West + Europe","Japan East","Japan West","Brazil South","Australia East","Australia + Southeast","South India","Central India","West India","Canada Central","Canada + East","East US 2 (Stage)","North Central US (Stage)","UK South","UK West","Korea + Central","Korea South","France Central","South Africa North","UAE North","Australia + Central","Switzerland North","Germany West Central","Norway East","East US + 2 EUAP","Central US EUAP"],"apiVersions":["2020-02-01","2018-06-01","2017-11-15","2017-11-01","2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01","2014-01-01"],"defaultApiVersion":"2014-06-01","capabilities":"CrossResourceGroupResourceMove, + SupportsLocation"},{"resourceType":"domainNames/internalLoadBalancers","locations":[],"apiVersions":["2017-11-01","2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01","2014-01-01"],"defaultApiVersion":"2014-06-01","capabilities":"None"},{"resourceType":"checkDomainNameAvailability","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01","2014-01-01"],"capabilities":"None"},{"resourceType":"domainNames/slots","locations":["East + Asia","Southeast Asia","East US","East US 2","West US","West US 2","North + Central US","South Central US","West Central US","Central US","North Europe","West + Europe","Japan East","Japan West","Brazil South","Australia East","Australia + Southeast","South India","Central India","West India","Canada Central","Canada + East","East US 2 (Stage)","North Central US (Stage)","UK South","UK West","Korea + Central","Korea South","France Central","South Africa North","UAE North","Australia + Central","Switzerland North","Norway East","Germany West Central","East US + 2 EUAP","Central US EUAP"],"apiVersions":["2020-02-01","2018-06-01","2017-11-15","2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01","2014-01-01"],"capabilities":"None"},{"resourceType":"domainNames/slots/roles","locations":["East + Asia","Southeast Asia","East US","East US 2","West US","West US 2","North + Central US","South Central US","West Central US","Central US","North Europe","West + Europe","Japan East","Japan West","Brazil South","Australia East","Australia + Southeast","South India","Central India","West India","Canada Central","Canada + East","East US 2 (Stage)","North Central US (Stage)","UK South","UK West","Korea + Central","Korea South","France Central","South Africa North","UAE North","Australia + Central","Switzerland North","Germany West Central","Norway East","East US + 2 EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01","2014-01-01"],"capabilities":"None"},{"resourceType":"domainNames/slots/roles/metricDefinitions","locations":[],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"domainNames/slots/roles/metrics","locations":[],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"virtualMachines","locations":["East + Asia","Southeast Asia","East US","East US 2","West US","West US 2","North + Central US","South Central US","West Central US","Central US","North Europe","West + Europe","Japan East","Japan West","Brazil South","Australia East","Australia + Southeast","South India","Central India","West India","Canada Central","Canada + East","East US 2 (Stage)","North Central US (Stage)","UK South","UK West","Korea + Central","Korea South","France Central","South Africa North","UAE North","Australia + Central","Switzerland North","Germany West Central","Norway East","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2017-04-01","2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01","2014-04-01","2014-01-01"],"defaultApiVersion":"2014-06-01","capabilities":"CrossResourceGroupResourceMove, + SupportsLocation"},{"resourceType":"capabilities","locations":["East US 2 + EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"domainNames/capabilities","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"domainNames/serviceCertificates","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"quotas","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01","2014-01-01"],"capabilities":"None"},{"resourceType":"virtualMachines/diagnosticSettings","locations":["East + US","East US 2","North Central US","North Europe","West Europe","Brazil South","Canada + Central","Canada East","UK South","UK West","France Central","South Africa + North","UAE North","Australia Central","Switzerland North","Germany West Central","Norway + East","West US","Central US","South Central US","Japan East","Japan West","East + Asia","Southeast Asia","Australia East","Australia Southeast","West US 2","West + Central US","South India","Central India","West India","Korea Central","Korea + South","East US 2 (Stage)","North Central US (Stage)","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"virtualMachines/metricDefinitions","locations":["East + US","East US 2","North Central US","North Europe","West Europe","Brazil South","Canada + Central","Canada East","UK South","UK West","France Central","South Africa + North","UAE North","Switzerland North","West US","Central US","South Central + US","Japan East","Japan West","East Asia","Southeast Asia","Australia East","Australia + Southeast","Australia Central","West US 2","West Central US","Germany West + Central","Norway East","South India","Central India","West India","Korea Central","Korea + South","East US 2 (Stage)","North Central US (Stage)","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"virtualMachines/metrics","locations":["North + Central US","South Central US","East US","East US 2","Canada Central","Canada + East","West US","West US 2","West Central US","Australia East","Australia + Southeast","South Africa North","UAE North","Australia Central","Switzerland + North","Germany West Central","Norway East","Central US","East Asia","Southeast + Asia","North Europe","West Europe","UK South","UK West","Japan East","Japan + West","Brazil South","South India","Central India","West India","East US 2 + (Stage)","North Central US (Stage)","Korea Central","Korea South","France + Central","East US 2 EUAP","Central US EUAP"],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2017-04-01","2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"resourceTypes","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":[],"capabilities":"None"},{"resourceType":"moveSubscriptionResources","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01"],"capabilities":"None"},{"resourceType":"validateSubscriptionMoveAvailability","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01"],"capabilities":"None"},{"resourceType":"operationStatuses","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01"],"capabilities":"None"},{"resourceType":"operatingSystems","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"operatingSystemFamilies","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicNetwork","namespace":"Microsoft.ClassicNetwork","resourceTypes":[{"resourceType":"virtualNetworks","locations":["East + Asia","Southeast Asia","East US","East US 2","West US","West US 2","North + Central US","South Central US","West Central US","Central US","North Europe","West + Europe","Japan East","Japan West","Brazil South","Australia East","Australia + Southeast","South India","Central India","West India","Canada Central","Canada + East","East US 2 (Stage)","North Central US (Stage)","UK South","UK West","Korea + Central","Korea South","France Central","South Africa North","UAE North","Switzerland + North","Australia Central","Germany West Central","Norway East","East US 2 + EUAP","Central US EUAP"],"apiVersions":["2017-11-15","2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01","2014-01-01"],"defaultApiVersion":"2014-06-01","capabilities":"SupportsLocation"},{"resourceType":"virtualNetworks/virtualNetworkPeerings","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","East US 2 (Stage)","North Central US (Stage)","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2016-11-01"],"capabilities":"None"},{"resourceType":"virtualNetworks/remoteVirtualNetworkPeeringProxies","locations":["West + US","East US","North Europe","West Europe","East Asia","Southeast Asia","North + Central US","South Central US","Central US","East US 2","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia + Central","East US 2 (Stage)","North Central US (Stage)","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2016-11-01"],"capabilities":"None"},{"resourceType":"reservedIps","locations":["East + Asia","Southeast Asia","East US","East US 2","West US","West US 2","North + Central US","South Central US","West Central US","Central US","North Europe","West + Europe","Japan East","Japan West","Brazil South","Australia East","Australia + Southeast","South India","Central India","West India","Canada Central","Canada + East","East US 2 (Stage)","North Central US (Stage)","UK South","UK West","Korea + Central","Korea South","France Central","South Africa North","UAE North","Switzerland + North","Australia Central","Germany West Central","Norway East","East US 2 + EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01","2014-01-01"],"defaultApiVersion":"2014-06-01","capabilities":"SupportsLocation"},{"resourceType":"quotas","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01","2014-01-01"],"capabilities":"None"},{"resourceType":"gatewaySupportedDevices","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01","2014-01-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2016-11-01","2016-04-01-beta","2016-04-01","2015-12-01","2015-06-01","2014-06-01","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"networkSecurityGroups","locations":["East + Asia","Southeast Asia","East US","East US 2","West US","West US 2","North + Central US","South Central US","West Central US","Central US","North Europe","West + Europe","Japan East","Japan West","Brazil South","Australia East","Australia + Southeast","South India","Central India","West India","Canada Central","Canada + East","East US 2 (Stage)","North Central US (Stage)","UK South","UK West","Korea + Central","Korea South","France Central","South Africa North","UAE North","Switzerland + North","Australia Central","Germany West Central","Norway East","East US 2 + EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01"],"defaultApiVersion":"2015-06-01","capabilities":"SupportsLocation"},{"resourceType":"capabilities","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"expressRouteCrossConnections","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"expressRouteCrossConnections/peerings","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicStorage","namespace":"Microsoft.ClassicStorage","resourceTypes":[{"resourceType":"storageAccounts","locations":["East + Asia","Southeast Asia","East US","East US 2","West US","West US 2","North + Central US","South Central US","West Central US","Central US","North Europe","West + Europe","Japan East","Japan West","Brazil South","Australia East","Australia + Southeast","South India","Central India","West India","Canada Central","Canada + East","East US 2 (Stage)","North Central US (Stage)","UK South","UK West","Korea + Central","Korea South","France Central","South Africa North","UAE North","Australia + Central","Switzerland North","Germany West Central","Norway East","East US + 2 EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01","2014-04-01-beta","2014-04-01","2014-01-01"],"defaultApiVersion":"2014-06-01","capabilities":"CrossResourceGroupResourceMove, + SupportsLocation"},{"resourceType":"quotas","locations":["East US 2 EUAP","Central + US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01","2014-01-01"],"capabilities":"None"},{"resourceType":"checkStorageAccountAvailability","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01","2014-01-01"],"capabilities":"None"},{"resourceType":"storageAccounts/services","locations":["West + US","Central US","South Central US","Japan East","Japan West","East Asia","Southeast + Asia","Australia East","Australia Southeast","South India","Central India","West + India","East US 2 (Stage)","North Central US (Stage)","West US 2","West Central + US","East US","East US 2","North Central US","North Europe","West Europe","Brazil + South","Canada Central","Canada East","UK South","UK West","Korea Central","Korea + South","France Central","South Africa North","UAE North","Australia Central","Switzerland + North","Germany West Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"storageAccounts/services/diagnosticSettings","locations":["West + US","Central US","South Central US","Japan East","Japan West","East Asia","Southeast + Asia","Australia East","Australia Southeast","South India","Central India","West + India","East US 2 (Stage)","North Central US (Stage)","West US 2","West Central + US","East US","East US 2","North Central US","North Europe","West Europe","Brazil + South","Canada Central","Canada East","UK South","UK West","Korea Central","Korea + South","France Central","South Africa North","UAE North","Australia Central","Switzerland + North","Germany West Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"storageAccounts/services/metricDefinitions","locations":[],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"storageAccounts/services/metrics","locations":[],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"storageAccounts/metricDefinitions","locations":[],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"storageAccounts/metrics","locations":[],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"capabilities","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"storageAccounts/blobServices","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"storageAccounts/tableServices","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"storageAccounts/fileServices","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"storageAccounts/queueServices","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"disks","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"images","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"vmImages","locations":[],"apiVersions":["2016-11-01"],"capabilities":"None"},{"resourceType":"storageAccounts/vmImages","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01","2014-04-01-beta","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"publicImages","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":[],"capabilities":"None"},{"resourceType":"osImages","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"osPlatformImages","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2016-11-01","2016-04-01-beta","2016-04-01","2015-12-01","2015-06-01","2014-06-01","2014-04-01","2014-01-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.CognitiveServices","namespace":"Microsoft.CognitiveServices","authorizations":[{"applicationId":"7d312290-28c8-473c-a0ed-8e53749b6d6d","roleDefinitionId":"5cb87f79-a7c3-4a95-9414-45b65974b51b"}],"resourceTypes":[{"resourceType":"accounts","locations":["Global","Australia + East","Brazil South","West US","West US 2","West Europe","North Europe","Southeast + Asia","East Asia","West Central US","South Central US","East US","East US + 2","Canada Central","Japan East","Central India","UK South","Japan West","Korea + Central","France Central","North Central US","Central US","South Africa North","UAE + North","Switzerland North","Switzerland West","Central US EUAP"],"apiVersions":["2017-04-18","2016-02-01-preview"],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"managedInstances/administrators","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + SupportsLocation"},{"resourceType":"operations","locations":["Global","Australia + East","Brazil South","West US","West US 2","West Europe","North Europe","Southeast + Asia","East Asia","West Central US","South Central US","East US","East US + 2","Canada Central","Japan East","Central India","UK South","Japan West","Korea + Central","France Central","North Central US","Central US","South Africa North","UAE + North","Switzerland North","Switzerland West","Central US EUAP"],"apiVersions":["2017-04-18","2016-02-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["Global","Australia + East","Brazil South","West US","West US 2","West Europe","North Europe","Southeast + Asia","East Asia","West Central US","South Central US","East US","East US + 2","Canada Central","Japan East","Central India","UK South","Japan West","Korea + Central","France Central","North Central US","Central US","South Africa North","UAE + North","Switzerland North","Switzerland West","Central US EUAP"],"apiVersions":["2017-04-18","2016-02-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":["Global","Australia + East","Brazil South","West US","West US 2","West Europe","North Europe","Southeast + Asia","East Asia","West Central US","South Central US","East US","East US + 2","Canada Central","Japan East","Central India","UK South","Japan West","Korea + Central","France Central","North Central US","Central US","South Africa North","UAE + North","Switzerland North","Switzerland West","Central US EUAP"],"apiVersions":["2017-04-18","2016-02-01-preview"],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["Global","Australia + East","Brazil South","West US","West US 2","West Europe","North Europe","Southeast + Asia","East Asia","West Central US","South Central US","East US","East US + 2","Canada Central","Japan East","Central India","UK South","Japan West","Korea + Central","France Central","North Central US","Central US","South Africa North","UAE + North","Switzerland North","Switzerland West","Central US EUAP"],"apiVersions":["2017-04-18","2016-02-01-preview"],"capabilities":"None"},{"resourceType":"locations/checkSkuAvailability","locations":["Global","Australia + East","Brazil South","West US","West US 2","West Europe","North Europe","Southeast + Asia","East Asia","West Central US","South Central US","East US","East US + 2","Canada Central","Japan East","Central India","UK South","Japan West","Korea + Central","France Central","North Central US","Central US","South Africa North","UAE + North","Switzerland North","Switzerland West","Central US EUAP"],"apiVersions":["2017-04-18","2016-02-01-preview"],"capabilities":"None"},{"resourceType":"checkDomainAvailability","locations":[],"apiVersions":["2017-04-18"],"capabilities":"None"},{"resourceType":"accounts/privateLinkResources","locations":["Global","Australia + East","Brazil South","West US","West US 2","West Europe","North Europe","Southeast + Asia","East Asia","West Central US","South Central US","East US","East US + 2","Canada Central","Japan East","Central India","UK South","Japan West","Korea + Central","France Central","North Central US","Central US","South Africa North","UAE + North","Switzerland North","Switzerland West","Central US EUAP"],"apiVersions":["2017-04-18"],"capabilities":"None"},{"resourceType":"accounts/privateEndpointConnections","locations":["Global","Australia + East","Brazil South","West US","West US 2","West Europe","North Europe","Southeast + Asia","East Asia","West Central US","South Central US","East US","East US + 2","Canada Central","Japan East","Central India","UK South","Japan West","Korea + Central","France Central","North Central US","Central US","South Africa North","UAE + North","Switzerland North","Switzerland West","Central US EUAP"],"apiVersions":["2017-04-18"],"capabilities":"None"},{"resourceType":"accounts/privateEndpointConnectionProxies","locations":["Global","Australia + East","Brazil South","West US","West US 2","West Europe","North Europe","Southeast + Asia","East Asia","West Central US","South Central US","East US","East US + 2","Canada Central","Japan East","Central India","UK South","Japan West","Korea + Central","France Central","North Central US","Central US","South Africa North","UAE + North","Switzerland North","Switzerland West","Central US EUAP"],"apiVersions":["2017-04-18"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DataLakeAnalytics","namespace":"Microsoft.DataLakeAnalytics","resourceTypes":[{"resourceType":"accounts","locations":["East + US 2","North Europe","Central US","West Europe"],"apiVersions":["2019-11-01-preview","2016-11-01","2015-10-01-preview"],"defaultApiVersion":"2016-11-01","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"accounts/dataLakeStoreAccounts","locations":["East + US 2","North Europe","Central US","West Europe"],"apiVersions":["2019-11-01-preview","2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"accounts/storageAccounts","locations":["East + US 2","North Europe","Central US","West Europe"],"apiVersions":["2019-11-01-preview","2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"accounts/storageAccounts/containers","locations":["East + US 2","North Europe","Central US","West Europe"],"apiVersions":["2019-11-01-preview","2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"accounts/storageAccounts/containers/listSasTokens","locations":["East + US 2","North Europe","Central US","West Europe"],"apiVersions":["2019-11-01-preview","2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2019-11-01-preview","2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationresults","locations":[],"apiVersions":["2019-11-01-preview","2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":[],"apiVersions":["2019-11-01-preview","2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/capability","locations":[],"apiVersions":["2019-11-01-preview","2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2019-11-01-preview","2016-11-01","2015-10-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ContainerInstance","namespace":"Microsoft.ContainerInstance","authorizations":[{"applicationId":"6bb8e274-af5d-4df2-98a3-4fd78b4cafd9","roleDefinitionId":"3c60422b-a83a-428d-9830-22609c77aa6c"}],"resourceTypes":[{"resourceType":"containerGroups","locations":["West + Central US","West US","East US","West Europe","West US 2","North Europe","Southeast + Asia","East US 2","Central US","Australia East","UK South","South Central + US","Central India","Brazil South","South India","North Central US","East + Asia","Canada Central","Japan East","Korea Central","France Central"],"apiVersions":["2019-12-01","2018-10-01","2018-09-01","2018-07-01","2018-06-01","2018-04-01","2018-02-01-preview","2017-12-01-preview","2017-10-01-preview","2017-08-01-preview"],"capabilities":"SystemAssignedResourceIdentity, + SupportsTags, SupportsLocation"},{"resourceType":"serviceAssociationLinks","locations":["West + Central US","West US","East US","West Europe","West US 2","North Europe","Southeast + Asia","East US 2","Central US","Australia East","UK South","South Central + US","Central India","Brazil South","South India","North Central US","East + Asia","Canada Central","Japan East","Korea Central","France Central"],"apiVersions":["2019-12-01","2018-10-01","2018-09-01","2018-07-01","2018-06-01","2018-04-01","2018-02-01-preview","2017-12-01-preview","2017-10-01-preview","2017-08-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"locations","locations":[],"apiVersions":["2019-12-01","2018-10-01","2018-09-01","2018-07-01","2018-06-01","2018-04-01","2018-02-01-preview","2017-12-01-preview","2017-10-01-preview","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"locations/capabilities","locations":["West + Central US","West US","East US","West Europe","West US 2","North Europe","Southeast + Asia","East US 2","Central US","Australia East","UK South","South Central + US","Central India","Brazil South","South India","North Central US","East + Asia","Canada Central","Japan East","Korea Central","France Central"],"apiVersions":["2019-12-01","2018-10-01","2018-09-01","2018-07-01","2018-06-01","2018-04-01","2018-02-01-preview","2017-12-01-preview","2017-10-01-preview","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"locations/usages","locations":["West + Central US","West US","East US","West Europe","West US 2","North Europe","Southeast + Asia","East US 2","Central US","Australia East","UK South","South Central + US","Central India","Brazil South","South India","North Central US","East + Asia","Canada Central","Japan East","Korea Central","France Central"],"apiVersions":["2019-12-01","2018-10-01","2018-09-01","2018-07-01","2018-06-01","2018-04-01","2018-02-01-preview","2017-12-01-preview","2017-10-01-preview","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"locations/operations","locations":["West + US","East US","West Europe","West US 2","North Europe","Southeast Asia","East + US 2","Central US","Australia East","UK South","South Central US","Central + India","West Central US","Brazil South","South India","North Central US","East + Asia","Canada Central","Japan East","Korea Central","France Central"],"apiVersions":["2019-12-01","2018-10-01","2018-09-01","2018-07-01","2018-06-01","2018-04-01","2018-02-01-preview","2017-12-01-preview","2017-10-01-preview","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationresults","locations":["West + US","East US","West Europe","West US 2","North Europe","Southeast Asia","East + US 2","Central US","Australia East","UK South","South Central US","Central + India","West Central US","Brazil South","South India","North Central US","East + Asia","Canada Central","Japan East","Korea Central","France Central"],"apiVersions":["2019-12-01","2018-10-01","2018-09-01","2018-07-01","2018-06-01","2018-04-01","2018-02-01-preview","2017-12-01-preview","2017-10-01-preview","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2019-12-01","2018-10-01","2018-09-01","2018-07-01","2018-06-01","2018-04-01","2018-02-01-preview","2017-12-01-preview","2017-10-01-preview","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"locations/cachedImages","locations":["West + Central US","West US","East US","West Europe","West US 2","North Europe","Southeast + Asia","East US 2","Central US","Australia East","UK South","South Central + US","Central India","Brazil South","South India","North Central US","East + Asia","Canada Central","Japan East","Korea Central","France Central"],"apiVersions":["2019-12-01","2018-10-01"],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["West + Central US","West US","East US","West Europe","West US 2","North Europe","Southeast + Asia","East US 2","Central US","Australia East","UK South","South Central + US","Central India","Brazil South","South India","North Central US","East + Asia","Canada Central","Japan East","Korea Central","France Central"],"apiVersions":["2019-12-01","2018-12-01","2018-10-01","2018-09-01","2018-07-01","2018-06-01","2018-04-01","2018-02-01-preview","2017-12-01-preview","2017-10-01-preview","2017-08-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DBforMySQL","namespace":"Microsoft.DBforMySQL","authorizations":[{"applicationId":"76cd24bf-a9fc-4344-b1dc-908275de6d6d","roleDefinitionId":"c13b7b9c-2ed1-4901-b8a8-16f35468da29"},{"applicationId":"e6f9f783-1fdb-4755-acaf-abed6c642885","roleDefinitionId":"a864a0a2-ab66-47a6-97a8-223dc1379f87"},{"applicationId":"123cd850-d9df-40bd-94d5-c9f07b7fa203"}],"resourceTypes":[{"resourceType":"operations","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","Norway East","South Africa North","South Africa West","South Central + US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK + West","West Central US","West Europe","West India","West US","West US 2","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"servers","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"managedInstances/databases","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"flexibleServers","locations":["East US + 2","West US 2","Brazil South","Southeast Asia","North Europe","AUSTRALIA EAST","JAPAN + EAST","KOREA CENTRAL","UK SOUTH","WEST EUROPE","CANADA CENTRAL","CENTRAL US","EAST + US","East US 2 EUAP"],"apiVersions":["2020-07-01-privatepreview","2020-07-01-preview"],"zoneMappings":[{"location":"East + US 2","zones":["2","3","1"]},{"location":"CENTRAL US","zones":["2","3","1"]},{"location":"WEST + EUROPE","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Southeast + Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North + Europe","zones":["2","3","1"]},{"location":"EAST US","zones":["2","3","1"]},{"location":"UK + SOUTH","zones":["2","3","1"]},{"location":"JAPAN EAST","zones":["2","3","1"]},{"location":"AUSTRALIA + EAST","zones":[]},{"location":"CANADA CENTRAL","zones":[]},{"location":"Brazil + South","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, + SystemAssignedResourceIdentity, SupportsTags, SupportsLocation"},{"resourceType":"servers/recoverableServers","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central US","Central India","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"managedInstances/recoverableDatabases","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"servers/virtualNetworkRules","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"managedInstances/metrics","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/capabilities","locations":["East + US 2","West US 2","Brazil South","Southeast Asia","North Europe","AUSTRALIA + EAST","JAPAN EAST","KOREA CENTRAL","UK SOUTH","WEST EUROPE","CANADA CENTRAL","CENTRAL + US","EAST US","East US 2 EUAP"],"apiVersions":["2020-07-01-privatepreview","2020-07-01-preview"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","Norway East","South Africa North","South Africa West","South Central + US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK + West","West Central US","West Europe","West India","West US","West US 2","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2020-07-01-privatepreview","2020-07-01-preview","2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/checkVirtualNetworkSubnetUsage","locations":["East + US 2","West US 2","Brazil South","Southeast Asia","North Europe","AUSTRALIA + EAST","JAPAN EAST","KOREA CENTRAL","UK SOUTH","WEST EUROPE","CANADA CENTRAL","CENTRAL + US","EAST US","East US 2 EUAP"],"apiVersions":["2020-07-01-privatepreview","2020-07-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","Norway East","South Africa North","South Africa West","South Central + US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK + West","West Central US","West Europe","West India","West US","West US 2","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"managedInstances/metricDefinitions","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/azureAsyncOperation","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"managedInstances/databases/backupLongTermRetentionPolicies","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/administratorOperationResults","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/longTermRetentionManagedInstances","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/administratorAzureAsyncOperation","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/longTermRetentionManagedInstanceBackups","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionProxyOperationResults","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedInstanceLongTermRetentionPolicyOperationResults","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionProxyAzureAsyncOperation","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedInstanceLongTermRetentionPolicyAzureAsyncOperation","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionOperationResults","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/longTermRetentionManagedInstanceBackupOperationResults","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionAzureAsyncOperation","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/longTermRetentionManagedInstanceBackupAzureAsyncOperation","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/performanceTiers","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","UAE North","Norway East","Switzerland North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedDatabaseAzureAsyncOperation","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/securityAlertPoliciesAzureAsyncOperation","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedDatabaseOperationResults","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01"],"capabilities":"None"},{"resourceType":"locations/securityAlertPoliciesOperationResults","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedDatabaseRestoreAzureAsyncOperation","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01"],"capabilities":"None"},{"resourceType":"locations/recommendedActionSessionsAzureAsyncOperation","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedDatabaseRestoreOperationResults","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/recommendedActionSessionsOperationResults","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedDatabaseCompleteRestoreAzureAsyncOperation","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/topQueryStatistics","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedDatabaseCompleteRestoreOperationResults","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/queryTexts","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedServerSecurityAlertPoliciesAzureAsyncOperation","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/waitStatistics","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"managedInstances/tdeCertificates","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/advisors","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedInstanceTdeCertAzureAsyncOperation","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/privateLinkResources","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedInstanceTdeCertOperationResults","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/privateEndpointConnections","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedServerSecurityAlertPoliciesOperationResults","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/privateEndpointConnectionProxies","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/securityAlertPoliciesAzureAsyncOperation","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/keys","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/securityAlertPoliciesOperationResults","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-01-01-privatepreview","2020-01-01-preview","2020-01-01"],"capabilities":"None"},{"resourceType":"locations/serverKeyAzureAsyncOperation","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"virtualClusters","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-01-01-privatepreview","2020-01-01-preview","2020-01-01"],"capabilities":"None"},{"resourceType":"locations/serverKeyOperationResults","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations/virtualClusterAzureAsyncOperation","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-01-01-privatepreview","2020-01-01-preview","2020-01-01"],"capabilities":"None"},{"resourceType":"servers/start","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/virtualClusterOperationResults","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-01-01-privatepreview","2020-01-01-preview","2020-01-01"],"capabilities":"None"},{"resourceType":"servers/stop","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK + South","UK West","West Central US","West Europe","West India","West US","West + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-01-01-privatepreview","2020-01-01-preview","2020-01-01"],"capabilities":"None"},{"resourceType":"servers/upgrade","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedInstanceAzureAsyncOperation","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-01-01-privatepreview","2020-01-01-preview","2020-01-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DataLakeStore","namespace":"Microsoft.DataLakeStore","authorization":{"applicationId":"e9f49c6b-5ce5-44c8-925d-015017e9f7ad","roleDefinitionId":"17eb9cca-f08a-4499-b2d3-852d175f614f"},"resourceTypes":[{"resourceType":"accounts","locations":["East + US 2","North Europe","Central US","West Europe","Australia East"],"apiVersions":["2016-11-01","2015-10-01-preview"],"defaultApiVersion":"2016-11-01","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"accounts/firewallRules","locations":["East + US 2","North Europe","Central US","West Europe","Australia East"],"apiVersions":["2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"accounts/eventGridFilters","locations":["East + US 2","North Europe","Central US","West Europe","Australia East"],"apiVersions":["2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationresults","locations":[],"apiVersions":["2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":[],"apiVersions":["2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/capability","locations":[],"apiVersions":["2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/usages","locations":[],"apiVersions":["2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":[],"apiVersions":["2016-11-01","2015-10-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2016-11-01","2015-10-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DataMigration","namespace":"Microsoft.DataMigration","authorization":{"applicationId":"a4bad4aa-bf02-4631-9f78-a64ffdba8150","roleDefinitionId":"b831a21d-db98-4760-89cb-bef871952df1","managedByRoleDefinitionId":"6256fb55-9e59-4018-a9e1-76b11c0a4c89"},"resourceTypes":[{"resourceType":"locations","locations":[],"apiVersions":["2018-07-15-preview","2018-04-19","2018-03-31-preview","2018-03-15-preview","2017-11-15-privatepreview","2017-11-15-preview","2017-04-15-privatepreview"],"capabilities":"None"},{"resourceType":"services","locations":["West + Central US","Brazil South","West Europe","Australia East","East US","East + US 2","Canada Central","East Asia","Central India","West India","Japan East","Korea + South","North Central US","Australia Southeast","Canada East","Central US","South + India","Japan West","Korea Central","North Europe","South Central US","Southeast + Asia","UK West","West US","UK South","West US 2","South Africa North","UAE + North","France Central"],"apiVersions":["2018-07-15-preview","2018-04-19","2018-03-31-preview","2018-03-15-preview","2017-11-15-privatepreview","2017-11-15-preview","2017-04-15-privatepreview"],"defaultApiVersion":"2018-07-15-preview","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"services/projects","locations":["West + Central US","Brazil South","West Europe","Australia East","East US","East + US 2","Canada Central","East Asia","Central India","West India","Japan East","Korea + South","North Central US","Australia Southeast","Canada East","Central US","South + India","Japan West","Korea Central","North Europe","South Central US","Southeast + Asia","UK West","West US","UK South","West US 2","South Africa North","UAE + North","France Central"],"apiVersions":["2018-07-15-preview","2018-04-19","2018-03-31-preview","2018-03-15-preview","2017-11-15-privatepreview","2017-11-15-preview","2017-04-15-privatepreview"],"defaultApiVersion":"2018-07-15-preview","capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"locations/operationResults","locations":["West + Central US","Brazil South","West Europe","Australia East","East US","East + US 2","Canada Central","East Asia","Central India","West India","Japan East","Korea + South","North Central US","Australia Southeast","Canada East","Central US","South + India","Japan West","Korea Central","North Europe","South Central US","Southeast + Asia","UK West","West US","UK South","West US 2","South Africa North","UAE + North","France Central"],"apiVersions":["2018-07-15-preview","2018-04-19","2018-03-31-preview","2018-03-15-preview","2017-11-15-privatepreview","2017-11-15-preview","2017-04-15-privatepreview"],"capabilities":"None"},{"resourceType":"locations/operationStatuses","locations":["West + Central US","Brazil South","West Europe","Australia East","East US","East + US 2","Canada Central","East Asia","Central India","West India","Japan East","Korea + South","North Central US","Australia Southeast","Canada East","Central US","South + India","Japan West","Korea Central","North Europe","South Central US","Southeast + Asia","UK West","West US","UK South","West US 2","South Africa North","UAE + North","France Central"],"apiVersions":["2018-07-15-preview","2018-04-19","2018-03-31-preview","2018-03-15-preview","2017-11-15-privatepreview","2017-11-15-preview","2017-04-15-privatepreview"],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["West + Central US","Brazil South","West Europe","Australia East","East US","East + US 2","Canada Central","East Asia","Central India","West India","Japan East","Korea + South","North Central US","Australia Southeast","Canada East","Central US","South + India","Japan West","Korea Central","North Europe","South Central US","Southeast + Asia","UK West","West US","UK South","West US 2","South Africa North","UAE + North","France Central"],"apiVersions":["2018-07-15-preview","2018-04-19","2018-03-31-preview","2018-03-15-preview","2017-11-15-privatepreview","2017-11-15-preview","2017-04-15-privatepreview"],"capabilities":"None"},{"resourceType":"operations","locations":["West + Central US","Brazil South","West Europe","Australia East","East US","East + US 2","Canada Central","East Asia","Central India","West India","Japan East","Korea + South","North Central US","Australia Southeast","Canada East","Central US","South + India","Japan West","Korea Central","North Europe","South Central US","Southeast + Asia","UK West","West US","UK South","West US 2","South Africa North","UAE + North","France Central"],"apiVersions":["2018-07-15-preview","2018-04-19","2018-03-31-preview","2018-03-15-preview","2017-11-15-privatepreview","2017-11-15-preview","2017-04-15-privatepreview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DBforPostgreSQL","namespace":"Microsoft.DBforPostgreSQL","authorizations":[{"applicationId":"76cd24bf-a9fc-4344-b1dc-908275de6d6d","roleDefinitionId":"c13b7b9c-2ed1-4901-b8a8-16f35468da29"},{"applicationId":"93efed00-6552-4119-833a-422b297199f9","roleDefinitionId":"a864a0a2-ab66-47a6-97a8-223dc1379f87"},{"applicationId":"123cd850-d9df-40bd-94d5-c9f07b7fa203"}],"resourceTypes":[{"resourceType":"operations","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","Norway East","South Africa North","South Africa West","South Central + US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK + West","West Central US","West Europe","West India","West US","West US 2","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"servers","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedInstanceOperationResults","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"serversv2","locations":["East US 2","East + US","North Central US","Canada Central","Australia East","UK South","West + Europe","Southeast Asia","West US 2","North Europe","East US 2 EUAP"],"apiVersions":["2018-03-29-privatepreview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"serverGroups","locations":["East + US 2","East US","North Central US","Canada Central","Australia East","UK South","West + Europe","Southeast Asia","West US 2","North Europe","East US 2 EUAP"],"apiVersions":["2018-03-29-privatepreview"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"flexibleServers","locations":["West US + 2","East US","East US 2","West Europe","North Europe","Japan East","Southeast + Asia","UK South","Central US","East US 2 EUAP"],"apiVersions":["2020-02-14-privatepreview","2020-02-14-preview"],"zoneMappings":[{"location":"East + US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West + Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Southeast + Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North + Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK + South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"locations/capabilities","locations":["East + US 2","East US","West Europe","West US 2","North Europe","Japan East","Southeast + Asia","UK South","Central US","East US 2 EUAP"],"apiVersions":["2020-02-14-privatepreview","2020-02-14-preview"],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["East + US 2","East US","West Europe","West US 2","North Europe","Japan East","Southeast + Asia","UK South","Central US","East US 2 EUAP"],"apiVersions":["2020-02-14-privatepreview","2020-02-14-preview"],"capabilities":"None"},{"resourceType":"servers/recoverableServers","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/administratorAzureAsyncOperation","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"servers/virtualNetworkRules","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/administratorOperationResults","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","Norway East","South Africa North","South Africa West","South Central + US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK + West","West Central US","West Europe","West India","West US","West US 2","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","Norway East","South Africa North","South Africa West","South Central + US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK + West","West Central US","West Europe","West India","West US","West US 2","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/syncGroupOperationResults","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/azureAsyncOperation","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/syncMemberOperationResults","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/administratorOperationResults","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/syncAgentOperationResults","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/administratorAzureAsyncOperation","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/syncDatabaseIds","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/checkVirtualNetworkSubnetUsage","locations":["East + US 2","East US","North Central US","Canada Central","Australia East","UK South","West + Europe","Southeast Asia","West US 2","North Europe","Japan East","Central + US","East US 2 EUAP"],"apiVersions":[],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionProxyOperationResults","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"},{"resourceType":"locations/longTermRetentionServers","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionProxyAzureAsyncOperation","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/longTermRetentionBackups","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionOperationResults","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/longTermRetentionPolicyOperationResults","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionAzureAsyncOperation","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/longTermRetentionPolicyAzureAsyncOperation","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/performanceTiers","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/longTermRetentionBackupOperationResults","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01-preview","2017-12-01"],"capabilities":"None"},{"resourceType":"locations/securityAlertPoliciesAzureAsyncOperation","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/longTermRetentionBackupAzureAsyncOperation","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01"],"capabilities":"None"},{"resourceType":"locations/securityAlertPoliciesOperationResults","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/shortTermRetentionPolicyOperationResults","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-12-01"],"capabilities":"None"},{"resourceType":"locations/recommendedActionSessionsAzureAsyncOperation","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/shortTermRetentionPolicyAzureAsyncOperation","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/recommendedActionSessionsOperationResults","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedShortTermRetentionPolicyOperationResults","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/topQueryStatistics","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/managedShortTermRetentionPolicyAzureAsyncOperation","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/queryTexts","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/instanceFailoverGroups","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/waitStatistics","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/instanceFailoverGroupAzureAsyncOperation","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/advisors","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/instanceFailoverGroupOperationResults","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/privateLinkResources","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionProxyOperationResults","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/privateEndpointConnections","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionProxyAzureAsyncOperation","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/privateEndpointConnectionProxies","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionOperationResults","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-06-01-privatepreview","2018-06-01-preview","2018-06-01"],"capabilities":"None"},{"resourceType":"servers/keys","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/privateEndpointConnectionAzureAsyncOperation","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-01-01-privatepreview","2020-01-01-preview","2020-01-01"],"capabilities":"None"},{"resourceType":"locations/serverKeyAzureAsyncOperation","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/notifyAzureAsyncOperation","locations":["Australia - Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada - East","Central India","Central US","East Asia","East US","East US 2","France - Central","Germany West Central","Japan East","Japan West","Korea Central","Korea - South","North Central US","North Europe","Norway East","South Africa North","South - Central US","South India","Southeast Asia","Switzerland North","UAE North","UK + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-01-01-privatepreview","2020-01-01-preview","2020-01-01"],"capabilities":"None"},{"resourceType":"locations/serverKeyOperationResults","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","France Central","France South","Germany West Central","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","Norway East","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-02-02-preview","2019-06-01-preview","2018-06-01-preview","2017-10-01-preview","2017-03-01-preview","2015-05-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/84codes.CloudAMQP","namespace":"84codes.CloudAMQP","resourceTypes":[{"resourceType":"servers","locations":["East - US 2","Central US","East US","North Central US","South Central US","West US","North + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-01-01-privatepreview","2020-01-01-preview","2020-01-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Devices","namespace":"Microsoft.Devices","authorizations":[{"applicationId":"0cd79364-7a90-4354-9984-6e36c841418d","roleDefinitionId":"C121DF10-FE58-4BC4-97F9-8296879F7BBB"},{"applicationId":"29f411f1-b2cf-4043-8ac8-2185d7316811"},{"applicationId":"89d10474-74af-4874-99a7-c23c2f643083","roleDefinitionId":"7df22794-26e3-4f94-9d50-a4f0f6e1cb41"}],"resourceTypes":[{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2020-07-10-preview","2020-06-15","2020-04-01","2020-03-01","2019-11-04","2019-07-01-preview","2019-03-22-preview","2019-03-22","2018-12-01-preview","2018-04-01","2018-01-22","2017-07-01","2017-01-19","2016-02-03","2015-08-15-preview"],"defaultApiVersion":"2018-04-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"None"},{"resourceType":"checkProvisioningServiceNameAvailability","locations":[],"apiVersions":["2020-03-01","2020-01-01","2018-01-22","2017-11-15","2017-08-21-preview"],"defaultApiVersion":"2018-01-22","capabilities":"None"},{"resourceType":"usages","locations":[],"apiVersions":["2020-07-10-preview","2020-06-15","2020-04-01","2020-03-01","2019-11-04","2019-07-01-preview","2019-03-22-preview","2019-03-22","2018-12-01-preview","2018-04-01","2018-01-22","2017-07-01","2017-01-19","2016-02-03","2015-08-15-preview"],"defaultApiVersion":"2018-04-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-07-10-preview","2020-06-15","2020-04-01","2020-03-01","2019-11-04","2019-07-01-preview","2019-03-22-preview","2019-03-22","2018-12-01-preview","2018-04-01","2018-01-22","2017-07-01","2017-01-19","2016-02-03","2015-08-15-preview"],"defaultApiVersion":"2018-04-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"None"},{"resourceType":"operationResults","locations":[],"apiVersions":["2020-07-10-preview","2020-06-15","2020-04-01","2020-03-01","2020-01-01","2019-11-04","2019-09-01","2019-07-01-preview","2019-03-22-preview","2019-03-22","2018-12-01-preview","2018-04-01-preview","2018-04-01","2018-01-22-preview","2018-01-22","2017-11-15","2017-09-25-preview","2017-08-21-preview","2017-07-01","2017-01-19","2016-02-03","2015-08-15-preview"],"defaultApiVersion":"2018-04-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"None"},{"resourceType":"IotHubs","locations":["West + US","North Europe","East Asia","East US","West Europe","Southeast Asia","Japan + East","Japan West","Australia East","Australia Southeast","West US 2","West + Central US","East US 2","Central US","UK South","UK West","South India","Central + India","Canada Central","Canada East","Brazil South","South Central US","Korea + South","Korea Central","France Central","North Central US","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2020-07-10-preview","2020-06-15","2020-04-01","2020-03-01","2020-01-01","2019-11-04","2019-07-01-preview","2019-03-22-preview","2019-03-22","2018-12-01-preview","2018-04-01","2018-01-22","2017-07-01","2017-01-19","2016-02-03","2015-08-15-preview"],"defaultApiVersion":"2020-01-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"IotHubs/eventGridFilters","locations":["West + US","East US","West US 2","West Central US","East US 2","Central US","North Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast"],"apiVersions":["2016-08-01"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2016-08-01"],"capabilities":"None"},{"resourceType":"listCommunicationPreference","locations":[],"apiVersions":["2016-08-01"],"capabilities":"None"},{"resourceType":"updateCommunicationPreference","locations":[],"apiVersions":["2016-08-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Conexlink.MyCloudIT","namespace":"Conexlink.MyCloudIT","resourceTypes":[{"resourceType":"accounts","locations":["Central + East","Australia Southeast","UK South","UK West","South India","Central India","Canada + Central","Canada East","Brazil South","South Central US","Korea South","Korea + Central","France Central","North Central US","Central US EUAP","East US 2 + EUAP"],"apiVersions":["2018-07-31","2018-01-15-preview"],"capabilities":"None"},{"resourceType":"ProvisioningServices","locations":["East + US","West US","West Europe","North Europe","Southeast Asia","East Asia","Australia + East","Australia Southeast","Japan West","Japan East","UK West","UK South","East + US 2","Central US","West US 2","West Central US","North Central US","South + Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-03-01","2020-01-01","2018-01-22","2017-11-15","2017-08-21-preview"],"defaultApiVersion":"2020-01-01","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"IotHubs/securitySettings","locations":["West + US","North Europe","East Asia","East US","West Europe","Southeast Asia","Japan + East","Japan West","Australia East","Australia Southeast","West US 2","West + Central US","East US 2","Central US","UK South","UK West","South India","Central + India","Canada Central","Canada East","Brazil South","South Central US","Korea + South","Korea Central","France Central","North Central US","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2019-09-01"],"capabilities":"None"},{"resourceType":"ElasticPools","locations":["Central + US EUAP","East US 2 EUAP"],"apiVersions":["2019-07-01-preview","2019-03-22-preview","2018-12-01-preview","2018-01-22-preview","2017-09-25-preview","2017-07-01"],"defaultApiVersion":"2018-01-22-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"ElasticPools/IotHubTenants","locations":["Central + US EUAP","East US 2 EUAP"],"apiVersions":["2019-07-01-preview","2019-03-22-preview","2018-01-22-preview","2017-09-25-preview","2017-07-01"],"defaultApiVersion":"2018-01-22-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DevTestLab","namespace":"Microsoft.DevTestLab","authorization":{"applicationId":"1a14be2a-e903-4cec-99cf-b2e209259a0f","roleDefinitionId":"8f2de81a-b9aa-49d8-b24c-11814d3ab525","managedByRoleDefinitionId":"8f2de81a-b9aa-49d8-b24c-11814d3ab525"},"resourceTypes":[{"resourceType":"labs/environments","locations":["Southeast + Asia","East US","West US","West Europe","East Asia","East US 2","Japan East","Japan + West","Central US"],"apiVersions":["2015-05-21-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"labs","locations":["West + Central US","South Central US","Central US","Australia Central","Australia + Southeast","Canada Central","Central India","East Asia","East US","France + Central","Japan East","Korea Central","North Europe","South Africa North","Switzerland + North","UAE North","UK West","West India","Australia Central 2","Australia + East","Brazil South","Canada East","East US 2","France South","Germany West + Central","Japan West","Korea South","North Central US","Norway East","South + India","Southeast Asia","Switzerland West","UK South","West Europe","West + US","West US 2","East US 2 EUAP","Central US EUAP"],"apiVersions":["2018-10-15-preview","2018-09-15","2017-04-26-preview","2016-05-15"],"defaultApiVersion":"2018-10-15-preview","capabilities":"CrossResourceGroupResourceMove, + SystemAssignedResourceIdentity, SupportsTags, SupportsLocation"},{"resourceType":"schedules","locations":["West + Central US","South Central US","Central US","Australia Central","Australia + Southeast","Canada Central","Central India","East Asia","East US","France + Central","Japan East","Korea Central","North Europe","South Africa North","Switzerland + North","UAE North","UK West","West India","Australia Central 2","Australia + East","Brazil South","Canada East","East US 2","France South","Germany West + Central","Japan West","Korea South","North Central US","Norway East","South + India","Southeast Asia","Switzerland West","UK South","West Europe","West + US","West US 2","East US 2 EUAP","Central US EUAP"],"apiVersions":["2018-10-15-preview","2018-09-15","2017-04-26-preview","2016-05-15"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"labs/virtualMachines","locations":["West + Central US","South Central US","Central US","Australia Central","Australia + Southeast","Canada Central","Central India","East Asia","East US","France + Central","Japan East","Korea Central","North Europe","South Africa North","Switzerland + North","UAE North","UK West","West India","Australia Central 2","Australia + East","Brazil South","Canada East","East US 2","France South","Germany West + Central","Japan West","Korea South","North Central US","Norway East","South + India","Southeast Asia","Switzerland West","UK South","West Europe","West + US","West US 2","East US 2 EUAP","Central US EUAP"],"apiVersions":["2018-10-15-preview","2018-09-15","2017-04-26-preview","2016-05-15"],"capabilities":"CrossResourceGroupResourceMove, + SupportsTags, SupportsLocation"},{"resourceType":"labs/serviceRunners","locations":["West + Central US","South Central US","Central US","Australia Central","Australia + Southeast","Canada Central","Central India","East Asia","East US","France + Central","Japan East","Korea Central","North Europe","South Africa North","Switzerland + North","UAE North","UK West","West India","Australia Central 2","Australia + East","Brazil South","Canada East","East US 2","France South","Germany West + Central","Japan West","Korea South","North Central US","Norway East","South + India","Southeast Asia","Switzerland West","UK South","West Europe","West + US","West US 2","East US 2 EUAP","Central US EUAP"],"apiVersions":["2018-10-15-preview","2018-09-15","2017-04-26-preview","2016-05-15"],"defaultApiVersion":"2016-05-15","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2018-10-15-preview","2018-09-15","2017-04-26-preview","2016-05-15","2015-05-21-preview"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2018-10-15-preview","2018-09-15","2017-04-26-preview","2016-05-15","2015-05-21-preview"],"capabilities":"None"},{"resourceType":"locations/operations","locations":["West + Central US","South Central US","Central US","Australia Central","Australia + Southeast","Canada Central","Central India","East Asia","East US","France + Central","Japan East","Korea Central","North Europe","South Africa North","Switzerland + North","UAE North","UK West","West India","Australia Central 2","Australia + East","Brazil South","Canada East","East US 2","France South","Germany West + Central","Japan West","Korea South","North Central US","Norway East","South + India","Southeast Asia","Switzerland West","UK South","West Europe","West + US","West US 2","East US 2 EUAP","Central US EUAP"],"apiVersions":["2018-10-15-preview","2018-09-15","2017-04-26-preview","2016-05-15"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DocumentDB","namespace":"Microsoft.DocumentDB","authorizations":[{"applicationId":"57c0fc58-a83a-41d0-8ae9-08952659bdfd","roleDefinitionId":"FFFD5CF5-FFD3-4B24-B0E2-0715ADD4C282"},{"applicationId":"36e2398c-9dd3-4f29-9a72-d9f2cfc47ad9","roleDefinitionId":"D5A795DE-916D-4818-B015-33C9E103E39B"},{"applicationId":"a232010e-820c-4083-83bb-3ace5fc29d0b"}],"resourceTypes":[{"resourceType":"databaseAccounts","locations":["Australia + Central","Australia East","Australia Southeast","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","France Central","Germany + West Central","Japan East","Japan West","North Central US","North Europe","Norway + East","South Africa North","South Central US","South India","Southeast Asia","Switzerland + North","West Central US","West Europe","West India","West US","West US 2","UAE + North","UK West","UK South","Brazil South","Korea South","Korea Central","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01-preview","2020-04-01","2020-03-01","2019-12-12","2019-08-01-preview","2019-08-01","2016-03-31","2016-03-19","2015-11-06","2015-04-08","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-04-08"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"databaseAccountNames","locations":["Australia + Central","Australia East","Australia Southeast","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","France Central","Germany + West Central","Japan East","Japan West","North Central US","North Europe","Norway + East","South Africa North","South Central US","South India","Southeast Asia","Switzerland + North","West Central US","West Europe","West India","West US","West US 2","UAE + North","UK West","UK South","Brazil South","Korea South","Korea Central","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01-preview","2020-04-01","2020-03-01","2019-12-12","2019-08-01-preview","2019-08-01","2016-03-31","2016-03-19","2015-11-06","2015-04-08","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-04-08"}],"capabilities":"None"},{"resourceType":"operations","locations":["Australia + Central","Australia East","Australia Southeast","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","France Central","Germany + West Central","Japan East","Japan West","North Central US","North Europe","Norway + East","South Africa North","South Central US","South India","Southeast Asia","Switzerland + North","West Central US","West Europe","West India","West US","West US 2","UAE + North","UK West","UK South","Brazil South","Korea South","Korea Central","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01-preview","2020-04-01","2020-03-01","2019-12-12","2019-08-01-preview","2019-08-01","2016-03-31","2016-03-19","2015-11-06","2015-04-08","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-04-08"}],"capabilities":"None"},{"resourceType":"operationResults","locations":["Australia + Central","Australia East","Australia Southeast","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","France Central","Germany + West Central","Japan East","Japan West","North Central US","North Europe","Norway + East","South Africa North","South Central US","South India","Southeast Asia","Switzerland + North","West Central US","West Europe","West India","West US","West US 2","UAE + North","UK West","UK South","Brazil South","Korea South","Korea Central","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01-preview","2020-04-01","2020-03-01","2019-12-12","2019-08-01-preview","2019-08-01","2016-03-31","2016-03-19","2015-11-06","2015-04-08","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-04-08"}],"capabilities":"None"},{"resourceType":"locations/operationsStatus","locations":["Australia + Central","Australia East","Australia Southeast","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","France Central","Germany + West Central","Japan East","Japan West","North Central US","North Europe","Norway + East","South Africa North","South Central US","South India","Southeast Asia","Switzerland + North","West Central US","West Europe","West India","West US","West US 2","UAE + North","UK West","UK South","Brazil South","Korea South","Korea Central","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01-preview","2020-04-01","2020-03-01","2019-12-12","2019-08-01-preview","2019-08-01","2016-03-31","2016-03-19","2015-11-06","2015-04-08","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-04-08"}],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["Australia + Central","Australia East","Australia Southeast","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","France Central","Germany + West Central","Japan East","Japan West","North Central US","North Europe","Norway + East","South Africa North","South Central US","South India","Southeast Asia","Switzerland + North","West Central US","West Europe","West India","West US","West US 2","UAE + North","UK West","UK South","Brazil South","Korea South","Korea Central","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01-preview","2020-04-01","2020-03-01","2019-12-12","2019-08-01-preview","2019-08-01","2016-03-31","2016-03-19","2015-11-06","2015-04-08","2014-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-04-08"}],"capabilities":"None"},{"resourceType":"locations","locations":["Australia + Central","Australia East","Australia Southeast","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","France Central","Germany + West Central","Japan East","Japan West","North Central US","North Europe","Norway + East","South Africa North","South Central US","South India","Southeast Asia","Switzerland + North","West Central US","West Europe","West India","West US","West US 2","UAE + North","UK West","UK South","Brazil South","Korea South","Korea Central","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01-preview","2020-04-01","2020-03-01","2019-12-12","2019-08-01-preview","2019-08-01","2016-03-31","2016-03-19","2015-11-06","2015-04-08","2014-04-01"],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["Australia + Central","Australia East","Australia Southeast","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","France Central","Germany + West Central","Japan East","Japan West","North Central US","North Europe","Norway + East","South Africa North","South Central US","South India","Southeast Asia","Switzerland + North","West Central US","West Europe","West India","West US","West US 2","UAE + North","UK West","UK South","Brazil South","Korea South","Korea Central","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01-preview","2020-04-01","2020-03-01","2019-12-12","2019-08-01-preview","2019-08-01","2016-03-31","2016-03-19","2015-11-06","2015-04-08","2014-04-01"],"capabilities":"None"},{"resourceType":"locations/restorableDatabaseAccounts","locations":["Australia + Central","Australia East","Australia Southeast","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","France Central","Germany + West Central","Japan East","Japan West","North Central US","North Europe","Norway + East","South Africa North","South Central US","South India","Southeast Asia","Switzerland + North","West Central US","West Europe","West India","West US","West US 2","UAE + North","UK West","UK South","Brazil South","Korea South","Korea Central","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01-preview"],"capabilities":"None"},{"resourceType":"restorableDatabaseAccounts","locations":["Australia + Central","Australia East","Australia Southeast","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","France Central","Germany + West Central","Japan East","Japan West","North Central US","North Europe","Norway + East","South Africa North","South Central US","South India","Southeast Asia","Switzerland + North","West Central US","West Europe","West India","West US","West US 2","UAE + North","UK West","UK South","Brazil South","Korea South","Korea Central","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DomainRegistration","namespace":"Microsoft.DomainRegistration","authorization":{"applicationId":"ea2f600a-4980-45b7-89bf-d34da487bda1","roleDefinitionId":"54d7f2e3-5040-48a7-ae90-eebf629cfa0b"},"resourceTypes":[{"resourceType":"domains","locations":["global"],"apiVersions":["2020-06-01","2019-08-01","2018-02-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2018-02-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"domains/domainOwnershipIdentifiers","locations":["global"],"apiVersions":["2020-06-01","2019-08-01","2018-02-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2018-02-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"topLevelDomains","locations":["global"],"apiVersions":["2020-06-01","2019-08-01","2018-02-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2018-02-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"checkDomainAvailability","locations":["global"],"apiVersions":["2020-06-01","2019-08-01","2018-02-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2018-02-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"listDomainRecommendations","locations":["global"],"apiVersions":["2020-06-01","2019-08-01","2018-02-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2018-02-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"validateDomainRegistrationInformation","locations":["global"],"apiVersions":["2020-06-01","2019-08-01","2018-02-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2018-02-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"generateSsoRequest","locations":["global"],"apiVersions":["2020-06-01","2019-08-01","2018-02-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2018-02-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"operations","locations":["global"],"apiVersions":["2020-06-01","2019-08-01","2018-02-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2018-02-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.EventGrid","namespace":"Microsoft.EventGrid","authorizations":[{"applicationId":"4962773b-9cdb-44cf-a8bf-237846a00ab7","roleDefinitionId":"7FE036D8-246F-48BF-A78F-AB3EE699C8F3"}],"resourceTypes":[{"resourceType":"locations","locations":[],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2019-01-01","2018-09-15-preview","2018-05-01-preview","2018-01-01","2017-09-15-preview","2017-06-15-preview"],"capabilities":"None"},{"resourceType":"locations/eventSubscriptions","locations":["West + US 2","East US","West US","Central US","East US 2","West Central US","Australia + East","Australia Southeast","Australia Central","Japan East","Japan West","West + Europe","North Europe","Southeast Asia","East Asia","North Central US","South + Central US","Brazil South","Canada Central","Canada East","Central India","South + India","West India","France Central","UK West","UK South","Korea Central","Korea + South","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","East US 2 EUAP","East US 2 (Stage)","Central US EUAP"],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2019-01-01","2018-09-15-preview","2018-05-01-preview","2018-01-01","2017-09-15-preview","2017-06-15-preview"],"capabilities":"None"},{"resourceType":"eventSubscriptions","locations":["West + US 2","East US","West US","Central US","East US 2","West Central US","Australia + East","Australia Southeast","Australia Central","Japan East","Japan West","West + Europe","North Europe","Southeast Asia","East Asia","North Central US","South + Central US","Brazil South","Canada Central","Canada East","Central India","South + India","West India","France Central","UK West","UK South","Korea Central","Korea + South","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","East US 2 EUAP","East US 2 (Stage)","Central US EUAP"],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2019-01-01","2018-09-15-preview","2018-05-01-preview","2018-01-01","2017-09-15-preview","2017-06-15-preview"],"capabilities":"SupportsExtension"},{"resourceType":"topics","locations":["West + US 2","East US","West US","Central US","East US 2","West Central US","Australia + East","Australia Southeast","Australia Central","Japan East","Japan West","West + Europe","North Europe","Southeast Asia","East Asia","North Central US","South + Central US","Brazil South","Canada Central","Canada East","Central India","South + India","West India","France Central","UK West","UK South","Korea Central","Korea + South","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2019-01-01","2018-09-15-preview","2018-05-01-preview","2018-01-01","2017-09-15-preview","2017-06-15-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"domains","locations":["Central US","West + US 2","East US","West US","East US 2","West Central US","Australia East","Australia + Southeast","Australia Central","Japan East","Japan West","West Europe","North + Europe","Southeast Asia","East Asia","North Central US","South Central US","Brazil + South","Canada Central","Canada East","Central India","South India","West + India","France Central","UK West","UK South","Korea Central","Korea South","South + Africa North","UAE North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2018-09-15-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"domains/topics","locations":["Central + US","West US 2","East US","West US","East US 2","West Central US","Australia + East","Australia Southeast","Australia Central","Japan East","Japan West","West + Europe","North Europe","Southeast Asia","East Asia","North Central US","South + Central US","Brazil South","Canada Central","Canada East","Central India","South + India","West India","France Central","UK West","UK South","Korea Central","Korea + South","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2018-09-15-preview"],"capabilities":"None"},{"resourceType":"topicTypes","locations":["West + US 2","East US","West US","Central US","East US 2","West Central US","Australia + East","Australia Southeast","Australia Central","Japan East","Japan West","West + Europe","North Europe","Southeast Asia","East Asia","North Central US","South + Central US","Brazil South","Brazil Southeast","Canada Central","Canada East","Central + India","South India","West India","France Central","UK West","UK South","Korea + Central","Korea South","South Africa North","UAE North","Switzerland North","Germany + West Central","Norway East","East US 2 EUAP","East US 2 (Stage)","Central + US EUAP"],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2019-01-01","2018-09-15-preview","2018-05-01-preview","2018-01-01","2017-09-15-preview","2017-06-15-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["West + US 2","East US","West US","Central US","East US 2","West Central US","Australia + East","Australia Southeast","Australia Central","Japan East","Japan West","West + Europe","North Europe","Southeast Asia","East Asia","North Central US","South + Central US","Brazil South","Brazil Southeast","Canada Central","Canada East","Central + India","South India","West India","France Central","UK West","UK South","Korea + Central","Korea South","South Africa North","UAE North","Switzerland North","Germany + West Central","Norway East"],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2019-01-01","2018-09-15-preview","2018-05-01-preview","2018-01-01","2017-09-15-preview","2017-06-15-preview"],"capabilities":"None"},{"resourceType":"locations/operationsStatus","locations":["West + US 2","East US","West US","Central US","East US 2","West Central US","Australia + East","Australia Southeast","Australia Central","Japan East","Japan West","West + Europe","North Europe","Southeast Asia","East Asia","North Central US","South + Central US","Brazil South","Canada Central","Canada East","Central India","South + India","West India","France Central","UK West","UK South","Korea Central","Korea + South","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","East US 2 EUAP","East US 2 (Stage)","Central US EUAP"],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2019-01-01","2018-09-15-preview","2018-05-01-preview","2018-01-01","2017-09-15-preview","2017-06-15-preview"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["West + US 2","East US","West US","Central US","East US 2","West Central US","Australia + East","Australia Southeast","Australia Central","Japan East","Japan West","West + Europe","North Europe","Southeast Asia","East Asia","North Central US","South + Central US","Brazil South","Canada Central","Canada East","Central India","South + India","West India","France Central","UK West","UK South","Korea Central","Korea + South","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","East US 2 EUAP","East US 2 (Stage)","Central US EUAP"],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2019-01-01","2018-09-15-preview","2018-05-01-preview","2018-01-01","2017-09-15-preview","2017-06-15-preview"],"capabilities":"None"},{"resourceType":"locations/topicTypes","locations":["West + US 2","East US","West US","Central US","East US 2","West Central US","Australia + East","Australia Southeast","Australia Central","Japan East","Japan West","West + Europe","North Europe","Southeast Asia","East Asia","North Central US","South + Central US","Brazil South","Canada Central","Canada East","Central India","South + India","West India","France Central","UK West","UK South","Korea Central","Korea + South","South Africa North","Switzerland North","Germany West Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2019-01-01","2018-09-15-preview","2018-05-01-preview","2018-01-01","2017-09-15-preview","2017-06-15-preview"],"capabilities":"None"},{"resourceType":"extensionTopics","locations":["West + US 2","East US","West US","Central US","East US 2","West Central US","Australia + East","Australia Southeast","Australia Central","Japan East","Japan West","West + Europe","North Europe","Southeast Asia","East Asia","North Central US","South + Central US","Brazil South","Canada Central","Canada East","Central India","South + India","West India","France Central","UK West","UK South","Korea Central","Korea + South","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","East US 2 EUAP","East US 2 (Stage)","Central US EUAP"],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2019-01-01","2018-09-15-preview","2018-05-01-preview","2018-01-01","2017-09-15-preview","2017-06-15-preview"],"capabilities":"SupportsExtension"},{"resourceType":"operationResults","locations":[],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2019-01-01","2018-09-15-preview","2018-05-01-preview","2018-01-01","2017-09-15-preview","2017-06-15-preview"],"capabilities":"None"},{"resourceType":"operationsStatus","locations":[],"apiVersions":["2020-06-01","2020-04-01-preview","2020-01-01-preview","2019-06-01","2019-02-01-preview","2019-01-01","2018-09-15-preview","2018-05-01-preview","2018-01-01","2017-09-15-preview","2017-06-15-preview"],"capabilities":"None"},{"resourceType":"systemTopics","locations":["global","West + Central US","Central US","West US 2","East US","West US","East US 2","Australia + East","Australia Southeast","Australia Central","Japan East","Japan West","West + Europe","North Europe","Southeast Asia","East Asia","North Central US","South + Central US","Brazil South","Canada Central","Canada East","Central India","South + India","West India","France Central","UK West","UK South","Korea Central","Korea + South","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP","East US 2 (Stage)"],"apiVersions":["2020-04-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"systemTopics/eventSubscriptions","locations":["global","West + Central US","Central US","West US 2","East US","West US","East US 2","Australia + East","Australia Southeast","Australia Central","Japan East","Japan West","West + Europe","North Europe","Southeast Asia","East Asia","North Central US","South + Central US","Brazil South","Canada Central","Canada East","Central India","South + India","West India","France Central","UK West","UK South","Korea Central","Korea + South","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP","East US 2 (Stage)"],"apiVersions":["2020-04-01-preview"],"capabilities":"None"},{"resourceType":"partnerNamespaces","locations":["West + Central US","Central US","West US 2","East US","West US","East US 2","Australia + East","Australia Southeast","Australia Central","Japan East","Japan West","West + Europe","North Europe","Southeast Asia","East Asia","North Central US","South + Central US","Brazil South","Canada Central","Canada East","Central India","South + India","West India","France Central","UK West","UK South","Korea Central","Korea + South","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP","East US 2 (Stage)"],"apiVersions":["2020-04-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"partnerTopics","locations":["West + Central US","Central US","West US 2","East US","West US","East US 2","Australia + East","Australia Southeast","Australia Central","Japan East","Japan West","West + Europe","North Europe","Southeast Asia","East Asia","North Central US","South + Central US","Brazil South","Canada Central","Canada East","Central India","South + India","West India","France Central","UK West","UK South","Korea Central","Korea + South","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP","East US 2 (Stage)"],"apiVersions":["2020-04-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"partnerTopics/eventSubscriptions","locations":["West + Central US","Central US","West US 2","East US","West US","East US 2","Australia + East","Australia Southeast","Australia Central","Japan East","Japan West","West + Europe","North Europe","Southeast Asia","East Asia","North Central US","South + Central US","Brazil South","Canada Central","Canada East","Central India","South + India","West India","France Central","UK West","UK South","Korea Central","Korea + South","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP","East US 2 (Stage)"],"apiVersions":["2020-04-01-preview"],"capabilities":"None"},{"resourceType":"partnerNamespaces/eventChannels","locations":["West + Central US","Central US","West US 2","East US","West US","East US 2","Australia + East","Australia Southeast","Australia Central","Japan East","Japan West","West + Europe","North Europe","Southeast Asia","East Asia","North Central US","South + Central US","Brazil South","Canada Central","Canada East","Central India","South + India","West India","France Central","UK West","UK South","Korea Central","Korea + South","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP","East US 2 (Stage)"],"apiVersions":["2020-04-01-preview"],"capabilities":"None"},{"resourceType":"partnerRegistrations","locations":["Global"],"apiVersions":["2020-04-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.EventHub","namespace":"Microsoft.EventHub","authorizations":[{"applicationId":"80369ed6-5f11-4dd9-bef3-692475845e77","roleDefinitionId":"eb8e1991-5de0-42a6-a64b-29b059341b7b"},{"applicationId":"6201d19e-14fb-4472-a2d6-5634a5c97568"}],"resourceTypes":[{"resourceType":"namespaces","locations":["Australia + East","Australia Southeast","Central US","East US","East US 2","West US","West + US 2","North Central US","South Central US","West Central US","East Asia","Southeast + Asia","Brazil South","Japan East","Japan West","North Europe","West Europe","Central + India","South India","West India","Canada Central","Canada East","UK West","UK + South","Korea Central","Korea South","France Central","South Africa North","UAE + North","Australia Central","Switzerland North","Germany West Central","Norway + East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-01-01-preview","2017-04-01","2015-08-01","2014-09-01"],"defaultApiVersion":"2017-04-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"clusters","locations":["Australia East","Australia + Southeast","Central US","East US","East US 2","West US","West US 2","North + Central US","South Central US","West Central US","East Asia","Southeast Asia","Brazil + South","Japan East","Japan West","North Europe","West Europe","Central India","South + India","West India","Canada Central","Canada East","UK West","UK South","Korea + Central","Korea South","France Central","South Africa North","Australia Central","Switzerland + North","Germany West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-01-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"namespaces/authorizationrules","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/networkrulesets","locations":[],"apiVersions":["2018-01-01-preview","2017-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/eventhubs","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/eventhubs/authorizationrules","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/eventhubs/consumergroups","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"checkNamespaceAvailability","locations":[],"apiVersions":["2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-08-01"}],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"sku","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/disasterrecoveryconfigs","locations":[],"apiVersions":["2017-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/disasterrecoveryconfigs/checkNameAvailability","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2018-01-01-preview","2017-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":[],"apiVersions":["2018-01-01-preview","2017-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"availableClusterRegions","locations":[],"apiVersions":["2018-01-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-01-01-preview"}],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.IoTCentral","namespace":"Microsoft.IoTCentral","authorizations":[{"applicationId":"9edfcdd9-0bc5-4bd4-b287-c3afc716aac7"}],"resourceTypes":[{"resourceType":"IoTApps","locations":["West + Europe","West US","East US 2","North Europe","East US","Central US","West + Central US","Australia","Asia Pacific","Europe","Japan","UK","United States"],"apiVersions":["2018-09-01","2017-07-01-privatepreview"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2018-09-01","2017-07-01-privatepreview"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"checkSubdomainAvailability","locations":[],"apiVersions":["2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2018-09-01","2017-07-01-privatepreview"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"appTemplates","locations":[],"apiVersions":["2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ManagedIdentity","namespace":"Microsoft.ManagedIdentity","resourceTypes":[{"resourceType":"Identities","locations":["South + Africa North","South Africa West","UAE North","Australia Central","Australia + East","Australia Southeast","Canada Central","Canada East","Brazil South","Central + India","West India","South India","Japan West","Japan East","East Asia","Southeast + Asia","Korea Central","Korea South","North Europe","West Europe","UK West","UK + South","Switzerland North","Germany West Central","Central US","North Central + US","East US","East US 2","South Central US","West US","West US 2","West Central + US","France Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2018-11-30","2015-08-31-PREVIEW"],"capabilities":"SupportsExtension"},{"resourceType":"userAssignedIdentities","locations":["South + Africa North","South Africa West","UAE North","Australia Central","Australia + East","Australia Southeast","Canada Central","Canada East","Brazil South","Central + India","West India","South India","Japan West","Japan East","East Asia","Southeast + Asia","Korea Central","Korea South","North Europe","West Europe","UK West","UK + South","Switzerland North","Germany West Central","Central US","North Central + US","East US","East US 2","South Central US","West US","West US 2","West Central + US","France Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2018-11-30","2015-08-31-PREVIEW"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"operations","locations":["South Africa + North","South Africa West","UAE North","Australia Central","Australia East","Australia + Southeast","Canada Central","Canada East","Brazil South","Central India","West + India","South India","Japan West","Japan East","East Asia","Southeast Asia","Korea + Central","Korea South","North Europe","West Europe","UK West","UK South","Switzerland + North","Germany West Central","Central US","North Central US","East US","East + US 2","South Central US","West US","West US 2","West Central US","France Central","Norway + East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2018-11-30","2015-08-31-PREVIEW"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.KeyVault","namespace":"Microsoft.KeyVault","authorizations":[{"applicationId":"cfa8b339-82a2-471a-a3c9-0fc0be7a4093","roleDefinitionId":"1cf9858a-28a2-4228-abba-94e606305b95"},{"applicationId":"589d5083-6f11-4d30-a62a-a4b316a14abf"}],"resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2020-04-01-preview","2019-09-01","2018-02-14-preview","2018-02-14","2016-10-01","2015-06-01","2014-12-19-preview"],"defaultApiVersion":"2019-09-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-10-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-10-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-10-01"}],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2019-09-01","2018-02-14-preview","2018-02-14","2016-10-01","2015-06-01"],"defaultApiVersion":"2019-09-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-10-01"}],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2019-09-01","2018-02-14-preview","2018-02-14","2016-10-01"],"defaultApiVersion":"2019-09-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-10-01"}],"capabilities":"None"},{"resourceType":"vaults","locations":["North + Central US","East US","North Europe","West Europe","East Asia","Southeast + Asia","East US 2","Central US","South Central US","West US","Japan East","Japan + West","Australia East","Australia Southeast","Brazil South","Central India","South + India","West India","Canada Central","Canada East","UK South","UK West","West + Central US","West US 2","East US 2 EUAP","Central US EUAP","Korea Central","Korea + South","France Central","France South","Australia Central","Australia Central + 2","UAE Central","UAE North","South Africa North","South Africa West","Switzerland + North","Switzerland West","Germany North","Germany West Central","Norway East","Norway + West","Brazil Southeast"],"apiVersions":["2019-09-01","2018-02-14-preview","2018-02-14","2016-10-01","2015-06-01"],"defaultApiVersion":"2019-09-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-10-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-10-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-10-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"vaults/secrets","locations":["North + Central US","East US","North Europe","West Europe","East Asia","Southeast + Asia","East US 2","Central US","South Central US","West US","Japan East","Japan + West","Australia East","Australia Southeast","Brazil South","Central India","South + India","West India","Canada Central","Canada East","UK South","UK West","West + Central US","West US 2","East US 2 EUAP","Central US EUAP","Korea Central","Korea + South","France Central","France South","Australia Central","Australia Central + 2","UAE Central","UAE North","South Africa North","South Africa West","Switzerland + North","Switzerland West","Germany North","Germany West Central","Norway East","Norway + West","Brazil Southeast"],"apiVersions":["2019-09-01","2018-02-14-preview","2018-02-14","2016-10-01","2015-06-01"],"defaultApiVersion":"2019-09-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-10-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-10-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-10-01"}],"capabilities":"None"},{"resourceType":"vaults/accessPolicies","locations":["North + Central US","East US","North Europe","West Europe","East Asia","Southeast + Asia","East US 2","Central US","South Central US","West US","Japan East","Japan + West","Australia East","Australia Southeast","Brazil South","Central India","South + India","West India","Canada Central","Canada East","UK South","UK West","West + Central US","West US 2","East US 2 EUAP","Central US EUAP","Korea Central","Korea + South","France Central","France South","Australia Central","Australia Central + 2","UAE Central","UAE North","South Africa North","South Africa West","Switzerland + North","Switzerland West","Germany North","Germany West Central","Norway East","Norway + West","Brazil Southeast"],"apiVersions":["2019-09-01","2018-02-14-preview","2018-02-14","2016-10-01","2015-06-01"],"defaultApiVersion":"2019-09-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-10-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-10-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-10-01"}],"capabilities":"None"},{"resourceType":"deletedVaults","locations":["North + Central US","East US","North Europe","West Europe","East Asia","Southeast + Asia","East US 2","Central US","South Central US","West US","Japan East","Japan + West","Australia East","Australia Southeast","Brazil South","Central India","South + India","West India","Canada Central","Canada East","UK South","UK West","West + Central US","West US 2","East US 2 EUAP","Central US EUAP","Korea Central","Korea + South","France Central","France South","Australia Central","Australia Central + 2","UAE Central","UAE North","South Africa North","South Africa West","Switzerland + North","Switzerland West","Germany North","Germany West Central","Norway East","Norway + West","Brazil Southeast"],"apiVersions":["2019-09-01","2018-02-14-preview","2018-02-14","2016-10-01"],"defaultApiVersion":"2019-09-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-10-01"}],"capabilities":"None"},{"resourceType":"locations/deletedVaults","locations":["North + Central US","East US","North Europe","West Europe","East Asia","Southeast + Asia","East US 2","Central US","South Central US","West US","Japan East","Japan + West","Australia East","Australia Southeast","Brazil South","Central India","South + India","West India","Canada Central","Canada East","UK South","UK West","West + Central US","West US 2","East US 2 EUAP","Central US EUAP","Korea Central","Korea + South","France Central","France South","Australia Central","Australia Central + 2","UAE Central","UAE North","South Africa North","South Africa West","Switzerland + North","Switzerland West","Germany North","Germany West Central","Norway East","Norway + West","Brazil Southeast"],"apiVersions":["2019-09-01","2018-02-14-preview","2018-02-14","2016-10-01"],"defaultApiVersion":"2019-09-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-10-01"}],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["East + US","North Central US","West Europe","North Europe","East Asia","Southeast + Asia","East US 2","Central US","South Central US","West Central US","West + US 2","West US","Japan East","Japan West","Australia East","Australia Southeast","Australia + Central","Australia Central 2","Brazil South","Central India","South India","West + India","Canada Central","Canada East","UK South","UK West","Central US EUAP","East + US 2 EUAP","Korea Central","Korea South","France Central","France South","UAE + Central","UAE North","South Africa North","South Africa West","Switzerland + North","Switzerland West","Germany North","Germany West Central","Norway East","Norway + West","Brazil Southeast"],"apiVersions":["2019-09-01","2018-02-14-preview","2018-02-14","2016-10-01"],"defaultApiVersion":"2019-09-01","capabilities":"None"},{"resourceType":"locations/operationResults","locations":["North + Central US","East US","North Europe","West Europe","East Asia","Southeast + Asia","East US 2","Central US","South Central US","West US","Japan East","Japan + West","Australia East","Australia Southeast","Brazil South","Central India","South + India","West India","Canada Central","Canada East","UK South","UK West","West + Central US","West US 2","East US 2 EUAP","Central US EUAP","Korea Central","Korea + South","France Central","France South","Australia Central","Australia Central + 2","UAE Central","UAE North","South Africa North","South Africa West","Switzerland + North","Switzerland West","Germany North","Germany West Central","Norway East","Norway + West","Brazil Southeast"],"apiVersions":["2019-09-01","2018-02-14-preview","2018-02-14","2016-10-01"],"defaultApiVersion":"2019-09-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-10-01"}],"capabilities":"None"},{"resourceType":"vaults/eventGridFilters","locations":["North + Central US","East US","North Europe","West Europe","East Asia","Southeast + Asia","East US 2","Central US","South Central US","West US","Japan East","Japan + West","Australia East","Australia Southeast","Brazil South","Central India","South + India","West India","Canada Central","Canada East","UK South","UK West","West + Central US","West US 2","East US 2 EUAP","Central US EUAP","Korea Central","Korea + South","France Central","France South","Australia Central","Australia Central + 2","UAE Central","UAE North","South Africa North","South Africa West","Switzerland + North","Switzerland West","Germany North","Germany West Central","Norway East","Norway + West","Brazil Southeast"],"apiVersions":["2019-09-01","2018-02-14-preview","2018-02-14"],"defaultApiVersion":"2019-09-01","capabilities":"None"},{"resourceType":"managedHSMs","locations":["Central + US EUAP","East US 2","East US 2 EUAP","South Central US","North Europe","West + Europe","Canada Central"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"vaults/keys","locations":["North + Central US","East US","North Europe","West Europe","East Asia","Southeast + Asia","East US 2","Central US","South Central US","West US","Japan East","Japan + West","Australia East","Australia Southeast","Brazil South","Central India","South + India","West India","Canada Central","Canada East","UK South","UK West","West + Central US","West US 2","East US 2 EUAP","Central US EUAP","Korea Central","Korea + South","France Central","France South","Australia Central","Australia Central + 2","UAE Central","UAE North","South Africa North","South Africa West","Switzerland + North","Switzerland West","Germany North","Germany West Central","Norway East","Norway + West","Brazil Southeast"],"apiVersions":["2019-09-01"],"defaultApiVersion":"2019-09-01","capabilities":"None"},{"resourceType":"vaults/keys/versions","locations":["North + Central US","East US","North Europe","West Europe","East Asia","Southeast + Asia","East US 2","Central US","South Central US","West US","Japan East","Japan + West","Australia East","Australia Southeast","Brazil South","Central India","South + India","West India","Canada Central","Canada East","UK South","UK West","West + Central US","West US 2","East US 2 EUAP","Central US EUAP","Korea Central","Korea + South","France Central","France South","Australia Central","Australia Central + 2","UAE Central","UAE North","South Africa North","South Africa West","Switzerland + North","Switzerland West","Germany North","Germany West Central","Norway East","Norway + West","Brazil Southeast"],"apiVersions":["2019-09-01"],"defaultApiVersion":"2019-09-01","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Logic","namespace":"Microsoft.Logic","authorization":{"applicationId":"7cd684f4-8a78-49b0-91ec-6a35d38739ba","roleDefinitionId":"cb3ef1fb-6e31-49e2-9d87-ed821053fe58"},"resourceTypes":[{"resourceType":"workflows","locations":["North + Central US","Central US","South Central US","North Europe","West Europe","East + Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan + East","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","France Central","France South","Korea Central","Korea + South","South Africa North","South Africa West","UAE Central","Switzerland + North","Germany North","Germany West Central","Central US EUAP","East US 2 + EUAP"],"apiVersions":["2019-05-01","2018-07-01-preview","2017-07-01","2016-10-01","2016-06-01","2015-08-01-preview","2015-02-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"locations/workflows","locations":["North + Central US","Central US","South Central US","North Europe","West Europe","East + Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan + East","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","France Central","France South","Korea Central","Korea + South","South Africa North","South Africa West","UAE Central","Switzerland + North","Germany North","Germany West Central","Central US EUAP","East US 2 + EUAP"],"apiVersions":["2019-05-01","2018-07-01-preview","2017-07-01","2016-10-01","2016-06-01","2015-08-01-preview","2015-02-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":["North + Central US"],"apiVersions":["2019-05-01","2018-07-01-preview","2017-07-01","2016-10-01","2016-06-01","2015-08-01-preview","2015-02-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["North + Central US","Central US","South Central US","North Europe","West Europe","East + Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan + East","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","France Central","France South","Korea Central","Korea + South","South Africa North","South Africa West","UAE Central","Switzerland + North","Germany North","Germany West Central"],"apiVersions":["2019-05-01","2018-07-01-preview","2017-07-01","2016-10-01","2016-06-01","2015-08-01-preview","2015-02-01-preview"],"capabilities":"None"},{"resourceType":"integrationAccounts","locations":["North + Central US","Central US","South Central US","North Europe","West Europe","East + Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan + East","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","France Central","France South","Korea Central","South + Africa North","South Africa West","UAE Central","Switzerland North","Germany + North","Germany West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-05-01","2018-07-01-preview","2016-06-01","2015-08-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"integrationServiceEnvironments","locations":["North + Central US","Central US","South Central US","North Europe","West Europe","East + Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan + East","Australia East","Australia Southeast","South India","Central India","Canada + Central","West US 2","UK South","UK West","France Central","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2019-06-01-preview","2019-05-01","2018-07-01-preview","2018-03-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + SystemAssignedResourceIdentity, SupportsTags, SupportsLocation"},{"resourceType":"integrationServiceEnvironments/managedApis","locations":["North + Central US","Central US","South Central US","North Europe","West Europe","East + Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan + East","Australia East","Australia Southeast","South India","Central India","Canada + Central","West US 2","West Central US","UK South","UK West","France Central","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2019-06-01-preview","2019-05-01","2018-07-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + SupportsTags, SupportsLocation"},{"resourceType":"hostingEnvironments","locations":["Central + US EUAP","East US 2 EUAP"],"apiVersions":["2018-04-01-privatepreview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"isolatedEnvironments","locations":["Central + US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview"],"capabilities":"SupportsTags, + SupportsLocation"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Media","namespace":"Microsoft.Media","authorization":{"applicationId":"374b2a64-3b6b-436b-934c-b820eacca870","roleDefinitionId":"aab70789-0cec-44b5-95d7-84b64c9487af"},"resourceTypes":[{"resourceType":"mediaservices","locations":["Japan + West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East + US","West US","Australia East","Australia Southeast","East US 2","Central + US","Brazil South","Central India","West India","South India","North Central + US","South Central US","UK South","UK West","Canada Central","Canada East","West + Central US","West US 2","Korea Central","Korea South","France Central","France + South","South Africa North","South Africa West","UAE Central","UAE North","Germany + West Central","Germany North","Switzerland West","Switzerland North"],"apiVersions":["2020-05-01","2018-07-01","2018-06-01-preview","2018-03-30-preview","2015-10-01","2015-04-01"],"defaultApiVersion":"2020-05-01","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"mediaservices/assets","locations":["Japan + West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East + US","West US","Australia East","Australia Southeast","East US 2","Central + US","Brazil South","Central India","West India","South India","North Central + US","South Central US","UK South","UK West","Canada Central","Canada East","West + Central US","West US 2","Korea Central","Korea South","France Central","France + South","South Africa North","South Africa West","UAE Central","UAE North","Germany + West Central","Germany North","Switzerland West","Switzerland North"],"apiVersions":["2020-05-01","2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"mediaservices/contentKeyPolicies","locations":["Japan + West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East + US","West US","Australia East","Australia Southeast","East US 2","Central + US","Brazil South","Central India","West India","South India","North Central + US","South Central US","UK South","UK West","Canada Central","Canada East","West + Central US","West US 2","Korea Central","Korea South","France Central","France + South","South Africa North","South Africa West","UAE Central","UAE North","Germany + West Central","Germany North","Switzerland West","Switzerland North"],"apiVersions":["2020-05-01","2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"mediaservices/streamingLocators","locations":["Japan + West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East + US","West US","Australia East","Australia Southeast","East US 2","Central + US","Brazil South","Central India","West India","South India","North Central + US","South Central US","UK South","UK West","Canada Central","Canada East","West + Central US","West US 2","Korea Central","Korea South","France Central","France + South","South Africa North","South Africa West","UAE Central","UAE North","Germany + West Central","Germany North","Switzerland West","Switzerland North"],"apiVersions":["2020-05-01","2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"mediaservices/streamingPolicies","locations":["Japan + West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East + US","West US","Australia East","Australia Southeast","East US 2","Central + US","Brazil South","Central India","West India","South India","North Central + US","South Central US","UK South","UK West","Canada Central","Canada East","West + Central US","West US 2","Korea Central","Korea South","France Central","France + South","South Africa North","South Africa West","UAE Central","UAE North","Germany + West Central","Germany North","Switzerland West","Switzerland North"],"apiVersions":["2020-05-01","2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"mediaservices/eventGridFilters","locations":["Japan + West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East + US","West US","Australia East","Australia Southeast","East US 2","Central + US","Brazil South","Central India","West India","South India","North Central + US","South Central US","UK South","UK West","Canada Central","Canada East","West + Central US","West US 2","Korea Central","Korea South","France Central","France + South","South Africa North","South Africa West","UAE Central","UAE North","Germany + West Central","Germany North","Switzerland West","Switzerland North"],"apiVersions":["2018-02-05"],"defaultApiVersion":"2018-02-05","capabilities":"None"},{"resourceType":"mediaservices/transforms","locations":["Japan + West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East + US","West US","Australia East","Australia Southeast","East US 2","Central + US","Brazil South","Central India","West India","South India","North Central + US","South Central US","UK South","UK West","Canada Central","Canada East","West + Central US","West US 2","Korea Central","Korea South","France Central","France + South","South Africa North","South Africa West","UAE Central","UAE North","Germany + West Central","Germany North","Switzerland West","Switzerland North"],"apiVersions":["2020-05-01","2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"mediaservices/transforms/jobs","locations":["Japan + West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East + US","West US","Australia East","Australia Southeast","East US 2","Central + US","Brazil South","Central India","West India","South India","North Central + US","South Central US","UK South","UK West","Canada Central","Canada East","West + Central US","West US 2","Korea Central","Korea South","France Central","France + South","South Africa North","South Africa West","UAE Central","UAE North","Germany + West Central","Germany North","Switzerland West","Switzerland North"],"apiVersions":["2020-05-01","2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"mediaservices/streamingEndpoints","locations":["Japan + West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East + US","West US","Australia East","Australia Southeast","East US 2","Central + US","Brazil South","Central India","West India","South India","North Central + US","South Central US","UK South","UK West","Canada Central","Canada East","West + Central US","West US 2","Korea Central","Korea South","France Central","France + South","South Africa North","South Africa West","UAE Central","UAE North","Germany + West Central","Germany North","Switzerland West","Switzerland North"],"apiVersions":["2020-05-01","2019-05-01-preview","2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"mediaservices/liveEvents","locations":["Japan + West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East + US","West US","Australia East","Australia Southeast","East US 2","Central + US","Brazil South","Central India","West India","South India","North Central + US","South Central US","UK South","UK West","Canada Central","Canada East","West + Central US","West US 2","Korea Central","Korea South","France Central","France + South","South Africa North","South Africa West","UAE Central","UAE North","Germany + West Central","Germany North","Switzerland West","Switzerland North"],"apiVersions":["2020-05-01","2019-05-01-preview","2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"mediaservices/liveEvents/liveOutputs","locations":["Japan + West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East + US","West US","Australia East","Australia Southeast","East US 2","Central + US","Brazil South","Central India","West India","South India","North Central + US","South Central US","UK South","UK West","Canada Central","Canada East","West + Central US","West US 2","Korea Central","Korea South","France Central","France + South","South Africa North","South Africa West","UAE Central","UAE North","Germany + West Central","Germany North","Switzerland West","Switzerland North"],"apiVersions":["2020-05-01","2019-05-01-preview","2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"mediaservices/streamingEndpointOperations","locations":["Japan + West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East + US","West US","Australia East","Australia Southeast","East US 2","Central + US","Brazil South","Central India","West India","South India","North Central + US","South Central US","UK South","UK West","Canada Central","Canada East","West + Central US","West US 2","Korea Central","Korea South","France Central","France + South","South Africa North","South Africa West","UAE Central","UAE North","Germany + West Central","Germany North","Switzerland West","Switzerland North"],"apiVersions":["2020-05-01","2019-05-01-preview","2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"mediaservices/liveEventOperations","locations":["Japan + West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East + US","West US","Australia East","Australia Southeast","East US 2","Central + US","Brazil South","Central India","West India","South India","North Central + US","South Central US","UK South","UK West","Canada Central","Canada East","West + Central US","West US 2","Korea Central","Korea South","France Central","France + South","South Africa North","South Africa West","UAE Central","UAE North","Germany + West Central","Germany North","Switzerland West","Switzerland North"],"apiVersions":["2020-05-01","2019-05-01-preview","2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"mediaservices/liveOutputOperations","locations":["Japan + West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East + US","West US","Australia East","Australia Southeast","East US 2","Central + US","Brazil South","Central India","West India","South India","North Central + US","South Central US","UK South","UK West","Canada Central","Canada East","West + Central US","West US 2","Korea Central","Korea South","France Central","France + South","South Africa North","South Africa West","UAE Central","UAE North","Germany + West Central","Germany North","Switzerland West","Switzerland North"],"apiVersions":["2020-05-01","2019-05-01-preview","2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"mediaservices/assets/assetFilters","locations":["Japan + West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East + US","West US","Australia East","Australia Southeast","East US 2","Central + US","Brazil South","Central India","West India","South India","North Central + US","South Central US","UK South","UK West","Canada Central","Canada East","West + Central US","West US 2","Korea Central","Korea South","France Central","France + South","South Africa North","South Africa West","UAE Central","UAE North","Germany + West Central","Germany North","Switzerland West","Switzerland North"],"apiVersions":["2020-05-01","2018-07-01"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"mediaservices/accountFilters","locations":["Japan + West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East + US","West US","Australia East","Australia Southeast","East US 2","Central + US","Brazil South","Central India","West India","South India","North Central + US","South Central US","UK South","UK West","Canada Central","Canada East","West + Central US","West US 2","Korea Central","Korea South","France Central","France + South","South Africa North","South Africa West","UAE Central","UAE North","Germany + West Central","Germany North","Switzerland West","Switzerland North"],"apiVersions":["2020-05-01","2018-07-01"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-05-01","2018-07-01","2018-06-01-preview","2018-03-30-preview","2018-02-05","2015-10-01","2015-04-01"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"checknameavailability","locations":[],"apiVersions":["2015-10-01","2015-04-01"],"defaultApiVersion":"2015-10-01","capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-05-01","2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["Japan + West","Japan East","East Asia","Southeast Asia","West Europe","North Europe","East + US","West US","Australia East","Australia Southeast","East US 2","Central + US","Brazil South","Central India","West India","South India","North Central + US","South Central US","UK South","UK West","Canada Central","Canada East","West + Central US","West US 2","Korea Central","Korea South","France Central","France + South","South Africa North","South Africa West","UAE Central","UAE North","Germany + West Central","Germany North","Switzerland West","Switzerland North"],"apiVersions":["2020-05-01","2018-07-01","2018-06-01-preview","2018-03-30-preview"],"defaultApiVersion":"2018-07-01","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.NotificationHubs","namespace":"Microsoft.NotificationHubs","resourceTypes":[{"resourceType":"namespaces","locations":["Australia + East","Australia Southeast","Central US","East US","East US 2","West US","West + US 2","North Central US","South Central US","West Central US","East Asia","Southeast + Asia","Brazil South","Japan East","Japan West","North Europe","West Europe","Central + India","South India","West India","Canada Central","Canada East","UK West","UK + South","Germany West Central","Australia Central","Australia Central 2","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2017-04-01","2016-03-01","2014-09-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"namespaces/notificationHubs","locations":["Australia + East","Australia Southeast","Central US","East US","East US 2","West US","West + US 2","North Central US","South Central US","West Central US","East Asia","Southeast + Asia","Brazil South","Japan East","Japan West","North Europe","West Europe","Central + India","South India","West India","Canada Central","Canada East","UK West","UK + South","Germany West Central","Australia Central","Australia Central 2","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2017-04-01","2016-03-01","2014-09-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"checkNamespaceAvailability","locations":["Australia + East","Australia Southeast","Central US","East US","East US 2","West US","West + US 2","North Central US","South Central US","West Central US","East Asia","Southeast + Asia","Brazil South","Japan East","Japan West","North Europe","West Europe","Central + India","South India","West India","Canada Central","Canada East","UK West","UK + South","Germany West Central","Australia Central","Australia Central 2"],"apiVersions":["2017-04-01","2016-03-01","2014-09-01"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["Australia + East","Australia Southeast","Central US","East US","East US 2","West US","West + US 2","North Central US","South Central US","West Central US","East Asia","Southeast + Asia","Brazil South","Japan East","Japan West","North Europe","West Europe","Central + India","South India","West India","Canada Central","Canada East","UK West","UK + South","Germany West Central","Australia Central","Australia Central 2"],"apiVersions":["2017-04-01","2016-03-01","2014-09-01"],"capabilities":"None"},{"resourceType":"operations","locations":["Australia + East","Australia Southeast","Central US","East US","East US 2","West US","West + US 2","North Central US","South Central US","West Central US","East Asia","Southeast + Asia","Brazil South","Japan East","Japan West","North Europe","West Europe","Central + India","South India","West India","Canada Central","Canada East","UK West","UK + South","Germany West Central","Australia Central","Australia Central 2"],"apiVersions":["2017-04-01","2016-03-01","2014-09-01"],"capabilities":"None"},{"resourceType":"operationResults","locations":["Australia + East","Australia Southeast","Central US","East US","East US 2","West US","West + US 2","North Central US","South Central US","West Central US","East Asia","Southeast + Asia","Brazil South","Japan East","Japan West","North Europe","West Europe","Central + India","South India","West India","Canada Central","Canada East","UK West","UK + South","Germany West Central","Australia Central","Australia Central 2"],"apiVersions":["2017-04-01","2016-03-01","2014-09-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Storage","namespace":"Microsoft.Storage","authorizations":[{"applicationId":"a6aa9161-5291-40bb-8c5c-923b567bee3b","roleDefinitionId":"070ab87f-0efc-4423-b18b-756f3bdb0236"},{"applicationId":"e406a681-f3d4-42a8-90b6-c2b029497af1"}],"resourceTypes":[{"resourceType":"deletedAccounts","locations":["East + US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan + East","Japan West","North Central US","South Central US","Central US","North + Europe","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","Canada East","Canada Central","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01-preview","2019-06-01"],"defaultApiVersion":"2019-06-01","capabilities":"None"},{"resourceType":"locations/deletedAccounts","locations":["East + US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan + East","Japan West","North Central US","South Central US","Central US","North + Europe","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","Canada East","Canada Central","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01-preview","2019-06-01"],"defaultApiVersion":"2019-06-01","capabilities":"None"},{"resourceType":"storageAccounts","locations":["East + US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan + East","Japan West","North Central US","South Central US","Central US","North + Europe","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","Canada East","Canada Central","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01-preview","2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-05-01","2016-01-01","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2019-06-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2017-03-09-profile","apiVersion":"2016-01-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-01-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East + US 2","zones":[]},{"location":"Central US","zones":[]},{"location":"West Europe","zones":[]},{"location":"East + US 2 EUAP","zones":["1","2","3"]},{"location":"Central US EUAP","zones":[]},{"location":"France + Central","zones":[]},{"location":"Southeast Asia","zones":[]},{"location":"West + US 2","zones":[]},{"location":"North Europe","zones":[]},{"location":"East + US","zones":[]},{"location":"UK South","zones":[]},{"location":"Japan East","zones":[]},{"location":"Australia + East","zones":[]},{"location":"South Africa North","zones":[]},{"location":"South + Central US","zones":[]},{"location":"Canada Central","zones":[]},{"location":"Germany + West Central","zones":[]},{"location":"Brazil South","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"operations","locations":["East US","East + US 2","West US","West Europe","East Asia","Southeast Asia","Japan East","Japan + West","North Central US","South Central US","Central US","North Europe","Brazil + South","Australia East","Australia Southeast","South India","Central India","West + India","Canada East","Canada Central","West US 2","West Central US","UK South","UK + West","Korea Central","Korea South","France Central","Australia Central","South + Africa North","UAE North","Switzerland North","Germany West Central","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01-preview","2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-05-01","2016-01-01","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2019-06-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2017-03-09-profile","apiVersion":"2016-01-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-01-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"locations/asyncoperations","locations":["East + US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan + East","Japan West","North Central US","South Central US","Central US","North + Europe","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","Canada East","Canada Central","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01-preview","2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-05-01","2016-01-01","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2019-06-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-01-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-01-01"}],"capabilities":"None"},{"resourceType":"storageAccounts/listAccountSas","locations":["East + US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan + East","Japan West","North Central US","South Central US","Central US","North + Europe","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","Canada East","Canada Central","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01-preview","2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-05-01"],"defaultApiVersion":"2019-06-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"storageAccounts/listServiceSas","locations":["East + US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan + East","Japan West","North Central US","South Central US","Central US","North + Europe","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","Canada East","Canada Central","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01-preview","2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-05-01"],"defaultApiVersion":"2019-06-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"storageAccounts/blobServices","locations":["East + US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan + East","Japan West","North Central US","South Central US","Central US","North + Europe","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","Canada East","Canada Central","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01-preview","2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-05-01"],"defaultApiVersion":"2019-06-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"storageAccounts/tableServices","locations":["East + US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan + East","Japan West","North Central US","South Central US","Central US","North + Europe","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","Canada East","Canada Central","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01-preview","2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-05-01"],"defaultApiVersion":"2019-06-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"storageAccounts/queueServices","locations":["East + US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan + East","Japan West","North Central US","South Central US","Central US","North + Europe","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","Canada East","Canada Central","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01-preview","2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-05-01"],"defaultApiVersion":"2019-06-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"storageAccounts/fileServices","locations":["East + US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan + East","Japan West","North Central US","South Central US","Central US","North + Europe","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","Canada East","Canada Central","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01-preview","2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-05-01"],"defaultApiVersion":"2019-06-01","capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-08-01-preview","2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-07-01","2016-01-01"],"defaultApiVersion":"2019-06-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2017-03-09-profile","apiVersion":"2016-01-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-01-01"}],"capabilities":"None"},{"resourceType":"locations/usages","locations":["East + US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan + East","Japan West","North Central US","South Central US","Central US","North + Europe","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","Canada East","Canada Central","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01-preview","2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01"],"defaultApiVersion":"2019-06-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-01-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-01-01"}],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["East + US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan + East","Japan West","North Central US","South Central US","Central US","North + Europe","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","Canada East","Canada Central","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01-preview","2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-07-01"],"defaultApiVersion":"2019-06-01","capabilities":"None"},{"resourceType":"usages","locations":[],"apiVersions":["2020-08-01-preview","2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-05-01","2016-01-01","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2019-06-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2017-03-09-profile","apiVersion":"2016-01-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-01-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["East + US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan + East","Japan West","North Central US","South Central US","Central US","North + Europe","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","Canada East","Canada Central","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01-preview","2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-03-01-preview","2018-02-01","2017-10-01","2017-06-01","2016-12-01","2016-05-01","2016-01-01","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2019-06-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2017-03-09-profile","apiVersion":"2016-01-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-01-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-10-01"}],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["East + US","East US 2","West US","West Europe","East Asia","Southeast Asia","Japan + East","Japan West","North Central US","South Central US","Central US","North + Europe","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","Canada East","Canada Central","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01-preview","2019-06-01","2019-04-01","2018-11-01","2018-07-01","2018-02-01","2017-10-01","2017-06-01","2016-12-01"],"defaultApiVersion":"2019-06-01","capabilities":"None"},{"resourceType":"storageAccounts/services","locations":["East + US","West US","East US 2 (Stage)","West Europe","North Europe","East Asia","Southeast + Asia","Japan East","Japan West","North Central US","South Central US","East + US 2","Central US","Australia East","Australia Southeast","Brazil South","South + India","Central India","West India","Canada East","Canada Central","West US + 2","West Central US","UK South","UK West","Korea Central","Korea South","France + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"storageAccounts/services/metricDefinitions","locations":["East + US","West US","East US 2 (Stage)","West Europe","North Europe","East Asia","Southeast + Asia","Japan East","Japan West","North Central US","South Central US","East + US 2","Central US","Australia East","Australia Southeast","Brazil South","South + India","Central India","West India","Canada East","Canada Central","West US + 2","West Central US","UK South","UK West","Korea Central","Korea South","France + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2014-04-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.RecoveryServices","namespace":"Microsoft.RecoveryServices","authorizations":[{"applicationId":"262044b1-e2ce-469f-a196-69ab7ada62d3","roleDefinitionId":"21CEC436-F7D0-4ADE-8AD8-FEC5668484CC"},{"applicationId":"b8340c3b-9267-498f-b21a-15d5547fd85e","roleDefinitionId":"8A00C8EA-8F1B-45A7-8F64-F4CC61EEE9B6"},{"applicationId":"3b2fa68d-a091-48c9-95be-88d572e08fb7","roleDefinitionId":"47d68fae-99c7-4c10-b9db-2316116a061e"},{"applicationId":"9bdab391-7bbe-42e8-8132-e4491dc29cc0","roleDefinitionId":"0383f7f5-023d-4379-b2c7-9ef786459969"}],"resourceTypes":[{"resourceType":"vaults","locations":["West + US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast + Asia","North Central US","South Central US","Japan East","Japan West","Australia + East","Australia Southeast","Central US","East US 2","Central India","South + India","West India","Canada Central","Canada East","West Central US","West + US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-07-01","2020-02-02-preview","2020-02-02","2019-06-15","2019-05-13-preview","2019-05-13","2018-12-20-preview","2018-07-10-preview","2018-07-10","2018-01-10","2017-07-01-preview","2017-07-01","2016-12-01","2016-08-10","2016-06-01","2016-05-01","2015-12-15","2015-12-10","2015-11-10","2015-08-15","2015-08-10","2015-06-10","2015-03-15"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-01-10"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2020-02-02-preview","2020-02-02","2019-06-15","2019-05-13-preview","2019-05-13","2018-07-10-preview","2018-07-10","2018-01-10","2017-09-01","2017-07-01-preview","2017-07-01","2016-12-01","2016-08-10","2016-06-01","2015-12-15","2015-12-10","2015-11-10","2015-08-15","2015-08-10","2015-06-10","2015-03-15"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-08-10"}],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2017-07-01","2016-06-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"}],"capabilities":"None"},{"resourceType":"locations/backupStatus","locations":["West + US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast + Asia","North Central US","South Central US","Japan East","Japan West","Australia + East","Australia Southeast","Central US","East US 2","Central India","South + India","West India","West Central US","Canada Central","Canada East","West + US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-07-01","2016-06-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"}],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["West + US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast + Asia","North Central US","South Central US","Japan East","Japan West","Australia + East","Australia Southeast","Central US","East US 2","Central India","South + India","West India","West Central US","Canada Central","Canada East","West + US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-01-10"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-01-10"}],"capabilities":"None"},{"resourceType":"locations/allocatedStamp","locations":["West + US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast + Asia","North Central US","South Central US","Japan East","Japan West","Australia + East","Australia Southeast","Central US","East US 2","Central India","South + India","West India","West Central US","Canada Central","Canada East","West + US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2016-06-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"}],"capabilities":"None"},{"resourceType":"locations/allocateStamp","locations":["West + US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast + Asia","North Central US","South Central US","Japan East","Japan West","Australia + East","Australia Southeast","Central US","East US 2","Central India","South + India","West India","West Central US","Canada Central","Canada East","West + US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2016-06-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"}],"capabilities":"None"},{"resourceType":"locations/backupValidateFeatures","locations":["West + US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast + Asia","North Central US","South Central US","Japan East","Japan West","Australia + East","Australia Southeast","Central US","East US 2","Central India","South + India","West India","West Central US","Canada Central","Canada East","West + US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-07-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-07-01"}],"capabilities":"None"},{"resourceType":"locations/backupPreValidateProtection","locations":["West + US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast + Asia","North Central US","South Central US","Japan East","Japan West","Australia + East","Australia Southeast","Central US","East US 2","Central India","South + India","West India","West Central US","Canada Central","Canada East","West + US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-07-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-07-01"}],"capabilities":"None"},{"resourceType":"locations/backupCrrJobs","locations":["West + US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast + Asia","North Central US","South Central US","Japan East","Japan West","Australia + East","Australia Southeast","Central US","East US 2","Central India","South + India","West India","West Central US","Canada Central","Canada East","West + US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-12-20-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-12-20-preview"}],"capabilities":"None"},{"resourceType":"locations/backupCrrJob","locations":["West + US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast + Asia","North Central US","South Central US","Japan East","Japan West","Australia + East","Australia Southeast","Central US","East US 2","Central India","South + India","West India","West Central US","Canada Central","Canada East","West + US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-12-20-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-12-20-preview"}],"capabilities":"None"},{"resourceType":"locations/backupAadProperties","locations":["West + US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast + Asia","North Central US","South Central US","Japan East","Japan West","Australia + East","Australia Southeast","Central US","East US 2","Central India","South + India","West India","West Central US","Canada Central","Canada East","West + US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-12-20-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-12-20-preview"}],"capabilities":"None"},{"resourceType":"locations/backupCrossRegionRestore","locations":["West + US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast + Asia","North Central US","South Central US","Japan East","Japan West","Australia + East","Australia Southeast","Central US","East US 2","Central India","South + India","West India","West Central US","Canada Central","Canada East","West + US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-12-20-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-12-20-preview"}],"capabilities":"None"},{"resourceType":"locations/backupCrrOperationResults","locations":["West + US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast + Asia","North Central US","South Central US","Japan East","Japan West","Australia + East","Australia Southeast","Central US","East US 2","Central India","South + India","West India","West Central US","Canada Central","Canada East","West + US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-12-20-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-12-20-preview"}],"capabilities":"None"},{"resourceType":"locations/backupCrrOperationsStatus","locations":["West + US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast + Asia","North Central US","South Central US","Japan East","Japan West","Australia + East","Australia Southeast","Central US","East US 2","Central India","South + India","West India","West Central US","Canada Central","Canada East","West + US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-12-20-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-12-20-preview"}],"capabilities":"None"},{"resourceType":"backupProtectedItems","locations":["West + US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast + Asia","North Central US","South Central US","Japan East","Japan West","Australia + East","Australia Southeast","Central US","East US 2","Central India","South + India","West India","West Central US","Canada Central","Canada East","West + US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-07-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-07-01-preview"}],"capabilities":"SupportsExtension"},{"resourceType":"replicationEligibilityResults","locations":["West + US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast + Asia","North Central US","South Central US","Japan East","Japan West","Australia + East","Australia Southeast","Central US","East US 2","Central India","South + India","West India","West Central US","Canada Central","Canada East","West + US 2","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","South Africa North","UAE North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-10"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-07-10"}],"capabilities":"SupportsExtension"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.PolicyInsights","namespace":"Microsoft.PolicyInsights","authorizations":[{"applicationId":"1d78a85d-813d-46f0-b496-dd72f50a3ec0","roleDefinitionId":"63d2b225-4c34-4641-8768-21a1f7c68ce8"},{"applicationId":"8cae6e77-e04e-42ce-b5cb-50d82bce26b1","roleDefinitionId":"4a2d3d6b-a6ea-45e2-9882-c9ba3e726ed7"}],"resourceTypes":[{"resourceType":"policyEvents","locations":[],"apiVersions":["2019-10-01","2018-07-01-preview","2018-04-04","2017-12-12-preview","2017-10-17-preview","2017-08-09-preview"],"capabilities":"SupportsExtension"},{"resourceType":"policyStates","locations":[],"apiVersions":["2019-10-01","2018-07-01-preview","2018-04-04","2017-12-12-preview","2017-10-17-preview","2017-08-09-preview"],"capabilities":"SupportsExtension"},{"resourceType":"operations","locations":[],"apiVersions":["2019-10-01","2018-07-01-preview","2018-04-04","2017-12-12-preview","2017-10-17-preview","2017-08-09-preview"],"capabilities":"None"},{"resourceType":"asyncOperationResults","locations":[],"apiVersions":["2019-10-01","2018-07-01-preview"],"capabilities":"None"},{"resourceType":"remediations","locations":[],"apiVersions":["2019-07-01","2018-07-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"policyTrackedResources","locations":[],"apiVersions":["2018-07-01-preview"],"capabilities":"SupportsExtension"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Relay","namespace":"Microsoft.Relay","authorizations":[{"applicationId":"91bb937c-29c2-4275-982f-9465f0caf03d","roleDefinitionId":"6ea9e989-a5f4-4187-8d11-c8db3dd04da1"},{"applicationId":"80369ed6-5f11-4dd9-bef3-692475845e77"}],"resourceTypes":[{"resourceType":"namespaces","locations":["Australia + East","Australia Southeast","Central US","East US","East US 2","West US 2","West + US","North Central US","South Central US","West Central US","East Asia","Southeast + Asia","Brazil South","Japan East","Japan West","North Europe","West Europe","Central + India","South India","West India","Canada Central","Canada East","UK West","UK + South","Korea Central","Korea South","France Central","South Africa North","UAE + North","Australia Central","Switzerland North","Germany West Central","Norway + East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-01-01-preview","2017-04-01","2016-07-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"namespaces/authorizationrules","locations":["East + US 2 EUAP"],"apiVersions":["2017-04-01","2016-07-01","2015-08-01","2014-09-01"],"capabilities":"None"},{"resourceType":"namespaces/hybridconnections","locations":["East + US 2 EUAP"],"apiVersions":["2017-04-01","2016-07-01","2015-08-01","2014-09-01"],"capabilities":"None"},{"resourceType":"namespaces/hybridconnections/authorizationrules","locations":["East + US 2 EUAP"],"apiVersions":["2017-04-01","2016-07-01","2015-08-01","2014-09-01"],"capabilities":"None"},{"resourceType":"namespaces/wcfrelays","locations":["East + US 2 EUAP"],"apiVersions":["2017-04-01","2016-07-01","2015-08-01","2014-09-01"],"capabilities":"None"},{"resourceType":"namespaces/wcfrelays/authorizationrules","locations":["East + US 2 EUAP"],"apiVersions":["2017-04-01","2016-07-01","2015-08-01","2014-09-01"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["East + US 2 EUAP"],"apiVersions":["2017-04-01","2016-07-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2017-04-01","2016-07-01"],"defaultApiVersion":"2017-04-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Search","namespace":"Microsoft.Search","authorization":{"applicationId":"408992c7-2af6-4ff1-92e3-65b73d2b5092","roleDefinitionId":"20FA3191-87CF-4C3D-9510-74CCB594A310"},"resourceTypes":[{"resourceType":"searchServices","locations":["West + US","West US 2","East US","East US 2","North Europe","West Europe","Southeast + Asia","East Asia","North Central US","South Central US","Central US","Japan + West","Japan East","Korea Central","Australia East","Australia Southeast","Brazil + South","Central India","West Central US","Canada Central","UK South","France + Central","South Africa North","UAE North","East US 2 EUAP"],"apiVersions":["2020-08-01-Preview","2020-08-01","2020-03-13","2019-10-01-Preview","2015-08-19","2015-02-28","2014-07-31-Preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"checkServiceNameAvailability","locations":[],"apiVersions":["2015-02-28","2014-07-31-Preview"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2020-08-01-Preview","2020-08-01","2020-03-13","2019-10-01-Preview","2015-08-19"],"capabilities":"None"},{"resourceType":"resourceHealthMetadata","locations":["West + US","West US 2","East US","East US 2","North Europe","West Europe","Southeast + Asia","East Asia","North Central US","South Central US","Central US","Japan + West","Japan East","Korea Central","Australia East","Australia Southeast","Brazil + South","Central India","West Central US","Canada Central","UK South","France + Central","South Africa North","UAE North","East US 2 EUAP"],"apiVersions":["2020-08-01-Preview","2020-08-01","2020-03-13","2019-10-01-Preview","2015-08-19"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-08-01-Preview","2020-08-01","2020-03-13","2019-10-01-Preview","2015-08-19","2015-02-28"],"capabilities":"None"}],"registrationState":"Registering","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Security","namespace":"Microsoft.Security","authorizations":[{"applicationId":"8edd93e1-2103-40b4-bd70-6e34e586362d","roleDefinitionId":"855AF4C4-82F6-414C-B1A2-628025628B9A"},{"applicationId":"fc780465-2017-40d4-a0c5-307022471b92"}],"resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"securityStatuses","locations":["Central + US","East US","West Europe","West Central US"],"apiVersions":["2015-06-01-preview"],"capabilities":"None"},{"resourceType":"tasks","locations":["Central + US","East US","West Europe","West Central US"],"apiVersions":["2015-06-01-preview"],"capabilities":"None"},{"resourceType":"secureScores","locations":[],"apiVersions":["2020-01-01-preview","2020-01-01"],"capabilities":"None"},{"resourceType":"secureScores/secureScoreControls","locations":[],"apiVersions":["2020-01-01-preview","2020-01-01"],"capabilities":"None"},{"resourceType":"secureScoreControls","locations":[],"apiVersions":["2020-01-01-preview","2020-01-01"],"capabilities":"None"},{"resourceType":"secureScoreControlDefinitions","locations":[],"apiVersions":["2020-01-01-preview","2020-01-01"],"capabilities":"None"},{"resourceType":"connectors","locations":[],"apiVersions":["2020-01-01-preview"],"capabilities":"None"},{"resourceType":"regulatoryComplianceStandards","locations":["Central + US","East US"],"apiVersions":["2019-01-01-preview","2019-01-01"],"capabilities":"None"},{"resourceType":"regulatoryComplianceStandards/regulatoryComplianceControls","locations":["Central + US","East US"],"apiVersions":["2019-01-01-preview","2019-01-01"],"capabilities":"None"},{"resourceType":"regulatoryComplianceStandards/regulatoryComplianceControls/regulatoryComplianceAssessments","locations":["Central + US","East US"],"apiVersions":["2019-01-01-preview","2019-01-01"],"capabilities":"None"},{"resourceType":"alerts","locations":["Central + US","East US","West Europe"],"apiVersions":["2020-01-01","2019-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"alertsSuppressionRules","locations":[],"apiVersions":["2019-01-01-preview"],"capabilities":"None"},{"resourceType":"autoDismissAlertsRules","locations":[],"apiVersions":["2019-01-01-preview"],"capabilities":"None"},{"resourceType":"dataCollectionAgents","locations":["East + Asia","Southeast Asia","East US","East US 2","West US","North Central US","South + Central US","Central US","North Europe","West Europe","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","South India","Central + India","West India","Canada Central","Canada East"],"apiVersions":["2015-06-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"pricings","locations":["Central + US","East US"],"apiVersions":["2018-06-01","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"AutoProvisioningSettings","locations":["Central + US","East US"],"apiVersions":["2019-01-01","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"Compliances","locations":["Central + US","East US"],"apiVersions":["2017-08-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"securityContacts","locations":["Central + US","East US"],"apiVersions":["2020-01-01-preview","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"workspaceSettings","locations":["Central + US","East US"],"apiVersions":["2019-01-01","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"complianceResults","locations":["Central + US","East US"],"apiVersions":["2017-08-01"],"capabilities":"SupportsExtension"},{"resourceType":"policies","locations":["Central + US","East US"],"apiVersions":["2015-06-01-preview"],"capabilities":"None"},{"resourceType":"assessments","locations":[],"apiVersions":["2020-01-01","2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"assessmentMetadata","locations":[],"apiVersions":["2020-01-01","2019-01-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"subAssessments","locations":[],"apiVersions":["2020-01-01","2019-01-01-preview"],"capabilities":"None"},{"resourceType":"securitySolutions","locations":["Central + US","East US","West Europe","West Central US"],"apiVersions":["2015-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/securitySolutions","locations":["Central + US","West Europe","West Central US"],"apiVersions":["2015-06-01-preview"],"capabilities":"None"},{"resourceType":"discoveredSecuritySolutions","locations":["Central + US","East US","West Europe","West Central US"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/discoveredSecuritySolutions","locations":["Central + US","West Europe","West Central US"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"allowedConnections","locations":["Central + US","East US","West Europe","West Central US"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/allowedConnections","locations":["Central + US","West Europe","West Central US"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"topologies","locations":["Central + US","East US","West Europe","West Central US"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/topologies","locations":["Central + US","West Europe","West Central US"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"securitySolutionsReferenceData","locations":["Central + US","East US","West Europe","West Central US"],"apiVersions":["2015-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/securitySolutionsReferenceData","locations":["Central + US","West Europe","West Central US"],"apiVersions":["2015-06-01-preview"],"capabilities":"None"},{"resourceType":"jitPolicies","locations":["Central + US","East US","North Europe","West Europe","UK South","UK West","France Central","France + South","Switzerland North","Germany West Central","West Central US","West + US 2"],"apiVersions":["2015-06-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"jitNetworkAccessPolicies","locations":["Central + US","East US","North Europe","West Europe","UK South","UK West","France Central","Switzerland + North","Germany West Central","West Central US","West US 2"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/jitNetworkAccessPolicies","locations":["Central + US","East US","North Europe","West Europe","UK South","UK West","France Central","France + South","Switzerland North","Germany West Central","West Central US","West + US 2"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":["Central + US","East US"],"apiVersions":["2015-06-01-preview"],"capabilities":"None"},{"resourceType":"securityStatusesSummaries","locations":["Central + US","East US","West Europe","West Central US"],"apiVersions":["2015-06-01-preview"],"capabilities":"None"},{"resourceType":"applicationWhitelistings","locations":["Central + US","East US","West Central US","West Europe"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/applicationWhitelistings","locations":["Central + US","West Central US","West Europe"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/alerts","locations":["Central + US","West Europe"],"apiVersions":["2020-01-01","2019-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/tasks","locations":["Central + US","West Europe","West Central US"],"apiVersions":["2015-06-01-preview"],"capabilities":"None"},{"resourceType":"externalSecuritySolutions","locations":["Central + US","East US","West Europe","West Central US"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/externalSecuritySolutions","locations":["Central + US","West Europe","West Central US"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"None"},{"resourceType":"InformationProtectionPolicies","locations":["Central + US","East US"],"apiVersions":["2017-08-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"advancedThreatProtectionSettings","locations":["Australia + Central","Australia Central 2","Australia East","Australia Southeast","Brazil + South","Canada Central","Canada East","Central India","Central US","East Asia","East + US 2","East US","Japan East","Japan West","Korea Central","Korea South","North + Central US","North Europe","South Central US","South India","Southeast Asia","UK + South","UK West","West Central US","West Europe","West India","West US 2","West + US","France Central","UAE North","Germany West Central","Switzerland North","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2019-01-01","2017-08-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"sqlVulnerabilityAssessments","locations":[],"apiVersions":["2020-07-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"deviceSecurityGroups","locations":["East + Asia","Southeast Asia","Central US","East US","East US 2","West US","North + Central US","South Central US","Japan West","Japan East","Brazil South","Australia + East","Australia Southeast","South India","Central India","West India","Canada + Central","Canada East","West Central US","West US 2","Korea Central","Korea + South","Australia Central","Australia Central 2","UAE Central","UAE North","South + Africa North","South Africa West","North Europe","West Europe","UK South","UK + West","France Central","France South","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-08-01","2017-08-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"iotSecuritySolutions","locations":["East + Asia","Southeast Asia","Central US","East US","East US 2","West US","North + Central US","South Central US","Japan West","Japan East","Brazil South","Australia + East","Australia Southeast","South India","Central India","West India","Canada + Central","Canada East","West US 2","Korea Central","Korea South","Australia + Central","Australia Central 2","UAE Central","UAE North","South Africa North","South + Africa West","North Europe","West Europe","UK South","UK West","France Central","France + South","West Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-08-01","2017-08-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"iotDefenderSettings","locations":[],"apiVersions":["2020-08-06-preview"],"capabilities":"None"},{"resourceType":"iotSensors","locations":["East + Asia","Southeast Asia","Central US","East US","East US 2","West US","North + Central US","South Central US","Japan West","Japan East","Brazil South","Australia + East","Australia Southeast","South India","Central India","West India","Canada + Central","Canada East","West US 2","Korea Central","Korea South","Australia + Central","Australia Central 2","UAE Central","UAE North","South Africa North","South + Africa West","North Europe","West Europe","UK South","UK West","France Central","France + South","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-06-preview"],"capabilities":"SupportsExtension"},{"resourceType":"iotSecuritySolutions/analyticsModels","locations":["East + Asia","Southeast Asia","Central US","East US","East US 2","West US","North + Central US","South Central US","Japan West","Japan East","Brazil South","Australia + East","Australia Southeast","South India","Central India","West India","Canada + Central","Canada East","West Central US","West US 2","Korea Central","Korea + South","Australia Central","Australia Central 2","UAE Central","UAE North","South + Africa North","South Africa West","North Europe","West Europe","UK South","UK + West","France Central","France South","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-08-01","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"iotSecuritySolutions/iotAlertTypes","locations":["East + Asia","Southeast Asia","Central US","East US","East US 2","West US","North + Central US","South Central US","Japan West","Japan East","Brazil South","Australia + East","Australia Southeast","South India","Central India","West India","Canada + Central","Canada East","West Central US","West US 2","Korea Central","Korea + South","Australia Central","Australia Central 2","UAE Central","UAE North","South + Africa North","South Africa West","North Europe","West Europe","UK South","UK + West","France Central","France South","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-08-01"],"capabilities":"None"},{"resourceType":"iotSecuritySolutions/iotAlerts","locations":["East + Asia","Southeast Asia","Central US","East US","East US 2","West US","North + Central US","South Central US","Japan West","Japan East","Brazil South","Australia + East","Australia Southeast","South India","Central India","West India","Canada + Central","Canada East","West Central US","West US 2","Korea Central","Korea + South","Australia Central","Australia Central 2","UAE Central","UAE North","South + Africa North","South Africa West","North Europe","West Europe","UK South","UK + West","France Central","France South","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-08-01"],"capabilities":"None"},{"resourceType":"iotSecuritySolutions/iotRecommendationTypes","locations":["East + Asia","Southeast Asia","Central US","East US","East US 2","West US","North + Central US","South Central US","Japan West","Japan East","Brazil South","Australia + East","Australia Southeast","South India","Central India","West India","Canada + Central","Canada East","West Central US","West US 2","Korea Central","Korea + South","Australia Central","Australia Central 2","UAE Central","UAE North","South + Africa North","South Africa West","North Europe","West Europe","UK South","UK + West","France Central","France South","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-08-01"],"capabilities":"None"},{"resourceType":"iotSecuritySolutions/iotRecommendations","locations":["East + Asia","Southeast Asia","Central US","East US","East US 2","West US","North + Central US","South Central US","Japan West","Japan East","Brazil South","Australia + East","Australia Southeast","South India","Central India","West India","Canada + Central","Canada East","West Central US","West US 2","Korea Central","Korea + South","Australia Central","Australia Central 2","UAE Central","UAE North","South + Africa North","South Africa West","North Europe","West Europe","UK South","UK + West","France Central","France South","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-08-01"],"capabilities":"None"},{"resourceType":"iotSecuritySolutions/analyticsModels/aggregatedAlerts","locations":["East + Asia","Southeast Asia","Central US","East US","East US 2","West US","North + Central US","South Central US","Japan West","Japan East","Brazil South","Australia + East","Australia Southeast","South India","Central India","West India","Canada + Central","Canada East","West Central US","West US 2","Korea Central","Korea + South","Australia Central","Australia Central 2","UAE Central","UAE North","South + Africa North","South Africa West","North Europe","West Europe","UK South","UK + West","France Central","France South","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-08-01","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"iotSecuritySolutions/analyticsModels/aggregatedRecommendations","locations":["East + Asia","Southeast Asia","Central US","East US","East US 2","West US","North + Central US","South Central US","Japan West","Japan East","Brazil South","Australia + East","Australia Southeast","South India","Central India","West India","Canada + Central","Canada East","West Central US","West US 2","Korea Central","Korea + South","Australia Central","Australia Central 2","UAE Central","UAE North","South + Africa North","South Africa West","North Europe","West Europe","UK South","UK + West","France Central","France South","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-08-01","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"settings","locations":["Central + US","East US"],"apiVersions":["2019-01-01","2017-08-01-preview"],"capabilities":"None"},{"resourceType":"serverVulnerabilityAssessments","locations":["West + Europe","North Europe","UK South","UK West","France Central","France South","Switzerland + North","Germany West Central"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"adaptiveNetworkHardenings","locations":["West + Europe","North Europe","UK South","UK West","France Central","France South","Switzerland + North","Germany West Central"],"apiVersions":["2020-01-01","2015-06-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"automations","locations":["Central + US","East US","East US 2","North Central US","South Central US","West US","West + US 2","West Central US","Canada Central","Canada East","Brazil South","East + Asia","Southeast Asia","Australia Central","Australia Central 2","Australia + East","Australia Southeast","Central India","South India","West India","Japan + East","Japan West","Korea Central","Korea South","South Africa North","South + Africa West","UAE Central","UAE North","North Europe","West Europe","France + Central","France South","UK South","UK West","Norway East","Norway West","Germany + West Central","Germany North"],"apiVersions":["2019-01-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ServiceBus","namespace":"Microsoft.ServiceBus","authorizations":[{"applicationId":"80a10ef9-8168-493d-abf9-3297c4ef6e3c","roleDefinitionId":"2b7763f7-bbe2-4e19-befe-28c79f1cf7f7"},{"applicationId":"eb070ea5-bd17-41f1-ad68-5851f6e71774"}],"resourceTypes":[{"resourceType":"namespaces","locations":["Australia + East","Australia Southeast","Central US","East US","East US 2","West US 2","West + US","North Central US","South Central US","West Central US","East Asia","Southeast + Asia","Brazil South","Japan East","Japan West","North Europe","West Europe","Central + India","South India","West India","Canada Central","Canada East","UK West","UK + South","Korea Central","Korea South","France Central","South Africa North","UAE + North","Australia Central","Switzerland North","Germany West Central","Norway + East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-01-01-preview","2017-04-01","2015-08-01","2014-09-01"],"defaultApiVersion":"2017-04-01","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"namespaces/authorizationrules","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/networkrulesets","locations":[],"apiVersions":["2018-01-01-preview","2017-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/queues","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/queues/authorizationrules","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/topics","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/topics/authorizationrules","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/topics/subscriptions","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/topics/subscriptions/rules","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"checkNamespaceAvailability","locations":[],"apiVersions":["2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-08-01"}],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"sku","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"premiumMessagingRegions","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/eventgridfilters","locations":["Australia + East","Australia Southeast","Central US","East US","East US 2","West US 2","West + US","North Central US","South Central US","West Central US","East Asia","Southeast + Asia","Brazil South","Japan East","Japan West","North Europe","West Europe","Central + India","South India","West India","Canada Central","Canada East","UK West","UK + South","Korea Central","Korea South","France Central","South Africa North","UAE + North","Australia Central","Switzerland North","Germany West Central","Norway + East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/disasterrecoveryconfigs","locations":[],"apiVersions":["2017-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"namespaces/disasterrecoveryconfigs/checkNameAvailability","locations":[],"apiVersions":["2017-04-01","2015-08-01","2014-09-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2018-01-01-preview","2017-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":[],"apiVersions":["2018-01-01-preview","2017-04-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"}],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/microsoft.visualstudio","namespace":"microsoft.visualstudio","authorization":{"applicationId":"499b84ac-1321-427f-aa17-267ca6975798","roleDefinitionId":"6a18f445-86f0-4e2e-b8a9-6b9b5677e3d8"},"resourceTypes":[{"resourceType":"account","locations":["North + Central US","South Central US","West Central US","East US","East US 2","West + US","Central US","North Europe","West Europe","East Asia","Southeast Asia","Japan + East","Japan West","Brazil South","Australia East","West India","Central India","South + India","West US 2","Canada Central","UK South"],"apiVersions":["2014-04-01-preview","2014-02-26"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"operations","locations":["North Central + US","South Central US","West Central US","East US","East US 2","West US","Central + US","North Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan + West","Brazil South","Australia East","West India","Central India","South + India","West US 2","Canada Central","UK South"],"apiVersions":["2014-04-01-preview","2014-02-26"],"capabilities":"None"},{"resourceType":"account/project","locations":["East + Asia","Southeast Asia","Australia East","Brazil South","Canada Central","Japan + East","Japan West","North Europe","West Europe","West India","Central India","South + India","Central US","East US","East US 2","North Central US","South Central + US","West Central US","UK South","West US","West US 2"],"apiVersions":["2014-04-01-preview","2014-02-26"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"account/extension","locations":["North + Central US","South Central US","West Central US","East US","East US 2","West + US","Central US","North Europe","West Europe","East Asia","Southeast Asia","Japan + East","Japan West","Brazil South","Australia East","West India","Central India","South + India","West US 2","Canada Central","UK South"],"apiVersions":["2014-04-01-preview","2014-02-26"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"checkNameAvailability","locations":["North + Central US","South Central US","West Central US","East US","East US 2","West + US","Central US","North Europe","West Europe","East Asia","Southeast Asia","Japan + East","Japan West","Brazil South","Australia East","West India","Central India","South + India","West US 2","Canada Central","UK South"],"apiVersions":["2014-04-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Solutions","namespace":"Microsoft.Solutions","authorization":{"applicationId":"ba4bc2bd-843f-4d61-9d33-199178eae34e","roleDefinitionId":"6cb99a0b-29a8-49bc-b57b-057acc68cd9a","managedByRoleDefinitionId":"9e3af657-a8ff-583c-a75c-2fe7c4bcb635","managedByAuthorization":{"managedByResourceRoleDefinitionId":"9e3af657-a8ff-583c-a75c-2fe7c4bcb635"}},"resourceTypes":[{"resourceType":"applications","locations":["South + Central US","North Central US","West Central US","West US","West US 2","East + US","East US 2","Central US","West Europe","North Europe","East Asia","Southeast + Asia","Brazil South","Japan West","Japan East","Australia East","Australia + Southeast","South India","West India","Central India","Canada Central","Canada + East","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","UAE North","South Africa North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-21-preview","2019-07-01","2018-09-01-preview","2018-06-01","2018-03-01","2018-02-01","2017-12-01","2017-09-01"],"defaultApiVersion":"2019-07-01","capabilities":"SystemAssignedResourceIdentity, + SupportsTags, SupportsLocation"},{"resourceType":"applicationDefinitions","locations":["South + Central US","North Central US","West Central US","West US","West US 2","East + US","East US 2","Central US","West Europe","North Europe","East Asia","Southeast + Asia","Brazil South","Japan West","Japan East","Australia East","Australia + Southeast","South India","West India","Central India","Canada Central","Canada + East","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","UAE North","South Africa North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-21-preview","2019-07-01","2018-09-01-preview","2018-06-01","2018-03-01","2018-02-01","2017-12-01","2017-09-01"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"locations","locations":["West Central + US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-21-preview","2019-07-01","2018-09-01-preview","2018-06-01","2018-03-01","2018-02-01","2017-12-01","2017-09-01","2016-09-01-preview"],"capabilities":"None"},{"resourceType":"jitRequests","locations":["South + Central US","North Central US","West Central US","West US","West US 2","East + US","East US 2","Central US","West Europe","North Europe","East Asia","Southeast + Asia","Brazil South","Japan West","Japan East","Australia East","Australia + Southeast","South India","West India","Central India","Canada Central","Canada + East","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","UAE North","South Africa North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-21-preview","2019-07-01","2018-09-01-preview"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"locations/operationstatuses","locations":["South + Central US","North Central US","West Central US","West US","West US 2","East + US","East US 2","Central US","West Europe","North Europe","East Asia","Southeast + Asia","Brazil South","Japan West","Japan East","Australia East","Australia + Southeast","South India","West India","Central India","Canada Central","Canada + East","UK South","UK West","Korea Central","Korea South","France Central","Australia + Central","UAE North","South Africa North","Switzerland North","Germany West + Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-08-21-preview","2019-07-01","2018-09-01-preview","2018-06-01","2018-03-01","2018-02-01","2017-12-01","2017-09-01","2016-09-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-08-21-preview","2019-07-01","2018-09-01-preview","2018-06-01","2018-03-01","2018-02-01","2017-12-01","2017-09-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Sendgrid.Email","namespace":"Sendgrid.Email","resourceTypes":[{"resourceType":"accounts","locations":["Australia + East","Australia Southeast","Brazil South","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","France Central","France + South","Japan East","Japan West","Korea Central","Korea South","North Central + US","North Europe","South Africa North","South Africa West","South Central + US","South India","Southeast Asia","UAE Central","UAE North","UK South","UK + West","West Central US","West Europe","West India","West US","West US 2"],"apiVersions":["2015-01-01"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"operations","locations":["Australia East","Australia + Southeast","Brazil South","Canada Central","Canada East","Central India","Central + US","East Asia","East US","East US 2","France Central","France South","Japan + East","Japan West","Korea Central","Korea South","North Central US","North + Europe","South Africa North","South Africa West","South Central US","South + India","Southeast Asia","UAE Central","UAE North","UK South","UK West","West + Central US","West Europe","West India","West US","West US 2"],"apiVersions":["2015-01-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/U2uconsult.TheIdentityHub","namespace":"U2uconsult.TheIdentityHub","resourceTypes":[{"resourceType":"services","locations":["West + Europe"],"apiVersions":["2015-06-15"],"capabilities":"SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2015-06-15"],"capabilities":"None"},{"resourceType":"listCommunicationPreference","locations":[],"apiVersions":["2015-06-15"],"capabilities":"None"},{"resourceType":"updateCommunicationPreference","locations":[],"apiVersions":["2015-06-15"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Conexlink.MyCloudIT","namespace":"Conexlink.MyCloudIT","resourceTypes":[{"resourceType":"accounts","locations":["Central US"],"apiVersions":["2015-06-15"],"capabilities":"SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2015-06-15"],"capabilities":"None"},{"resourceType":"listCommunicationPreference","locations":[],"apiVersions":["2015-06-15"],"capabilities":"None"},{"resourceType":"updateCommunicationPreference","locations":[],"apiVersions":["2015-06-15"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/LiveArena.Broadcast","namespace":"LiveArena.Broadcast","resourceTypes":[{"resourceType":"services","locations":["West US","North Europe","Japan West","Japan East","East Asia","West Europe","East US","Southeast Asia","Central US"],"apiVersions":["2016-06-15"],"capabilities":"SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2016-06-15"],"capabilities":"None"},{"resourceType":"listCommunicationPreference","locations":[],"apiVersions":["2016-06-15"],"capabilities":"None"},{"resourceType":"updateCommunicationPreference","locations":[],"apiVersions":["2016-06-15"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Mailjet.Email","namespace":"Mailjet.Email","resourceTypes":[{"resourceType":"services","locations":["West US","West Europe"],"apiVersions":["2017-10-01","2017-02-03"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2018-07-01","2017-10-01","2017-05-29","2017-02-03","2016-11-01","2016-07-01"],"capabilities":"None"},{"resourceType":"listCommunicationPreference","locations":[],"apiVersions":["2017-10-01","2017-02-03","2016-11-01"],"capabilities":"None"},{"resourceType":"updateCommunicationPreference","locations":[],"apiVersions":["2017-10-01","2017-02-03","2016-11-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AAD","namespace":"Microsoft.AAD","authorizations":[{"applicationId":"443155a6-77f3-45e3-882b-22b3a8d431fb","roleDefinitionId":"7389DE79-3180-4F07-B2BA-C5BA1F01B03A"},{"applicationId":"abba844e-bc0e-44b0-947a-dc74e5d09022","roleDefinitionId":"63BC473E-7767-42A5-A3BF-08EB71200E04"},{"applicationId":"d87dcbc6-a371-462e-88e3-28ad15ec4e64","roleDefinitionId":"861776c5-e0df-4f95-be4f-ac1eec193323"}],"resourceTypes":[{"resourceType":"DomainServices","locations":["West - US","Central US","East US","South Central US","West Europe","North Europe","East - Asia","Southeast Asia","East US 2","Australia East","Australia Southeast","West - Central US","North Central US","Japan East","Japan West","Brazil South","Central - India","South India","West India","Canada Central","Canada East","West US - 2","Korea Central","France Central","UK South","South Africa North","UAE North"],"apiVersions":["2017-06-01","2017-01-01"],"defaultApiVersion":"2017-06-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"DomainServices/oucontainer","locations":["West - US","Central US","East US","South Central US","West Europe","North Europe","East - Asia","Southeast Asia","East US 2","Australia East","Australia Southeast","West - Central US","North Central US","Japan East","Japan West","Brazil South","Central - India","South India","West India","Canada Central","Canada East","West US - 2","Korea Central","France Central","UK South","South Africa North","UAE North"],"apiVersions":["2017-06-01"],"defaultApiVersion":"2017-06-01","capabilities":"None"},{"resourceType":"locations","locations":["West - US","Central US","East US","South Central US","West Europe","North Europe","East - Asia","Southeast Asia","East US 2","Australia East","Australia Southeast","West - Central US","North Central US","Japan East","Japan West","Brazil South","Central - India","South India","West India","Canada Central","Canada East","West US - 2","Korea Central","France Central","UK South","South Africa North","UAE North"],"apiVersions":["2017-06-01","2017-01-01"],"defaultApiVersion":"2017-06-01","capabilities":"None"},{"resourceType":"locations/operationresults","locations":["West - US","Central US","East US","South Central US","West Europe","North Europe","East - Asia","Southeast Asia","East US 2","Australia East","Australia Southeast","West - Central US","North Central US","Japan East","Japan West","Brazil South","Central - India","South India","West India","Canada Central","Canada East","West US - 2","Korea Central","France Central","UK South","South Africa North","UAE North"],"apiVersions":["2017-06-01","2017-01-01"],"defaultApiVersion":"2017-06-01","capabilities":"None"},{"resourceType":"operations","locations":["West - US","Central US","East US","South Central US","West Europe","North Europe","East - Asia","Southeast Asia","East US 2","Australia East","Australia Southeast","West - Central US","North Central US","Japan East","Japan West","Brazil South","Central - India","South India","West India","Canada Central","Canada East","West US - 2","Korea Central","France Central","UK South","South Africa North","UAE North"],"apiVersions":["2017-06-01","2017-01-01"],"defaultApiVersion":"2017-06-01","capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/microsoft.aadiam","namespace":"microsoft.aadiam","authorizations":[{"applicationId":"1b912ec3-a9dd-4c4d-a53e-76aa7adb28d7","roleDefinitionId":"c4cfa0e8-3cb5-4ced-9c3c-efaad3348120"}],"resourceTypes":[{"resourceType":"azureADMetrics","locations":["Australia + SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2018-07-01","2017-10-01","2017-05-29","2017-02-03","2016-11-01","2016-07-01"],"capabilities":"None"},{"resourceType":"listCommunicationPreference","locations":[],"apiVersions":["2017-10-01","2017-02-03","2016-11-01"],"capabilities":"None"},{"resourceType":"updateCommunicationPreference","locations":[],"apiVersions":["2017-10-01","2017-02-03","2016-11-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/microsoft.aadiam","namespace":"microsoft.aadiam","authorizations":[{"applicationId":"1b912ec3-a9dd-4c4d-a53e-76aa7adb28d7","roleDefinitionId":"c4cfa0e8-3cb5-4ced-9c3c-efaad3348120"}],"resourceTypes":[{"resourceType":"azureADMetrics","locations":["Australia Central","Australia East","Australia Southeast","Brazil South","Canada Central","Canada East","Central India","Central US","East Asia","East US","East US 2","France Central","Germany West Central","Japan East","Japan West","Korea Central","Korea @@ -5655,7 +7149,7 @@ interactions: South","North Central US","North Europe","Norway East","South Africa North","South Central US","South India","Southeast Asia","Switzerland North","UAE North","UK South","UK West","West Central US","West Europe","West India","West US","West - US 2"],"apiVersions":["2020-03-01-preview","2020-03-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, + US 2","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-03-01-preview","2020-03-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"tenants","locations":["West US"],"apiVersions":["2017-04-01","2017-03-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-01","2016-02-01","2015-11-01","2015-01-01"],"defaultApiVersion":"2017-04-01","capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":["West @@ -5672,262 +7166,215 @@ interactions: US"],"apiVersions":["2014-01-01"],"capabilities":"None"},{"resourceType":"servicehealthmetrics","locations":["West US"],"apiVersions":["2014-01-01"],"capabilities":"None"},{"resourceType":"logs","locations":["West US"],"apiVersions":["2014-01-01"],"capabilities":"None"},{"resourceType":"anonymousapiusers","locations":["West - US"],"apiVersions":["2014-01-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Attestation","namespace":"Microsoft.Attestation","authorizations":[{"applicationId":"c61423b7-1d1f-430d-b444-0eee53298103","roleDefinitionId":"7299b0b1-11da-4858-8943-7db197005959"}],"resourceTypes":[{"resourceType":"attestationProviders","locations":["East - US 2","Central US","UK South"],"apiVersions":["2018-09-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"defaultProviders","locations":["East - US 2","Central US","UK South"],"apiVersions":["2018-09-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2018-09-01-preview"],"capabilities":"None"},{"resourceType":"locations/defaultProvider","locations":["East - US 2","Central US","UK South"],"apiVersions":["2018-09-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2018-09-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization","namespace":"Microsoft.Authorization","authorizations":[{"applicationId":"de926fbf-e23b-41f9-ae15-c943a9cfa630"}],"resourceTypes":[{"resourceType":"roleAssignments","locations":[],"apiVersions":["2020-04-01-preview","2020-03-01-preview","2019-04-01-preview","2018-12-01-preview","2018-09-01-preview","2018-07-01","2018-01-01-preview","2017-10-01-preview","2017-09-01","2017-05-01","2016-07-01","2015-07-01","2015-06-01","2015-05-01-preview","2014-10-01-preview","2014-07-01-preview","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-09-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2015-07-01"}],"capabilities":"SupportsExtension"},{"resourceType":"roleDefinitions","locations":[],"apiVersions":["2018-07-01","2018-01-01-preview","2017-09-01","2017-05-01","2016-07-01","2015-07-01","2015-06-01","2015-05-01-preview","2014-10-01-preview","2014-07-01-preview","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-05-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2015-07-01"}],"capabilities":"SupportsExtension"},{"resourceType":"classicAdministrators","locations":[],"apiVersions":["2015-06-01","2015-05-01-preview","2014-10-01-preview","2014-07-01-preview","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-06-01"}],"capabilities":"None"},{"resourceType":"permissions","locations":[],"apiVersions":["2018-07-01","2018-01-01-preview","2017-05-01","2016-07-01","2015-07-01","2015-06-01","2015-05-01-preview","2014-10-01-preview","2014-07-01-preview","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-05-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2015-07-01"}],"capabilities":"SupportsExtension"},{"resourceType":"denyAssignments","locations":[],"apiVersions":["2019-03-01-preview","2018-07-01-preview","2018-07-01"],"capabilities":"SupportsExtension"},{"resourceType":"locks","locations":[],"apiVersions":["2017-04-01","2016-09-01","2015-06-01","2015-05-01-preview","2015-01-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-09-01"}],"capabilities":"SupportsExtension"},{"resourceType":"operations","locations":[],"apiVersions":["2017-05-01","2016-07-01","2015-07-01","2015-01-01","2014-10-01-preview","2014-06-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-05-01"}],"capabilities":"None"},{"resourceType":"policyDefinitions","locations":[],"apiVersions":["2019-09-01","2019-06-01","2019-01-01","2018-05-01","2018-03-01","2016-12-01","2016-04-01","2015-10-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-12-01"}],"capabilities":"SupportsExtension"},{"resourceType":"policySetDefinitions","locations":[],"apiVersions":["2019-09-01","2019-06-01","2019-01-01","2018-05-01","2018-03-01","2017-06-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01"}],"capabilities":"SupportsExtension"},{"resourceType":"policyAssignments","locations":[],"apiVersions":["2019-09-01","2019-06-01","2019-01-01","2018-05-01","2018-03-01","2017-06-01-preview","2016-12-01","2016-04-01","2015-10-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-12-01"}],"capabilities":"SystemAssignedResourceIdentity, - SupportsExtension"},{"resourceType":"dataAliases","locations":[],"apiVersions":["2018-06-01-preview"],"capabilities":"None"},{"resourceType":"providerOperations","locations":[],"apiVersions":["2018-07-01","2018-01-01-preview","2017-05-01","2016-07-01","2015-07-01-preview","2015-07-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-05-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2015-07-01"}],"capabilities":"None"},{"resourceType":"elevateAccess","locations":[],"apiVersions":["2017-05-01","2016-07-01","2015-07-01","2015-06-01","2015-05-01-preview","2014-10-01-preview","2014-07-01-preview","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2017-05-01"}],"capabilities":"None"},{"resourceType":"checkAccess","locations":[],"apiVersions":["2018-09-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-09-01-preview"}],"capabilities":"SupportsExtension"},{"resourceType":"findOrphanRoleAssignments","locations":[],"apiVersions":["2019-04-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"roleAssignmentsUsageMetrics","locations":[],"apiVersions":["2019-08-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"privateLinkAssociations","locations":[],"apiVersions":["2020-05-01"],"capabilities":"SupportsExtension"},{"resourceType":"resourceManagementPrivateLinks","locations":[],"apiVersions":["2020-05-01"],"capabilities":"None"},{"resourceType":"operationStatus","locations":[],"apiVersions":["2020-05-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AutonomousSystems","namespace":"Microsoft.AutonomousSystems","authorizations":[{"applicationId":"a967240f-810b-4f79-85e5-25870cc69cbb","roleDefinitionId":"47b23f55-5e18-4fc7-a69a-f9b79a9811ea","managedByRoleDefinitionId":"6ee14824-e3a8-4536-ad65-346e3406f3c4"}],"resourceTypes":[{"resourceType":"workspaces","locations":["West - US 2"],"apiVersions":["2020-05-01-preview"],"defaultApiVersion":"2020-05-01-preview","capabilities":"CrossResourceGroupResourceMove, + US"],"apiVersions":["2014-01-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AgFoodPlatform","namespace":"Microsoft.AgFoodPlatform","authorizations":[{"applicationId":"e420dc86-d66f-4069-a2d0-be2f937bd272","roleDefinitionId":"c9511e72-16f4-4804-9bed-d3f21cbe122f"}],"resourceTypes":[{"resourceType":"operations","locations":["East + US"],"apiVersions":["2020-05-12-preview"],"defaultApiVersion":"2020-05-12-preview","capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AISupercomputer","namespace":"Microsoft.AISupercomputer","authorizations":[{"applicationId":"349e15d0-1c96-4829-95e5-7fc8fb358ff3","roleDefinitionId":"da5c10f8-3b94-4076-bb95-1421b4518aee"}],"resourceTypes":[{"resourceType":"locations","locations":["Australia + Central","Australia East","Australia Southeast","Canada Central","Canada East","Central + India","East Asia","East US","East US 2","France Central","Germany West Central","Japan + East","Japan West","North Central US","North Europe","Norway East","South + Africa North","South Central US","South India","Southeast Asia","Switzerland + North","West Central US","West Europe","West India","West US","West US 2","UAE + North","UK West","UK South","Brazil South","Korea South","Korea Central"],"apiVersions":["2020-12-01-preview","2020-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/instanceTypeSeries","locations":["Australia + Central","Australia East","Australia Southeast","Canada Central","Canada East","Central + India","East Asia","East US 2","France Central","Germany West Central","Japan + East","Japan West","North Central US","North Europe","Norway East","South + Africa North","South India","Southeast Asia","Switzerland North","West Central + US","West India","West US","West US 2","UAE North","UK West","UK South","Brazil + South","Korea South","Korea Central","East US"],"apiVersions":["2020-12-01-preview","2020-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/instanceTypeSeries/instanceTypes","locations":["Australia + Central","Australia East","Australia Southeast","Canada Central","Canada East","Central + India","East Asia","East US 2","France Central","Germany West Central","Japan + East","Japan West","North Central US","North Europe","Norway East","South + Africa North","South India","Southeast Asia","Switzerland North","West Central + US","West India","West US","West US 2","UAE North","UK West","UK South","Brazil + South","Korea South","Korea Central","East US"],"apiVersions":["2020-12-01-preview","2020-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["Australia + Central","Australia East","Australia Southeast","Canada Central","Canada East","Central + India","East Asia","East US 2","France Central","Germany West Central","Japan + East","Japan West","North Central US","North Europe","Norway East","South + Africa North","South India","Southeast Asia","Switzerland North","West Central + US","West India","West US","West US 2","UAE North","UK West","UK South","Brazil + South","Korea South","Korea Central","East US"],"apiVersions":["2020-12-01-preview","2020-03-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["Australia + Central","Australia East","Australia Southeast","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","France Central","Germany + West Central","Japan East","Japan West","North Central US","North Europe","Norway + East","South Africa North","South Central US","South India","Southeast Asia","Switzerland + North","West Central US","West Europe","West India","West US","West US 2","UAE + North","UK West","UK South","Brazil South","Korea South","Korea Central"],"apiVersions":["2020-12-01-preview","2020-03-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Automanage","namespace":"Microsoft.Automanage","authorizations":[{"applicationId":"9ae330ab-d710-466b-851c-c828e7340846"}],"resourceTypes":[{"resourceType":"configurationProfileAssignments","locations":["East + US","West US 2","West Central US","West Europe","Canada Central","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-30-preview"],"capabilities":"SupportsExtension"},{"resourceType":"accounts","locations":["Central + US","East US 2","East US","North Central US","South Central US","West US 2","West + Central US","West US","West Europe","North Europe","Canada Central","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-30-preview"],"defaultApiVersion":"2020-06-30-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"configurationProfilePreferences","locations":["Central + US","East US 2","East US","North Central US","South Central US","West US 2","West + Central US","West US","West Europe","North Europe","Canada Central","Central + US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-30-preview"],"defaultApiVersion":"2020-06-30-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":["Central + US","East US 2","East US","North Central US","South Central US","West US 2","West + Central US","West US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-06-30-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AutonomousSystems","namespace":"Microsoft.AutonomousSystems","authorizations":[{"applicationId":"a967240f-810b-4f79-85e5-25870cc69cbb","roleDefinitionId":"47b23f55-5e18-4fc7-a69a-f9b79a9811ea","managedByRoleDefinitionId":"6ee14824-e3a8-4536-ad65-346e3406f3c4"}],"resourceTypes":[{"resourceType":"workspaces","locations":["West + US","West US 2"],"apiVersions":["2020-05-01-preview"],"defaultApiVersion":"2020-05-01-preview","capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, SupportsLocation"},{"resourceType":"workspaces/validateCreateRequest","locations":["West - US 2"],"apiVersions":["2020-05-01-preview"],"defaultApiVersion":"2020-05-01-preview","capabilities":"None"},{"resourceType":"workspaces/operationresults","locations":["West - US 2"],"apiVersions":["2020-05-01-preview"],"defaultApiVersion":"2020-05-01-preview","capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AVS","namespace":"Microsoft.AVS","authorizations":[{"allowedThirdPartyExtensions":[{"name":"VMCP"}]}],"resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2019-08-09-preview"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2019-08-09-preview"],"capabilities":"None"},{"resourceType":"locations/checkTrialAvailability","locations":["East - US","West US","West Europe","Australia East"],"apiVersions":["2019-08-09-preview"],"capabilities":"None"},{"resourceType":"locations/checkQuotaAvailability","locations":["East - US","West US","West Europe","Australia East"],"apiVersions":["2019-08-09-preview"],"capabilities":"None"},{"resourceType":"privateClouds","locations":["East - US","West US","West Europe","Australia East"],"apiVersions":["2019-08-09-preview"],"capabilities":"CrossResourceGroupResourceMove, + US","West US 2"],"apiVersions":["2020-05-01-preview"],"defaultApiVersion":"2020-05-01-preview","capabilities":"None"},{"resourceType":"workspaces/operationresults","locations":["West + US","West US 2"],"apiVersions":["2020-05-01-preview"],"defaultApiVersion":"2020-05-01-preview","capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AVS","namespace":"Microsoft.AVS","authorizations":[{"applicationId":"608f9929-9737-432e-860f-4e1c1821052f","roleDefinitionId":"a12e1b40-7eca-4c51-be1d-d8bc564dcfdd","allowedThirdPartyExtensions":[{"name":"VMCP"}]}],"resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2020-03-20","2019-08-09-preview"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-03-20","2019-08-09-preview"],"capabilities":"None"},{"resourceType":"locations/checkTrialAvailability","locations":["East + US","North Central US","West US","West Europe","Australia East","Japan East","UK + South"],"apiVersions":["2020-03-20","2019-08-09-preview"],"capabilities":"None"},{"resourceType":"locations/checkQuotaAvailability","locations":["East + US","North Central US","West US","West Europe","Australia East","Japan East","UK + South"],"apiVersions":["2020-03-20","2019-08-09-preview"],"capabilities":"None"},{"resourceType":"privateClouds","locations":["East + US","North Central US","West US","West Europe","Australia East","Japan East","UK + South"],"apiVersions":["2020-03-20","2019-08-09-preview"],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"privateClouds/clusters","locations":["East - US","West US","West Europe","Australia East"],"apiVersions":["2019-08-09-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AzureActiveDirectory","namespace":"Microsoft.AzureActiveDirectory","resourceTypes":[{"resourceType":"b2cDirectories","locations":["Global","United - States","Europe","Asia Pacific"],"apiVersions":["2019-01-01-privatepreview","2017-01-30","2016-12-13-preview","2016-02-10-privatepreview"],"defaultApiVersion":"2017-01-30","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"checkNameAvailability","locations":["Global","United - States","Europe","Asia Pacific"],"apiVersions":["2019-01-01-privatepreview"],"capabilities":"None"},{"resourceType":"operations","locations":["Global","United - States","Europe","Asia Pacific"],"apiVersions":["2019-01-01-privatepreview","2017-01-30","2016-12-13-preview","2016-02-10-privatepreview"],"defaultApiVersion":"2017-01-30","capabilities":"None"},{"resourceType":"b2ctenants","locations":["Global","United - States","Europe","Asia Pacific"],"apiVersions":["2016-02-10-privatepreview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AzureData","namespace":"Microsoft.AzureData","authorizations":[{"applicationId":"bb55177b-a7d9-4939-a257-8ab53a3b2bc6","roleDefinitionId":"f83de625-af9e-4458-ac9c-e5d62b05fd06"},{"applicationId":"a12e8ccb-0fcd-46f8-b6a1-b9df7a9d7231","roleDefinitionId":"f83de625-af9e-4458-ac9c-e5d62b05fd06"}],"resourceTypes":[{"resourceType":"sqlServerRegistrations","locations":["Australia + US","North Central US","West US","West Europe","Australia East","Japan East","UK + South"],"apiVersions":["2020-03-20","2019-08-09-preview"],"capabilities":"None"},{"resourceType":"privateClouds/authorizations","locations":["East + US","North Central US","West US","West Europe","Australia East","Japan East","UK + South"],"apiVersions":["2020-03-20"],"capabilities":"None"},{"resourceType":"privateClouds/hcxEnterpriseSites","locations":["East + US","North Central US","West US","West Europe","Australia East","Japan East","UK + South"],"apiVersions":["2020-03-20"],"capabilities":"None"},{"resourceType":"privateClouds/globalReachConnections","locations":["East + US","North Central US","West US","West Europe","Australia East","Japan East","UK + South"],"apiVersions":["2020-07-17-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AzureArcData","namespace":"Microsoft.AzureArcData","authorizations":[],"resourceTypes":[{"resourceType":"locations","locations":[],"apiVersions":["2019-01-01"],"capabilities":"None"},{"resourceType":"Operations","locations":[],"apiVersions":["2020-12-08-preview"],"capabilities":"None"},{"resourceType":"Locations/OperationStatuses","locations":["East + Asia","East US","East US 2 EUAP","North Europe","Southeast Asia","West Europe","West + US"],"apiVersions":["2019-10-01"],"capabilities":"None"},{"resourceType":"dataControllers","locations":["East + US 2 EUAP"],"apiVersions":["2020-12-08-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"sqlManagedInstances","locations":["East + US 2 EUAP"],"apiVersions":["2020-12-08-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"postgresInstances","locations":["East + US 2 EUAP"],"apiVersions":["2020-12-08-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"sqlServerInstances","locations":["East + US 2 EUAP"],"apiVersions":["2020-12-08-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AzureData","namespace":"Microsoft.AzureData","authorizations":[{"applicationId":"bb55177b-a7d9-4939-a257-8ab53a3b2bc6","roleDefinitionId":"f83de625-af9e-4458-ac9c-e5d62b05fd06"},{"applicationId":"a12e8ccb-0fcd-46f8-b6a1-b9df7a9d7231","roleDefinitionId":"f83de625-af9e-4458-ac9c-e5d62b05fd06"}],"resourceTypes":[{"resourceType":"sqlServerRegistrations","locations":["Australia East","Australia Southeast","Canada Central","France Central","Japan East","Japan West","Korea Central","Korea South","North Central US","North Europe","South Africa North","South Central US","Southeast Asia","South India","UK South","UK West","West US","East US","Central US","East Asia","West Europe","West Central - US","West US 2","East US 2"],"apiVersions":["2019-05-10-preview"],"defaultApiVersion":"2019-05-10-preview","capabilities":"CrossResourceGroupResourceMove, + US","West US 2","East US 2","East US 2 EUAP"],"apiVersions":["2019-05-10-preview"],"defaultApiVersion":"2019-05-10-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"dataControllers","locations":["Japan + East","Australia East","Korea Central","North Europe","UK South","France Central","East + US","East US 2","Central US","West Europe","Southeast Asia","West US 2","East + Asia","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-09-08-preview","2019-07-24-preview"],"defaultApiVersion":"2020-09-08-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"postgresInstances","locations":["Japan + East","Australia East","Korea Central","North Europe","UK South","France Central","East + US","East US 2","Central US","West Europe","Southeast Asia","West US 2","East + Asia","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-09-08-preview","2019-07-24-preview"],"defaultApiVersion":"2020-09-08-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"sqlManagedInstances","locations":["Japan + East","Australia East","Korea Central","North Europe","UK South","France Central","East + US","East US 2","Central US","West Europe","Southeast Asia","West US 2","East + Asia","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-09-08-preview","2019-07-24-preview"],"defaultApiVersion":"2020-09-08-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"sqlServerInstances","locations":["East + US","East US 2","Central US","West Europe","Southeast Asia","West US 2","Australia + East","North Europe","UK South","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-09-08-preview","2019-07-24-preview"],"defaultApiVersion":"2020-09-08-preview","capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":["Australia East","Australia Southeast","Canada Central","France Central","Japan East","Japan - West","Korea Central","Korea South","North Central US","North Europe","South - Africa North","South Central US","Southeast Asia","South India","UK South","UK - West","West US","East US","Central US","East Asia","West Europe","West Central - US","West US 2","East US 2"],"apiVersions":["2019-05-10-preview"],"capabilities":"None"},{"resourceType":"sqlServerRegistrations/sqlServers","locations":["Australia - East","Australia Southeast","Canada Central","France Central","Japan East","Japan - West","Korea Central","Korea South","North Central US","North Europe","South - Africa North","South Central US","Southeast Asia","South India","UK South","UK - West","West US","East US","Central US","East Asia","West Europe","West Central - US","West US 2","East US 2"],"apiVersions":["2019-05-10-preview"],"defaultApiVersion":"2019-05-10-preview","capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AzureStackHCI","namespace":"Microsoft.AzureStackHCI","authorizations":[{"applicationId":"1412d89f-b8a8-4111-b4fd-e82905cbd85d","roleDefinitionId":"90ffa33f-4875-44d8-b86f-d41c3aa6050e"},{"applicationId":"1322e676-dee7-41ee-a874-ac923822781c","roleDefinitionId":"e91a9804-9f4d-4501-bf85-03bd4ea78451"}],"resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2020-03-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.BatchAI","namespace":"Microsoft.BatchAI","authorization":{"applicationId":"9fcb3732-5f52-4135-8c08-9d4bbaf203ea","roleDefinitionId":"703B89C7-CE2C-431B-BDD8-FA34E39AF696","managedByRoleDefinitionId":"90B8E153-EBFF-4073-A95F-4DAD56B14C78"},"resourceTypes":[{"resourceType":"workspaces","locations":["West - US"],"apiVersions":["2018-05-01"],"capabilities":"SupportsTags, SupportsLocation"},{"resourceType":"workspaces/clusters","locations":["West - US"],"apiVersions":["2018-05-01"],"capabilities":"None"},{"resourceType":"workspaces/fileservers","locations":["West - US"],"apiVersions":["2018-05-01"],"capabilities":"None"},{"resourceType":"workspaces/experiments","locations":["West - US"],"apiVersions":["2018-05-01"],"capabilities":"None"},{"resourceType":"workspaces/experiments/jobs","locations":["West - US"],"apiVersions":["2018-05-01"],"capabilities":"None"},{"resourceType":"operations","locations":["East - US","West US 2","West Europe","East US 2","North Europe","Australia East","West - Central US","Southeast Asia","South Central US","West US"],"apiVersions":["2018-05-01","2018-03-01","2017-09-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Billing","namespace":"Microsoft.Billing","authorizations":[{"applicationId":"80dbdb39-4f33-4799-8b6f-711b5e3e61b6","roleDefinitionId":"acdc79db-513f-461d-a542-61908d543bdc"}],"resourceTypes":[{"resourceType":"billingPeriods","locations":[],"apiVersions":["2018-03-01-preview","2017-04-24-preview"],"capabilities":"SupportsExtension"},{"resourceType":"invoices","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview","2018-03-01-preview","2017-04-24-preview","2017-02-27-preview"],"capabilities":"None"},{"resourceType":"enrollmentAccounts","locations":[],"apiVersions":["2018-03-01-preview"],"capabilities":"None"},{"resourceType":"billingRoleDefinitions","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"billingRoleAssignments","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"createBillingRoleAssignment","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"billingAccounts/createBillingRoleAssignment","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/createBillingRoleAssignment","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoiceSections/createBillingRoleAssignment","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingPermissions","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"billingAccounts/billingRoleDefinitions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingRoleAssignments","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingPermissions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview","2018-06-30","2018-05-31"],"capabilities":"None"},{"resourceType":"billingAccounts/operationResults","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/billingRoleDefinitions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/billingRoleAssignments","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/billingPermissions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/customers","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/customers","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/instructions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/customers/billingSubscriptions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/customers/products","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/customers/transactions","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoiceSections","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoiceSections/billingRoleDefinitions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoiceSections/billingRoleAssignments","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoiceSections/billingPermissions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/customers/billingPermissions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/elevate","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/createInvoiceSectionOperations","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/patchOperations","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/patchOperations","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/productMoveOperations","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/billingSubscriptionMoveOperations","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/listInvoiceSectionsWithCreateSubscriptionPermission","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/BillingProfiles/patchOperations","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"departments","locations":[],"apiVersions":["2018-06-30","2018-05-31"],"capabilities":"None"},{"resourceType":"billingAccounts/departments","locations":[],"apiVersions":["2019-10-01-preview","2018-06-30"],"capabilities":"None"},{"resourceType":"billingAccounts/departments/billingRoleDefinitions","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/departments/billingRoleAssignments","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/departments/billingPermissions","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/enrollmentAccounts","locations":[],"apiVersions":["2019-10-01-preview","2018-06-30"],"capabilities":"None"},{"resourceType":"billingAccounts/enrollmentAccounts/billingRoleDefinitions","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/enrollmentAccounts/billingRoleAssignments","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/enrollmentAccounts/billingPermissions","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/paymentMethods","locations":[],"apiVersions":["2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/availableBalance","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoices","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoices","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/transactions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/transactions","locations":[],"apiVersions":["2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/transactions","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoiceSections/transactions","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoices/transactions","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoices/transactions","locations":[],"apiVersions":["2020-05-01"],"capabilities":"None"},{"resourceType":"billingAccounts/billingSubscriptions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingSubscriptions/invoices","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/billingSubscriptions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/billingSubscriptions","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoiceSections/billingSubscriptions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"operationStatus","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"operationResults","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/products","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoiceSections/products","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/products/updateAutoRenew","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoiceSections/products/updateAutoRenew","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/products","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/products","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview","2018-06-30","2018-03-01-preview","2017-04-24-preview","2017-02-27-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/initiateTransfer","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoiceSections/initiateTransfer","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/transfers","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoiceSections/transfers","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"transfers/acceptTransfer","locations":[],"apiVersions":["2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"transfers","locations":[],"apiVersions":["2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"transfers/declineTransfer","locations":[],"apiVersions":["2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"transfers/validateTransfer","locations":[],"apiVersions":["2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/customers/initiateTransfer","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/customers/transfers","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingProperty","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/policies","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/customers/policies","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoices/pricesheet","locations":[],"apiVersions":["2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/pricesheet","locations":[],"apiVersions":["2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/pricesheetDownloadOperations","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/billingSubscriptions/transfer","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/products/transfer","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoiceSections/products/transfer","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/productTransfersResults","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"transfers/operationStatus","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/agreements","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/lineOfCredit","locations":[],"apiVersions":["2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/paymentMethods","locations":[],"apiVersions":["2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"validateAddress","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.BingMaps","namespace":"Microsoft.BingMaps","resourceTypes":[{"resourceType":"mapApis","locations":["West - US"],"apiVersions":["2016-08-18","2015-07-02"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2016-08-18","2015-07-02"],"capabilities":"None"},{"resourceType":"listCommunicationPreference","locations":[],"apiVersions":["2016-08-18","2015-07-02"],"capabilities":"None"},{"resourceType":"updateCommunicationPreference","locations":[],"apiVersions":["2016-08-18","2015-07-02"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Blockchain","namespace":"Microsoft.Blockchain","authorizations":[{"applicationId":"78827f38-7b69-4d5e-a627-d6fdd9c759a0","roleDefinitionId":"9c68eaf3-8315-4e5c-b857-641b16b21f8f"},{"applicationId":"049d4938-2ef2-4274-aa8f-630fc9bc33d1","roleDefinitionId":"c6dd0893-0495-488a-ac21-ee5f1ba89769"}],"resourceTypes":[{"resourceType":"watchers","locations":["East - US","West Europe"],"apiVersions":["2019-06-01-preview"],"defaultApiVersion":"2019-06-01-preview","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"blockchainMembers","locations":["East - US","Southeast Asia","West Europe","North Europe","West US 2","Japan East"],"apiVersions":["2018-06-01-preview"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"locations/watcherOperationResults","locations":["East - US","West Europe"],"apiVersions":["2019-06-01-preview"],"defaultApiVersion":"2019-06-01-preview","capabilities":"None"},{"resourceType":"locations","locations":["East - US","Southeast Asia","West Europe","North Europe","West US 2","Japan East","West - Central US"],"apiVersions":["2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/blockchainMemberOperationResults","locations":["East - US","Southeast Asia","West Europe","North Europe","West US 2","Japan East"],"apiVersions":["2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["East - US","Southeast Asia","West Europe","North Europe","West US 2","Japan East"],"apiVersions":["2018-06-01-preview"],"capabilities":"None"},{"resourceType":"locations/listConsortiums","locations":["East - US","Southeast Asia","West Europe","North Europe","West US 2","Japan East"],"apiVersions":["2018-06-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["East - US","Southeast Asia","West Europe","North Europe","West US 2","Japan East","West - Central US"],"apiVersions":["2018-06-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.BlockchainTokens","namespace":"Microsoft.BlockchainTokens","resourceTypes":[{"resourceType":"Operations","locations":["West - US"],"apiVersions":["2019-07-19-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Blueprint","namespace":"Microsoft.Blueprint","authorizations":[{"applicationId":"f71766dc-90d9-4b7d-bd9d-4499c4331c3f","roleDefinitionId":"cb180127-cf6d-4672-9e75-e29a487f9658"}],"resourceTypes":[{"resourceType":"blueprints","locations":[],"apiVersions":["2018-11-01-preview","2018-11-01-alpha","2017-11-11-preview","2017-11-11-alpha"],"capabilities":"SupportsExtension"},{"resourceType":"blueprints/artifacts","locations":[],"apiVersions":["2018-11-01-preview","2018-11-01-alpha","2017-11-11-preview","2017-11-11-alpha"],"capabilities":"None"},{"resourceType":"blueprints/versions","locations":[],"apiVersions":["2018-11-01-preview","2018-11-01-alpha","2017-11-11-preview","2017-11-11-alpha"],"capabilities":"None"},{"resourceType":"blueprints/versions/artifacts","locations":[],"apiVersions":["2018-11-01-preview","2018-11-01-alpha","2017-11-11-preview","2017-11-11-alpha"],"capabilities":"None"},{"resourceType":"blueprintAssignments","locations":[],"apiVersions":["2018-11-01-preview","2018-11-01-alpha","2017-11-11-preview","2017-11-11-alpha"],"capabilities":"SystemAssignedResourceIdentity, - SupportsExtension"},{"resourceType":"blueprintAssignments/operations","locations":[],"apiVersions":["2017-11-11-preview","2017-11-11-alpha"],"capabilities":"None"},{"resourceType":"blueprintAssignments/assignmentOperations","locations":[],"apiVersions":["2018-11-01-preview","2018-11-01-alpha"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2018-11-01-preview","2018-11-01-alpha","2017-11-11-preview","2017-11-11-alpha"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Capacity","namespace":"Microsoft.Capacity","authorization":{"applicationId":"4d0ad6c7-f6c3-46d8-ab0d-1406d5e6c86b","roleDefinitionId":"FD9C0A9A-4DB9-4F41-8A61-98385DEB6E2D"},"resourceTypes":[{"resourceType":"resources","locations":["South - Central US"],"apiVersions":["2019-04-01","2018-06-01","2017-11-01"],"capabilities":"None"},{"resourceType":"reservationOrders","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"reservationOrders/reservations","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"listbenefits","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01"],"capabilities":"None"},{"resourceType":"reservations","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"reservationOrders/reservations/revisions","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"catalogs","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"appliedReservations","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"checkOffers","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"checkScopes","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"calculatePrice","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"calculateExchange","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01"],"capabilities":"None"},{"resourceType":"exchange","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01"],"capabilities":"None"},{"resourceType":"reservationOrders/calculateRefund","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"reservationOrders/return","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"reservationOrders/split","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"reservationOrders/merge","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"reservationOrders/swap","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01"],"capabilities":"None"},{"resourceType":"validateReservationOrder","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"reservationOrders/availableScopes","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"reservationOrders/reservations/availableScopes","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01"],"capabilities":"None"},{"resourceType":"commercialReservationOrders","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01"],"capabilities":"None"},{"resourceType":"calculatePurchasePrice","locations":[],"apiVersions":["2019-06-01-privatepreview","2019-06-01-beta"],"capabilities":"None"},{"resourceType":"placePurchaseOrder","locations":[],"apiVersions":["2019-06-01-privatepreview","2019-06-01-beta"],"capabilities":"None"},{"resourceType":"checkPurchaseStatus","locations":[],"apiVersions":["2019-06-01-privatepreview","2019-06-01-beta"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.CertificateRegistration","namespace":"Microsoft.CertificateRegistration","authorization":{"applicationId":"f3c21649-0979-4721-ac85-b0216b2cf413","roleDefinitionId":"933fba7e-2ed3-4da8-973d-8bd8298a9b40"},"resourceTypes":[{"resourceType":"certificateOrders","locations":["global"],"apiVersions":["2019-08-01","2018-02-01","2015-08-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2018-02-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"certificateOrders/certificates","locations":["global"],"apiVersions":["2019-08-01","2018-02-01","2015-08-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2018-02-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"validateCertificateRegistrationInformation","locations":["global"],"apiVersions":["2019-08-01","2018-02-01","2015-08-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2018-02-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"operations","locations":["global"],"apiVersions":["2019-08-01","2018-02-01","2015-08-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2018-02-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ChangeAnalysis","namespace":"Microsoft.ChangeAnalysis","authorizations":[{"applicationId":"2cfc91a4-7baa-4a8f-a6c9-5f3d279060b8","roleDefinitionId":"f5a6bd90-af71-455c-9030-c486e8c42c95"}],"resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2020-04-01-preview","2019-04-01-preview"],"capabilities":"None"},{"resourceType":"resourceChanges","locations":[],"apiVersions":["2020-04-01-preview"],"capabilities":"SupportsExtension"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicCompute","namespace":"Microsoft.ClassicCompute","resourceTypes":[{"resourceType":"domainNames","locations":["East - Asia","Southeast Asia","East US","East US 2","West US","West US 2","North - Central US","South Central US","West Central US","Central US","North Europe","West - Europe","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast","South India","Central India","West India","Canada Central","Canada - East","East US 2 (Stage)","North Central US (Stage)","UK South","UK West","Korea - Central","Korea South","France Central","South Africa North","UAE North","Australia - Central","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2020-02-01","2018-06-01","2017-11-15","2017-11-01","2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01","2014-01-01"],"defaultApiVersion":"2014-06-01","capabilities":"CrossResourceGroupResourceMove, - SupportsLocation"},{"resourceType":"domainNames/internalLoadBalancers","locations":[],"apiVersions":["2017-11-01","2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01","2014-01-01"],"defaultApiVersion":"2014-06-01","capabilities":"None"},{"resourceType":"checkDomainNameAvailability","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01","2014-01-01"],"capabilities":"None"},{"resourceType":"domainNames/slots","locations":["East - Asia","Southeast Asia","East US","East US 2","West US","West US 2","North - Central US","South Central US","West Central US","Central US","North Europe","West - Europe","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast","South India","Central India","West India","Canada Central","Canada - East","East US 2 (Stage)","North Central US (Stage)","UK South","UK West","Korea - Central","Korea South","France Central","South Africa North","UAE North","Australia - Central","Switzerland North","Norway East","Germany West Central"],"apiVersions":["2020-02-01","2018-06-01","2017-11-15","2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01","2014-01-01"],"capabilities":"None"},{"resourceType":"domainNames/slots/roles","locations":["East - Asia","Southeast Asia","East US","East US 2","West US","West US 2","North - Central US","South Central US","West Central US","Central US","North Europe","West - Europe","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast","South India","Central India","West India","Canada Central","Canada - East","East US 2 (Stage)","North Central US (Stage)","UK South","UK West","Korea - Central","Korea South","France Central","South Africa North","UAE North","Australia - Central","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01","2014-01-01"],"capabilities":"None"},{"resourceType":"domainNames/slots/roles/metricDefinitions","locations":[],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"domainNames/slots/roles/metrics","locations":[],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"virtualMachines","locations":["East - Asia","Southeast Asia","East US","East US 2","West US","West US 2","North - Central US","South Central US","West Central US","Central US","North Europe","West - Europe","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast","South India","Central India","West India","Canada Central","Canada - East","East US 2 (Stage)","North Central US (Stage)","UK South","UK West","Korea - Central","Korea South","France Central","South Africa North","UAE North","Australia - Central","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2017-04-01","2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01","2014-04-01","2014-01-01"],"defaultApiVersion":"2014-06-01","capabilities":"CrossResourceGroupResourceMove, - SupportsLocation"},{"resourceType":"capabilities","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"domainNames/capabilities","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"domainNames/serviceCertificates","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"quotas","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01","2014-01-01"],"capabilities":"None"},{"resourceType":"virtualMachines/diagnosticSettings","locations":["East - US","East US 2","North Central US","North Europe","West Europe","Brazil South","Canada - Central","Canada East","UK South","UK West","France Central","South Africa - North","UAE North","Australia Central","Switzerland North","Germany West Central","Norway - East","West US","Central US","South Central US","Japan East","Japan West","East - Asia","Southeast Asia","Australia East","Australia Southeast","West US 2","West - Central US","South India","Central India","West India","Korea Central","Korea - South","East US 2 (Stage)","North Central US (Stage)"],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"virtualMachines/metricDefinitions","locations":["East - US","East US 2","North Central US","North Europe","West Europe","Brazil South","Canada - Central","Canada East","UK South","UK West","France Central","South Africa - North","UAE North","Switzerland North","West US","Central US","South Central - US","Japan East","Japan West","East Asia","Southeast Asia","Australia East","Australia - Southeast","Australia Central","West US 2","West Central US","Germany West - Central","Norway East","South India","Central India","West India","Korea Central","Korea - South","East US 2 (Stage)","North Central US (Stage)"],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"virtualMachines/metrics","locations":["North - Central US","South Central US","East US","East US 2","Canada Central","Canada - East","West US","West US 2","West Central US","Australia East","Australia - Southeast","South Africa North","UAE North","Australia Central","Switzerland - North","Germany West Central","Norway East","Central US","East Asia","Southeast - Asia","North Europe","West Europe","UK South","UK West","Japan East","Japan - West","Brazil South","South India","Central India","West India","East US 2 - (Stage)","North Central US (Stage)","Korea Central","Korea South","France - Central"],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2017-04-01","2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"resourceTypes","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"moveSubscriptionResources","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01"],"capabilities":"None"},{"resourceType":"validateSubscriptionMoveAvailability","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01"],"capabilities":"None"},{"resourceType":"operationStatuses","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01"],"capabilities":"None"},{"resourceType":"operatingSystems","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"operatingSystemFamilies","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicInfrastructureMigrate","namespace":"Microsoft.ClassicInfrastructureMigrate","authorization":{"applicationId":"5e5abe2b-83cd-4786-826a-a05653ebb103","roleDefinitionId":"766c4d9b-ef83-4f73-8352-1450a506a69b"},"resourceTypes":[{"resourceType":"classicInfrastructureResources","locations":["East - Asia","Southeast Asia","East US","East US 2","West US","North Central US","South - Central US","Central US","North Europe","West Europe","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","West - India","South India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","France - South","Australia Central","Australia Central 2"],"apiVersions":["2015-06-15"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicNetwork","namespace":"Microsoft.ClassicNetwork","resourceTypes":[{"resourceType":"virtualNetworks","locations":["East - Asia","Southeast Asia","East US","East US 2","West US","West US 2","North - Central US","South Central US","West Central US","Central US","North Europe","West - Europe","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast","South India","Central India","West India","Canada Central","Canada - East","East US 2 (Stage)","North Central US (Stage)","UK South","UK West","Korea - Central","Korea South","France Central","South Africa North","UAE North","Switzerland - North","Australia Central","Germany West Central","Norway East"],"apiVersions":["2017-11-15","2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01","2014-01-01"],"defaultApiVersion":"2014-06-01","capabilities":"SupportsLocation"},{"resourceType":"virtualNetworks/virtualNetworkPeerings","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","East US 2 (Stage)","North Central US (Stage)"],"apiVersions":["2016-11-01"],"capabilities":"None"},{"resourceType":"virtualNetworks/remoteVirtualNetworkPeeringProxies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","East US 2 (Stage)","North Central US (Stage)"],"apiVersions":["2016-11-01"],"capabilities":"None"},{"resourceType":"reservedIps","locations":["East - Asia","Southeast Asia","East US","East US 2","West US","West US 2","North - Central US","South Central US","West Central US","Central US","North Europe","West - Europe","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast","South India","Central India","West India","Canada Central","Canada - East","East US 2 (Stage)","North Central US (Stage)","UK South","UK West","Korea - Central","Korea South","France Central","South Africa North","UAE North","Switzerland - North","Australia Central","Germany West Central","Norway East"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01","2014-01-01"],"defaultApiVersion":"2014-06-01","capabilities":"SupportsLocation"},{"resourceType":"quotas","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01","2014-01-01"],"capabilities":"None"},{"resourceType":"gatewaySupportedDevices","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01","2014-01-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2016-11-01","2016-04-01-beta","2016-04-01","2015-12-01","2015-06-01","2014-06-01","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"networkSecurityGroups","locations":["East - Asia","Southeast Asia","East US","East US 2","West US","West US 2","North - Central US","South Central US","West Central US","Central US","North Europe","West - Europe","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast","South India","Central India","West India","Canada Central","Canada - East","East US 2 (Stage)","North Central US (Stage)","UK South","UK West","Korea - Central","Korea South","France Central","South Africa North","UAE North","Switzerland - North","Australia Central","Germany West Central","Norway East"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01"],"defaultApiVersion":"2015-06-01","capabilities":"SupportsLocation"},{"resourceType":"capabilities","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"expressRouteCrossConnections","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"expressRouteCrossConnections/peerings","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-10-01","2015-06-01","2014-06-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicStorage","namespace":"Microsoft.ClassicStorage","resourceTypes":[{"resourceType":"storageAccounts","locations":["East - Asia","Southeast Asia","East US","East US 2","West US","West US 2","North - Central US","South Central US","West Central US","Central US","North Europe","West - Europe","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast","South India","Central India","West India","Canada Central","Canada - East","East US 2 (Stage)","North Central US (Stage)","UK South","UK West","Korea - Central","Korea South","France Central","South Africa North","UAE North","Australia - Central","Switzerland North","Germany West Central","Norway East"],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01","2014-04-01-beta","2014-04-01","2014-01-01"],"defaultApiVersion":"2014-06-01","capabilities":"CrossResourceGroupResourceMove, - SupportsLocation"},{"resourceType":"quotas","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01","2014-01-01"],"capabilities":"None"},{"resourceType":"checkStorageAccountAvailability","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01","2014-01-01"],"capabilities":"None"},{"resourceType":"storageAccounts/services","locations":["West - US","Central US","South Central US","Japan East","Japan West","East Asia","Southeast - Asia","Australia East","Australia Southeast","South India","Central India","West - India","East US 2 (Stage)","North Central US (Stage)","West US 2","West Central - US","East US","East US 2","North Central US","North Europe","West Europe","Brazil - South","Canada Central","Canada East","UK South","UK West","Korea Central","Korea - South","France Central","South Africa North","UAE North","Australia Central","Switzerland - North","Germany West Central","Norway East"],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"storageAccounts/services/diagnosticSettings","locations":["West - US","Central US","South Central US","Japan East","Japan West","East Asia","Southeast - Asia","Australia East","Australia Southeast","South India","Central India","West - India","East US 2 (Stage)","North Central US (Stage)","West US 2","West Central - US","East US","East US 2","North Central US","North Europe","West Europe","Brazil - South","Canada Central","Canada East","UK South","UK West","Korea Central","Korea - South","France Central","South Africa North","UAE North","Australia Central","Switzerland - North","Germany West Central","Norway East"],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"storageAccounts/services/metricDefinitions","locations":[],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"storageAccounts/services/metrics","locations":[],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"storageAccounts/metricDefinitions","locations":[],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"storageAccounts/metrics","locations":[],"apiVersions":["2014-04-01"],"capabilities":"None"},{"resourceType":"capabilities","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"storageAccounts/blobServices","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"storageAccounts/tableServices","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"storageAccounts/fileServices","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"storageAccounts/queueServices","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"disks","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"images","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"vmImages","locations":[],"apiVersions":["2016-11-01"],"capabilities":"None"},{"resourceType":"storageAccounts/vmImages","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01","2014-04-01-beta","2014-04-01","2014-01-01"],"capabilities":"None"},{"resourceType":"publicImages","locations":[],"apiVersions":["2016-11-01","2016-04-01"],"capabilities":"None"},{"resourceType":"osImages","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"osPlatformImages","locations":[],"apiVersions":["2016-11-01","2016-04-01","2015-12-01","2015-06-01","2014-06-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2016-11-01","2016-04-01-beta","2016-04-01","2015-12-01","2015-06-01","2014-06-01","2014-04-01","2014-01-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicSubscription","namespace":"Microsoft.ClassicSubscription","resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2017-09-01","2017-06-01"],"defaultApiVersion":"2017-06-01","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Commerce","namespace":"Microsoft.Commerce","resourceTypes":[{"resourceType":"UsageAggregates","locations":[],"apiVersions":["2015-06-01-preview","2015-03-31"],"capabilities":"None"},{"resourceType":"RateCard","locations":[],"apiVersions":["2016-08-31-preview","2015-06-01-preview","2015-05-15"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2015-06-01-preview","2015-03-31"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ConnectedCache","namespace":"Microsoft.ConnectedCache","authorizations":[],"resourceTypes":[{"resourceType":"CacheNodes","locations":["West + West","Korea Central","Korea South","North Central US","North Europe","South + Central US","Southeast Asia","South India","South Africa North","UK South","UK + West","West US","East US","Central US","East Asia","West Europe","West Central + US","West US 2","East US 2","East US 2 EUAP"],"apiVersions":["2019-05-10-preview"],"capabilities":"None"},{"resourceType":"sqlServerRegistrations/sqlServers","locations":["Australia + East","Australia Southeast","Canada Central","France Central","Japan East","Japan + West","Korea Central","Korea South","North Central US","North Europe","South + Central US","Southeast Asia","South India","South Africa North","UK South","UK + West","West US","East US","Central US","East Asia","West Europe","West Central + US","West US 2","East US 2","East US 2 EUAP"],"apiVersions":["2019-05-10-preview"],"defaultApiVersion":"2019-05-10-preview","capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.AzureStack","namespace":"Microsoft.AzureStack","resourceTypes":[{"resourceType":"operations","locations":["Global"],"apiVersions":["2017-06-01"],"capabilities":"None"},{"resourceType":"registrations","locations":["West + Central US","Global"],"apiVersions":["2020-06-01-preview","2017-06-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"registrations/products","locations":["West + Central US","Global"],"apiVersions":["2017-06-01","2016-01-01"],"capabilities":"None"},{"resourceType":"registrations/customerSubscriptions","locations":["West + Central US","Global"],"apiVersions":["2017-06-01"],"capabilities":"None"},{"resourceType":"cloudManifestFiles","locations":["Global"],"apiVersions":["2017-06-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.BareMetalInfrastructure","namespace":"Microsoft.BareMetalInfrastructure","authorization":{"applicationId":"cc5476ec-3074-44d1-8461-711f5d9b0e39","roleDefinitionId":"4a10987e-dbcf-4c3d-8e3d-7ddcd9c771c2","managedByRoleDefinitionId":"9e3af657-a8ff-583c-a75c-2fe7c4bcb635"},"resourceTypes":[{"resourceType":"bareMetalInstances","locations":["West + US","West US 2","East US","West Europe","North Europe","Japan East","Australia + East","Australia Southeast","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-06-preview"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2020-08-06-preview"],"capabilities":"None"},{"resourceType":"locations/operationsStatus","locations":["West + US","West US 2","East US","West Europe","North Europe","Japan East","Australia + East","Australia Southeast","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-06-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["West + US","West US 2","East US","West Europe","North Europe","Japan East","Australia + East","Australia Southeast","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-06-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Billing","namespace":"Microsoft.Billing","authorizations":[{"applicationId":"80dbdb39-4f33-4799-8b6f-711b5e3e61b6","roleDefinitionId":"acdc79db-513f-461d-a542-61908d543bdc"}],"resourceTypes":[{"resourceType":"billingPeriods","locations":[],"apiVersions":["2018-03-01-preview","2017-04-24-preview"],"capabilities":"SupportsExtension"},{"resourceType":"invoices","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview","2018-03-01-preview","2017-04-24-preview","2017-02-27-preview"],"capabilities":"None"},{"resourceType":"enrollmentAccounts","locations":[],"apiVersions":["2018-03-01-preview"],"capabilities":"None"},{"resourceType":"billingRoleDefinitions","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"billingRoleAssignments","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"createBillingRoleAssignment","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"billingAccounts/createBillingRoleAssignment","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/createBillingRoleAssignment","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoiceSections/createBillingRoleAssignment","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingPermissions","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"billingAccounts/billingRoleDefinitions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingRoleAssignments","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingPermissions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview","2018-06-30","2018-05-31"],"capabilities":"None"},{"resourceType":"billingAccounts/operationResults","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/billingRoleDefinitions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/billingRoleAssignments","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/billingPermissions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/customers","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/customers","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/instructions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/customers/billingSubscriptions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/customers/products","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/customers/transactions","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoiceSections","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoiceSections/billingRoleDefinitions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoiceSections/billingRoleAssignments","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoiceSections/billingPermissions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/customers/billingPermissions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/elevate","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/createInvoiceSectionOperations","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/patchOperations","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/patchOperations","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/productMoveOperations","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/billingSubscriptionMoveOperations","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/listInvoiceSectionsWithCreateSubscriptionPermission","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/BillingProfiles/patchOperations","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"departments","locations":[],"apiVersions":["2018-06-30","2018-05-31"],"capabilities":"None"},{"resourceType":"billingAccounts/departments","locations":[],"apiVersions":["2019-10-01-preview","2018-06-30"],"capabilities":"None"},{"resourceType":"billingAccounts/departments/billingRoleDefinitions","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/departments/billingRoleAssignments","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/departments/billingPermissions","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/enrollmentAccounts","locations":[],"apiVersions":["2019-10-01-preview","2018-06-30"],"capabilities":"None"},{"resourceType":"billingAccounts/enrollmentAccounts/billingRoleDefinitions","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/enrollmentAccounts/billingRoleAssignments","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/enrollmentAccounts/billingPermissions","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/paymentMethods","locations":[],"apiVersions":["2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/availableBalance","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoices","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoices","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/transactions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/transactions","locations":[],"apiVersions":["2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/transactions","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoiceSections/transactions","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoices/transactions","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoices/transactions","locations":[],"apiVersions":["2020-05-01"],"capabilities":"None"},{"resourceType":"billingAccounts/billingSubscriptions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingSubscriptions/invoices","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/billingSubscriptions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/billingSubscriptions","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoiceSections/billingSubscriptions","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"operationStatus","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"operationResults","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/products","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoiceSections/products","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/products/updateAutoRenew","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoiceSections/products/updateAutoRenew","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/products","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/products","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview","2018-06-30","2018-03-01-preview","2017-04-24-preview","2017-02-27-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/initiateTransfer","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoiceSections/initiateTransfer","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/transfers","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoiceSections/transfers","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"transfers/acceptTransfer","locations":[],"apiVersions":["2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"transfers","locations":[],"apiVersions":["2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"transfers/declineTransfer","locations":[],"apiVersions":["2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"transfers/validateTransfer","locations":[],"apiVersions":["2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/customers/initiateTransfer","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/customers/transfers","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingProperty","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/policies","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/customers/policies","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoices/pricesheet","locations":[],"apiVersions":["2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/pricesheet","locations":[],"apiVersions":["2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/pricesheetDownloadOperations","locations":[],"apiVersions":["2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/billingSubscriptions/transfer","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/products/transfer","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/invoiceSections/products/transfer","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/invoiceSections/productTransfersResults","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"transfers/operationStatus","locations":[],"apiVersions":["2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/agreements","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/lineOfCredit","locations":[],"apiVersions":["2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/paymentMethods","locations":[],"apiVersions":["2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/reservations","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/reservations","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"billingAccounts/billingProfiles/validateDetachPaymentMethodEligibility","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"validateAddress","locations":[],"apiVersions":["2020-05-01","2019-10-01-preview","2018-11-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Bing","namespace":"Microsoft.Bing","authorizations":[{"applicationId":"c19490b5-c092-426f-b1a2-674b279d4975","roleDefinitionId":"7963cd60-9634-4abc-9a64-2482a3ef6373"}],"resourceTypes":[{"resourceType":"locations","locations":["global"],"apiVersions":["2020-06-10"],"capabilities":"None"},{"resourceType":"accounts/skus","locations":["global"],"apiVersions":["2020-06-10"],"capabilities":"None"},{"resourceType":"accounts/usages","locations":["global"],"apiVersions":["2020-06-10"],"capabilities":"None"},{"resourceType":"registeredSubscriptions","locations":["global"],"apiVersions":["2020-06-10"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-06-10"],"capabilities":"None"},{"resourceType":"locations/operationStatuses","locations":["West + US","East US","West Europe","Southeast Asia"],"apiVersions":["2020-06-10"],"capabilities":"None"},{"resourceType":"accounts","locations":["global"],"apiVersions":["2020-06-10"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.BingMaps","namespace":"Microsoft.BingMaps","resourceTypes":[{"resourceType":"mapApis","locations":["West + US"],"apiVersions":["2016-08-18","2015-07-02"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2016-08-18","2015-07-02"],"capabilities":"None"},{"resourceType":"listCommunicationPreference","locations":[],"apiVersions":["2016-08-18","2015-07-02"],"capabilities":"None"},{"resourceType":"updateCommunicationPreference","locations":[],"apiVersions":["2016-08-18","2015-07-02"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.BlockchainTokens","namespace":"Microsoft.BlockchainTokens","resourceTypes":[{"resourceType":"Operations","locations":["West + US"],"apiVersions":["2019-07-19-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Capacity","namespace":"Microsoft.Capacity","authorizations":[{"applicationId":"4d0ad6c7-f6c3-46d8-ab0d-1406d5e6c86b","roleDefinitionId":"FD9C0A9A-4DB9-4F41-8A61-98385DEB6E2D"},{"applicationId":"fbc197b7-9e9c-4f98-823f-93cb1cb554e6","roleDefinitionId":"941F67D2-083A-4B78-AF91-9B3B30B9B150"}],"resourceTypes":[{"resourceType":"resourceProviders","locations":[],"apiVersions":["2019-07-19-preview"],"capabilities":"None"},{"resourceType":"resources","locations":["South + Central US"],"apiVersions":["2019-04-01","2018-06-01","2017-11-01"],"capabilities":"None"},{"resourceType":"reservationOrders","locations":[],"apiVersions":["2020-06-01-beta","2020-06-01","2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"reservationOrders/reservations","locations":[],"apiVersions":["2020-06-01-beta","2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"listbenefits","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01"],"capabilities":"None"},{"resourceType":"reservations","locations":[],"apiVersions":["2020-06-01-beta","2020-06-01","2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"reservationOrders/reservations/revisions","locations":[],"apiVersions":["2020-06-01-beta","2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"catalogs","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"appliedReservations","locations":[],"apiVersions":["2020-06-01-beta","2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"checkOffers","locations":[],"apiVersions":["2020-06-01-beta","2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"checkScopes","locations":[],"apiVersions":["2020-06-01-beta","2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"calculatePrice","locations":[],"apiVersions":["2020-06-01-beta","2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"calculateExchange","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01"],"capabilities":"None"},{"resourceType":"exchange","locations":[],"apiVersions":["2020-06-01-beta","2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01"],"capabilities":"None"},{"resourceType":"reservationOrders/calculateRefund","locations":[],"apiVersions":["2020-06-01-beta","2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"reservationOrders/return","locations":[],"apiVersions":["2020-06-01-beta","2020-06-01","2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"reservationOrders/split","locations":[],"apiVersions":["2020-06-01-beta","2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"reservationOrders/merge","locations":[],"apiVersions":["2020-06-01-beta","2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"reservationOrders/swap","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01"],"capabilities":"None"},{"resourceType":"validateReservationOrder","locations":[],"apiVersions":["2020-06-01-beta","2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"reservationOrders/availableScopes","locations":[],"apiVersions":["2020-06-01-beta","2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01","2017-11-01-beta","2017-11-01"],"capabilities":"None"},{"resourceType":"reservationOrders/reservations/availableScopes","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01"],"capabilities":"None"},{"resourceType":"commercialReservationOrders","locations":[],"apiVersions":["2019-04-01-beta","2019-04-01","2018-06-01-beta","2018-06-01"],"capabilities":"None"},{"resourceType":"calculatePurchasePrice","locations":[],"apiVersions":["2019-06-01-privatepreview","2019-06-01-beta"],"capabilities":"None"},{"resourceType":"placePurchaseOrder","locations":[],"apiVersions":["2019-06-01-privatepreview","2019-06-01-beta"],"capabilities":"None"},{"resourceType":"checkPurchaseStatus","locations":[],"apiVersions":["2019-06-01-privatepreview","2019-06-01-beta"],"capabilities":"None"},{"resourceType":"ownReservations","locations":[],"apiVersions":["2020-06-01-beta","2020-06-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicInfrastructureMigrate","namespace":"Microsoft.ClassicInfrastructureMigrate","authorization":{"applicationId":"5e5abe2b-83cd-4786-826a-a05653ebb103","roleDefinitionId":"766c4d9b-ef83-4f73-8352-1450a506a69b"},"resourceTypes":[{"resourceType":"classicInfrastructureResources","locations":["East + Asia","Southeast Asia","East US","East US 2","West US","North Central US","South + Central US","Central US","North Europe","West Europe","Japan East","Japan + West","Brazil South","Australia East","Australia Southeast","Central India","West + India","South India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","France Central","France + South","Australia Central","Australia Central 2","Germany North","Germany + West Central","Norway East","Norway West","South Africa North","South Africa + West","Switzerland North","Switzerland West","UAE Central","UAE North","East + US 2 EUAP","Central US EUAP"],"apiVersions":["2015-06-15"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicSubscription","namespace":"Microsoft.ClassicSubscription","resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2017-09-01","2017-06-01"],"defaultApiVersion":"2017-06-01","capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Commerce","namespace":"Microsoft.Commerce","resourceTypes":[{"resourceType":"UsageAggregates","locations":[],"apiVersions":["2015-06-01-preview","2015-03-31"],"capabilities":"None"},{"resourceType":"RateCard","locations":[],"apiVersions":["2016-08-31-preview","2015-06-01-preview","2015-05-15"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2015-06-01-preview","2015-03-31"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Communication","namespace":"Microsoft.Communication","authorizations":[{"applicationId":"632ec9eb-fad7-4cbd-993a-e72973ba2acc","roleDefinitionId":"6c5c31b0-3a00-47ea-9555-f233670ba313"}],"resourceTypes":[{"resourceType":"Locations","locations":[],"apiVersions":["2020-08-20-rc","2020-08-20-preview","2020-08-20-beta"],"capabilities":"None"},{"resourceType":"CommunicationServices","locations":["Global"],"apiVersions":["2020-08-20-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"CommunicationServices/eventGridFilters","locations":["Global"],"apiVersions":["2020-08-20-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-08-20-rc","2020-08-20-preview","2020-08-20-beta"],"capabilities":"None"},{"resourceType":"registeredSubscriptions","locations":[],"apiVersions":["2020-08-20-preview"],"defaultApiVersion":"2020-08-20-preview","capabilities":"None"},{"resourceType":"Locations/OperationStatuses","locations":["West + US 2","North Europe","West US"],"apiVersions":["2020-08-20-rc","2020-08-20-preview","2020-08-20-beta"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["Global"],"apiVersions":["2020-08-20-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ConnectedCache","namespace":"Microsoft.ConnectedCache","authorizations":[],"resourceTypes":[{"resourceType":"CacheNodes","locations":["West US"],"apiVersions":["2019-12-04-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Consumption","namespace":"Microsoft.Consumption","authorizations":[{"applicationId":"c5b17a4f-cc6f-4649-9480-684280a2af3a","roleDefinitionId":"4a2e6ae9-2713-4cc9-a3b3-312899d687c3"}],"resourceTypes":[{"resourceType":"Forecasts","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-01-01","2018-10-01","2018-08-31","2018-06-30","2018-05-31"],"capabilities":"SupportsExtension"},{"resourceType":"AggregatedCost","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-01-01","2018-10-01","2018-08-31","2018-06-30"],"capabilities":"SupportsExtension"},{"resourceType":"tenants","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-01-01","2018-10-01"],"capabilities":"SupportsExtension"},{"resourceType":"ReservationRecommendations","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-01-01-preview","2019-01-01","2018-10-01","2018-08-31","2018-06-30","2018-03-31"],"capabilities":"SupportsExtension"},{"resourceType":"ReservationRecommendationDetails","locations":[],"apiVersions":["2019-10-01"],"capabilities":"SupportsExtension"},{"resourceType":"ReservationSummaries","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-01-01-preview","2019-01-01","2018-10-01","2018-08-31","2018-06-30","2018-03-31","2018-01-31","2017-11-30","2017-06-30-preview"],"capabilities":"SupportsExtension"},{"resourceType":"ReservationTransactions","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-01-01","2018-10-01","2018-08-31","2018-06-30","2018-05-31","2018-03-31","2018-01-31","2017-11-30","2017-06-30-preview"],"capabilities":"SupportsExtension"},{"resourceType":"Balances","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-01-01","2018-10-01","2018-08-31","2018-06-30","2018-05-31","2018-03-31","2018-01-31","2017-11-30","2017-06-30-preview"],"capabilities":"SupportsExtension"},{"resourceType":"Marketplaces","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-01-01","2018-10-01","2018-08-31","2018-06-30","2018-05-31","2018-03-31","2018-01-31"],"capabilities":"SupportsExtension"},{"resourceType":"Pricesheets","locations":[],"apiVersions":["2020-01-01-preview","2019-10-01","2019-05-01","2019-01-01","2018-10-01","2018-08-31","2018-06-30","2018-05-31","2018-03-31","2018-01-31","2017-11-30","2017-06-30-preview"],"capabilities":"SupportsExtension"},{"resourceType":"ReservationDetails","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-01-01-preview","2019-01-01","2018-10-01","2018-08-31","2018-06-30","2018-03-31","2018-01-31","2017-11-30","2017-06-30-preview"],"capabilities":"SupportsExtension"},{"resourceType":"Budgets","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-04-01-preview","2019-03-01-preview","2019-01-01-preview","2019-01-01","2018-12-01-preview","2018-10-01","2018-08-31","2018-06-30","2018-03-31","2018-01-31","2017-12-30-preview"],"capabilities":"SupportsExtension"},{"resourceType":"CostTags","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01","2018-10-01","2018-08-31","2018-06-30","2018-05-31","2018-03-31"],"capabilities":"SupportsExtension"},{"resourceType":"Tags","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01","2019-04-01-preview","2019-03-01-preview","2019-01-01","2018-12-01-preview","2018-10-01","2018-08-31","2018-08-01-preview","2018-06-30","2018-05-31","2018-03-31"],"capabilities":"SupportsExtension"},{"resourceType":"Terms","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-01-01","2018-10-01","2018-08-31","2018-06-30","2018-03-31","2018-01-31","2017-12-30-preview"],"capabilities":"SupportsExtension"},{"resourceType":"UsageDetails","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01-preview","2019-05-01","2019-04-01-preview","2019-01-01","2018-12-01-preview","2018-11-01-preview","2018-10-01","2018-08-31","2018-06-30","2018-05-31","2018-03-31","2018-01-31","2017-11-30","2017-06-30-preview","2017-04-24-preview"],"capabilities":"SupportsExtension"},{"resourceType":"Charges","locations":[],"apiVersions":["2019-10-01","2019-05-01-preview","2019-05-01","2019-01-01","2018-11-01-preview","2018-10-01","2018-08-31"],"capabilities":"SupportsExtension"},{"resourceType":"credits","locations":[],"apiVersions":["2019-10-01","2018-11-01-preview","2018-10-01","2018-08-31"],"capabilities":"SupportsExtension"},{"resourceType":"events","locations":[],"apiVersions":["2019-10-01","2018-11-01-preview","2018-10-01","2018-08-31"],"capabilities":"SupportsExtension"},{"resourceType":"lots","locations":[],"apiVersions":["2019-10-01","2018-11-01-preview","2018-10-01","2018-08-31"],"capabilities":"SupportsExtension"},{"resourceType":"products","locations":[],"apiVersions":["2019-10-01","2018-10-01","2018-08-31"],"capabilities":"SupportsExtension"},{"resourceType":"OperationStatus","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01-preview","2019-05-01","2019-04-01-preview","2019-01-01","2018-11-01-preview","2018-10-01","2018-08-31"],"capabilities":"SupportsExtension"},{"resourceType":"OperationResults","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01-preview","2019-05-01","2019-04-01-preview","2019-01-01","2018-11-01-preview","2018-10-01","2018-08-31"],"capabilities":"SupportsExtension"},{"resourceType":"Operations","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-01-01","2018-11-01-preview","2018-10-01","2018-08-31","2018-06-30","2018-05-31","2018-03-31","2018-01-31","2017-11-30","2017-06-30-preview","2017-04-24-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.CostManagement","namespace":"Microsoft.CostManagement","authorizations":[{"applicationId":"3184af01-7a88-49e0-8b55-8ecdce0aa950"}],"resourceTypes":[{"resourceType":"Connectors","locations":["West - US"],"apiVersions":["2018-08-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"CloudConnectors","locations":[],"apiVersions":["2019-03-01-preview"],"capabilities":"None"},{"resourceType":"ExternalBillingAccounts","locations":[],"apiVersions":["2019-03-01-preview"],"capabilities":"None"},{"resourceType":"ExternalBillingAccounts/Dimensions","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01-preview","2019-04-01-preview","2019-03-01-preview"],"capabilities":"None"},{"resourceType":"ExternalBillingAccounts/Query","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01-preview","2019-04-01-preview","2019-03-01-preview"],"capabilities":"None"},{"resourceType":"ExternalSubscriptions/Dimensions","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01-preview","2019-04-01-preview","2019-03-01-preview"],"capabilities":"None"},{"resourceType":"ExternalSubscriptions/Query","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01-preview","2019-04-01-preview","2019-03-01-preview"],"capabilities":"None"},{"resourceType":"ExternalSubscriptions","locations":[],"apiVersions":["2019-03-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"Forecast","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01-preview","2019-04-01-preview","2019-03-01-preview","2018-12-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"ExternalSubscriptions/Forecast","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01-preview","2019-04-01-preview","2019-03-01-preview","2018-12-01-preview"],"capabilities":"None"},{"resourceType":"ExternalBillingAccounts/Forecast","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01-preview","2019-04-01-preview","2019-03-01-preview","2018-12-01-preview"],"capabilities":"None"},{"resourceType":"Settings","locations":[],"apiVersions":["2019-01-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2019-10-01","2019-01-01","2018-10-01","2018-08-31","2018-08-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"register","locations":[],"apiVersions":["2019-03-01-preview","2017-10-01-preview"],"capabilities":"None"},{"resourceType":"Query","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01-preview","2019-04-01-preview","2019-03-01-preview","2019-01-01","2018-12-01-preview","2018-10-01-preview","2018-08-31","2018-08-01-preview","2018-05-31"],"capabilities":"SupportsExtension"},{"resourceType":"Dimensions","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01-preview","2019-04-01-preview","2019-03-01-preview","2019-01-01","2018-12-01-preview","2018-10-01-preview","2018-08-31","2018-08-01-preview","2018-05-31"],"capabilities":"SupportsExtension"},{"resourceType":"Budgets","locations":[],"apiVersions":["2019-10-01","2019-04-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"ExternalSubscriptions/Alerts","locations":[],"apiVersions":["2019-10-01","2018-08-01-preview"],"capabilities":"None"},{"resourceType":"ExternalBillingAccounts/Alerts","locations":[],"apiVersions":["2019-10-01","2018-08-01-preview"],"capabilities":"None"},{"resourceType":"Alerts","locations":[],"apiVersions":["2019-10-01","2018-08-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"showbackRules","locations":[],"apiVersions":["2019-03-01-preview","2019-02-03-alpha","2019-02-02-alpha","2019-02-01-alpha"],"capabilities":"SupportsExtension"},{"resourceType":"costAllocationRules","locations":[],"apiVersions":["2020-03-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"Exports","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-09-01","2019-01-01-preview","2019-01-01"],"capabilities":"SupportsExtension"},{"resourceType":"Reports","locations":[],"apiVersions":["2018-12-01-preview","2018-08-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"Reportconfigs","locations":[],"apiVersions":["2018-05-31"],"capabilities":"SupportsExtension"},{"resourceType":"BillingAccounts","locations":[],"apiVersions":["2018-03-31"],"capabilities":"None"},{"resourceType":"Departments","locations":[],"apiVersions":["2018-03-31"],"capabilities":"None"},{"resourceType":"EnrollmentAccounts","locations":[],"apiVersions":["2018-03-31"],"capabilities":"None"},{"resourceType":"Views","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-04-01-preview"],"capabilities":"SupportsExtension"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.CostManagementExports","namespace":"Microsoft.CostManagementExports","authorizations":[{"applicationId":"e5408ad0-c4e2-43aa-b6f2-3b4951286d99","roleDefinitionId":"5e4888b3-2747-4e5b-9897-ec0865b91bcf"}],"resourceTypes":[{"resourceType":"Operations","locations":[],"apiVersions":["2019-04-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.CustomerLockbox","namespace":"Microsoft.CustomerLockbox","authorizations":[{"applicationId":"a0551534-cfc9-4e1f-9a7a-65093b32bb38"},{"applicationId":"01fc33a7-78ba-4d2f-a4b7-768e336e890e"}],"resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2018-02-28-preview"],"capabilities":"None"},{"resourceType":"requests","locations":[],"apiVersions":["2018-02-28-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DataCatalog","namespace":"Microsoft.DataCatalog","authorization":{"applicationId":"213f5f78-fb30-46c7-9e98-91c720a1c026","roleDefinitionId":"D55E2225-A6AB-481C-A5BE-1B7687C293FA"},"resourceTypes":[{"resourceType":"catalogs","locations":["East + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Consumption","namespace":"Microsoft.Consumption","authorizations":[{"applicationId":"c5b17a4f-cc6f-4649-9480-684280a2af3a","roleDefinitionId":"4a2e6ae9-2713-4cc9-a3b3-312899d687c3"}],"resourceTypes":[{"resourceType":"Forecasts","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-01-01","2018-10-01","2018-08-31","2018-06-30","2018-05-31"],"capabilities":"SupportsExtension"},{"resourceType":"AggregatedCost","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-01-01","2018-10-01","2018-08-31","2018-06-30"],"capabilities":"SupportsExtension"},{"resourceType":"tenants","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-01-01","2018-10-01"],"capabilities":"SupportsExtension"},{"resourceType":"ReservationRecommendations","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-01-01-preview","2019-01-01","2018-10-01","2018-08-31","2018-06-30","2018-03-31"],"capabilities":"SupportsExtension"},{"resourceType":"ReservationRecommendationDetails","locations":[],"apiVersions":["2019-10-01"],"capabilities":"SupportsExtension"},{"resourceType":"ReservationSummaries","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-01-01-preview","2019-01-01","2018-10-01","2018-08-31","2018-06-30","2018-03-31","2018-01-31","2017-11-30","2017-06-30-preview"],"capabilities":"SupportsExtension"},{"resourceType":"ReservationTransactions","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-01-01","2018-10-01","2018-08-31","2018-06-30","2018-05-31","2018-03-31","2018-01-31","2017-11-30","2017-06-30-preview"],"capabilities":"SupportsExtension"},{"resourceType":"Balances","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-01-01","2018-10-01","2018-08-31","2018-06-30","2018-05-31","2018-03-31","2018-01-31","2017-11-30","2017-06-30-preview"],"capabilities":"SupportsExtension"},{"resourceType":"Marketplaces","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-01-01","2018-10-01","2018-08-31","2018-06-30","2018-05-31","2018-03-31","2018-01-31"],"capabilities":"SupportsExtension"},{"resourceType":"Pricesheets","locations":[],"apiVersions":["2020-01-01-preview","2019-10-01","2019-05-01","2019-01-01","2018-10-01","2018-08-31","2018-06-30","2018-05-31","2018-03-31","2018-01-31","2017-11-30","2017-06-30-preview"],"capabilities":"SupportsExtension"},{"resourceType":"ReservationDetails","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-01-01-preview","2019-01-01","2018-10-01","2018-08-31","2018-06-30","2018-03-31","2018-01-31","2017-11-30","2017-06-30-preview"],"capabilities":"SupportsExtension"},{"resourceType":"Budgets","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-04-01-preview","2019-03-01-preview","2019-01-01-preview","2019-01-01","2018-12-01-preview","2018-10-01","2018-08-31","2018-06-30","2018-03-31","2018-01-31","2017-12-30-preview"],"capabilities":"SupportsExtension"},{"resourceType":"CostTags","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01","2018-10-01","2018-08-31","2018-06-30","2018-05-31","2018-03-31"],"capabilities":"SupportsExtension"},{"resourceType":"Tags","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01","2019-04-01-preview","2019-03-01-preview","2019-01-01","2018-12-01-preview","2018-10-01","2018-08-31","2018-08-01-preview","2018-06-30","2018-05-31","2018-03-31"],"capabilities":"SupportsExtension"},{"resourceType":"Terms","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-01-01","2018-10-01","2018-08-31","2018-06-30","2018-03-31","2018-01-31","2017-12-30-preview"],"capabilities":"SupportsExtension"},{"resourceType":"UsageDetails","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01-preview","2019-05-01","2019-04-01-preview","2019-01-01","2018-12-01-preview","2018-11-01-preview","2018-10-01","2018-08-31","2018-06-30","2018-05-31","2018-03-31","2018-01-31","2017-11-30","2017-06-30-preview","2017-04-24-preview"],"capabilities":"SupportsExtension"},{"resourceType":"Charges","locations":[],"apiVersions":["2019-10-01","2019-05-01-preview","2019-05-01","2019-01-01","2018-11-01-preview","2018-10-01","2018-08-31"],"capabilities":"SupportsExtension"},{"resourceType":"credits","locations":[],"apiVersions":["2019-10-01","2018-11-01-preview","2018-10-01","2018-08-31"],"capabilities":"SupportsExtension"},{"resourceType":"events","locations":[],"apiVersions":["2019-10-01","2018-11-01-preview","2018-10-01","2018-08-31"],"capabilities":"SupportsExtension"},{"resourceType":"lots","locations":[],"apiVersions":["2019-10-01","2018-11-01-preview","2018-10-01","2018-08-31"],"capabilities":"SupportsExtension"},{"resourceType":"products","locations":[],"apiVersions":["2019-10-01","2018-10-01","2018-08-31"],"capabilities":"SupportsExtension"},{"resourceType":"OperationStatus","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01-preview","2019-05-01","2019-04-01-preview","2019-01-01","2018-11-01-preview","2018-10-01","2018-08-31"],"capabilities":"SupportsExtension"},{"resourceType":"OperationResults","locations":[],"apiVersions":["2019-11-01","2019-10-01","2019-05-01-preview","2019-05-01","2019-04-01-preview","2019-01-01","2018-11-01-preview","2018-10-01","2018-08-31"],"capabilities":"SupportsExtension"},{"resourceType":"Operations","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-01-01","2018-11-01-preview","2018-10-01","2018-08-31","2018-06-30","2018-05-31","2018-03-31","2018-01-31","2017-11-30","2017-06-30-preview","2017-04-24-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.CustomerLockbox","namespace":"Microsoft.CustomerLockbox","authorizations":[{"applicationId":"a0551534-cfc9-4e1f-9a7a-65093b32bb38","roleDefinitionId":"114bcfb6-5524-4d80-948a-d8a9937bc3e5"},{"applicationId":"01fc33a7-78ba-4d2f-a4b7-768e336e890e"}],"resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2018-02-28-preview"],"capabilities":"None"},{"resourceType":"requests","locations":[],"apiVersions":["2018-02-28-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.D365CustomerInsights","namespace":"Microsoft.D365CustomerInsights","resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2020-06-10-privatepreview","2020-06-10-preview","2020-06-10-beta"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DataBoxEdge","namespace":"Microsoft.DataBoxEdge","authorizations":[{"applicationId":"2368d027-f996-4edb-bf48-928f98f2ab8c"}],"resourceTypes":[{"resourceType":"DataBoxEdgeDevices","locations":["East + US","West Europe","Southeast Asia","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-09-01-preview","2020-09-01","2020-07-01-preview","2020-07-01","2020-06-01","2020-05-01-preview","2020-01-01","2019-08-01","2019-07-01","2019-03-01","2018-07-01","2017-09-01"],"defaultApiVersion":"2020-09-01","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"DataBoxEdgeDevices/checkNameAvailability","locations":["East + US","West Europe","Southeast Asia","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-09-01-preview","2020-09-01","2020-07-01-preview","2020-07-01","2020-06-01","2020-05-01-preview","2020-01-01","2019-08-01","2019-07-01","2019-03-01","2018-07-01","2017-09-01"],"capabilities":"None"},{"resourceType":"operations","locations":["East + US 2 EUAP"],"apiVersions":["2020-09-01-preview","2020-09-01","2020-07-01-preview","2020-07-01","2020-06-01","2020-05-01-preview","2020-01-01","2019-08-01","2019-07-01","2019-03-01","2018-07-01","2017-09-01"],"capabilities":"None"},{"resourceType":"availableSkus","locations":[],"apiVersions":["2020-09-01-preview","2020-09-01","2020-07-01-preview","2020-05-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DataCatalog","namespace":"Microsoft.DataCatalog","authorization":{"applicationId":"213f5f78-fb30-46c7-9e98-91c720a1c026","roleDefinitionId":"D55E2225-A6AB-481C-A5BE-1B7687C293FA"},"resourceTypes":[{"resourceType":"catalogs","locations":["East US","West US","Australia East","West Europe","North Europe","Southeast Asia","West Central US"],"apiVersions":["2016-03-30","2015-07-01-preview"],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"checkNameAvailability","locations":["West - Europe"],"apiVersions":["2018-12-01-preview","2016-03-30","2015-07-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["West - Europe"],"apiVersions":["2018-12-01-preview","2016-03-30","2015-07-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2016-03-30","2015-07-01-preview"],"capabilities":"None"},{"resourceType":"locations/jobs","locations":["East + Europe"],"apiVersions":["2016-03-30","2015-07-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["West + Europe"],"apiVersions":["2016-03-30","2015-07-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2016-03-30","2015-07-01-preview"],"capabilities":"None"},{"resourceType":"locations/jobs","locations":["East US","West US","Australia East","West Europe","North Europe","Southeast Asia","West - Central US"],"apiVersions":["2016-03-30","2015-07-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["East - US","West Europe","North Europe"],"apiVersions":["2018-12-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DataProtection","namespace":"Microsoft.DataProtection","resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2020-01-01-alpha"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-01-01-alpha"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DeploymentManager","namespace":"Microsoft.DeploymentManager","authorizations":[{"applicationId":"5b306cba-9c71-49db-96c3-d17ca2379c4d"}],"resourceTypes":[{"resourceType":"artifactSources","locations":["Central - US","East US","East US 2","West US","West US 2","West Central US","North Central - US","South Central US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Australia East","Australia Southeast","Australia - Central","Australia Central 2","Brazil South","South India","Central India","West - India","Canada Central","Canada East","UK South","UK West","Korea Central","Korea - South","France Central","France South","South Africa North","South Africa - West"],"apiVersions":["2019-11-01-preview","2018-09-01-preview"],"defaultApiVersion":"2018-09-01-preview","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-09-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"serviceTopologies","locations":["Central - US","East US","East US 2","West US","West US 2","West Central US","North Central - US","South Central US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Australia East","Australia Southeast","Australia - Central","Australia Central 2","Brazil South","South India","Central India","West - India","Canada Central","Canada East","UK South","UK West","Korea Central","Korea - South","France Central","France South","South Africa North","South Africa - West"],"apiVersions":["2019-11-01-preview","2018-09-01-preview"],"defaultApiVersion":"2018-09-01-preview","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-09-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"serviceTopologies/services","locations":["Central - US","East US","East US 2","West US","West US 2","West Central US","North Central - US","South Central US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Australia East","Australia Southeast","Australia - Central","Australia Central 2","Brazil South","South India","Central India","West - India","Canada Central","Canada East","UK South","UK West","Korea Central","Korea - South","France Central","France South","South Africa North","South Africa - West"],"apiVersions":["2019-11-01-preview","2018-09-01-preview"],"defaultApiVersion":"2018-09-01-preview","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-09-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"serviceTopologies/services/serviceUnits","locations":["Central - US","East US","East US 2","West US","West US 2","West Central US","North Central - US","South Central US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Australia East","Australia Southeast","Australia - Central","Australia Central 2","Brazil South","South India","Central India","West - India","Canada Central","Canada East","UK South","UK West","Korea Central","Korea - South","France Central","France South","South Africa North","South Africa - West"],"apiVersions":["2019-11-01-preview","2018-09-01-preview"],"defaultApiVersion":"2018-09-01-preview","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-09-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"steps","locations":["Central - US","East US","East US 2","West US","West US 2","West Central US","North Central - US","South Central US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Australia East","Australia Southeast","Australia - Central","Australia Central 2","Brazil South","South India","Central India","West - India","Canada Central","Canada East","UK South","UK West","Korea Central","Korea - South","France Central","France South","South Africa North","South Africa - West"],"apiVersions":["2019-11-01-preview","2018-09-01-preview"],"defaultApiVersion":"2018-09-01-preview","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-09-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"rollouts","locations":["Central - US","East US","East US 2","West US","West US 2","West Central US","North Central - US","South Central US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Australia East","Australia Southeast","Australia - Central","Australia Central 2","Brazil South","South India","Central India","West - India","Canada Central","Canada East","UK South","UK West","Korea Central","Korea - South","France Central","France South","South Africa North","South Africa - West"],"apiVersions":["2019-11-01-preview","2018-09-01-preview"],"defaultApiVersion":"2018-09-01-preview","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-09-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"operationResults","locations":["global"],"apiVersions":["2019-11-01-preview","2018-09-01-preview"],"defaultApiVersion":"2018-09-01-preview","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-09-01-preview"}],"capabilities":"None"},{"resourceType":"operations","locations":["global"],"apiVersions":["2019-11-01-preview","2018-09-01-preview"],"defaultApiVersion":"2018-09-01-preview","apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2018-09-01-preview"}],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DigitalTwins","namespace":"Microsoft.DigitalTwins","authorizations":[{"applicationId":"0b07f429-9f4b-4714-9392-cc5e8e80c8b0"},{"applicationId":"c115998b-3d59-49b4-b55b-042a9ba1dbfe","roleDefinitionId":"07af60d1-cd6d-4ad4-9b56-ece6c78a3fe1"}],"resourceTypes":[{"resourceType":"locations","locations":[],"apiVersions":["2020-03-01-preview"],"defaultApiVersion":"2020-03-01-preview","capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["West - Central US","West US 2","North Europe"],"apiVersions":["2020-03-01-preview"],"capabilities":"None"},{"resourceType":"digitalTwinsInstances","locations":["West - Central US","West US 2","North Europe"],"apiVersions":["2020-03-01-preview"],"defaultApiVersion":"2020-03-01-preview","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"digitalTwinsInstances/operationResults","locations":["West - Central US","West US 2","North Europe"],"apiVersions":["2020-03-01-preview"],"defaultApiVersion":"2020-03-01-preview","capabilities":"None"},{"resourceType":"digitalTwinsInstances/endpoints","locations":["West - Central US","West US 2","North Europe"],"apiVersions":["2020-03-01-preview"],"defaultApiVersion":"2020-03-01-preview","capabilities":"None"},{"resourceType":"operations","locations":["West - Central US"],"apiVersions":["2020-03-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DomainRegistration","namespace":"Microsoft.DomainRegistration","authorization":{"applicationId":"ea2f600a-4980-45b7-89bf-d34da487bda1","roleDefinitionId":"54d7f2e3-5040-48a7-ae90-eebf629cfa0b"},"resourceTypes":[{"resourceType":"domains","locations":["global"],"apiVersions":["2019-08-01","2018-02-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2018-02-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"domains/domainOwnershipIdentifiers","locations":["global"],"apiVersions":["2019-08-01","2018-02-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2018-02-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"topLevelDomains","locations":["global"],"apiVersions":["2019-08-01","2018-02-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2018-02-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"checkDomainAvailability","locations":["global"],"apiVersions":["2019-08-01","2018-02-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2018-02-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"listDomainRecommendations","locations":["global"],"apiVersions":["2019-08-01","2018-02-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2018-02-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"validateDomainRegistrationInformation","locations":["global"],"apiVersions":["2019-08-01","2018-02-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2018-02-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"generateSsoRequest","locations":["global"],"apiVersions":["2019-08-01","2018-02-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2018-02-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"operations","locations":["global"],"apiVersions":["2019-08-01","2018-02-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2018-02-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.EnterpriseKnowledgeGraph","namespace":"Microsoft.EnterpriseKnowledgeGraph","resourceTypes":[{"resourceType":"services","locations":["East + Central US"],"apiVersions":["2016-03-30","2015-07-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DataCollaboration","namespace":"Microsoft.DataCollaboration","authorization":{"applicationId":"2cc451ba-a8ec-496f-bdff-591f5ae2876c","roleDefinitionId":"fdf757e9-19df-4152-a1ae-5e719161cd12"},"resourceTypes":[{"resourceType":"listinvitations","locations":["East + US","Australia East","East US 2","West Europe"],"apiVersions":["2020-05-04-preview"],"capabilities":"None"},{"resourceType":"locations","locations":["Australia + East","Central US EUAP"],"apiVersions":["2020-05-04-preview"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["East + US","Australia East"],"apiVersions":["2020-05-04-preview"],"capabilities":"None"},{"resourceType":"locations/consumerInvitations/reject","locations":["East + US","Australia East","East US 2","West Europe"],"apiVersions":["2020-05-04-preview"],"capabilities":"None"},{"resourceType":"locations/consumerInvitations","locations":["East + US","Australia East","East US 2","West Europe"],"apiVersions":["2020-05-04-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["Australia + East"],"apiVersions":["2020-05-04-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DataProtection","namespace":"Microsoft.DataProtection","resourceTypes":[{"resourceType":"BackupVaults","locations":["South + Central US","East US","East US 2","West US","UK South","Australia Central","Australia + East","Brazil South","Canada Central","Central US","East Asia","Germany West + Central","Central India","Japan East","Japan West","Korea Central","Korea + South","North Europe","Southeast Asia","Switzerland North","UAE North","UK + West","West Central US","West Europe","West US 2","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2020-01-01-alpha"],"capabilities":"SystemAssignedResourceIdentity, + SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":["East + US 2 EUAP"],"apiVersions":["2020-01-01-alpha"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-01-01-alpha"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["South + Central US","East US","East US 2","West US","UK South","Australia Central","Australia + East","Brazil South","Canada Central","Central US","East Asia","Germany West + Central","Central India","Japan East","Japan West","Korea Central","Korea + South","North Europe","Southeast Asia","Switzerland North","UAE North","UK + West","West Central US","West Europe","West US 2","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2020-01-01-alpha"],"capabilities":"None"},{"resourceType":"locations/operationStatus","locations":["South + Central US","East US","East US 2","West US","UK South","Australia Central","Australia + East","Brazil South","Canada Central","Central US","East Asia","Germany West + Central","Central India","Japan East","Japan West","Korea Central","Korea + South","North Europe","Southeast Asia","Switzerland North","UAE North","UK + West","West Central US","West Europe","West US 2","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2020-01-01-alpha"],"capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["South + Central US","East US","East US 2","West US","UK South","Australia Central","Australia + East","Brazil South","Canada Central","Central US","East Asia","Germany West + Central","Central India","Japan East","Japan West","Korea Central","Korea + South","North Europe","Southeast Asia","Switzerland North","UAE North","UK + West","West Central US","West Europe","West US 2","Central US EUAP","East + US 2 EUAP"],"apiVersions":["2020-01-01-alpha"],"capabilities":"None"},{"resourceType":"ResourceOperationGateKeepers","locations":["Central + US EUAP","East US 2 EUAP"],"apiVersions":["2020-01-01-alpha"],"capabilities":"SupportsTags, + SupportsLocation"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DeviceUpdate","namespace":"Microsoft.DeviceUpdate","authorizations":[{"applicationId":"6ee392c4-d339-4083-b04d-6b7947c6cf78","roleDefinitionId":"a7c9caf5-ee6d-4cdd-94e0-917c34a027ec"}],"resourceTypes":[{"resourceType":"locations","locations":[],"apiVersions":["2020-03-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationstatuses","locations":["East + US 2 EUAP","West US","West US 2","North Europe","Southeast Asia"],"apiVersions":["2020-03-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-03-01-preview"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2020-03-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Diagnostics","namespace":"Microsoft.Diagnostics","authorizations":[{"applicationId":"5b534afd-fdc0-4b38-a77f-af25442e3149","roleDefinitionId":"27d9fedd-5b4c-44b5-a9da-724fa33445c8"}],"resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2020-07-01-privatepreview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.DigitalTwins","namespace":"Microsoft.DigitalTwins","authorizations":[{"applicationId":"0b07f429-9f4b-4714-9392-cc5e8e80c8b0"},{"applicationId":"91ff567f-bb4f-4719-91d7-d983057bc0d6","roleDefinitionId":"fa0ab6ed-58e5-4f2f-81af-0b9ffc364bdc"},{"applicationId":"c115998b-3d59-49b4-b55b-042a9ba1dbfe","roleDefinitionId":"07af60d1-cd6d-4ad4-9b56-ece6c78a3fe1"}],"resourceTypes":[{"resourceType":"locations","locations":[],"apiVersions":["2020-10-31","2020-03-01-preview"],"defaultApiVersion":"2020-10-31","capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["West + Central US","West US 2","North Europe","Australia East","West Europe","East + US","South Central US","Southeast Asia","UK South","East US 2"],"apiVersions":["2020-10-31","2020-03-01-preview"],"capabilities":"None"},{"resourceType":"digitalTwinsInstances","locations":["West + Central US","West US 2","North Europe","Australia East","West Europe","East + US","South Central US","Southeast Asia","UK South","East US 2"],"apiVersions":["2020-10-31","2020-03-01-preview"],"defaultApiVersion":"2020-10-31","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"digitalTwinsInstances/operationResults","locations":["West + Central US","West US 2","North Europe","Australia East","West Europe","East + US","South Central US","Southeast Asia","UK South","East US 2"],"apiVersions":["2020-10-31","2020-03-01-preview"],"defaultApiVersion":"2020-10-31","capabilities":"None"},{"resourceType":"locations/operationResults","locations":["West + Central US","West US 2","North Europe","Australia East","West Europe","East + US","South Central US","Southeast Asia","UK South","East US 2"],"apiVersions":["2020-10-31","2020-03-01-preview"],"defaultApiVersion":"2020-10-31","capabilities":"None"},{"resourceType":"digitalTwinsInstances/endpoints","locations":["West + Central US","West US 2","North Europe","Australia East","West Europe","East + US","South Central US","Southeast Asia","UK South","East US 2"],"apiVersions":["2020-10-31","2020-03-01-preview"],"defaultApiVersion":"2020-10-31","capabilities":"None"},{"resourceType":"operations","locations":["West + Central US"],"apiVersions":["2020-10-31","2020-03-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.EnterpriseKnowledgeGraph","namespace":"Microsoft.EnterpriseKnowledgeGraph","resourceTypes":[{"resourceType":"services","locations":["East Asia","Southeast Asia","East US","East US 2","West US 2","West US","North - Europe","West Europe"],"apiVersions":["2018-12-03"],"capabilities":"CrossResourceGroupResourceMove, + Europe","West Europe","Central US EUAP"],"apiVersions":["2018-12-03"],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":["East Asia","Southeast Asia","East US","East US 2","West US 2","West US","North - Europe","West Europe"],"apiVersions":["2018-12-03"],"capabilities":"None"},{"resourceType":"locations","locations":["East + Europe","West Europe","Central US EUAP"],"apiVersions":["2018-12-03"],"capabilities":"None"},{"resourceType":"locations","locations":["East Asia","Southeast Asia","East US","East US 2","West US 2","West US","North - Europe","West Europe"],"apiVersions":["2018-12-03"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["East + Europe","West Europe","Central US EUAP"],"apiVersions":["2018-12-03"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["East Asia","Southeast Asia","East US","East US 2","West US 2","West US","North - Europe","West Europe"],"apiVersions":["2018-12-03"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Experimentation","namespace":"Microsoft.Experimentation","authorizations":[{"applicationId":"e00d2f8a-f6c8-46e4-b379-e66082e28ca8","roleDefinitionId":"d3a360d9-17f9-410e-9465-5c914c8cf570","managedByRoleDefinitionId":"fa096ccd-4e8f-49de-9594-64449b3ac6b3"}],"resourceTypes":[{"resourceType":"locations","locations":[],"apiVersions":["2019-11-01-preview"],"capabilities":"None"},{"resourceType":"locations/operations","locations":["West - US 2"],"apiVersions":["2019-11-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Falcon","namespace":"Microsoft.Falcon","authorizations":[],"resourceTypes":[{"resourceType":"namespaces","locations":["West + Europe","West Europe","Central US EUAP"],"apiVersions":["2018-12-03"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Experimentation","namespace":"Microsoft.Experimentation","authorizations":[{"applicationId":"e00d2f8a-f6c8-46e4-b379-e66082e28ca8","roleDefinitionId":"d3a360d9-17f9-410e-9465-5c914c8cf570","managedByRoleDefinitionId":"fa096ccd-4e8f-49de-9594-64449b3ac6b3"},{"applicationId":"b998f6f8-79d0-4b6a-8c25-5791dbe49ad0","roleDefinitionId":"69e94dda-0a4a-440b-b24e-21880bdd5174"}],"resourceTypes":[{"resourceType":"locations","locations":[],"apiVersions":["2019-11-01-preview"],"capabilities":"None"},{"resourceType":"locations/operations","locations":["West + US 2"],"apiVersions":["2019-11-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ExtendedLocation","namespace":"Microsoft.ExtendedLocation","authorizations":[{"applicationId":"bc313c14-388c-4e7d-a58e-70017303ee3b","roleDefinitionId":"a775b938-2819-4dd0-8067-01f6e3b06392"}],"resourceTypes":[{"resourceType":"locations","locations":[],"apiVersions":["2020-07-15-privatepreview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-07-15-privatepreview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Falcon","namespace":"Microsoft.Falcon","authorizations":[],"resourceTypes":[{"resourceType":"namespaces","locations":["West US"],"apiVersions":["2020-01-20-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features","namespace":"Microsoft.Features","resourceTypes":[{"resourceType":"features","locations":[],"apiVersions":["2015-12-01","2014-08-01-preview"],"capabilities":"None"},{"resourceType":"providers","locations":[],"apiVersions":["2015-12-01","2014-08-01-preview"],"capabilities":"None"},{"resourceType":"featureProviders","locations":[],"apiVersions":["2020-01-01"],"capabilities":"None"},{"resourceType":"subscriptionFeatureRegistrations","locations":[],"apiVersions":["2020-01-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2015-12-01","2014-08-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.HanaOnAzure","namespace":"Microsoft.HanaOnAzure","authorization":{"applicationId":"cc5476ec-3074-44d1-8461-711f5d9b0e39","roleDefinitionId":"4a10987e-dbcf-4c3d-8e3d-7ddcd9c771c2","managedByRoleDefinitionId":"9e3af657-a8ff-583c-a75c-2fe7c4bcb635"},"resourceTypes":[{"resourceType":"hanaInstances","locations":["West + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features","namespace":"Microsoft.Features","resourceTypes":[{"resourceType":"features","locations":[],"apiVersions":["2015-12-01","2014-08-01-preview"],"capabilities":"None"},{"resourceType":"providers","locations":[],"apiVersions":["2015-12-01","2014-08-01-preview"],"capabilities":"None"},{"resourceType":"featureProviders","locations":[],"apiVersions":["2020-09-01","2020-01-01"],"capabilities":"None"},{"resourceType":"subscriptionFeatureRegistrations","locations":[],"apiVersions":["2020-09-01","2020-01-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2015-12-01","2014-08-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.HanaOnAzure","namespace":"Microsoft.HanaOnAzure","authorization":{"applicationId":"cc5476ec-3074-44d1-8461-711f5d9b0e39","roleDefinitionId":"4a10987e-dbcf-4c3d-8e3d-7ddcd9c771c2","managedByRoleDefinitionId":"9e3af657-a8ff-583c-a75c-2fe7c4bcb635"},"resourceTypes":[{"resourceType":"hanaInstances","locations":["West US","West US 2","East US","East US 2","West Europe","North Europe","Japan - East","Japan West","Australia East","Australia Southeast","South Central US"],"apiVersions":["2017-11-03-preview"],"capabilities":"SupportsTags, + East","Australia East","Australia Southeast","South Central US"],"apiVersions":["2017-11-03-preview"],"capabilities":"SupportsTags, SupportsLocation"},{"resourceType":"sapMonitors","locations":["West US","West US 2","East US","East US 2","West Europe","North Europe","Japan East","Japan West","Australia East","Australia Southeast","Southeast Asia","South Central @@ -5947,63 +7394,42 @@ interactions: East","Australia Southeast","West US 2","South India","Central India","Japan East","Japan West","Switzerland North","Switzerland West"],"apiVersions":["2018-10-31-preview","2018-10-31"],"defaultApiVersion":"2018-10-31","capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.HybridData","namespace":"Microsoft.HybridData","authorization":{"applicationId":"621269cf-1195-44a3-a835-c613d103dd15","roleDefinitionId":"00320cd4-8823-47f2-bbe4-5c9da031311d"},"resourceTypes":[{"resourceType":"dataManagers","locations":["West US","North Europe","West Europe","East US","West US 2","West Central US","Southeast - Asia"],"apiVersions":["2019-06-01","2016-06-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2019-06-01","2016-06-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.HybridNetwork","namespace":"Microsoft.HybridNetwork","authorizations":[],"resourceTypes":[{"resourceType":"Operations","locations":[],"apiVersions":["2020-01-01-preview"],"capabilities":"None"},{"resourceType":"Locations","locations":["East - US"],"apiVersions":["2020-01-01-preview"],"capabilities":"None"},{"resourceType":"Locations/OperationStatuses","locations":["East - US","North Europe","East US 2 EUAP"],"apiVersions":["2020-01-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Hydra","namespace":"Microsoft.Hydra","authorizations":[{"applicationId":"37ae09d4-a310-41e1-803d-8e85cec4bf23","roleDefinitionId":"37ae09d4-a310-41e1-803d-8e85cec4bf23"}],"resourceTypes":[{"resourceType":"locations","locations":["West - US"],"apiVersions":["2019-08-01-privatepreview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2019-08-01-privatepreview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.IoTCentral","namespace":"Microsoft.IoTCentral","authorizations":[{"applicationId":"9edfcdd9-0bc5-4bd4-b287-c3afc716aac7"}],"resourceTypes":[{"resourceType":"IoTApps","locations":["West - Europe","West US","East US 2","North Europe","East US","Central US","West - Central US","Australia","Asia Pacific","Europe","Japan","UK","United States"],"apiVersions":["2018-09-01","2017-07-01-privatepreview"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2018-09-01","2017-07-01-privatepreview"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"checkSubdomainAvailability","locations":[],"apiVersions":["2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2018-09-01","2017-07-01-privatepreview"],"defaultApiVersion":"2018-09-01","capabilities":"None"},{"resourceType":"appTemplates","locations":[],"apiVersions":["2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.IoTSpaces","namespace":"Microsoft.IoTSpaces","authorizations":[{"applicationId":"0b07f429-9f4b-4714-9392-cc5e8e80c8b0"}],"resourceTypes":[{"resourceType":"checkNameAvailability","locations":["North + Asia","East US 2 EUAP","Central US EUAP"],"apiVersions":["2019-06-01","2016-06-01"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2019-06-01","2016-06-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.HybridNetwork","namespace":"Microsoft.HybridNetwork","authorizations":[{"applicationId":"b8ed041c-aa91-418e-8f47-20c70abc2de1","roleDefinitionId":"b193432e-9b7e-4885-b2c0-052afdceace3"}],"resourceTypes":[{"resourceType":"Operations","locations":[],"apiVersions":["2020-01-01-preview"],"capabilities":"None"},{"resourceType":"Locations","locations":[],"apiVersions":["2020-01-01-preview"],"capabilities":"None"},{"resourceType":"Locations/OperationStatuses","locations":["East + US 2 EUAP","West Central US"],"apiVersions":["2020-01-01-preview","2019-10-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.IndustryDataLifecycle","namespace":"Microsoft.IndustryDataLifecycle","authorizations":[{"applicationId":"3072002f-3e97-4979-91f2-09fe40da755d","roleDefinitionId":"23694dec-6164-410e-b12d-691a3c92ae59"}],"resourceTypes":[{"resourceType":"custodianCollaboratives/termsOfUseDocuments","locations":["West + Central US","East US 2"],"apiVersions":["2020-01-12-preview"],"defaultApiVersion":"2020-01-12-preview","capabilities":"None"},{"resourceType":"custodianCollaboratives/collaborativeImage","locations":["West + Central US","East US 2"],"apiVersions":["2020-01-12-preview"],"defaultApiVersion":"2020-01-12-preview","capabilities":"None"},{"resourceType":"custodianCollaboratives/invitations","locations":["West + Central US","East US 2"],"apiVersions":["2020-01-12-preview"],"capabilities":"None"},{"resourceType":"custodianCollaboratives/invitations/termsOfUseDocuments","locations":["West + Central US","East US 2"],"apiVersions":["2020-01-12-preview"],"capabilities":"None"},{"resourceType":"memberCollaboratives","locations":["West + Central US","East US 2"],"apiVersions":["2020-01-12-preview"],"defaultApiVersion":"2020-01-12-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"collaborativeInvitations","locations":["West + Central US","East US 2"],"apiVersions":["2020-01-12-preview"],"capabilities":"None"},{"resourceType":"locations","locations":["West + Central US","East US 2"],"apiVersions":["2020-01-12-preview"],"capabilities":"None"},{"resourceType":"locations/rejectInvitation","locations":["West + Central US","East US 2"],"apiVersions":["2020-01-12-preview"],"capabilities":"None"},{"resourceType":"locations/downloadInvitationFile","locations":["West + Central US","East US 2"],"apiVersions":["2020-01-12-preview"],"capabilities":"None"},{"resourceType":"dataproviders","locations":[],"apiVersions":["2020-01-12-preview"],"capabilities":"None"},{"resourceType":"locations/dataPackages","locations":["West + Central US","East US 2"],"apiVersions":["2020-01-12-preview"],"capabilities":"None"},{"resourceType":"memberCollaboratives/sharedDataPackages","locations":["West + Central US","East US 2"],"apiVersions":["2020-01-12-preview"],"capabilities":"None"},{"resourceType":"custodianCollaboratives/receivedDataPackages","locations":["West + Central US","East US 2"],"apiVersions":["2020-01-12-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-01-12-preview"],"defaultApiVersion":"2020-01-12-preview","capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.IoTSpaces","namespace":"Microsoft.IoTSpaces","authorizations":[{"applicationId":"0b07f429-9f4b-4714-9392-cc5e8e80c8b0"}],"resourceTypes":[{"resourceType":"checkNameAvailability","locations":["North Europe","West Europe","Australia East","West US 2","East US"],"apiVersions":["2017-10-01-preview"],"defaultApiVersion":"2017-10-01-preview","capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"Graph","locations":["North Europe","West Europe","Australia East","West US 2","East US"],"apiVersions":["2017-10-01-preview"],"defaultApiVersion":"2017-10-01-preview","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2017-10-01-preview"],"defaultApiVersion":"2017-10-01-preview","capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Kubernetes","namespace":"Microsoft.Kubernetes","authorizations":[{"applicationId":"64b12d6e-6549-484c-8cc6-6281839ba394","roleDefinitionId":"1d1d44cf-68a1-4def-a2b6-cd7efc3515af"}],"resourceTypes":[{"resourceType":"connectedClusters","locations":["East - US","West Europe"],"apiVersions":["2020-01-01-preview","2019-11-01-preview","2019-09-01-privatepreview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2020-01-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationStatuses","locations":["East - US 2 EUAP","West Europe","East US"],"apiVersions":["2020-01-01-preview"],"capabilities":"None"},{"resourceType":"registeredSubscriptions","locations":[],"apiVersions":["2020-01-01-preview"],"capabilities":"None"},{"resourceType":"Operations","locations":[],"apiVersions":["2020-01-01-preview","2019-11-01-preview","2019-09-01-privatepreview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.KubernetesConfiguration","namespace":"Microsoft.KubernetesConfiguration","authorizations":[{"applicationId":"c699bf69-fb1d-4eaf-999b-99e6b2ae4d85","roleDefinitionId":"90155430-a360-410f-af5d-89dc284d85c6"},{"applicationId":"03db181c-e9d3-4868-9097-f0b728327182","roleDefinitionId":"DE2ADB97-42D8-49C8-8FCF-DBB53EF936AC"}],"resourceTypes":[{"resourceType":"sourceControlConfigurations","locations":["East - US","West Europe"],"apiVersions":["2019-11-01-preview"],"capabilities":"SupportsExtension"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.LabServices","namespace":"Microsoft.LabServices","authorization":{"applicationId":"1a14be2a-e903-4cec-99cf-b2e209259a0f","roleDefinitionId":"8f2de81a-b9aa-49d8-b24c-11814d3ab525","managedByRoleDefinitionId":"8f2de81a-b9aa-49d8-b24c-11814d3ab525"},"resourceTypes":[{"resourceType":"labaccounts","locations":["West - Central US","Japan East","West US","Australia Southeast","Canada Central","Central - India","Central US","East Asia","Korea Central","North Europe","South Central - US","UK West","West India","Australia East","Brazil South","Canada East","East - US","East US 2","France Central","Japan West","Korea South","North Central - US","South India","Southeast Asia","UK South","West Europe","West US 2"],"apiVersions":["2019-01-01-preview","2018-10-15","2017-12-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2017-10-01-preview"],"defaultApiVersion":"2017-10-01-preview","capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.KubernetesConfiguration","namespace":"Microsoft.KubernetesConfiguration","authorizations":[{"applicationId":"c699bf69-fb1d-4eaf-999b-99e6b2ae4d85","roleDefinitionId":"90155430-a360-410f-af5d-89dc284d85c6"},{"applicationId":"03db181c-e9d3-4868-9097-f0b728327182","roleDefinitionId":"DE2ADB97-42D8-49C8-8FCF-DBB53EF936AC"},{"applicationId":"a0f92522-89de-4c5e-9a75-0044ccf66efd","roleDefinitionId":"b3429810-7d5c-420e-8605-cf280f3099f2"}],"resourceTypes":[{"resourceType":"sourceControlConfigurations","locations":["East + US","West Europe"],"apiVersions":["2020-07-01-preview","2019-11-01-preview"],"defaultApiVersion":"2019-11-01-preview","capabilities":"SupportsExtension"},{"resourceType":"operations","locations":[],"apiVersions":["2020-10-01-preview","2020-07-01-preview","2019-11-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.LabServices","namespace":"Microsoft.LabServices","authorization":{"applicationId":"1a14be2a-e903-4cec-99cf-b2e209259a0f","roleDefinitionId":"8f2de81a-b9aa-49d8-b24c-11814d3ab525","managedByRoleDefinitionId":"8f2de81a-b9aa-49d8-b24c-11814d3ab525"},"resourceTypes":[{"resourceType":"labaccounts","locations":["West + Central US","Japan East","West US","Australia Southeast","Australia Central","Canada + Central","Central India","Central US","East Asia","Korea Central","North Europe","South + Africa North","South Central US","Switzerland North","UK West","West India","Australia + East","Australia Central 2","Brazil South","Canada East","East US","East US + 2","France Central","France South","Japan West","Korea South","North Central + US","South India","Southeast Asia","Switzerland West","UK South","West Europe","West + US 2","East US 2 EUAP","Central US EUAP"],"apiVersions":["2019-01-01-preview","2018-10-15","2017-12-01-preview"],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations/operations","locations":["West - Central US","Japan East","West US","Australia Southeast","Canada Central","Central - India","Central US","East Asia","Korea Central","North Europe","South Central - US","UK West","West India","Australia East","Brazil South","Canada East","East - US","East US 2","Japan West","Korea South","North Central US","South India","Southeast - Asia","UK South","West Europe","West US 2"],"apiVersions":["2019-01-01-preview","2018-10-15","2017-12-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2019-01-01-preview","2018-10-15","2017-12-01-preview"],"capabilities":"None"},{"resourceType":"users","locations":[],"apiVersions":["2019-01-01-preview","2019-01-01-beta","2019-01-01-alpha","2018-10-15","2017-12-01-preview","2017-12-01-beta","2017-12-01-alpha"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2019-01-01-preview","2018-10-15","2017-12-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Maintenance","namespace":"Microsoft.Maintenance","authorization":{"applicationId":"f18474f2-a66a-4bb0-a3c9-9b8d892092fa","roleDefinitionId":"2f1ef7b0-d5c4-4d3c-98fa-6a9fa8e74aa5"},"resourceTypes":[{"resourceType":"maintenanceConfigurations","locations":["Central - US","East US","East US 2","West US","West US 2","West Central US","North Central - US","South Central US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Australia East","Australia Southeast","Australia - Central","Australia Central 2","South Africa North","South Africa West","Brazil - South","South India","Central India","West India","Canada Central","Canada - East","UK South","UK West","Korea Central","Korea South","France Central","France - South"],"apiVersions":["2020-04-01","2018-10-01","2018-06-01-preview","2017-04-26","2017-01-01","2016-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"updates","locations":["Central - US","East US","East US 2","West US","West US 2","West Central US","North Central - US","South Central US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Australia East","Australia Southeast","Australia - Central","Australia Central 2","South Africa North","South Africa West","Brazil - South","South India","Central India","West India","Canada Central","Canada - East","UK South","UK West","Korea Central","Korea South","France Central","France - South"],"apiVersions":["2020-04-01","2018-10-01","2018-06-01-preview","2017-04-26","2017-01-01","2016-01-01"],"capabilities":"SupportsExtension"},{"resourceType":"configurationAssignments","locations":["Central - US","East US","East US 2","West US","West US 2","West Central US","North Central - US","South Central US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Australia East","Australia Southeast","Australia - Central","Australia Central 2","South Africa North","South Africa West","Brazil - South","South India","Central India","West India","Canada Central","Canada - East","UK South","UK West","Korea Central","Korea South","France Central","France - South"],"apiVersions":["2020-04-01","2018-10-01","2018-06-01-preview","2017-04-26","2017-01-01","2016-01-01"],"capabilities":"SupportsExtension"},{"resourceType":"applyUpdates","locations":["Central - US","East US","East US 2","West US","West US 2","West Central US","North Central - US","South Central US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Australia East","Australia Southeast","Australia - Central","Australia Central 2","South Africa North","South Africa West","Brazil - South","South India","Central India","West India","Canada Central","Canada - East","UK South","UK West","Korea Central","Korea South","France Central","France - South"],"apiVersions":["2020-04-01","2018-10-01","2018-06-01-preview","2017-04-26","2017-01-01","2016-01-01"],"capabilities":"SupportsExtension"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Marketplace","namespace":"Microsoft.Marketplace","authorizations":[{"applicationId":"a0e1e353-1a3e-42cf-a8ea-3a9746eec58c"},{"applicationId":"a5ce81bb-67c7-4043-952a-22004782adb5"}],"resourceTypes":[{"resourceType":"register","locations":[],"apiVersions":["2020-01-01"],"capabilities":"None"},{"resourceType":"privategalleryitems","locations":[],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"products","locations":[],"apiVersions":["2018-08-01-beta"],"capabilities":"None"},{"resourceType":"offers","locations":[],"apiVersions":["2018-08-01-beta"],"capabilities":"None"},{"resourceType":"offerTypes","locations":[],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"offerTypes/publishers","locations":[],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"offerTypes/publishers/offers","locations":[],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"offerTypes/publishers/offers/plans","locations":[],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"offerTypes/publishers/offers/plans/configs","locations":[],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"offerTypes/publishers/offers/plans/configs/importImage","locations":[],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"offerTypes/publishers/offers/plans/agreements","locations":[],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"listAvailableOffers","locations":[],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"publishers","locations":[],"apiVersions":["2019-06-30-preview"],"capabilities":"None"},{"resourceType":"publishers/offers","locations":[],"apiVersions":["2019-06-30-preview"],"capabilities":"None"},{"resourceType":"publishers/offers/amendments","locations":[],"apiVersions":["2019-06-30-preview"],"capabilities":"None"},{"resourceType":"privateStoreClient","locations":[],"apiVersions":["2018-08-01-beta","2018-03-01-beta"],"capabilities":"None"},{"resourceType":"privateStores","locations":[],"apiVersions":["2020-01-01"],"capabilities":"None"},{"resourceType":"privateStores/offers","locations":[],"apiVersions":["2020-01-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.MarketplaceApps","namespace":"Microsoft.MarketplaceApps","resourceTypes":[{"resourceType":"classicDevServices","locations":["Northwest + Central US","Japan East","West US","Australia Southeast","Australia Central","Canada + Central","Central India","Central US","East Asia","Korea Central","North Europe","South + Africa North","South Central US","Switzerland North","UK West","West India","Australia + East","Australia Central 2","Brazil South","Canada East","East US","East US + 2","France Central","France South","Japan West","Korea South","North Central + US","South India","Southeast Asia","Switzerland West","UK South","West Europe","West + US 2","East US 2 EUAP","Central US EUAP"],"apiVersions":["2019-01-01-preview","2018-10-15","2017-12-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2019-01-01-preview","2018-10-15","2017-12-01-preview"],"capabilities":"None"},{"resourceType":"users","locations":[],"apiVersions":["2019-01-01-preview","2019-01-01-beta","2019-01-01-alpha","2018-10-15","2017-12-01-preview","2017-12-01-beta","2017-12-01-alpha"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2019-01-01-preview","2018-10-15","2017-12-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Marketplace","namespace":"Microsoft.Marketplace","authorizations":[{"applicationId":"a0e1e353-1a3e-42cf-a8ea-3a9746eec58c"},{"applicationId":"a5ce81bb-67c7-4043-952a-22004782adb5"}],"resourceTypes":[{"resourceType":"register","locations":[],"apiVersions":["2020-01-01"],"capabilities":"None"},{"resourceType":"privategalleryitems","locations":[],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"products","locations":[],"apiVersions":["2018-08-01-beta"],"capabilities":"None"},{"resourceType":"offers","locations":[],"apiVersions":["2018-08-01-beta"],"capabilities":"None"},{"resourceType":"macc","locations":[],"apiVersions":["2018-08-01-beta"],"capabilities":"None"},{"resourceType":"offerTypes","locations":[],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"offerTypes/publishers","locations":[],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"offerTypes/publishers/offers","locations":[],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"offerTypes/publishers/offers/plans","locations":[],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"offerTypes/publishers/offers/plans/configs","locations":[],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"offerTypes/publishers/offers/plans/configs/importImage","locations":[],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"offerTypes/publishers/offers/plans/agreements","locations":[],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"listAvailableOffers","locations":[],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"publishers","locations":[],"apiVersions":["2019-06-30-preview"],"capabilities":"None"},{"resourceType":"publishers/offers","locations":[],"apiVersions":["2019-06-30-preview"],"capabilities":"None"},{"resourceType":"publishers/offers/amendments","locations":[],"apiVersions":["2019-06-30-preview"],"capabilities":"None"},{"resourceType":"privateStoreClient","locations":[],"apiVersions":["2018-08-01-beta","2018-03-01-beta"],"capabilities":"None"},{"resourceType":"privateStores","locations":[],"apiVersions":["2020-01-01"],"capabilities":"None"},{"resourceType":"privateStores/offers","locations":[],"apiVersions":["2020-01-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.MarketplaceApps","namespace":"Microsoft.MarketplaceApps","resourceTypes":[{"resourceType":"classicDevServices","locations":["Northwest US","East Asia","Southeast Asia","East US","East US 2","West US","West US 2","North Central US","South Central US","West Central US","Central US","North Europe","West Europe","Japan East","Japan West","Brazil South","Australia @@ -6012,28 +7438,42 @@ interactions: Central US","West US"],"apiVersions":["2015-06-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2015-06-01"],"capabilities":"None"},{"resourceType":"offertypes","locations":["South Central US","West US"],"apiVersions":["2015-06-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ObjectStore","namespace":"Microsoft.ObjectStore","resourceTypes":[{"resourceType":"osNamespaces","locations":["West US"],"apiVersions":["2019-06-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Peering","namespace":"Microsoft.Peering","resourceTypes":[{"resourceType":"peerings","locations":["Japan - East","Japan West","Korea Central","East Asia","Australia Central","Australia - East","Australia Southeast","Brazil South","Southeast Asia","West India","South - India","East US","East US 2","North Central US","South Central US","Canada - Central","West US","West US 2","West Central US","Canada East","West Europe","UK - South","UK West","North Europe","France Central","France South","South Africa - North","South Africa West"],"apiVersions":["2020-04-01","2020-01-01-preview","2019-09-01-preview","2019-08-01-preview"],"defaultApiVersion":"2020-04-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"peeringLocations","locations":[],"apiVersions":["2020-04-01","2020-01-01-preview","2019-09-01-preview","2019-08-01-preview"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"legacyPeerings","locations":[],"apiVersions":["2020-04-01","2020-01-01-preview","2019-09-01-preview","2019-08-01-preview"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"peerAsns","locations":[],"apiVersions":["2020-04-01","2020-01-01-preview","2019-09-01-preview","2019-08-01-preview"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"peeringServices","locations":["Japan - East","Japan West","Korea Central","East Asia","Australia Central","Australia - East","Australia Southeast","Brazil South","Southeast Asia","West India","South - India","East US","East US 2","North Central US","South Central US","Canada - Central","West US","West US 2","West Central US","Canada East","West Europe","UK - South","UK West","North Europe","France Central","France South","South Africa - North","South Africa West"],"apiVersions":["2020-04-01","2020-01-01-preview","2019-09-01-preview","2019-08-01-preview"],"defaultApiVersion":"2020-04-01","capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"peeringServiceCountries","locations":[],"apiVersions":["2020-04-01","2020-01-01-preview"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"peeringServiceLocations","locations":[],"apiVersions":["2020-04-01","2020-01-01-preview","2019-09-01-preview","2019-08-01-preview"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"peeringServiceProviders","locations":[],"apiVersions":["2020-04-01","2020-01-01-preview","2019-09-01-preview","2019-08-01-preview"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"checkServiceProviderAvailability","locations":[],"apiVersions":["2020-04-01","2020-01-01-preview","2019-09-01-preview","2019-08-01-preview"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-04-01","2020-01-01-preview","2019-09-01-preview","2019-08-01-preview"],"defaultApiVersion":"2020-04-01","capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Portal","namespace":"Microsoft.Portal","resourceTypes":[{"resourceType":"dashboards","locations":["Central + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.OffAzure","namespace":"Microsoft.OffAzure","authorizations":[{"applicationId":"728a93e3-065d-4678-93b1-3cc281223341","roleDefinitionId":"b9967bf7-a345-4af8-95f0-49916f760fc6"}],"resourceTypes":[{"resourceType":"VMwareSites","locations":["Central + US","West Europe","UK South","UK West","North Europe","West US 2","Southeast + Asia","East Asia","Central India","South India","Canada Central","Australia + Southeast","Japan West","Japan East","Brazil South","Korea Central","Korea + South","France Central","Switzerland North","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-01-01-preview","2020-01-01","2019-06-06","2019-05-01-preview","2018-05-01-preview"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"HyperVSites","locations":["Central US","West + Europe","UK South","UK West","North Europe","West US 2","Southeast Asia","East + Asia","Central India","South India","Canada Central","Australia Southeast","Japan + West","Japan East","Brazil South","Korea Central","Korea South","France Central","Switzerland + North","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-01-01","2019-06-06","2018-05-01-preview"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"ServerSites","locations":["Central US","West + Europe","UK South","UK West","North Europe","West US 2","Southeast Asia","East + Asia","Central India","South India","Canada Central","Australia Southeast","Japan + West","Japan East","Brazil South","Korea Central","Korea South","France Central","Switzerland + North","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-01-01-preview","2019-05-01-preview"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"ImportSites","locations":["Central US","West + Europe","UK South","UK West","North Europe","West US 2","Southeast Asia","East + Asia","Central India","South India","Canada Central","Australia Southeast","Japan + West","Japan East","Brazil South","Korea Central","Korea South","France Central","Switzerland + North","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-02-01","2020-01-01-preview","2019-05-01-preview"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"operations","locations":["Southeast Asia"],"apiVersions":["2020-01-01","2019-06-06","2018-05-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.OpenLogisticsPlatform","namespace":"Microsoft.OpenLogisticsPlatform","authorizations":[{"applicationId":"3bc3fbf6-023a-4d86-bd09-bac559ccc9cc","roleDefinitionId":"38f09e57-663e-42b8-9db9-7d9e5138d5e4"}],"resourceTypes":[{"resourceType":"Locations","locations":["West + US"],"apiVersions":["2020-06-23-preview"],"capabilities":"None"},{"resourceType":"Locations/OperationStatuses","locations":["East + US 2 EUAP"],"apiVersions":["2020-06-23-preview"],"capabilities":"None"},{"resourceType":"Operations","locations":[],"apiVersions":["2020-06-23-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Portal","namespace":"Microsoft.Portal","resourceTypes":[{"resourceType":"dashboards","locations":["Central US","East Asia","Southeast Asia","East US","East US 2","West US","West US 2","North Central US","South Central US","West Central US","North Europe","West Europe","Japan East","Japan West","Brazil South","Australia Southeast","Australia East","West India","South India","Central India","Canada Central","Canada East","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North"],"apiVersions":["2019-01-01-preview","2018-10-01-preview","2015-08-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":["Central + Africa North"],"apiVersions":["2020-09-01-preview","2020-09-01-alpha","2019-01-01-preview","2018-10-01-preview","2015-08-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"tenantconfigurations","locations":["Central + US","East Asia","Southeast Asia","East US","East US 2","West US","West US + 2","North Central US","South Central US","West Central US","North Europe","West + Europe","Japan East","Japan West","Brazil South","Australia Southeast","Australia + East","West India","South India","Central India","Canada Central","Canada + East","UK South","UK West","Korea Central","Korea South","France Central","South + Africa North"],"apiVersions":["2020-09-01-preview","2019-01-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["Central US","East Asia","Southeast Asia","East US","East US 2","West US","West US 2","North Central US","South Central US","West Central US","North Europe","West Europe","Japan East","Japan West","Brazil South","Australia Southeast","Australia @@ -6042,35 +7482,18 @@ interactions: US","East US","Central India","North Europe","West Europe","South Central US","Southeast Asia","East US 2","Central US"],"apiVersions":["2020-04-01-preview","2018-10-01","2017-12-01-preview","2017-08-01-preview","2017-01-01-preview"],"capabilities":"None"},{"resourceType":"userSettings","locations":[],"apiVersions":["2020-04-01-preview","2018-10-01","2017-12-01-preview","2017-08-01-preview","2017-01-01-preview"],"capabilities":"None"},{"resourceType":"locations/userSettings","locations":["West US","East US","Central India","North Europe","West Europe","South Central - US","Southeast Asia","East US 2","Central US"],"apiVersions":["2020-04-01-preview","2018-10-01","2017-12-01-preview","2017-08-01-preview","2017-01-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.PowerBI","namespace":"Microsoft.PowerBI","authorizations":[{"applicationId":"00000009-0000-0000-c000-000000000000","roleDefinitionId":"d2079c0c-4a98-48b1-b511-eae3fc2003ab"}],"resourceTypes":[{"resourceType":"workspaceCollections","locations":["South - Central US","North Central US","East US 2","West US","West Europe","North - Europe","Brazil South","Southeast Asia","Australia Southeast","Canada Central","Japan - East","UK South","West India"],"apiVersions":["2016-01-29"],"defaultApiVersion":"2016-01-29","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2016-01-29"],"defaultApiVersion":"2016-01-29","capabilities":"None"},{"resourceType":"locations/checkNameAvailability","locations":["South - Central US","North Central US","East US 2","West US","West Europe","North - Europe","Brazil South","Southeast Asia","Australia Southeast","Canada Central","Japan - East","UK South","West India"],"apiVersions":["2016-01-29"],"defaultApiVersion":"2016-01-29","capabilities":"None"},{"resourceType":"operations","locations":["East - US 2 EUAP"],"apiVersions":["2020-06-01","2016-01-29"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.PowerPlatform","namespace":"Microsoft.PowerPlatform","resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2020-04-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ProjectBabylon","namespace":"Microsoft.ProjectBabylon","authorizations":[{"applicationId":"73c2949e-da2d-457a-9607-fcc665198967","roleDefinitionId":"1BC09725-0C9B-4F57-A3D0-FCCF4EB40120"}],"resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2019-10-01-preview"],"defaultApiVersion":"2019-10-01-preview","capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ProviderHub","namespace":"Microsoft.ProviderHub","resourceTypes":[{"resourceType":"providerRegistrations","locations":[],"apiVersions":["2019-02-01-preview"],"capabilities":"None"},{"resourceType":"providerRegistrations/resourceTypeRegistrations","locations":[],"apiVersions":["2019-02-01-preview"],"capabilities":"None"},{"resourceType":"providerRegistrations/defaultRollouts","locations":[],"apiVersions":["2019-02-01-preview"],"capabilities":"None"},{"resourceType":"rollouts","locations":[],"apiVersions":["2019-02-01-preview"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"availableAccounts","locations":[],"apiVersions":["2019-02-01-preview","2018-11-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Quantum","namespace":"Microsoft.Quantum","authorizations":[{"applicationId":"a77d91dc-971b-4cf7-90c8-f183194249bc","roleDefinitionId":"915bd376-2da8-411d-9906-895a54086a66"}],"resourceTypes":[{"resourceType":"Operations","locations":[],"apiVersions":["2019-11-04-preview"],"capabilities":"None"},{"resourceType":"Locations","locations":["West + US","Southeast Asia","East US 2","Central US"],"apiVersions":["2020-04-01-preview","2018-10-01","2017-12-01-preview","2017-08-01-preview","2017-01-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.PowerPlatform","namespace":"Microsoft.PowerPlatform","authorization":{"applicationId":"e64bd61e-5424-451f-b666-e02ee2878437","roleDefinitionId":"51598b27-f396-476b-b212-90d7da526159"},"resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2020-04-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ProjectBabylon","namespace":"Microsoft.ProjectBabylon","authorizations":[{"applicationId":"73c2949e-da2d-457a-9607-fcc665198967","roleDefinitionId":"1BC09725-0C9B-4F57-A3D0-FCCF4EB40120","managedByRoleDefinitionId":"9e3af657-a8ff-583c-a75c-2fe7c4bcb635"}],"resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2019-10-01-preview"],"defaultApiVersion":"2019-10-01-preview","capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ProviderHub","namespace":"Microsoft.ProviderHub","resourceTypes":[{"resourceType":"providerRegistrations","locations":[],"apiVersions":["2020-06-01-preview","2019-02-01-preview"],"capabilities":"None"},{"resourceType":"operationStatuses","locations":[],"apiVersions":["2020-06-01-preview","2019-10-01","2019-02-01-preview"],"capabilities":"None"},{"resourceType":"providerRegistrations/resourceTypeRegistrations","locations":[],"apiVersions":["2020-06-01-preview","2019-02-01-preview"],"capabilities":"None"},{"resourceType":"providerRegistrations/defaultRollouts","locations":[],"apiVersions":["2020-06-01-preview","2019-02-01-preview"],"capabilities":"None"},{"resourceType":"rollouts","locations":[],"apiVersions":["2020-06-01-preview","2019-02-01-preview"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"availableAccounts","locations":[],"apiVersions":["2020-06-01-preview","2019-02-01-preview","2018-11-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Quantum","namespace":"Microsoft.Quantum","authorizations":[{"applicationId":"a77d91dc-971b-4cf7-90c8-f183194249bc","roleDefinitionId":"915bd376-2da8-411d-9906-895a54086a66"}],"resourceTypes":[{"resourceType":"Operations","locations":[],"apiVersions":["2019-11-04-preview"],"capabilities":"None"},{"resourceType":"Locations","locations":["West US"],"apiVersions":["2019-11-04-preview"],"capabilities":"None"},{"resourceType":"Locations/OperationStatuses","locations":["West - US","East US 2 EUAP"],"apiVersions":["2019-11-04-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.RedHatOpenShift","namespace":"Microsoft.RedHatOpenShift","authorizations":[{"applicationId":"f1dd0a37-89c6-4e07-bcd1-ffd3d43d8875","roleDefinitionId":"640c5ac9-6f32-4891-94f4-d20f7aa9a7e6","managedByRoleDefinitionId":"9e3af657-a8ff-583c-a75c-2fe7c4bcb635","managedByAuthorization":{"allowManagedByInheritance":true}}],"resourceTypes":[{"resourceType":"locations","locations":[],"apiVersions":["2020-04-30","2019-12-31-preview"],"capabilities":"None"},{"resourceType":"locations/operationresults","locations":["Australia - East","Brazil South","Canada Central","Canada East","Central US","East US","East - US 2","France Central","Japan East","Japan West","North Central US","North - Europe","South Africa North","South Central US","Southeast Asia","Switzerland - North","UK South","UK West","West Europe","West US 2","West US"],"apiVersions":["2020-04-30"],"capabilities":"None"},{"resourceType":"locations/operationsstatus","locations":["Australia - East","Brazil South","Canada Central","Canada East","Central US","East US","East - US 2","France Central","Japan East","Japan West","North Central US","North - Europe","South Africa North","South Central US","Southeast Asia","Switzerland - North","UK South","UK West","West Europe","West US 2","West US"],"apiVersions":["2020-04-30"],"capabilities":"None"},{"resourceType":"OpenShiftClusters","locations":["Australia - East","Brazil South","Canada Central","Canada East","Central US","East US","East - US 2","France Central","Japan East","Japan West","North Central US","North - Europe","South Africa North","South Central US","Southeast Asia","Switzerland - North","UK South","UK West","West Europe","West US 2","West US"],"apiVersions":["2020-04-30"],"defaultApiVersion":"2020-04-30","capabilities":"SystemAssignedResourceIdentity, - SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2020-04-30","2019-12-31-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ResourceGraph","namespace":"Microsoft.ResourceGraph","authorization":{"applicationId":"509e4652-da8d-478d-a730-e9d4a1996ca4"},"resourceTypes":[{"resourceType":"resources","locations":["East + US","East US 2 EUAP"],"apiVersions":["2019-11-04-preview"],"capabilities":"None"},{"resourceType":"Workspaces","locations":["East + US 2 EUAP"],"apiVersions":["2019-11-04-preview"],"defaultApiVersion":"2019-11-04-preview","capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"locations/offerings","locations":["East + US 2 EUAP"],"apiVersions":["2019-11-04-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ResourceGraph","namespace":"Microsoft.ResourceGraph","authorization":{"applicationId":"509e4652-da8d-478d-a730-e9d4a1996ca4"},"resourceTypes":[{"resourceType":"resources","locations":["East US"],"apiVersions":["2020-04-01-preview","2019-04-01","2018-09-01-preview"],"capabilities":"None"},{"resourceType":"resourcesHistory","locations":["East - US"],"apiVersions":["2020-04-01-preview","2018-09-01-preview"],"capabilities":"None"},{"resourceType":"resourceChanges","locations":["East - US"],"apiVersions":["2020-04-01-preview","2018-09-01-preview"],"capabilities":"None"},{"resourceType":"resourceChangeDetails","locations":["East - US"],"apiVersions":["2020-04-01-preview","2018-09-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["East + US"],"apiVersions":["2020-09-01-preview","2020-04-01-preview","2018-09-01-preview"],"capabilities":"None"},{"resourceType":"resourceChanges","locations":["East + US"],"apiVersions":["2020-09-01-preview","2020-04-01-preview","2018-09-01-preview"],"capabilities":"None"},{"resourceType":"resourceChangeDetails","locations":["East + US"],"apiVersions":["2020-09-01-preview","2020-04-01-preview","2018-09-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["East US"],"apiVersions":["2020-04-01-preview","2019-04-01","2018-09-01-preview"],"capabilities":"None"},{"resourceType":"subscriptionsStatus","locations":["East US"],"apiVersions":["2019-04-01","2018-09-01-preview"],"capabilities":"None"},{"resourceType":"queries","locations":["global"],"apiVersions":["2018-09-01-preview"],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Resources","namespace":"Microsoft.Resources","authorization":{"applicationId":"3b990c8b-9607-4c2a-8b04-1d41985facca"},"resourceTypes":[{"resourceType":"tenants","locations":[],"apiVersions":["2020-01-01","2019-09-01","2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-06-01"}],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2019-09-01","2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-05-01"}],"capabilities":"None"},{"resourceType":"operationresults","locations":[],"apiVersions":["2019-09-01","2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"}],"capabilities":"None"},{"resourceType":"notifyResourceJobs","locations":[],"apiVersions":["2019-09-01","2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01"],"capabilities":"None"},{"resourceType":"tags","locations":[],"apiVersions":["2019-10-01","2019-05-01","2019-04-01","2019-03-01","2018-11-01"],"capabilities":"SupportsExtension"},{"resourceType":"checkPolicyCompliance","locations":[],"apiVersions":["2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"capabilities":"None"},{"resourceType":"providers","locations":[],"apiVersions":["2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-05-01"}],"capabilities":"None"},{"resourceType":"checkresourcename","locations":[],"apiVersions":["2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"}],"capabilities":"None"},{"resourceType":"calculateTemplateHash","locations":[],"apiVersions":["2019-09-01","2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"}],"capabilities":"None"},{"resourceType":"resources","locations":[],"apiVersions":["2019-09-01","2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-05-01"}],"capabilities":"None"},{"resourceType":"subscriptions","locations":[],"apiVersions":["2019-10-01","2019-09-01","2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-06-01"}],"capabilities":"None"},{"resourceType":"subscriptions/resources","locations":[],"apiVersions":["2019-09-01","2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-05-01"}],"capabilities":"None"},{"resourceType":"subscriptions/providers","locations":[],"apiVersions":["2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-05-01"}],"capabilities":"None"},{"resourceType":"subscriptions/operationresults","locations":[],"apiVersions":["2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-05-01"}],"capabilities":"None"},{"resourceType":"resourceGroups","locations":["Central @@ -6080,156 +7503,148 @@ interactions: East","West India","South India","Central India","Canada Central","Canada East","UK South","UK West","Korea Central","Korea South","France Central","South Africa North","UAE North","Australia Central","Switzerland North","Germany - West Central","Norway East"],"apiVersions":["2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-05-01"}],"capabilities":"SupportsLocation"},{"resourceType":"subscriptions/resourceGroups","locations":["Central + West Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-05-01"}],"capabilities":"SupportsLocation"},{"resourceType":"subscriptions/resourceGroups","locations":["Central US","East Asia","Southeast Asia","East US","East US 2","West US","West US 2","North Central US","South Central US","West Central US","North Europe","West Europe","Japan East","Japan West","Brazil South","Australia Southeast","Australia East","West India","South India","Central India","Canada Central","Canada East","UK South","UK West","Korea Central","Korea South","France Central","South Africa North","UAE North","Australia Central","Switzerland North","Germany - West Central","Norway East"],"apiVersions":["2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-05-01"}],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"subscriptions/resourcegroups/resources","locations":[],"apiVersions":["2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-05-01"}],"capabilities":"None"},{"resourceType":"subscriptions/locations","locations":[],"apiVersions":["2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-06-01"}],"capabilities":"None"},{"resourceType":"subscriptions/tagnames","locations":[],"apiVersions":["2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-05-01"}],"capabilities":"None"},{"resourceType":"subscriptions/tagNames/tagValues","locations":[],"apiVersions":["2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-05-01"}],"capabilities":"None"},{"resourceType":"deployments","locations":[],"apiVersions":["2019-09-01","2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-05-01"}],"capabilities":"None"},{"resourceType":"deployments/operations","locations":[],"apiVersions":["2019-09-01","2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-05-01"}],"capabilities":"None"},{"resourceType":"links","locations":[],"apiVersions":["2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-05-01"}],"capabilities":"SupportsExtension"},{"resourceType":"operations","locations":[],"apiVersions":["2015-01-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-01-01"}],"capabilities":"None"},{"resourceType":"deploymentScripts","locations":["East + West Central","Norway East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-05-01"}],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"subscriptions/resourcegroups/resources","locations":[],"apiVersions":["2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-05-01"}],"capabilities":"None"},{"resourceType":"subscriptions/locations","locations":[],"apiVersions":["2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-06-01"}],"capabilities":"None"},{"resourceType":"subscriptions/tagnames","locations":[],"apiVersions":["2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-05-01"}],"capabilities":"None"},{"resourceType":"subscriptions/tagNames/tagValues","locations":[],"apiVersions":["2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-05-01"}],"capabilities":"None"},{"resourceType":"deployments","locations":[],"apiVersions":["2020-06-01","2019-09-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-05-01"}],"capabilities":"None"},{"resourceType":"deployments/operations","locations":[],"apiVersions":["2020-06-01","2019-09-01","2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-05-01"}],"capabilities":"None"},{"resourceType":"links","locations":[],"apiVersions":["2019-05-01","2019-04-01","2019-03-01","2018-11-01","2018-09-01","2018-08-01","2018-07-01","2018-05-01","2018-02-01","2018-01-01","2017-08-01","2017-06-01","2017-05-10","2017-05-01","2017-03-01","2016-09-01","2016-07-01","2016-06-01","2016-02-01","2015-11-01","2015-01-01","2014-04-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2016-06-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-05-01"}],"capabilities":"SupportsExtension"},{"resourceType":"operations","locations":[],"apiVersions":["2015-01-01"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2015-01-01"}],"capabilities":"None"},{"resourceType":"deploymentScripts","locations":["East Asia","Southeast Asia","Australia East","Brazil South","Canada Central","East US 2","East US","Central US","North Central US","UK South","Central India","South India","Japan East","Korea Central","North Europe","West Central US","West - Europe","West US 2","West US","South Central US"],"apiVersions":["2019-10-01-preview"],"capabilities":"SupportsTags, + Europe","West US 2","West US","South Central US","Canada East","Central US + EUAP","East US 2 EUAP"],"apiVersions":["2020-10-01","2019-10-01-preview"],"capabilities":"SupportsTags, SupportsLocation"},{"resourceType":"deploymentScripts/logs","locations":["East Asia","Southeast Asia","Australia East","Brazil South","Canada Central","East US 2","East US","Central US","North Central US","UK South","Central India","South India","Japan East","Korea Central","North Europe","West Central US","West - Europe","West US 2","West US","South Central US"],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/deploymentScriptOperationResults","locations":["East + Europe","West US 2","West US","South Central US","Canada East","Central US + EUAP","East US 2 EUAP"],"apiVersions":["2020-10-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"locations/deploymentScriptOperationResults","locations":["East Asia","Southeast Asia","Australia East","Brazil South","Canada Central","East US 2","East US","Central US","North Central US","UK South","Central India","South India","Japan East","Korea Central","North Europe","West Central US","West - Europe","West US 2","West US","South Central US"],"apiVersions":["2019-10-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.SaaS","namespace":"Microsoft.SaaS","authorizations":[{"applicationId":"f738ef14-47dc-4564-b53b-45069484ccc7","roleDefinitionId":"b131dd2d-387a-4cae-bb9b-3d021f80d1e6"},{"applicationId":"20e940b3-4c77-4b0b-9a53-9e16a1b010a7"}],"resourceTypes":[{"resourceType":"applications","locations":["global"],"apiVersions":["2018-03-01-beta"],"capabilities":"CrossResourceGroupResourceMove, - SupportsTags, SupportsLocation"},{"resourceType":"checknameavailability","locations":["global"],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"checkModernEligibility","locations":["global"],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"saasresources","locations":["global"],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"operationResults","locations":["global"],"apiVersions":["2018-03-01-beta"],"capabilities":"None"},{"resourceType":"operations","locations":["global"],"apiVersions":["2018-03-01-beta"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Search","namespace":"Microsoft.Search","authorization":{"applicationId":"408992c7-2af6-4ff1-92e3-65b73d2b5092","roleDefinitionId":"20FA3191-87CF-4C3D-9510-74CCB594A310"},"resourceTypes":[{"resourceType":"searchServices","locations":["West - US","West US 2","East US","East US 2","North Europe","West Europe","Southeast - Asia","East Asia","North Central US","South Central US","Central US","Japan - West","Japan East","Korea Central","Australia East","Australia Southeast","Brazil - South","Central India","West Central US","Canada Central","UK South","France - Central","South Africa North","UAE North"],"apiVersions":["2020-03-13","2019-10-01-Preview","2015-08-19","2015-02-28","2014-07-31-Preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"checkServiceNameAvailability","locations":[],"apiVersions":["2015-02-28","2014-07-31-Preview"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2020-03-13","2019-10-01-Preview","2015-08-19"],"capabilities":"None"},{"resourceType":"resourceHealthMetadata","locations":["West - US","West US 2","East US","East US 2","North Europe","West Europe","Southeast - Asia","East Asia","North Central US","South Central US","Central US","Japan - West","Japan East","Korea Central","Australia East","Australia Southeast","Brazil - South","Central India","West Central US","Canada Central","UK South","France - Central","South Africa North","UAE North"],"apiVersions":["2020-03-13","2019-10-01-Preview","2015-08-19"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2020-03-13","2019-10-01-Preview","2015-08-19","2015-02-28"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.SerialConsole","namespace":"Microsoft.SerialConsole","resourceTypes":[{"resourceType":"consoleServices","locations":[],"apiVersions":["2018-05-01"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2018-05-01"],"capabilities":"None"},{"resourceType":"locations/consoleServices","locations":["West - US 2"],"apiVersions":["2018-05-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2018-05-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ServiceFabricMesh","namespace":"Microsoft.ServiceFabricMesh","authorizations":[{"applicationId":"d10de03d-5ba3-497a-90e6-7ff8c9736059","roleDefinitionId":"BC13595A-E262-4621-929E-56FF90E6BF18"}],"resourceTypes":[{"resourceType":"applications","locations":["East - US","East US 2","West US","West US 2","South Central US","Central US","France - Central","West Europe","North Europe","UK South","UK West","Australia East","East - Asia","Southeast Asia","Korea Central","West India","Brazil South"],"apiVersions":["2018-09-01-preview","2018-07-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"networks","locations":["East US","East - US 2","West US","West US 2","South Central US","Central US","France Central","West - Europe","North Europe","UK South","UK West","Australia East","East Asia","Southeast - Asia","Korea Central","West India","Brazil South"],"apiVersions":["2018-09-01-preview","2018-07-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"volumes","locations":["East - US","East US 2","West US","West US 2","South Central US","Central US","France - Central","West Europe","North Europe","UK South","UK West","Australia East","East - Asia","Southeast Asia","Korea Central","West India","Brazil South"],"apiVersions":["2018-09-01-preview","2018-07-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"secrets","locations":["East - US","East US 2","West US","West US 2","South Central US","Central US","France - Central","West Europe","North Europe","UK South","UK West","Australia East","East - Asia","Southeast Asia","Korea Central","West India","Brazil South"],"apiVersions":["2018-09-01-preview","2018-07-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"gateways","locations":["East - US","East US 2","West US","West US 2","South Central US","Central US","France - Central","West Europe","North Europe","UK South","UK West","Australia East","East - Asia","Southeast Asia","Korea Central","West India","Brazil South"],"apiVersions":["2018-09-01-preview","2018-07-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2018-09-01-preview","2018-07-01-preview"],"capabilities":"None"},{"resourceType":"locations/applicationOperations","locations":["East - US","East US 2","West US","West US 2","South Central US","Central US","France - Central","West Europe","North Europe","UK South","UK West","Australia East","East - Asia","Southeast Asia","Korea Central","West India","Brazil South"],"apiVersions":["2018-09-01-preview","2018-07-01-preview"],"capabilities":"None"},{"resourceType":"locations/networkOperations","locations":["East - US","East US 2","West US","West US 2","South Central US","Central US","France - Central","West Europe","North Europe","UK South","UK West","Australia East","East - Asia","Southeast Asia","Korea Central","West India","Brazil South"],"apiVersions":["2018-09-01-preview","2018-07-01-preview"],"capabilities":"None"},{"resourceType":"locations/volumeOperations","locations":["East - US","East US 2","West US","West US 2","South Central US","Central US","France - Central","West Europe","North Europe","UK South","UK West","Australia East","East - Asia","Southeast Asia","Korea Central","West India","Brazil South"],"apiVersions":["2018-09-01-preview","2018-07-01-preview"],"capabilities":"None"},{"resourceType":"locations/gatewayOperations","locations":["East - US","East US 2","West US","West US 2","South Central US","Central US","France - Central","West Europe","North Europe","UK South","UK West","Australia East","East - Asia","Southeast Asia","Korea Central","West India","Brazil South"],"apiVersions":["2018-09-01-preview","2018-07-01-preview"],"capabilities":"None"},{"resourceType":"locations/secretOperations","locations":["East - US","East US 2","West US","West US 2","South Central US","Central US","France - Central","West Europe","North Europe","UK South","UK West","Australia East","East - Asia","Southeast Asia","Korea Central","West India","Brazil South"],"apiVersions":["2018-09-01-preview","2018-07-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2018-09-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.SoftwarePlan","namespace":"Microsoft.SoftwarePlan","resourceTypes":[{"resourceType":"hybridUseBenefits","locations":[],"apiVersions":["2019-06-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2019-06-01-preview"}],"capabilities":"SupportsExtension"},{"resourceType":"operations","locations":[],"apiVersions":["2019-06-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.SqlVirtualMachine","namespace":"Microsoft.SqlVirtualMachine","authorizations":[{"applicationId":"bd93b475-f9e2-476e-963d-b2daf143ffb9","roleDefinitionId":"f96bd990-ffdf-4c17-8ee3-77454d9c3f5d"}],"resourceTypes":[{"resourceType":"SqlVirtualMachineGroups","locations":["West - Central US","Brazil South","West Europe","Australia Central","Australia East","Canada - Central","East Asia","East US","East US 2","France South","Central India","West - India","Japan East","Korea South","North Central US","UK South","West US 2","Australia - Central 2","Australia Southeast","Canada East","Central US","France Central","South - India","Japan West","Korea Central","North Europe","South Central US","Southeast - Asia","UK West","West US","South Africa North","UAE Central","UAE North","Switzerland - North","Germany West Central","Norway East"],"apiVersions":["2017-03-01-preview"],"defaultApiVersion":"2017-03-01-preview","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"SqlVirtualMachines","locations":["West - Central US","Brazil South","West Europe","Australia Central","Australia East","Canada - Central","East Asia","East US","East US 2","France South","Central India","West - India","Japan East","Korea South","North Central US","UK South","West US 2","Australia - Central 2","Australia Southeast","Canada East","Central US","France Central","South - India","Japan West","Korea Central","North Europe","South Central US","Southeast - Asia","UK West","West US","South Africa North","UAE Central","UAE North","Switzerland - North","Germany West Central","Norway East"],"apiVersions":["2017-03-01-preview"],"defaultApiVersion":"2017-03-01-preview","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"SqlVirtualMachineGroups/AvailabilityGroupListeners","locations":["West - Central US","Brazil South","West Europe","Australia Central","Australia East","Canada - Central","East Asia","East US","East US 2","France South","Central India","West - India","Japan East","Korea South","North Central US","UK South","West US 2","Australia - Central 2","Australia Southeast","Canada East","Central US","France Central","South - India","Japan West","Korea Central","North Europe","South Central US","Southeast - Asia","UK West","West US","South Africa North","UAE Central","UAE North","Switzerland - North","Germany West Central","Norway East"],"apiVersions":["2017-03-01-preview"],"defaultApiVersion":"2017-03-01-preview","capabilities":"None"},{"resourceType":"operations","locations":["West - Central US","Brazil South","West Europe","Australia Central","Australia East","Canada - Central","East Asia","East US","East US 2","France South","Central India","West - India","Japan East","Korea South","North Central US","UK South","West US 2","Australia - Central 2","Australia Southeast","Canada East","Central US","France Central","South - India","Japan West","Korea Central","North Europe","South Central US","Southeast - Asia","UK West","West US","South Africa North","UAE Central","UAE North","Switzerland - North","Germany West Central","Norway East"],"apiVersions":["2017-03-01-preview"],"defaultApiVersion":"2017-03-01-preview","capabilities":"None"},{"resourceType":"Locations","locations":["West - Central US","Brazil South","West Europe","Australia Central","Australia East","Canada - Central","East Asia","East US","East US 2","France South","Central India","West - India","Japan East","Korea South","North Central US","UK South","West US 2","Australia - Central 2","Australia Southeast","Canada East","Central US","France Central","South - India","Japan West","Korea Central","North Europe","South Central US","Southeast - Asia","South Africa North","UK West","West US","UAE Central","UAE North","Switzerland - North","Germany West Central","Norway East"],"apiVersions":["2017-03-01-preview"],"defaultApiVersion":"2017-03-01-preview","capabilities":"None"},{"resourceType":"Locations/OperationTypes","locations":["West - Central US","Brazil South","West Europe","Australia Central","Australia East","Canada - Central","East Asia","East US","East US 2","France South","Central India","West - India","Japan East","Korea South","North Central US","UK South","West US 2","Australia - Central 2","Australia Southeast","Canada East","Central US","France Central","South - India","Japan West","Korea Central","North Europe","South Central US","Southeast - Asia","UK West","West US","South Africa North","UAE Central","UAE North","Switzerland - North","Germany West Central","Norway East"],"apiVersions":["2017-03-01-preview"],"defaultApiVersion":"2017-03-01-preview","capabilities":"None"},{"resourceType":"Locations/sqlVirtualMachineOperationResults","locations":["West - Central US","Brazil South","West Europe","Australia Central","Australia East","Canada - Central","East Asia","East US","East US 2","France South","Central India","West - India","Japan East","Korea South","North Central US","UK South","West US 2","Australia - Central 2","Australia Southeast","Canada East","Central US","France Central","South - India","Japan West","Korea Central","North Europe","South Central US","Southeast - Asia","UK West","West US","South Africa North","UAE Central","UAE North","Switzerland - North","Germany West Central","Norway East"],"apiVersions":["2017-03-01-preview"],"defaultApiVersion":"2017-03-01-preview","capabilities":"None"},{"resourceType":"Locations/sqlVirtualMachineGroupOperationResults","locations":["West - Central US","Brazil South","West Europe","Australia Central","Australia East","Canada - Central","East Asia","East US","East US 2","France South","Central India","West - India","Japan East","Korea South","North Central US","UK South","West US 2","Australia - Central 2","Australia Southeast","Canada East","Central US","France Central","South - India","Japan West","Korea Central","North Europe","South Central US","Southeast - Asia","UK West","West US","South Africa North","UAE Central","UAE North","Switzerland - North","Germany West Central","Norway East"],"apiVersions":["2017-03-01-preview"],"defaultApiVersion":"2017-03-01-preview","capabilities":"None"},{"resourceType":"Locations/availabilityGroupListenerOperationResults","locations":["West - Central US","Brazil South","West Europe","Australia Central","Australia East","Canada - Central","East Asia","East US","East US 2","France South","Central India","West - India","Japan East","Korea South","North Central US","UK South","West US 2","Australia - Central 2","Australia Southeast","Canada East","Central US","France Central","South - India","Japan West","Korea Central","North Europe","South Central US","Southeast - Asia","UK West","West US","South Africa North","UAE Central","UAE North","Switzerland - North","Germany West Central","Norway East"],"apiVersions":["2017-03-01-preview"],"defaultApiVersion":"2017-03-01-preview","capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.StorSimple","namespace":"Microsoft.StorSimple","resourceTypes":[{"resourceType":"managers","locations":["West + Europe","West US 2","West US","South Central US","Canada East","Central US + EUAP","East US 2 EUAP"],"apiVersions":["2020-10-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"templateSpecs","locations":["East + Asia","Southeast Asia","Australia East","Australia Central","Australia Central + 2","Australia Southeast","Brazil South","Canada Central","Canada East","Switzerland + North","Germany West Central","East US 2","East US","Central US","North Central + US","France Central","UK South","UK West","Central India","West India","South + India","Japan East","Japan West","Korea Central","Korea South","North Europe","Norway + East","UAE North","West Central US","West Europe","West US 2","West US","South + Central US","South Africa North","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-06-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"templateSpecs/versions","locations":["East + Asia","Southeast Asia","Australia East","Australia Central","Australia Central + 2","Australia Southeast","Brazil South","Canada Central","Canada East","Switzerland + North","Germany West Central","East US 2","East US","Central US","North Central + US","France Central","UK South","UK West","Central India","West India","South + India","Japan East","Japan West","Korea Central","Korea South","North Europe","Norway + East","UAE North","West Central US","West Europe","West US 2","West US","South + Central US","South Africa North","Central US EUAP","East US 2 EUAP"],"apiVersions":["2019-06-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Scheduler","namespace":"Microsoft.Scheduler","resourceTypes":[{"resourceType":"jobcollections","locations":["North + Central US","South Central US","North Europe","West Europe","East Asia","Southeast + Asia","West US","East US","Japan West","Japan East","Brazil South","Central + US","East US 2","Australia East","Australia Southeast","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2016-03-01","2016-01-01","2014-08-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":["North + Central US","South Central US","North Europe","West Europe","East Asia","Southeast + Asia","West US","East US","Japan West","Japan East","Brazil South","Central + US","East US 2","Australia East","Australia Southeast","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2016-03-01","2016-01-01","2014-08-01-preview"],"capabilities":"None"},{"resourceType":"operationResults","locations":["North + Central US","South Central US","North Europe","West Europe","East Asia","Southeast + Asia","West US","East US","Japan West","Japan East","Brazil South","Central + US","East US 2","Australia East","Australia Southeast","South India","Central + India","West India","Canada Central","Canada East","West US 2","West Central + US","UK South","UK West","Korea Central","Korea South","East US 2 EUAP","Central + US EUAP"],"apiVersions":["2016-03-01","2016-01-01","2014-08-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ScVmm","namespace":"Microsoft.ScVmm","authorizations":[{"applicationId":"319f651f-7ddb-4fc6-9857-7aef9250bd05","roleDefinitionId":"4fe6d683-8411-4247-8525-b6b5b8a80669"}],"resourceTypes":[{"resourceType":"Locations","locations":[],"apiVersions":["2020-06-05-preview"],"capabilities":"None"},{"resourceType":"Locations/OperationStatuses","locations":["East + US","West US 2","East US 2 EUAP","West Europe"],"apiVersions":["2020-06-05-preview"],"capabilities":"None"},{"resourceType":"Operations","locations":[],"apiVersions":["2020-06-05-preview"],"capabilities":"None"},{"resourceType":"vmmservers","locations":["East + US 2 EUAP"],"apiVersions":["2020-06-05-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"clouds","locations":["East + US 2 EUAP"],"apiVersions":["2020-06-05-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"VirtualNetworks","locations":["East + US 2 EUAP"],"apiVersions":["2020-06-05-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"VirtualMachineTemplates","locations":["East + US 2 EUAP"],"apiVersions":["2020-06-05-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"VirtualMachines","locations":["East + US 2 EUAP"],"apiVersions":["2020-06-05-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.SecurityDetonation","namespace":"Microsoft.SecurityDetonation","authorizations":[{"applicationId":"29820072-374d-49b8-945a-3941d7e9b468","roleDefinitionId":"4ddf1807-30b0-464a-9d16-a8822daf866b"}],"resourceTypes":[{"resourceType":"operations","locations":["Australia + East","Australia Southeast","Australia Central 2","Central US","East US","East + US 2","West US","West US 2","North Central US","South Central US","West Central + US","East Asia","Southeast Asia","Brazil South","Japan East","Japan West","North + Europe","West Europe","Central India","South India","West India","Canada Central","Canada + East","UK West","UK South","Korea Central","Korea South","France Central","France + South","South Africa North","UAE North","Australia Central","Switzerland North","Germany + West Central","Norway East","South Africa West","UAE Central","Switzerland + West","Germany North","Norway West","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-07-01-preview","2019-08-01-preview"],"capabilities":"None"},{"resourceType":"chambers","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-07-01-preview","2019-08-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"operationResults","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-07-01-preview","2019-08-01-preview"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["East + US 2 EUAP","Central US EUAP"],"apiVersions":["2020-07-01-preview","2019-08-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.SerialConsole","namespace":"Microsoft.SerialConsole","resourceTypes":[{"resourceType":"consoleServices","locations":[],"apiVersions":["2018-05-01"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2018-05-01"],"capabilities":"None"},{"resourceType":"locations/consoleServices","locations":["West + US 2","East US 2"],"apiVersions":["2018-05-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2018-05-01"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ServicesHub","namespace":"Microsoft.ServicesHub","authorizations":[{"applicationId":"9ed4cd8c-9a98-405f-966b-38ab1b0c24a3"}],"resourceTypes":[{"resourceType":"connectors","locations":["East + US"],"apiVersions":["2019-08-15-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"workspaces","locations":["East + US"],"apiVersions":["2019-08-15-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"supportOfferingEntitlement","locations":["East + US"],"apiVersions":["2019-08-15-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2019-08-15-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Singularity","namespace":"Microsoft.Singularity","authorizations":[{"applicationId":"349e15d0-1c96-4829-95e5-7fc8fb358ff3","roleDefinitionId":"da5c10f8-3b94-4076-bb95-1421b4518aee"}],"resourceTypes":[{"resourceType":"accounts","locations":["Central + US","South Central US","West Europe","West US 2","East US"],"apiVersions":["2020-12-01-preview"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"accounts/storageContainers","locations":["Central + US","South Central US","West Europe","West US 2","East US"],"apiVersions":["2020-12-01-preview"],"capabilities":"None"},{"resourceType":"accounts/accountQuotaPolicies","locations":["Central + US","South Central US","West Europe","West US 2","East US"],"apiVersions":["2020-12-01-preview"],"capabilities":"None"},{"resourceType":"accounts/groupPolicies","locations":["Central + US","South Central US","West Europe","West US 2","East US"],"apiVersions":["2020-12-01-preview"],"capabilities":"None"},{"resourceType":"accounts/jobs","locations":["Central + US","South Central US","West Europe","West US 2","East US"],"apiVersions":["2020-12-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":["Central + US","Australia Central","Australia East","Australia Southeast","Canada Central","Canada + East","Central India","East Asia","East US","East US 2","France Central","Germany + West Central","Japan East","Japan West","North Central US","North Europe","Norway + East","South Africa North","South Central US","South India","Southeast Asia","Switzerland + North","West Central US","West Europe","West India","West US","West US 2","UAE + North","UK West","UK South","Brazil South","Korea South","Korea Central"],"apiVersions":["2020-12-01-preview"],"capabilities":"None"},{"resourceType":"locations/instanceTypeSeries","locations":["Central + US","South Central US","West Europe","Australia Central","Australia East","Australia + Southeast","Canada Central","Canada East","Central India","East Asia","East + US 2","France Central","Germany West Central","Japan East","Japan West","North + Central US","North Europe","Norway East","South Africa North","South India","Southeast + Asia","Switzerland North","West Central US","West India","West US","West US + 2","UAE North","UK West","UK South","Brazil South","Korea South","Korea Central","East + US"],"apiVersions":["2020-12-01-preview"],"capabilities":"None"},{"resourceType":"locations/instanceTypeSeries/instanceTypes","locations":["Central + US","South Central US","West Europe","Australia Central","Australia East","Australia + Southeast","Canada Central","Canada East","Central India","East Asia","East + US 2","France Central","Germany West Central","Japan East","Japan West","North + Central US","North Europe","Norway East","South Africa North","South India","Southeast + Asia","Switzerland North","West Central US","West India","West US","West US + 2","UAE North","UK West","UK South","Brazil South","Korea South","Korea Central","East + US"],"apiVersions":["2020-12-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationResults","locations":["Central + US","South Central US","West Europe","Australia Central","Australia East","Australia + Southeast","Canada Central","Canada East","Central India","East Asia","East + US 2","France Central","Germany West Central","Japan East","Japan West","North + Central US","North Europe","Norway East","South Africa North","South India","Southeast + Asia","Switzerland North","West Central US","West India","West US","West US + 2","UAE North","UK West","UK South","Brazil South","Korea South","Korea Central","East + US"],"apiVersions":["2020-12-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["Australia + Central","Australia East","Australia Southeast","Canada Central","Canada East","Central + India","Central US","East Asia","East US","East US 2","France Central","Germany + West Central","Japan East","Japan West","North Central US","North Europe","Norway + East","South Africa North","South Central US","South India","Southeast Asia","Switzerland + North","West Central US","West Europe","West India","West US","West US 2","UAE + North","UK West","UK South","Brazil South","Korea South","Korea Central"],"apiVersions":["2020-12-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.SoftwarePlan","namespace":"Microsoft.SoftwarePlan","resourceTypes":[{"resourceType":"hybridUseBenefits","locations":[],"apiVersions":["2019-06-01-preview"],"apiProfiles":[{"profileVersion":"2018-06-01-profile","apiVersion":"2019-06-01-preview"}],"capabilities":"SupportsExtension"},{"resourceType":"operations","locations":[],"apiVersions":["2019-06-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.StorSimple","namespace":"Microsoft.StorSimple","resourceTypes":[{"resourceType":"managers","locations":["West US","East US","North Europe","West Europe","Brazil South","East Asia","Southeast Asia","West Central US","Japan East","Japan West","Australia East","Australia - Southeast"],"apiVersions":["2017-06-01","2017-05-15","2017-01-01","2016-10-01","2016-06-01","2015-03-15","2014-09-01"],"capabilities":"SupportsTags, + Southeast","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-06-01","2017-05-15","2017-01-01","2016-10-01","2016-06-01","2015-03-15","2014-09-01"],"capabilities":"SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":["West Central US","Southeast Asia"],"apiVersions":["2016-10-01","2016-06-01","2015-03-15","2014-09-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Subscription","namespace":"Microsoft.Subscription","authorizations":[{"applicationId":"e3335adb-5ca0-40dc-b8d3-bedc094e523b"},{"applicationId":"5da7367f-09c8-493e-8fd4-638089cddec3"}],"resourceTypes":[{"resourceType":"SubscriptionDefinitions","locations":["West US"],"apiVersions":["2017-11-01-preview"],"capabilities":"None"},{"resourceType":"SubscriptionOperations","locations":["West US"],"apiVersions":["2019-10-01-preview","2018-11-01-preview","2018-03-01-preview","2017-11-01-preview"],"capabilities":"None"},{"resourceType":"CreateSubscription","locations":["Central US"],"apiVersions":["2019-10-01-preview","2018-11-01-preview","2018-03-01-preview"],"capabilities":"SupportsExtension"},{"resourceType":"operations","locations":["West US"],"apiVersions":["2017-11-01-preview"],"capabilities":"None"},{"resourceType":"cancel","locations":["West - US"],"apiVersions":["2019-10-01-preview","2019-03-01-preview"],"capabilities":"None"},{"resourceType":"rename","locations":["West - US"],"apiVersions":["2019-10-01-preview","2019-03-01-preview"],"capabilities":"None"},{"resourceType":"enable","locations":["West - US"],"apiVersions":["2019-10-01-preview","2019-03-01-preview"],"capabilities":"None"},{"resourceType":"subscriptions","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"operationResults","locations":["Central - US"],"apiVersions":["2019-10-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/microsoft.support","namespace":"microsoft.support","authorizations":[{"applicationId":"959678cf-d004-4c22-82a6-d2ce549a58b8","roleDefinitionId":"81a3dd11-5123-4ec3-9485-772b0a27d1bd"}],"resourceTypes":[{"resourceType":"operations","locations":["North + US"],"apiVersions":["2020-09-01","2019-10-01-preview","2019-03-01-preview"],"capabilities":"None"},{"resourceType":"rename","locations":["West + US"],"apiVersions":["2020-09-01","2019-10-01-preview","2019-03-01-preview"],"capabilities":"None"},{"resourceType":"enable","locations":["West + US"],"apiVersions":["2020-09-01","2019-10-01-preview","2019-03-01-preview"],"capabilities":"None"},{"resourceType":"subscriptions","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"aliases","locations":[],"apiVersions":["2020-09-01","2019-10-01-preview"],"capabilities":"None"},{"resourceType":"operationResults","locations":["Central + US"],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"acceptChangeTenant","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"changeTenantStatus","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"},{"resourceType":"changeTenantRequest","locations":[],"apiVersions":["2019-10-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/microsoft.support","namespace":"microsoft.support","authorizations":[{"applicationId":"959678cf-d004-4c22-82a6-d2ce549a58b8","roleDefinitionId":"81a3dd11-5123-4ec3-9485-772b0a27d1bd"}],"resourceTypes":[{"resourceType":"operations","locations":["North Central US","South Central US","Central US","West Europe","North Europe","West US","East US","East US 2","Japan East","Japan West","Brazil South","Southeast Asia","East Asia","Australia East","Australia Southeast"],"apiVersions":["2020-04-01","2019-05-01-preview","2015-07-01-Preview","2015-03-01"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2020-04-01","2019-05-01-preview"],"capabilities":"None"},{"resourceType":"services","locations":["North @@ -6247,141 +7662,95 @@ interactions: Asia","East Asia","Australia East","Australia Southeast"],"apiVersions":["2020-04-01","2019-05-01-preview"],"capabilities":"None"},{"resourceType":"operationsstatus","locations":["North Central US","South Central US","Central US","West Europe","North Europe","West US","East US","East US 2","Japan East","Japan West","Brazil South","Southeast - Asia","East Asia","Australia East","Australia Southeast"],"apiVersions":["2020-04-01","2019-05-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Synapse","namespace":"Microsoft.Synapse","authorizations":[{"applicationId":"9e09aefc-b2e5-4d19-9f74-3e3e8b11a57b","roleDefinitionId":"a53b114a-452b-4d20-bcd6-c51c3c8c5878","managedByRoleDefinitionId":"ede175bc-31e5-4074-ba98-e62b895797aa"},{"applicationId":"1ac05c7e-12d2-4605-bf9d-549d7041c6b3","roleDefinitionId":"48e77487-c9fa-4abe-8484-71ebdebdbbc2"},{"applicationId":"ec52d13d-2e85-410e-a89a-8c79fb6a32ac","roleDefinitionId":"c3a447c3-a63a-4905-a125-c6856f9d0e17"},{"applicationId":"5ebe1e69-13dd-4953-84fa-a74ed591db2e","roleDefinitionId":"e8ebe3e8-569b-4ad3-bea1-5b274fe0c49f"},{"applicationId":"2e458d69-0892-4655-b713-4f7b182315dd","roleDefinitionId":"45EA3B16-D4DD-48CA-BF0D-BBE644C0C0AF"}],"resourceTypes":[{"resourceType":"workspaces","locations":["West - US 2","East US","North Europe","West Europe","Southeast Asia","Australia East","West - Central US","South Central US","East US 2","UK South"],"apiVersions":["2019-06-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"workspaces/bigDataPools","locations":["West - US 2","East US","North Europe","West Europe","Southeast Asia","Australia East","West - Central US","South Central US","East US 2","UK South"],"apiVersions":["2019-06-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"workspaces/sqlPools","locations":["West - US 2","East US","North Europe","West Europe","Southeast Asia","Australia East","West - Central US","South Central US","East US 2","UK South"],"apiVersions":["2019-06-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"workspaces/operationStatuses","locations":["West - US 2","East US","North Europe","West Europe","Southeast Asia","Australia East","West - Central US","South Central US","East US 2","UK South"],"apiVersions":["2019-06-01-preview"],"capabilities":"None"},{"resourceType":"workspaces/operationResults","locations":["West - US 2","East US","North Europe","West Europe","Southeast Asia","Australia East","West - Central US","South Central US","East US 2","UK South"],"apiVersions":["2019-06-01-preview"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2019-06-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["West - US 2","East US","North Europe","West Europe","Southeast Asia","Australia East","West - Central US","South Central US","East US 2","UK South"],"apiVersions":["2019-06-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.TimeSeriesInsights","namespace":"Microsoft.TimeSeriesInsights","authorizations":[{"applicationId":"120d688d-1518-4cf7-bd38-182f158850b6","roleDefinitionId":"5a43abdf-bb87-42c4-9e56-1c24bf364150"}],"resourceTypes":[{"resourceType":"environments","locations":["South - Central Us","East US 2","West US","East US","North Europe","West Europe","West - US 2","Central US","Southeast Asia","Australia East","Australia Southeast","East - Asia","UK West","UK South"],"apiVersions":["2018-08-15-preview","2017-11-15","2017-02-28-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"environments/eventsources","locations":["South - Central Us","East US 2","West US","East US","North Europe","West Europe","West - US 2","Central US","Southeast Asia","Australia East","Australia Southeast","East - Asia","UK West","UK South"],"apiVersions":["2018-08-15-preview","2017-11-15","2017-02-28-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"environments/referenceDataSets","locations":["South - Central Us","East US 2","West US","East US","North Europe","West Europe","West - US 2","Central US","Southeast Asia","Australia East","Australia Southeast","East - Asia","UK West","UK South"],"apiVersions":["2018-08-15-preview","2017-11-15","2017-02-28-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"environments/accessPolicies","locations":["South - Central Us","East US 2","West US","East US","North Europe","West Europe","West - US 2","Central US","Southeast Asia","Australia East","Australia Southeast","East - Asia","UK West","UK South"],"apiVersions":["2018-08-15-preview","2017-11-15","2017-02-28-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["South - Central Us","East US 2","West US","East US","East US 2 EUAP","North Europe","West - Europe","Southeast Asia","Australia East","Australia Southeast","East Asia","UK - West","UK South","West US 2","Central US","West Central US","North Central - US"],"apiVersions":["2017-02-28-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Token","namespace":"Microsoft.Token","authorizations":[{"applicationId":"fe053c5f-3692-4f14-aef2-ee34fc081cae"}],"resourceTypes":[{"resourceType":"stores","locations":["Brazil - South","Central US","North Europe","Japan West","Australia Southeast","West - US","West Central US"],"apiVersions":["2018-08-01-preview"],"defaultApiVersion":"2018-08-01-preview","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"stores/accessPolicies","locations":["Brazil - South","Central US","North Europe","Japan West","Australia Southeast","West - US","West Central US"],"apiVersions":["2018-08-01-preview"],"defaultApiVersion":"2018-08-01-preview","capabilities":"None"},{"resourceType":"stores/services","locations":["Brazil - South","Central US","North Europe","Japan West","Australia Southeast","West - US","West Central US"],"apiVersions":["2018-08-01-preview"],"defaultApiVersion":"2018-08-01-preview","capabilities":"None"},{"resourceType":"stores/services/tokens","locations":["Brazil - South","Central US","North Europe","Japan West","Australia Southeast","West - US","West Central US"],"apiVersions":["2018-08-01-preview"],"defaultApiVersion":"2018-08-01-preview","capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/microsoft.visualstudio","namespace":"microsoft.visualstudio","authorization":{"applicationId":"499b84ac-1321-427f-aa17-267ca6975798","roleDefinitionId":"6a18f445-86f0-4e2e-b8a9-6b9b5677e3d8"},"resourceTypes":[{"resourceType":"account","locations":["North - Central US","South Central US","West Central US","East US","East US 2","West - US","Central US","North Europe","West Europe","East Asia","Southeast Asia","Japan - East","Japan West","Brazil South","Australia East","West India","Central India","South - India","West US 2","Canada Central","UK South"],"apiVersions":["2014-04-01-preview","2014-02-26"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"operations","locations":["North Central - US","South Central US","West Central US","East US","East US 2","West US","Central - US","North Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan - West","Brazil South","Australia East","West India","Central India","South - India","West US 2","Canada Central","UK South"],"apiVersions":["2014-04-01-preview","2014-02-26"],"capabilities":"None"},{"resourceType":"account/project","locations":["East - Asia","Southeast Asia","Australia East","Brazil South","Canada Central","Japan - East","Japan West","North Europe","West Europe","West India","Central India","South - India","Central US","East US","East US 2","North Central US","South Central - US","West Central US","UK South","West US","West US 2"],"apiVersions":["2014-04-01-preview","2014-02-26"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"account/extension","locations":["North - Central US","South Central US","West Central US","East US","East US 2","West - US","Central US","North Europe","West Europe","East Asia","Southeast Asia","Japan - East","Japan West","Brazil South","Australia East","West India","Central India","South - India","West US 2","Canada Central","UK South"],"apiVersions":["2014-04-01-preview","2014-02-26"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"checkNameAvailability","locations":["North - Central US","South Central US","West Central US","East US","East US 2","West - US","Central US","North Europe","West Europe","East Asia","Southeast Asia","Japan - East","Japan West","Brazil South","Australia East","West India","Central India","South - India","West US 2","Canada Central","UK South"],"apiVersions":["2014-04-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.VMware","namespace":"Microsoft.VMware","authorizations":[{"applicationId":"ac9dc5fe-b644-4832-9d03-d9f1ab70c5f7","roleDefinitionId":"dd032bd9-65cc-4171-b688-c612566422ae"}],"resourceTypes":[{"resourceType":"Locations","locations":[],"apiVersions":["2019-12-20-privatepreview"],"capabilities":"None"},{"resourceType":"Locations/OperationStatuses","locations":["East - US","West US","East US 2 EUAP","West Europe"],"apiVersions":["2019-12-20-privatepreview"],"capabilities":"None"},{"resourceType":"Operations","locations":[],"apiVersions":["2019-12-20-privatepreview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.VMwareCloudSimple","namespace":"Microsoft.VMwareCloudSimple","authorizations":[{"applicationId":"d96199e7-4674-4bbf-a1c6-ddf93682f5ee","roleDefinitionId":"533012ca-a3e7-44e4-93b4-3143f8b9409d","allowedThirdPartyExtensions":[{"name":"CloudSimpleExtension"}]}],"resourceTypes":[{"resourceType":"virtualMachines","locations":["South - Central US","Switzerland North","Switzerland West","West Europe","East US","West - US"],"apiVersions":["2019-04-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"dedicatedCloudNodes","locations":["South - Central US","Switzerland North","Switzerland West","West Europe","East US","West - US"],"apiVersions":["2019-04-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"dedicatedCloudServices","locations":["South - Central US","Switzerland North","Switzerland West","West Europe","East US","West - US"],"apiVersions":["2019-04-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"locations","locations":[],"apiVersions":["2019-04-01"],"capabilities":"None"},{"resourceType":"locations/usages","locations":["South - Central US","Switzerland North","Switzerland West","West Europe","East US","West - US"],"apiVersions":["2019-04-01"],"capabilities":"None"},{"resourceType":"locations/availabilities","locations":["South - Central US","Switzerland North","Switzerland West","West Europe","East US","West - US"],"apiVersions":["2019-04-01"],"capabilities":"None"},{"resourceType":"locations/privateClouds","locations":["South - Central US","Switzerland North","Switzerland West","West Europe","East US","West - US"],"apiVersions":["2019-04-01"],"capabilities":"None"},{"resourceType":"locations/privateClouds/virtualNetworks","locations":["South - Central US","Switzerland North","Switzerland West","West Europe","East US","West - US"],"apiVersions":["2019-04-01"],"capabilities":"None"},{"resourceType":"locations/privateClouds/virtualMachineTemplates","locations":["South - Central US","Switzerland North","Switzerland West","West Europe","East US","West - US"],"apiVersions":["2019-04-01"],"capabilities":"None"},{"resourceType":"locations/privateClouds/resourcePools","locations":["South - Central US","Switzerland North","Switzerland West","West Europe","East US","West - US"],"apiVersions":["2019-04-01"],"capabilities":"None"},{"resourceType":"locations/operationresults","locations":["South - Central US","Switzerland North","Switzerland West","West Europe","East US","West - US"],"apiVersions":["2019-04-01"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2019-04-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.VnfManager","namespace":"Microsoft.VnfManager","authorizations":[{"applicationId":"b8ed041c-aa91-418e-8f47-20c70abc2de1","roleDefinitionId":"c8d69fc0-f0ed-43b3-bf1d-4dfdaacc6d2d"}],"resourceTypes":[{"resourceType":"Operations","locations":[],"apiVersions":["2020-01-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":["East + Asia","East Asia","Australia East","Australia Southeast"],"apiVersions":["2020-04-01","2019-05-01-preview"],"capabilities":"None"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.VMware","namespace":"Microsoft.VMware","authorizations":[{"applicationId":"ac9dc5fe-b644-4832-9d03-d9f1ab70c5f7","roleDefinitionId":"dd032bd9-65cc-4171-b688-c612566422ae"}],"resourceTypes":[{"resourceType":"Locations","locations":[],"apiVersions":["2019-12-20-privatepreview"],"capabilities":"None"},{"resourceType":"Locations/OperationStatuses","locations":["East + US","West US","East US 2 EUAP","West Europe"],"apiVersions":["2019-12-20-privatepreview"],"capabilities":"None"},{"resourceType":"Operations","locations":[],"apiVersions":["2019-12-20-privatepreview"],"capabilities":"None"},{"resourceType":"ArcZones","locations":["East + US 2 EUAP"],"apiVersions":["2019-12-20-privatepreview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"VCenters","locations":["East + US 2 EUAP"],"apiVersions":["2019-12-20-privatepreview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"ResourcePools","locations":["East + US 2 EUAP"],"apiVersions":["2019-12-20-privatepreview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"VirtualNetworks","locations":["East + US 2 EUAP"],"apiVersions":["2019-12-20-privatepreview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"VirtualMachineTemplates","locations":["East + US 2 EUAP"],"apiVersions":["2019-12-20-privatepreview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"VirtualMachines","locations":["East + US 2 EUAP"],"apiVersions":["2019-12-20-privatepreview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.VnfManager","namespace":"Microsoft.VnfManager","authorizations":[{"applicationId":"b8ed041c-aa91-418e-8f47-20c70abc2de1","roleDefinitionId":"c8d69fc0-f0ed-43b3-bf1d-4dfdaacc6d2d"}],"resourceTypes":[{"resourceType":"Operations","locations":[],"apiVersions":["2020-01-01-preview"],"capabilities":"None"},{"resourceType":"locations","locations":["East US"],"apiVersions":["2020-01-01-preview"],"capabilities":"None"},{"resourceType":"locations/operationstatuses","locations":["East - US","North Europe","East Asia","East US 2 EUAP"],"apiVersions":["2020-01-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.VSOnline","namespace":"Microsoft.VSOnline","authorizations":[{"applicationId":"9bd5ab7f-4031-4045-ace9-6bebbad202f6","roleDefinitionId":"b879ac78-f1e6-448d-ab4c-5908cd5967c1"}],"resourceTypes":[{"resourceType":"accounts","locations":["West - Europe","East US","West Us 2","Southeast Asia"],"apiVersions":["2019-07-01-preview","2019-07-01-beta","2019-07-01-alpha"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"plans","locations":["West - Europe","East US","West Us 2","Southeast Asia"],"apiVersions":["2020-05-26-preview","2020-05-26-beta","2020-05-26-alpha","2019-07-01-preview","2019-07-01-beta","2019-07-01-alpha"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, - SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2020-05-26-privatepreview","2020-05-26-preview","2020-05-26-beta","2020-05-26-alpha","2019-07-01-privatepreview","2019-07-01-preview","2019-07-01-beta","2019-07-01-alpha"],"capabilities":"None"},{"resourceType":"registeredSubscriptions","locations":[],"apiVersions":["2020-05-26-privatepreview","2020-05-26-preview","2020-05-26-beta","2020-05-26-alpha","2019-07-01-privatepreview","2019-07-01-preview","2019-07-01-beta","2019-07-01-alpha"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.WindowsESU","namespace":"Microsoft.WindowsESU","authorizations":[{"applicationId":"e6c69915-bcc7-4335-b655-c62f949d691b","roleDefinitionId":"9bccffcd-2d3d-4b7c-a2cb-bb26e77b4810"}],"resourceTypes":[{"resourceType":"Operations","locations":[],"apiVersions":["2019-09-16-preview"],"capabilities":"None"},{"resourceType":"Locations","locations":[],"apiVersions":["2019-09-16-preview"],"capabilities":"None"},{"resourceType":"Locations/OperationStatuses","locations":["East - US","West Europe"],"apiVersions":["2019-10-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.WorkloadBuilder","namespace":"Microsoft.WorkloadBuilder","authorizations":[{"applicationId":"63c2c773-89fe-4164-a02f-b8c7fc1772ae","roleDefinitionId":"322358fa-ea51-4f6c-b9d6-3be64015f074"}],"resourceTypes":[{"resourceType":"Locations","locations":[],"apiVersions":["2020-07-01-privatepreview"],"capabilities":"None"},{"resourceType":"Locations/OperationStatuses","locations":["West - Central US","East US 2 EUAP"],"apiVersions":["2020-07-01-privatepreview"],"capabilities":"None"},{"resourceType":"Operations","locations":[],"apiVersions":["2020-07-01-privatepreview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.WorkloadMonitor","namespace":"Microsoft.WorkloadMonitor","resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2018-08-31-preview"],"capabilities":"None"},{"resourceType":"componentsSummary","locations":[],"apiVersions":["2018-08-31-preview"],"capabilities":"None"},{"resourceType":"monitorInstancesSummary","locations":[],"apiVersions":["2018-08-31-preview"],"capabilities":"None"},{"resourceType":"monitorInstances","locations":[],"apiVersions":["2018-08-31-preview"],"capabilities":"SupportsExtension"},{"resourceType":"components","locations":[],"apiVersions":["2018-08-31-preview"],"capabilities":"SupportsExtension"},{"resourceType":"monitors","locations":[],"apiVersions":["2018-08-31-preview"],"capabilities":"SupportsExtension"},{"resourceType":"notificationSettings","locations":[],"apiVersions":["2018-08-31-preview"],"capabilities":"SupportsExtension"}],"registrationState":"Registered","registrationPolicy":"RegistrationFree"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Myget.PackageManagement","namespace":"Myget.PackageManagement","resourceTypes":[{"resourceType":"services","locations":["West + US","North Europe","East Asia","East US 2 EUAP"],"apiVersions":["2020-01-01-preview"],"capabilities":"None"},{"resourceType":"devices","locations":["East + US 2 EUAP"],"apiVersions":["2020-01-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"vnfs","locations":["East + US 2 EUAP"],"apiVersions":["2020-01-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"vendors/vnfs","locations":["East + US 2 EUAP"],"apiVersions":["2020-01-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.WindowsESU","namespace":"Microsoft.WindowsESU","authorizations":[{"applicationId":"e6c69915-bcc7-4335-b655-c62f949d691b","roleDefinitionId":"9bccffcd-2d3d-4b7c-a2cb-bb26e77b4810"}],"resourceTypes":[{"resourceType":"Operations","locations":[],"apiVersions":["2019-09-16-preview"],"capabilities":"None"},{"resourceType":"Locations","locations":[],"apiVersions":["2019-09-16-preview"],"capabilities":"None"},{"resourceType":"Locations/OperationStatuses","locations":["East + US","West Europe"],"apiVersions":["2019-10-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.WindowsIoT","namespace":"Microsoft.WindowsIoT","resourceTypes":[{"resourceType":"DeviceServices","locations":["West + US","East US","East US 2 EUAP"],"apiVersions":["2019-06-01","2018-02-16-preview"],"capabilities":"SupportsTags, + SupportsLocation"},{"resourceType":"operations","locations":["West US","East + US","West Central US","East US 2 EUAP"],"apiVersions":["2019-06-01","2018-02-16-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.WorkloadBuilder","namespace":"Microsoft.WorkloadBuilder","authorizations":[{"applicationId":"63c2c773-89fe-4164-a02f-b8c7fc1772ae","roleDefinitionId":"322358fa-ea51-4f6c-b9d6-3be64015f074"}],"resourceTypes":[{"resourceType":"Locations","locations":[],"apiVersions":["2020-07-01-privatepreview"],"capabilities":"None"},{"resourceType":"Locations/OperationStatuses","locations":["West + Central US","East US 2 EUAP"],"apiVersions":["2020-07-01-privatepreview"],"capabilities":"None"},{"resourceType":"Operations","locations":[],"apiVersions":["2020-07-01-privatepreview"],"capabilities":"None"},{"resourceType":"workloads","locations":["East + US 2 EUAP"],"apiVersions":["2020-07-01-privatepreview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"workloads/versions/artifacts","locations":["East + US 2 EUAP"],"apiVersions":["2020-07-01-privatepreview"],"capabilities":"None"},{"resourceType":"workloads/versions","locations":["East + US 2 EUAP"],"apiVersions":["2020-07-01-privatepreview"],"capabilities":"None"},{"resourceType":"workloads/instances","locations":["East + US 2 EUAP"],"apiVersions":["2020-07-01-privatepreview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.WorkloadMonitor","namespace":"Microsoft.WorkloadMonitor","authorizations":[{"applicationId":"ddc728e9-153d-4032-ab80-80e57af7a56f","roleDefinitionId":"553f60de-cc15-412f-9fdf-8f5152e7e0f5","managedByRoleDefinitionId":"553f60de-cc15-412f-9fdf-8f5152e7e0f5"}],"resourceTypes":[{"resourceType":"operations","locations":[],"apiVersions":["2020-01-13-preview","2018-08-31-preview"],"capabilities":"None"},{"resourceType":"componentsSummary","locations":[],"apiVersions":["2018-08-31-preview"],"capabilities":"None"},{"resourceType":"monitorInstancesSummary","locations":[],"apiVersions":["2018-08-31-preview"],"capabilities":"None"},{"resourceType":"monitorInstances","locations":[],"apiVersions":["2018-08-31-preview"],"capabilities":"SupportsExtension"},{"resourceType":"components","locations":[],"apiVersions":["2018-08-31-preview"],"capabilities":"SupportsExtension"},{"resourceType":"monitors","locations":[],"apiVersions":["2020-01-13-preview","2018-08-31-preview"],"capabilities":"SupportsExtension"},{"resourceType":"notificationSettings","locations":[],"apiVersions":["2018-08-31-preview"],"capabilities":"SupportsExtension"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Myget.PackageManagement","namespace":"Myget.PackageManagement","resourceTypes":[{"resourceType":"services","locations":["West Europe"],"apiVersions":["2015-01-01"],"capabilities":"SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2015-01-01"],"capabilities":"None"},{"resourceType":"listCommunicationPreference","locations":[],"apiVersions":["2015-01-01"],"capabilities":"None"},{"resourceType":"updateCommunicationPreference","locations":[],"apiVersions":["2015-01-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Paraleap.CloudMonix","namespace":"Paraleap.CloudMonix","resourceTypes":[{"resourceType":"services","locations":["West US"],"apiVersions":["2016-08-10"],"capabilities":"SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2016-08-10"],"capabilities":"None"},{"resourceType":"listCommunicationPreference","locations":[],"apiVersions":["2016-08-10"],"capabilities":"None"},{"resourceType":"updateCommunicationPreference","locations":[],"apiVersions":["2016-08-10"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Pokitdok.Platform","namespace":"Pokitdok.Platform","resourceTypes":[{"resourceType":"services","locations":["West US"],"apiVersions":["2016-05-17"],"capabilities":"SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2016-05-17"],"capabilities":"None"},{"resourceType":"listCommunicationPreference","locations":[],"apiVersions":["2016-05-17"],"capabilities":"None"},{"resourceType":"updateCommunicationPreference","locations":[],"apiVersions":["2016-05-17"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/RavenHq.Db","namespace":"RavenHq.Db","resourceTypes":[{"resourceType":"databases","locations":["East US","North Europe","West Europe"],"apiVersions":["2016-07-18"],"capabilities":"SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2016-07-18"],"capabilities":"None"},{"resourceType":"listCommunicationPreference","locations":[],"apiVersions":["2016-07-18"],"capabilities":"None"},{"resourceType":"updateCommunicationPreference","locations":[],"apiVersions":["2016-07-18"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Raygun.CrashReporting","namespace":"Raygun.CrashReporting","resourceTypes":[{"resourceType":"apps","locations":["East - US"],"apiVersions":["2015-01-01"],"capabilities":"SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2015-01-01"],"capabilities":"None"},{"resourceType":"listCommunicationPreference","locations":[],"apiVersions":["2015-01-01"],"capabilities":"None"},{"resourceType":"updateCommunicationPreference","locations":[],"apiVersions":["2015-01-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Sendgrid.Email","namespace":"Sendgrid.Email","resourceTypes":[{"resourceType":"accounts","locations":["Australia - East","Australia Southeast","Brazil South","Canada Central","Canada East","Central - India","Central US","East Asia","East US","East US 2","France Central","France - South","Japan East","Japan West","Korea Central","Korea South","North Central - US","North Europe","South Africa North","South Africa West","South Central - US","South India","Southeast Asia","UAE Central","UAE North","UK South","UK - West","West Central US","West Europe","West India","West US","West US 2"],"apiVersions":["2015-01-01"],"capabilities":"SupportsTags, - SupportsLocation"},{"resourceType":"operations","locations":["Australia East","Australia - Southeast","Brazil South","Canada Central","Canada East","Central India","Central - US","East Asia","East US","East US 2","France Central","France South","Japan - East","Japan West","Korea Central","Korea South","North Central US","North - Europe","South Africa North","South Africa West","South Central US","South - India","Southeast Asia","UAE Central","UAE North","UK South","UK West","West - Central US","West Europe","West India","West US","West US 2"],"apiVersions":["2015-01-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Sparkpost.Basic","namespace":"Sparkpost.Basic","resourceTypes":[{"resourceType":"services","locations":["West + US"],"apiVersions":["2015-01-01"],"capabilities":"SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2015-01-01"],"capabilities":"None"},{"resourceType":"listCommunicationPreference","locations":[],"apiVersions":["2015-01-01"],"capabilities":"None"},{"resourceType":"updateCommunicationPreference","locations":[],"apiVersions":["2015-01-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Sparkpost.Basic","namespace":"Sparkpost.Basic","resourceTypes":[{"resourceType":"services","locations":["West US"],"apiVersions":["2016-08-01"],"capabilities":"SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2016-08-01"],"capabilities":"None"},{"resourceType":"listCommunicationPreference","locations":[],"apiVersions":["2016-08-01"],"capabilities":"None"},{"resourceType":"updateCommunicationPreference","locations":[],"apiVersions":["2016-08-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/stackify.retrace","namespace":"stackify.retrace","resourceTypes":[{"resourceType":"services","locations":["West - US"],"apiVersions":["2016-01-01"],"capabilities":"SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2016-01-01"],"capabilities":"None"},{"resourceType":"listCommunicationPreference","locations":[],"apiVersions":["2016-01-01"],"capabilities":"None"},{"resourceType":"updateCommunicationPreference","locations":[],"apiVersions":["2016-01-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/U2uconsult.TheIdentityHub","namespace":"U2uconsult.TheIdentityHub","resourceTypes":[{"resourceType":"services","locations":["West - Europe"],"apiVersions":["2015-06-15"],"capabilities":"SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2015-06-15"],"capabilities":"None"},{"resourceType":"listCommunicationPreference","locations":[],"apiVersions":["2015-06-15"],"capabilities":"None"},{"resourceType":"updateCommunicationPreference","locations":[],"apiVersions":["2015-06-15"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Wandisco.Fusion","namespace":"Wandisco.Fusion","authorizations":[{"applicationId":"37b36496-3f4f-443a-a406-5e0a0535f6a3","roleDefinitionId":"b10cdc1f-fd21-4fe9-bae7-7e2e25a91a21"}],"resourceTypes":[{"resourceType":"Locations","locations":["East - US"],"apiVersions":["2019-10-01","2019-09-01-preview"],"capabilities":"None"},{"resourceType":"Locations/operationStatuses","locations":["East + US"],"apiVersions":["2016-01-01"],"capabilities":"SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2016-01-01"],"capabilities":"None"},{"resourceType":"listCommunicationPreference","locations":[],"apiVersions":["2016-01-01"],"capabilities":"None"},{"resourceType":"updateCommunicationPreference","locations":[],"apiVersions":["2016-01-01"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Wandisco.Fusion","namespace":"Wandisco.Fusion","authorizations":[{"applicationId":"37b36496-3f4f-443a-a406-5e0a0535f6a3","roleDefinitionId":"b10cdc1f-fd21-4fe9-bae7-7e2e25a91a21"}],"resourceTypes":[{"resourceType":"fusionGroups","locations":["East + US","East Asia","North Europe","Southeast Asia","West Europe","West Central + US","West US","West US 2","East US 2 EUAP"],"apiVersions":["2019-09-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"fusionGroups/azureZones","locations":["East + US","West US","West US 2","West Central US","West Europe","North Europe","East + Asia","Southeast Asia","East US 2 EUAP"],"apiVersions":["2019-09-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"fusionGroups/azureZones/plugins","locations":["East + US","West US","West US 2","West Central US","West Europe","North Europe","East + Asia","Southeast Asia","East US 2 EUAP"],"apiVersions":["2019-09-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"fusionGroups/replicationRules","locations":["East + US","West US","West US 2","West Central US","West Europe","North Europe","East + Asia","Southeast Asia","East US 2 EUAP"],"apiVersions":["2019-09-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"Locations","locations":["East + US"],"apiVersions":["2019-09-01-preview"],"capabilities":"None"},{"resourceType":"Locations/operationStatuses","locations":["East Asia","East US","East US 2 EUAP","North Europe","Southeast Asia","West Europe","West - Central US","West US","West US 2"],"apiVersions":["2019-10-01","2019-09-01-preview"],"capabilities":"None"},{"resourceType":"registeredSubscriptions","locations":[],"apiVersions":["2019-09-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":[],"apiVersions":["2019-09-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"}]}' + Central US","West US","West US 2"],"apiVersions":["2019-09-01-preview"],"capabilities":"None"},{"resourceType":"registeredSubscriptions","locations":[],"apiVersions":["2019-09-01-preview"],"capabilities":"None"},{"resourceType":"fusionGroups/hiveReplicationRules","locations":["East + US","West US","West US 2","West Central US","West Europe","North Europe","East + Asia","Southeast Asia","East US 2 EUAP"],"apiVersions":["2019-09-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"fusionGroups/managedOnPremZones","locations":["East + US","West US","West US 2","West Central US","West Europe","North Europe","East + Asia","Southeast Asia","East US 2 EUAP"],"apiVersions":["2019-09-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"operations","locations":[],"apiVersions":["2019-09-01-preview"],"capabilities":"None"},{"resourceType":"migrators","locations":["East + US","East Asia","North Europe","Southeast Asia","West Europe","West Central + US","West US","West US 2","East US 2 EUAP"],"apiVersions":["2019-09-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"migrators/targets","locations":["East + US","West US","West US 2","West Central US","West Europe","North Europe","East + Asia","Southeast Asia","East US 2 EUAP"],"apiVersions":["2019-09-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"migrators/liveDataMigrations","locations":["East + US","West US","West US 2","West Central US","West Europe","North Europe","East + Asia","Southeast Asia","East US 2 EUAP"],"apiVersions":["2019-09-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"fusionGroups/replicationRules/migrations","locations":[],"apiVersions":["2019-09-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ProjectArcadia","namespace":"Microsoft.ProjectArcadia","authorizations":[{"applicationId":"9e09aefc-b2e5-4d19-9f74-3e3e8b11a57b","roleDefinitionId":"a53b114a-452b-4d20-bcd6-c51c3c8c5878"},{"applicationId":"1ac05c7e-12d2-4605-bf9d-549d7041c6b3","roleDefinitionId":"48e77487-c9fa-4abe-8484-71ebdebdbbc2"},{"applicationId":"ec52d13d-2e85-410e-a89a-8c79fb6a32ac","roleDefinitionId":"c3a447c3-a63a-4905-a125-c6856f9d0e17"},{"applicationId":"5ebe1e69-13dd-4953-84fa-a74ed591db2e","roleDefinitionId":"e8ebe3e8-569b-4ad3-bea1-5b274fe0c49f"},{"applicationId":"2e458d69-0892-4655-b713-4f7b182315dd","roleDefinitionId":"45EA3B16-D4DD-48CA-BF0D-BBE644C0C0AF"}],"resourceTypes":[{"resourceType":"workspaces","locations":["East + US 2 EUAP"],"apiVersions":["2019-06-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SystemAssignedResourceIdentity, SupportsTags, + SupportsLocation"},{"resourceType":"workspaces/sparkComputes","locations":["East + US 2 EUAP"],"apiVersions":["2019-06-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"workspaces/sqlComputes","locations":["East + US 2 EUAP"],"apiVersions":["2019-06-01-preview"],"capabilities":"CrossResourceGroupResourceMove, + CrossSubscriptionResourceMove, SupportsTags, SupportsLocation"},{"resourceType":"workspaces/operationStatus","locations":["East + US 2 EUAP"],"apiVersions":["2019-06-01-preview"],"capabilities":"None"},{"resourceType":"workspaces/operationResults","locations":["East + US 2 EUAP"],"apiVersions":["2019-06-01-preview"],"capabilities":"None"},{"resourceType":"checkNameAvailability","locations":["EAST + US 2 EUAP"],"apiVersions":["2019-06-01-preview"],"capabilities":"None"},{"resourceType":"operations","locations":["EAST + US 2 EUAP"],"apiVersions":["2019-06-01-preview"],"capabilities":"None"}],"registrationState":"NotRegistered","registrationPolicy":"RegistrationRequired"}]}' headers: cache-control: - no-cache content-length: - - '899480' + - '1072566' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:55:21 GMT + - Thu, 29 Oct 2020 05:36:14 GMT expires: - '-1' pragma: diff --git a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_resource_groups.yaml b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_resource_groups.yaml index ad19ea2165fd..851de538c8c4 100644 --- a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_resource_groups.yaml +++ b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_resource_groups.yaml @@ -13,24 +13,24 @@ interactions: Content-Type: - application/json; charset=utf-8 User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: PUT uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_mgmt_resource_test_resource_groups457f1050?api-version=2020-06-01 response: body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_resource_groups457f1050","name":"test_mgmt_resource_test_resource_groups457f1050","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"tag1":"value1"},"properties":{"provisioningState":"Succeeded"}}' + string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_resource_groups457f1050","name":"test_mgmt_resource_test_resource_groups457f1050","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"tag1":"value1","StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}}' headers: cache-control: - no-cache content-length: - - '316' + - '359' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:55:28 GMT + - Thu, 29 Oct 2020 05:36:19 GMT expires: - '-1' pragma: @@ -54,24 +54,24 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_mgmt_resource_test_resource_groups457f1050?api-version=2020-06-01 response: body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_resource_groups457f1050","name":"test_mgmt_resource_test_resource_groups457f1050","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"tag1":"value1"},"properties":{"provisioningState":"Succeeded"}}' + string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_resource_groups457f1050","name":"test_mgmt_resource_test_resource_groups457f1050","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"tag1":"value1","StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}}' headers: cache-control: - no-cache content-length: - - '316' + - '359' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:55:28 GMT + - Thu, 29 Oct 2020 05:36:19 GMT expires: - '-1' pragma: @@ -95,8 +95,8 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: HEAD @@ -110,7 +110,7 @@ interactions: content-length: - '0' date: - - Wed, 01 Jul 2020 00:55:28 GMT + - Thu, 29 Oct 2020 05:36:19 GMT expires: - '-1' pragma: @@ -132,8 +132,8 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: HEAD @@ -149,7 +149,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:55:28 GMT + - Thu, 29 Oct 2020 05:36:19 GMT expires: - '-1' pragma: @@ -173,26 +173,25 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups?api-version=2020-06-01 response: body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/arm-python-RG","name":"arm-python-RG","type":"Microsoft.Resources/resourceGroups","location":"westeurope","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lianwtest-rg","name":"lianwtest-rg","type":"Microsoft.Resources/resourceGroups","location":"southcentralus","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sdk-test-qa2-R-3","name":"sdk-test-qa2-R-3","type":"Microsoft.Resources/resourceGroups","location":"eastus2","tags":{},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/VstsRG-lianwtestdevops-ffd5","name":"VstsRG-lianwtestdevops-ffd5","type":"Microsoft.Resources/resourceGroups","location":"centralus","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qiaozhatest","name":"qiaozhatest","type":"Microsoft.Resources/resourceGroups","location":"eastus","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sqlresourceGroupName","name":"sqlresourceGroupName","type":"Microsoft.Resources/resourceGroups","location":"eastus","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sdk-net-test-qa2","name":"sdk-net-test-qa2","type":"Microsoft.Resources/resourceGroups","location":"eastus","tags":{},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sdk-test-qa2","name":"sdk-test-qa2","type":"Microsoft.Resources/resourceGroups","location":"eastus","tags":{},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/devops_pipeline_resourcename","name":"devops_pipeline_resourcename","type":"Microsoft.Resources/resourceGroups","location":"eastus","tags":{},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/devops_pipeline_resourcename2","name":"devops_pipeline_resourcename2","type":"Microsoft.Resources/resourceGroups","location":"eastus","tags":{},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_cli_mgmt_network_virtual_network_test_network168d14fb","name":"test_cli_mgmt_network_virtual_network_test_network168d14fb","type":"Microsoft.Resources/resourceGroups","location":"eastus","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lianw","name":"lianw","type":"Microsoft.Resources/resourceGroups","location":"eastus","tags":{},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_cli_mgmt_network_watcher_test_network777c1179","name":"test_cli_mgmt_network_watcher_test_network777c1179","type":"Microsoft.Resources/resourceGroups","location":"eastus","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-backup-200214153104593818-1","name":"acctestRG-backup-200214153104593818-1","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sdk-test-qa2-R","name":"sdk-test-qa2-R","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-sample-group-virtual-machines","name":"azure-sample-group-virtual-machines","type":"Microsoft.Resources/resourceGroups","location":"westus","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/92F95D8F-3C67-4124-91C7-8CF07CDBF241/resourceGroups/DEFAULT-EVENTGRID","name":"DEFAULT-EVENTGRID","type":"Microsoft.Resources/resourceGroups","location":"westus2","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia","name":"cloud-shell-storage-southeastasia","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testresourceGroupName","name":"testresourceGroupName","type":"Microsoft.Resources/resourceGroups","location":"eastasia","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myDevopsResourceGroup2","name":"myDevopsResourceGroup2","type":"Microsoft.Resources/resourceGroups","location":"eastasia","tags":{"environment":"Terraform - Devops Test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/resourceGroupYC","name":"resourceGroupYC","type":"Microsoft.Resources/resourceGroups","location":"westeurope","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cjf_resource_group_name2","name":"cjf_resource_group_name2","type":"Microsoft.Resources/resourceGroups","location":"eastus","tags":{},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/DefaultResourceGroup-EUS","name":"DefaultResourceGroup-EUS","type":"Microsoft.Resources/resourceGroups","location":"eastus","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test-changlong","name":"test-changlong","type":"Microsoft.Resources/resourceGroups","location":"eastus","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testgroupx","name":"testgroupx","type":"Microsoft.Resources/resourceGroups","location":"eastus","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest4ew5fbhmm7awqn55gq3qr3c5fue5tfhorkdh3g4olbqyb7cpzmjnzlzarp6s3q7xhqst","name":"clitest4ew5fbhmm7awqn55gq3qr3c5fue5tfhorkdh3g4olbqyb7cpzmjnzlzarp6s3q7xhqst","type":"Microsoft.Resources/resourceGroups","location":"westus","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestj4njlgach6kp6o25m26zjm7vkuiw5jb7evjffyuuljkguveuwl2hypimdq6uhtlhua5e","name":"clitestj4njlgach6kp6o25m26zjm7vkuiw5jb7evjffyuuljkguveuwl2hypimdq6uhtlhua5e","type":"Microsoft.Resources/resourceGroups","location":"westus","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_compute_test_vm_extensions15a60f10","name":"test_mgmt_compute_test_vm_extensions15a60f10","type":"Microsoft.Resources/resourceGroups","location":"westus","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestptrj5gdl3filwldt3rrdwaueng7lzlxv7glqob4qbgzkqzzl6zdoefovbu3fxck4fxfy","name":"clitestptrj5gdl3filwldt3rrdwaueng7lzlxv7glqob4qbgzkqzzl6zdoefovbu3fxck4fxfy","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2020-06-19T06:52:18Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_basic667e10fe","name":"test_mgmt_resource_test_deployments_basic667e10fe","type":"Microsoft.Resources/resourceGroups","location":"westus","properties":{"provisioningState":"Deleting"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_linked_template27ec152e","name":"test_mgmt_resource_test_deployments_linked_template27ec152e","type":"Microsoft.Resources/resourceGroups","location":"westus","properties":{"provisioningState":"Deleting"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_linked_template_errorafa117b7","name":"test_mgmt_resource_test_deployments_linked_template_errorafa117b7","type":"Microsoft.Resources/resourceGroups","location":"westus","properties":{"provisioningState":"Deleting"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_resource_groups457f1050","name":"test_mgmt_resource_test_resource_groups457f1050","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"tag1":"value1"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-sdk-for-js","name":"azure-sdk-for-js","type":"Microsoft.Resources/resourceGroups","location":"westus","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-sdk-for-node","name":"azure-sdk-for-node","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cleanupservice","name":"cleanupservice","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"What - Is Cleanup Service":"https://aka.ms/WhatIsCleanupService"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/dev-box","name":"dev-box","type":"Microsoft.Resources/resourceGroups","location":"westus","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/git2gridtemplate","name":"git2gridtemplate","type":"Microsoft.Resources/resourceGroups","location":"westus","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/git2gridtesting","name":"git2gridtesting","type":"Microsoft.Resources/resourceGroups","location":"westus","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ml-test","name":"ml-test","type":"Microsoft.Resources/resourceGroups","location":"southcentralus","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/msi-test-functions","name":"msi-test-functions","type":"Microsoft.Resources/resourceGroups","location":"westus","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vpn","name":"vpn","type":"Microsoft.Resources/resourceGroups","location":"ukwest","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vpn-lon","name":"vpn-lon","type":"Microsoft.Resources/resourceGroups","location":"ukwest","properties":{"provisioningState":"Succeeded"}}]}' + string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ResourceMoverRG-northeurope-eastus2","name":"ResourceMoverRG-northeurope-eastus2","type":"Microsoft.Resources/resourceGroups","location":"eastus2","tags":{"StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta","name":"cli-beta","type":"Microsoft.Resources/resourceGroups","location":"eastus","tags":{"StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult","name":"clitestresult","type":"Microsoft.Resources/resourceGroups","location":"eastus","tags":{},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xuzhang3","name":"xuzhang3","type":"Microsoft.Resources/resourceGroups","location":"eastus","tags":{"StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi","name":"t-yueshi","type":"Microsoft.Resources/resourceGroups","location":"eastus","tags":{},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/harold","name":"harold","type":"Microsoft.Resources/resourceGroups","location":"eastus","tags":{},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2","name":"t-yakou2","type":"Microsoft.Resources/resourceGroups","location":"japaneast","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rggnjd24vd3426k7xejyyb5lcp6f6zir5trgy7ctsdcy5ea4ibnyyym3puwxifrgvgk","name":"clitest.rggnjd24vd3426k7xejyyb5lcp6f6zir5trgy7ctsdcy5ea4ibnyyym3puwxifrgvgk","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2020-07-07T07:20:04Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4vzcctackr3xkeouuakrlu3v5iahfsyh5tbu6wimbgipsvlnnydknmqqzno4naid6","name":"clitest.rg4vzcctackr3xkeouuakrlu3v5iahfsyh5tbu6wimbgipsvlnnydknmqqzno4naid6","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2020-07-07T07:26:53Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_bih3hjenbaztofqafczkvch2cz77pxwj6ogo5p3mfprovbvxe7fdpr2dsbu","name":"img_tmpl_cancel_bih3hjenbaztofqafczkvch2cz77pxwj6ogo5p3mfprovbvxe7fdpr2dsbu","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2020-07-13T12:34:07Z","StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot","name":"fybot","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_urdoojxztqvku76yl2gtradzpoaxbz4nk5aywhdsyn57wqyuhm2klzetuox","name":"img_tmpl_cancel_urdoojxztqvku76yl2gtradzpoaxbz4nk5aywhdsyn57wqyuhm2klzetuox","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2020-08-14T19:58:12Z","StorageType":"Standard_LRS"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_4wijm4tiuhe7w2knhji6aue4q5bnzvr74kgqt6xqdgdrdffmrmt432vrbub","name":"img_tmpl_cancel_4wijm4tiuhe7w2knhji6aue4q5bnzvr74kgqt6xqdgdrdffmrmt432vrbub","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2020-08-17T07:53:26Z","StorageType":"Standard_LRS"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_zbc4axbspixutxs4yvo3mj223e7fe6567hqqlxkn6yzmf523oxvh5lgy4c7","name":"img_tmpl_cancel_zbc4axbspixutxs4yvo3mj223e7fe6567hqqlxkn6yzmf523oxvh5lgy4c7","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2020-08-18T11:38:44Z","StorageType":"Standard_LRS"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_glbkgtkhlb6zgdgzhnvvmpodcylvquiopkhvd6gbna3yvg4xoxm5glug7d7","name":"img_tmpl_cancel_glbkgtkhlb6zgdgzhnvvmpodcylvquiopkhvd6gbna3yvg4xoxm5glug7d7","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2020-08-28T19:38:38Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_4mcukdecrb43yzylyrk56bxa3tgvni2ohyqbvx4nscvo4b6pi2cwbk42hlj","name":"img_tmpl_cancel_4mcukdecrb43yzylyrk56bxa3tgvni2ohyqbvx4nscvo4b6pi2cwbk42hlj","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2020-09-02T03:08:21Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_dv5mpshlpskqake2czy4mhgyjiqg3wm7yx4k7jtyzbyet65oxhjpktizhta","name":"img_tmpl_cancel_dv5mpshlpskqake2czy4mhgyjiqg3wm7yx4k7jtyzbyet65oxhjpktizhta","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2020-09-04T19:39:20Z","StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest","name":"yishitest","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtl2n3n3kfakpipnk5amybnzvumwahj5vcielw5fkowvngap67p66qn42apbknhoxx","name":"clitest.rgtl2n3n3kfakpipnk5amybnzvumwahj5vcielw5fkowvngap67p66qn42apbknhoxx","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2020-10-28T15:05:07Z","StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg","name":"cli-live-test-rg","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5mnvwcqndqlza2jjy2iffe37rff2uobmdvwnqp5rjlxnh74cxegvtpatdbg5zun6g","name":"clitest.rg5mnvwcqndqlza2jjy2iffe37rff2uobmdvwnqp5rjlxnh74cxegvtpatdbg5zun6g","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2020-10-29T04:44:18Z","StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_sb_migrationg4mdqrx2f6665bjrjtige3k7wd7lgcwtonupu6rk2bigjc24aj6dsu","name":"cli_test_sb_migrationg4mdqrx2f6665bjrjtige3k7wd7lgcwtonupu6rk2bigjc24aj6dsu","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_basic667e10fe","name":"test_mgmt_resource_test_deployments_basic667e10fe","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Deleting"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_linked_template27ec152e","name":"test_mgmt_resource_test_deployments_linked_template27ec152e","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Deleting"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_deployments_linked_template_errorafa117b7","name":"test_mgmt_resource_test_deployments_linked_template_errorafa117b7","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Deleting"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_resource_groups457f1050","name":"test_mgmt_resource_test_resource_groups457f1050","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"tag1":"value1","StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24","name":"acctestRG-ibt-24","type":"Microsoft.Resources/resourceGroups","location":"westus2","tags":{},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907","name":"IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907","type":"Microsoft.Resources/resourceGroups","location":"westus2","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-0710-2","tags":{"createdBy":"AzureVMImageBuilder","imageTemplateName":"acctest-IBT-0710-2","imageTemplateResourceGroupName":"acctestRG-ibt-24"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xiaojxu","name":"xiaojxu","type":"Microsoft.Resources/resourceGroups","location":"westus2","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_router7i5huw42zwou3aczqdcerbcubvy4a2yyto6kyqtakyhxgzwszdtv","name":"cli_test_virtual_router7i5huw42zwou3aczqdcerbcubvy4a2yyto6kyqtakyhxgzwszdtv","type":"Microsoft.Resources/resourceGroups","location":"westcentralus","tags":{"product":"azurecli","cause":"automation","date":"2020-09-15T11:43:24Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_routeroh7t5sncdhzf5tz2pybikadld3aii24mjytfxnhefltdqd4w6djy","name":"cli_test_virtual_routeroh7t5sncdhzf5tz2pybikadld3aii24mjytfxnhefltdqd4w6djy","type":"Microsoft.Resources/resourceGroups","location":"westcentralus","tags":{"product":"azurecli","cause":"automation","date":"2020-09-15T12:02:24Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_routerkavia6zlpypv4eb4df4yt6fqkczgl6f3oh6ceynvxvde4omwl7jk","name":"cli_test_virtual_routerkavia6zlpypv4eb4df4yt6fqkczgl6f3oh6ceynvxvde4omwl7jk","type":"Microsoft.Resources/resourceGroups","location":"westcentralus","tags":{"product":"azurecli","cause":"automation","date":"2020-09-15T12:21:41Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev","name":"jiasli-cli-dev","type":"Microsoft.Resources/resourceGroups","location":"westus2","tags":{},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-10281","name":"acctestRG-ibt-10281","type":"Microsoft.Resources/resourceGroups","location":"westus2","tags":{"StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/DefaultResourceGroup-WUS2","name":"DefaultResourceGroup-WUS2","type":"Microsoft.Resources/resourceGroups","location":"westus2","tags":{"StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG","name":"NetworkWatcherRG","type":"Microsoft.Resources/resourceGroups","location":"westus2","tags":{"StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgktqdge5ejbfsqxmn5ndvxksssyoaiim54yoqytc6zbl6pvkwbo345srev7wzwlosl","name":"clitest.rgktqdge5ejbfsqxmn5ndvxksssyoaiim54yoqytc6zbl6pvkwbo345srev7wzwlosl","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-09-21T10:26:08Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgooz5qzgmgaaz3gekmet245wc5fteadkogcvl7dvafcmrscxw7vg5w2aghnju53cgq","name":"clitest.rgooz5qzgmgaaz3gekmet245wc5fteadkogcvl7dvafcmrscxw7vg5w2aghnju53cgq","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-14T16:44:31Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgyambmjlonu732rbf7xuzjfk7kujbtqtixegpwuftfeaarbue5bsbs2u7eiizml4s7","name":"clitest.rgyambmjlonu732rbf7xuzjfk7kujbtqtixegpwuftfeaarbue5bsbs2u7eiizml4s7","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-14T16:44:31Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgos4ko7usyuqkf7tnrmyqhcjqbrhuoy5xaimcliywjrg7zr2qdaraoyqdldbzeoah5","name":"clitest.rgos4ko7usyuqkf7tnrmyqhcjqbrhuoy5xaimcliywjrg7zr2qdaraoyqdldbzeoah5","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-14T16:44:31Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqbxj7adeeh2xwb6akxg4xexorad3xblt7b4bln2qhixk3yiaqgucbcb2f4ta325lz","name":"clitest.rgqbxj7adeeh2xwb6akxg4xexorad3xblt7b4bln2qhixk3yiaqgucbcb2f4ta325lz","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-14T16:44:31Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6u65n2xsr7pp5xhzhusov3q5jmwv7ugv726ty3v5s5wipz3nzgz2dskv2ey5jwaeq","name":"clitest.rg6u65n2xsr7pp5xhzhusov3q5jmwv7ugv726ty3v5s5wipz3nzgz2dskv2ey5jwaeq","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-14T16:44:31Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgy3t6u56p6bvsgdt6lvomsbhiavhiud7xbx3mp3pczjt5odxa4rwiwbs5dc7m7rpuh","name":"clitest.rgy3t6u56p6bvsgdt6lvomsbhiavhiud7xbx3mp3pczjt5odxa4rwiwbs5dc7m7rpuh","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-14T16:56:30Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rggmttzircpglozchfdjhaoqk5cdsmfpvnne5c44e7wv3xcp4hrs3h7gbfpzmnapusz","name":"clitest.rggmttzircpglozchfdjhaoqk5cdsmfpvnne5c44e7wv3xcp4hrs3h7gbfpzmnapusz","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-16T19:04:24Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgx7komowwtcbivoezacqrjhxnks5rxxouzzcof6cjsmavbprffieiosddqploi6thx","name":"clitest.rgx7komowwtcbivoezacqrjhxnks5rxxouzzcof6cjsmavbprffieiosddqploi6thx","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-16T19:04:24Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgo5sxok3rpc72yxklgrmc7ooymfql4olelhjzhl33mpfufyecplums77l4rqooiwuh","name":"clitest.rgo5sxok3rpc72yxklgrmc7ooymfql4olelhjzhl33mpfufyecplums77l4rqooiwuh","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-16T19:04:24Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbyukpdljdn3ere46spq6qo76ejxfzti3m7snhqtj63mlbn5r4c5yqbmfacmbidyhk","name":"clitest.rgbyukpdljdn3ere46spq6qo76ejxfzti3m7snhqtj63mlbn5r4c5yqbmfacmbidyhk","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-16T19:04:24Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkhq5ff4y4nbpljtkolt2s7npgovaaiwein24c6vl4jf6sazn2muq6diy3sbdkj26s","name":"clitest.rgkhq5ff4y4nbpljtkolt2s7npgovaaiwein24c6vl4jf6sazn2muq6diy3sbdkj26s","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-16T19:04:24Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtxhttllr4et5towp3iboaqn43yavythsn3aetvds2u7x74bdpkhgovis3ls5wpqvk","name":"clitest.rgtxhttllr4et5towp3iboaqn43yavythsn3aetvds2u7x74bdpkhgovis3ls5wpqvk","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-16T19:11:59Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghdywfbytrcjtvl4h4u3b6a6r7ysqiwer3ssd4iquj2isvewzw4nhggq7gtfkimema","name":"clitest.rghdywfbytrcjtvl4h4u3b6a6r7ysqiwer3ssd4iquj2isvewzw4nhggq7gtfkimema","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-18T16:41:58Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5wi4yndeuxqiskoychdqpbarc6zmegqivi7z6rhne62tk3siwep3d63dk54qsvpgw","name":"clitest.rg5wi4yndeuxqiskoychdqpbarc6zmegqivi7z6rhne62tk3siwep3d63dk54qsvpgw","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-18T16:41:58Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgpqyl6m3lprfgrouxfzyrlg27fahopbcxxwvbfy6m3mqc4btpvphxf2hdnouvsgmj3","name":"clitest.rgpqyl6m3lprfgrouxfzyrlg27fahopbcxxwvbfy6m3mqc4btpvphxf2hdnouvsgmj3","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-18T16:41:58Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghesf6ler4ywiijml64t22yw255t3gjnzxnx3icvi5bkrxgpxulki6hyyblbteot7o","name":"clitest.rghesf6ler4ywiijml64t22yw255t3gjnzxnx3icvi5bkrxgpxulki6hyyblbteot7o","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-18T16:41:58Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvv6qdffkluhijus7ydj7aano2gdmusg4etf43v5v3osroojzgrwbristo6fljrrg3","name":"clitest.rgvv6qdffkluhijus7ydj7aano2gdmusg4etf43v5v3osroojzgrwbristo6fljrrg3","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-18T16:41:58Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmfvh7qrlysvdmralh35lhmuwsxybabvbqvq2e6kblyakpss7tuyvicvppqjkxi76a","name":"clitest.rgmfvh7qrlysvdmralh35lhmuwsxybabvbqvq2e6kblyakpss7tuyvicvppqjkxi76a","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-18T18:19:42Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgral3qrlud3yewhj25xmabu75ufyuo5hdefjeronla3kyeykqrsbevueoxj6knxi2z","name":"clitest.rgral3qrlud3yewhj25xmabu75ufyuo5hdefjeronla3kyeykqrsbevueoxj6knxi2z","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-23T16:31:42Z","StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwrop7rb45xmox2r46ludoifqfziys67hsnzknudumzmpdrd4taqc6bnjrvgix3mik","name":"clitest.rgwrop7rb45xmox2r46ludoifqfziys67hsnzknudumzmpdrd4taqc6bnjrvgix3mik","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-23T16:31:42Z","StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqbb7oohiug623ibi4qy72xadbg37nvevzblxaea7ez3mait4fp4lfbgv5e5mlrs2z","name":"clitest.rgqbb7oohiug623ibi4qy72xadbg37nvevzblxaea7ez3mait4fp4lfbgv5e5mlrs2z","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-23T16:31:42Z","StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztlr5u55tyzz2zje2tgl6tahkxxyrunwxdg7vkdludpwn5x3fd3z2ytjyc5lwc4vb","name":"clitest.rgztlr5u55tyzz2zje2tgl6tahkxxyrunwxdg7vkdludpwn5x3fd3z2ytjyc5lwc4vb","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-23T16:31:42Z","StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rggvcss2qe7oca2tcll5fcbfs3pojwkmqxsaxulwrvppf7riyaijjqaulzk6hk25ubm","name":"clitest.rggvcss2qe7oca2tcll5fcbfs3pojwkmqxsaxulwrvppf7riyaijjqaulzk6hk25ubm","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-23T16:31:42Z","StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcct7yxno4caozstlxaqcylpjlzi7zontolaowzqkhkzex4uhaznp44efvqvbp4rn5","name":"clitest.rgcct7yxno4caozstlxaqcylpjlzi7zontolaowzqkhkzex4uhaznp44efvqvbp4rn5","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-27T03:23:24Z","StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmriigyiows5vcgpjke7hu6eb7p32eyl4qh4gilmwolkhsr4cn7oddyfljowbj7vub","name":"clitest.rgmriigyiows5vcgpjke7hu6eb7p32eyl4qh4gilmwolkhsr4cn7oddyfljowbj7vub","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-27T03:23:24Z","StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgx4wbmd7zt3yoqpv77exuinmqjtsq47e6ciyc7xkzkmazuw5lbf2vpt73pafqlah2r","name":"clitest.rgx4wbmd7zt3yoqpv77exuinmqjtsq47e6ciyc7xkzkmazuw5lbf2vpt73pafqlah2r","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-27T03:23:24Z","StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rge4p4msyoxt432j3wd5qnrjejavti5zyove5lwum7ju7uaytq2el32ih6llr4cmqr6","name":"clitest.rge4p4msyoxt432j3wd5qnrjejavti5zyove5lwum7ju7uaytq2el32ih6llr4cmqr6","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-27T03:23:24Z","StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgza5uxufbthrovfozbld3shejn3tpyrhjdqav5r3cfyjdxsz774qqozqmvztbjgi53","name":"clitest.rgza5uxufbthrovfozbld3shejn3tpyrhjdqav5r3cfyjdxsz774qqozqmvztbjgi53","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-27T03:23:24Z","StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5h5bjijynlvyso4iqv4o67luzmxce77epttuqi4pbvamlm2u5ubbvfs4hgr2mwmu","name":"clitest.rgi5h5bjijynlvyso4iqv4o67luzmxce77epttuqi4pbvamlm2u5ubbvfs4hgr2mwmu","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"product":"azurecli","cause":"automation","date":"2020-10-27T03:31:42Z","StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm","name":"fyvm","type":"Microsoft.Resources/resourceGroups","location":"eastasia","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/SFC_fe28efd3-1b35-42e1-a6ba-6c7a0fce3a79","name":"SFC_fe28efd3-1b35-42e1-a6ba-6c7a0fce3a79","type":"Microsoft.Resources/resourceGroups","location":"eastasia","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg5mnvwcqndqlza2jjy2iffe37rff2uobmdvwnqp5rjlxnh74cxegvtpatdbg5zun6g/providers/Microsoft.ServiceFabric/managedClusters/sfrp-cli-zgpncc33q3zz25j","tags":{"StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/Default-Networking","name":"Default-Networking","type":"Microsoft.Resources/resourceGroups","location":"westus","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/javacsmrg46947","name":"javacsmrg46947","type":"Microsoft.Resources/resourceGroups","location":"southcentralus","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fanqiu-test","name":"fanqiu-test","type":"Microsoft.Resources/resourceGroups","location":"centralus","tags":{},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bim-rg","name":"bim-rg","type":"Microsoft.Resources/resourceGroups","location":"eastus2euap","tags":{},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens","name":"qianwens","type":"Microsoft.Resources/resourceGroups","location":"eastus","tags":{},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bim_pl_test_rg","name":"bim_pl_test_rg","type":"Microsoft.Resources/resourceGroups","location":"eastus","tags":{"StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group","name":"azps-test-group","type":"Microsoft.Resources/resourceGroups","location":"eastus","tags":{"StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myResourceGroup","name":"myResourceGroup","type":"Microsoft.Resources/resourceGroups","location":"eastus","tags":{"StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2","name":"fytest2","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"StorageType":"Standard_LRS","type":"test","special_sig":"yes"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_rules_with_ipgroupsqiervqkqdl6gyu4szgpwbyiw7zx3ucbo","name":"cli_test_azure_firewall_rules_with_ipgroupsqiervqkqdl6gyu4szgpwbyiw7zx3ucbo","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2020-04-15T03:15:42Z","StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3","name":"fytest3","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_netappfiles_test_snapshot_vpshzlob7c63iuglneagoxjxa45dqn6eoglhf37oo5cms","name":"cli_netappfiles_test_snapshot_vpshzlob7c63iuglneagoxjxa45dqn6eoglhf37oo5cms","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2020-05-10T06:47:57Z","StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_5zgehdqqrr3p3ncb42jj72b5wx3ctruzg7dl4hkbgti6ezji666mhk6t7rx","name":"img_tmpl_cancel_5zgehdqqrr3p3ncb42jj72b5wx3ctruzg7dl4hkbgti6ezji666mhk6t7rx","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2020-06-03T07:10:50Z","StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore","name":"emerald-city-bookstore","type":"Microsoft.Resources/resourceGroups","location":"westus2","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fanqiu-vm","name":"fanqiu-vm","type":"Microsoft.Resources/resourceGroups","location":"koreacentral","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences","name":"new-experiences","type":"Microsoft.Resources/resourceGroups","location":"westus2","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro","name":"storage-v2rt-repro","type":"Microsoft.Resources/resourceGroups","location":"centralus","tags":{},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgyreu2qkpgqyrm56i4cocrrcf5xb2uzmvlm2lau226cqk6zetyu5olii7figpx2mix","name":"clitest.rgyreu2qkpgqyrm56i4cocrrcf5xb2uzmvlm2lau226cqk6zetyu5olii7figpx2mix","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2019-10-15T16:54:47Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgr5sog7j3q3a5o2vy3r4gpl3ylcovxfcbkttkotqe653iz4mlsrbjns76tv4v4lbqq","name":"clitest.rgr5sog7j3q3a5o2vy3r4gpl3ylcovxfcbkttkotqe653iz4mlsrbjns76tv4v4lbqq","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2019-10-15T16:55:16Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguk5hr7imq2zbvjzaogkt7gke2onbbn6sr3ux5rfdiqufofpfrmblbmbzrtd663lkn","name":"clitest.rguk5hr7imq2zbvjzaogkt7gke2onbbn6sr3ux5rfdiqufofpfrmblbmbzrtd663lkn","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2019-10-15T16:56:15Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg35pihforqftkb5qllg3t75zoxlztjwsmuftgdsphbiy2r3adx3t3spnkzzs2c5c4s","name":"clitest.rg35pihforqftkb5qllg3t75zoxlztjwsmuftgdsphbiy2r3adx3t3spnkzzs2c5c4s","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2019-10-15T16:56:26Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2qgvxjxy46scnjuh6q5gtypebpi5oeuajfgxb7yrrsggnqxrij6pnc3d7ybz2chih","name":"clitest.rg2qgvxjxy46scnjuh6q5gtypebpi5oeuajfgxb7yrrsggnqxrij6pnc3d7ybz2chih","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2019-10-16T14:48:47Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgib3viqdhrawwnaopavpcsc2u3psfod7wlami5tg57borlex2io2b7nolpz4qxhm5p","name":"clitest.rgib3viqdhrawwnaopavpcsc2u3psfod7wlami5tg57borlex2io2b7nolpz4qxhm5p","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2019-10-17T15:42:46Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3s3h2izedr4olwdk4jqjhltn4lkukfixgfalhtfjmiy6u3xndqvdkrr4j4jqhx6hu","name":"clitest.rg3s3h2izedr4olwdk4jqjhltn4lkukfixgfalhtfjmiy6u3xndqvdkrr4j4jqhx6hu","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2019-10-17T15:43:24Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgp535jz2dxemblsqlvzwsk4ehth7eprd5yny22fi5rppnick62nncsonvlutvmvbje","name":"clitest.rgp535jz2dxemblsqlvzwsk4ehth7eprd5yny22fi5rppnick62nncsonvlutvmvbje","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2019-10-17T15:44:46Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmjjmywipmiqslgzl7tzax3aje4fcv3q5xr2h7hulg63ehpwno2mu7ij7dokxqbh5x","name":"clitest.rgmjjmywipmiqslgzl7tzax3aje4fcv3q5xr2h7hulg63ehpwno2mu7ij7dokxqbh5x","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2019-10-18T00:59:19Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6mxjzuorkskzxoisjj4q7leopfu5mge2nncxfuw33pn7w5rzgt6nqhx3f2koq427p","name":"clitest.rg6mxjzuorkskzxoisjj4q7leopfu5mge2nncxfuw33pn7w5rzgt6nqhx3f2koq427p","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2019-11-11T08:59:35Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgduxuhyeqzrek7s3jfr776qvugv4qtmrxnlqcwiodxu2wihvqvuajr5bvtbfw2c74d","name":"clitest.rgduxuhyeqzrek7s3jfr776qvugv4qtmrxnlqcwiodxu2wihvqvuajr5bvtbfw2c74d","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2019-11-11T08:59:39Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzj3xc6lmggzuorcimokxvkq7lrrxtcty3dilmrxzwdjcq35dqahmc7e7snha4milh","name":"clitest.rgzj3xc6lmggzuorcimokxvkq7lrrxtcty3dilmrxzwdjcq35dqahmc7e7snha4milh","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2019-11-11T08:59:39Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdzk3w2kpwtbjaippkz6nrab53pinz3nbdcoxurf2fm477d5j2qa43kpmvlh34nudn","name":"clitest.rgdzk3w2kpwtbjaippkz6nrab53pinz3nbdcoxurf2fm477d5j2qa43kpmvlh34nudn","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2019-11-11T08:59:40Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sdk-wus2-rg-test","name":"sdk-wus2-rg-test","type":"Microsoft.Resources/resourceGroups","location":"westus2","tags":{},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved","name":"AzureSDKTest_reserved","type":"Microsoft.Resources/resourceGroups","location":"westus","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest","name":"fytest","type":"Microsoft.Resources/resourceGroups","location":"centraluseuap","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg","name":"feng-cli-rg","type":"Microsoft.Resources/resourceGroups","location":"centralus","tags":{},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yu-test-rg","name":"yu-test-rg","type":"Microsoft.Resources/resourceGroups","location":"eastus","tags":{},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zuh","name":"zuh","type":"Microsoft.Resources/resourceGroups","location":"eastus2euap","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_mixed_realitygv2l3elh76a7brm66drgektfyzfsijxog6smmqzg6dnn2r7ofuf6c","name":"cli_test_mixed_realitygv2l3elh76a7brm66drgektfyzfsijxog6smmqzg6dnn2r7ofuf6c","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2019-12-27T22:15:53Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-rg","name":"azure-cli-test-rg","type":"Microsoft.Resources/resourceGroups","location":"westus","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_rules_with_ipgroupse4upfibqoujmdn4odvtgrbuvqqgdvwd7","name":"cli_test_azure_firewall_rules_with_ipgroupse4upfibqoujmdn4odvtgrbuvqqgdvwd7","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2019-12-30T02:24:44Z"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yeming","name":"yeming","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6i4hl6iakg","name":"clitest.rg6i4hl6iakg","type":"Microsoft.Resources/resourceGroups","location":"southeastasia","tags":{"Cost + Center":""},"properties":{"provisioningState":"Succeeded"}}]}' headers: cache-control: - no-cache content-length: - - '11234' + - '40861' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:55:28 GMT + - Thu, 29 Oct 2020 05:36:19 GMT expires: - '-1' pragma: @@ -216,24 +215,24 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups?$top=2&api-version=2020-06-01 response: body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/arm-python-RG","name":"arm-python-RG","type":"Microsoft.Resources/resourceGroups","location":"westeurope","properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lianwtest-rg","name":"lianwtest-rg","type":"Microsoft.Resources/resourceGroups","location":"southcentralus","properties":{"provisioningState":"Succeeded"}}],"nextLink":"https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups?%24top=2&api-version=2020-06-01&%24skiptoken=eyJuZXh0TWFya2VyIjoiK1JJRDp%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%3d%3d"}' + string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ResourceMoverRG-northeurope-eastus2","name":"ResourceMoverRG-northeurope-eastus2","type":"Microsoft.Resources/resourceGroups","location":"eastus2","tags":{"StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta","name":"cli-beta","type":"Microsoft.Resources/resourceGroups","location":"eastus","tags":{"StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}}],"nextLink":"https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups?%24top=2&api-version=2020-06-01&%24skiptoken=eyJuZXh0TWFya2VyIjoiK1JJRDp%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"}' headers: cache-control: - no-cache content-length: - - '1217' + - '2054' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:55:28 GMT + - Thu, 29 Oct 2020 05:36:19 GMT expires: - '-1' pragma: @@ -261,24 +260,24 @@ interactions: Content-Type: - application/json; charset=utf-8 User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: PATCH uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_mgmt_resource_test_resource_groups457f1050?api-version=2020-06-01 response: body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_resource_groups457f1050","name":"test_mgmt_resource_test_resource_groups457f1050","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"tag1":"valueA","tag2":"valueB"},"properties":{"provisioningState":"Succeeded"}}' + string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_test_resource_groups457f1050","name":"test_mgmt_resource_test_resource_groups457f1050","type":"Microsoft.Resources/resourceGroups","location":"westus","tags":{"tag1":"valueA","tag2":"valueB","StorageType":"Standard_LRS","type":"test"},"properties":{"provisioningState":"Succeeded"}}' headers: cache-control: - no-cache content-length: - - '332' + - '375' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:55:29 GMT + - Thu, 29 Oct 2020 05:36:20 GMT expires: - '-1' pragma: @@ -306,8 +305,8 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET @@ -323,7 +322,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:55:30 GMT + - Thu, 29 Oct 2020 05:36:20 GMT expires: - '-1' pragma: @@ -351,8 +350,8 @@ interactions: Content-Type: - application/json; charset=utf-8 User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: POST @@ -368,7 +367,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:55:30 GMT + - Thu, 29 Oct 2020 05:36:20 GMT expires: - '-1' pragma: @@ -394,8 +393,8 @@ interactions: Content-Length: - '0' User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: DELETE @@ -409,7 +408,7 @@ interactions: content-length: - '0' date: - - Wed, 01 Jul 2020 00:55:34 GMT + - Thu, 29 Oct 2020 05:36:24 GMT expires: - '-1' location: @@ -435,8 +434,8 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python method: GET uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1URVNUOjVGTUdNVDo1RlJFU09VUkNFOjVGVEVTVDo1RlJFU09VUkNFOjVGR1JPVVBTNDU3RjEwNTAtV0VTVFVTIiwiam9iTG9jYXRpb24iOiJ3ZXN0dXMifQ?api-version=2020-06-01 response: @@ -448,7 +447,7 @@ interactions: content-length: - '0' date: - - Wed, 01 Jul 2020 00:55:50 GMT + - Thu, 29 Oct 2020 05:36:40 GMT expires: - '-1' location: @@ -472,8 +471,8 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python method: GET uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1URVNUOjVGTUdNVDo1RlJFU09VUkNFOjVGVEVTVDo1RlJFU09VUkNFOjVGR1JPVVBTNDU3RjEwNTAtV0VTVFVTIiwiam9iTG9jYXRpb24iOiJ3ZXN0dXMifQ?api-version=2020-06-01 response: @@ -485,7 +484,7 @@ interactions: content-length: - '0' date: - - Wed, 01 Jul 2020 00:56:05 GMT + - Thu, 29 Oct 2020 05:36:56 GMT expires: - '-1' location: @@ -509,8 +508,8 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python method: GET uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1URVNUOjVGTUdNVDo1RlJFU09VUkNFOjVGVEVTVDo1RlJFU09VUkNFOjVGR1JPVVBTNDU3RjEwNTAtV0VTVFVTIiwiam9iTG9jYXRpb24iOiJ3ZXN0dXMifQ?api-version=2020-06-01 response: @@ -522,7 +521,7 @@ interactions: content-length: - '0' date: - - Wed, 01 Jul 2020 00:56:21 GMT + - Thu, 29 Oct 2020 05:37:11 GMT expires: - '-1' pragma: diff --git a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_resources.yaml b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_resources.yaml index ca11a1575b41..8fb535175a7e 100644 --- a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_resources.yaml +++ b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_resources.yaml @@ -9,8 +9,8 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: HEAD @@ -26,7 +26,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:56:32 GMT + - Thu, 29 Oct 2020 05:37:15 GMT expires: - '-1' pragma: @@ -54,8 +54,8 @@ interactions: Content-Type: - application/json; charset=utf-8 User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: PUT @@ -75,7 +75,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:56:39 GMT + - Thu, 29 Oct 2020 05:37:21 GMT expires: - '-1' pragma: @@ -94,7 +94,7 @@ interactions: x-ms-ratelimit-remaining-resource: - Microsoft.Compute/PutVM3Min;238,Microsoft.Compute/PutVM30Min;1197 x-ms-ratelimit-remaining-subscription-writes: - - '1198' + - '1199' status: code: 200 message: OK @@ -108,8 +108,8 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET @@ -129,7 +129,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:56:40 GMT + - Thu, 29 Oct 2020 05:37:22 GMT expires: - '-1' pragma: @@ -146,7 +146,7 @@ interactions: x-content-type-options: - nosniff x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/LowCostGet3Min;3999,Microsoft.Compute/LowCostGet30Min;31999 + - Microsoft.Compute/LowCostGet3Min;3999,Microsoft.Compute/LowCostGet30Min;31995 status: code: 200 message: OK @@ -160,8 +160,8 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET @@ -177,7 +177,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:56:40 GMT + - Thu, 29 Oct 2020 05:37:22 GMT expires: - '-1' pragma: @@ -203,8 +203,8 @@ interactions: Content-Length: - '0' User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: DELETE @@ -218,7 +218,7 @@ interactions: content-length: - '0' date: - - Wed, 01 Jul 2020 00:56:44 GMT + - Thu, 29 Oct 2020 05:37:27 GMT expires: - '-1' pragma: diff --git a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_tag_operations.yaml b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_tag_operations.yaml index 543eacad2a7b..0876b5ae40f6 100644 --- a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_tag_operations.yaml +++ b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource.test_tag_operations.yaml @@ -11,8 +11,8 @@ interactions: Content-Length: - '0' User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: PUT @@ -28,7 +28,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:56:56 GMT + - Thu, 29 Oct 2020 05:37:37 GMT expires: - '-1' pragma: @@ -54,8 +54,8 @@ interactions: Content-Length: - '0' User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: PUT @@ -71,7 +71,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:56:59 GMT + - Thu, 29 Oct 2020 05:37:39 GMT expires: - '-1' pragma: @@ -95,31 +95,26 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames?api-version=2020-06-01 response: body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage","tagName":"ms-resource-usage","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage/tagValues/azure-cloud-shell","tagValue":"azure-cloud-shell","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test","tagName":"test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test/tagValues/test1","tagValue":"test1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1","tagName":"tag1","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/Red","tagValue":"Red","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2","tagName":"tag2","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2/tagValues/White","tagValue":"White","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Migrate - Project","tagName":"Migrate Project","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Migrate - Project/tagValues/testmigrate","tagValue":"testmigrate","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Creator","tagName":"Creator","count":{"type":"Total","value":5},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Creator/tagValues/Automatically - added by NRMS Azure Policy","tagValue":"Automatically added by NRMS Azure - Policy","count":{"type":"Total","value":5}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/NRMS-Info","tagName":"NRMS-Info","count":{"type":"Total","value":5},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/NRMS-Info/tagValues/http://aka.ms/nrms","tagValue":"http://aka.ms/nrms","count":{"type":"Total","value":5}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/NRMS-Version","tagName":"NRMS-Version","count":{"type":"Total","value":5},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/NRMS-Version/tagValues/2019-03-20","tagValue":"2019-03-20","count":{"type":"Total","value":5}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1","tagName":"key1","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tagkey","tagName":"tagkey","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tagkey/tagValues/lianwtesttags2","tagValue":"lianwtesttags2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tagxyz","tagName":"tagxyz","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tagxyz/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/environment","tagName":"environment","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/environment/tagValues/Terraform - Devops Test","tagValue":"Terraform Devops Test","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product","tagName":"product","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product/tagValues/azurecli","tagValue":"azurecli","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause","tagName":"cause","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause/tagValues/automation","tagValue":"automation","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date","tagName":"date","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-19T06:52:18Z","tagValue":"2020-06-19T06:52:18Z","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/What - Is Cleanup Service","tagName":"What Is Cleanup Service","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/What - Is Cleanup Service/tagValues/https://aka.ms/WhatIsCleanupService","tagValue":"https://aka.ms/WhatIsCleanupService","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/myTag","tagName":"myTag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/myTag/tagValues/test","tagValue":"test","count":{"type":"Total","value":1}}]}]}' + string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/baseosimg","tagName":"baseosimg","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/baseosimg/tagValues/sigDistUbuntu1804","tagValue":"sigDistUbuntu1804","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/correlationId","tagName":"correlationId","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/correlationId/tagValues/3efdc5f6-daa2-4969-8ee0-bace6b37b8a8","tagValue":"3efdc5f6-daa2-4969-8ee0-bace6b37b8a8","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/correlationId/tagValues/004a9308-143e-44b8-b3b1-5af42eff96a7","tagValue":"004a9308-143e-44b8-b3b1-5af42eff96a7","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/correlationId/tagValues/5145b042-1359-4ed4-9f19-6099fd0b2383","tagValue":"5145b042-1359-4ed4-9f19-6099fd0b2383","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/source","tagName":"source","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/source/tagValues/sigDist","tagValue":"sigDist","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage","tagName":"ms-resource-usage","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage/tagValues/azure-cloud-shell","tagValue":"azure-cloud-shell","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/k1","tagName":"k1","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/k1/tagValues/v1","tagValue":"v1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate","tagName":"imagebuilderTemplate","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate/tagValues/ubuntu1804","tagValue":"ubuntu1804","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10","tagName":"key10","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10/tagValues/val10","tagValue":"val10","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4","tagName":"key4","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4/tagValues/val4","tagValue":"val4","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5","tagName":"key5","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5/tagValues/val5","tagValue":"val5","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6","tagName":"key6","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6/tagValues/val6","tagValue":"val6","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9","tagName":"key9","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9/tagValues/val9","tagValue":"val9","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by","tagName":"created_by","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by/tagValues/image-copy-extension","tagValue":"image-copy-extension","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/createdby","tagName":"createdby","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/createdby/tagValues/azureimagebuilder","tagValue":"azureimagebuilder","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/createdby/tagValues/AzureVMImageBuilder","tagValue":"AzureVMImageBuilder","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/magicvalue","tagName":"magicvalue","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/magicvalue/tagValues/0d819542a3774a2a8709401a7cd09eb8","tagValue":"0d819542a3774a2a8709401a7cd09eb8","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key","tagName":"patch_key","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key/tagValues/PatchKeyUpdated","tagValue":"PatchKeyUpdated","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1","tagName":"key1","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test","tagName":"zhoxing_test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test/tagValues/1","tagValue":"1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev","tagName":"dev","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev/tagValues/test","tagValue":"test","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a","tagName":"a","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value1","tagValue":"a-value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value2","tagValue":"a-value2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag","tagName":"jltag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2","tagName":"jltag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag","tagName":"pretag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/ value1","tagValue":" value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1","tagName":"tag1","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tagxyz","tagName":"tagxyz","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tagxyz/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag","tagName":"testtag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2","tagName":"testtag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714","tagName":"xplatResourceGroupTag2714","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197","tagName":"xplatResourceGroupTag6197","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910","tagName":"xplatResourceGroupTag8910","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992","tagName":"xplatResourceGroupTag992","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929","tagName":"xplatResourceGroupTag9929","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235","tagName":"xplatResourceTag5235","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313","tagName":"xplatResourceTag5313","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604","tagName":"xplatResourceTag604","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015","tagName":"xplatResourceTag8015","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954","tagName":"xplatResourceTag8954","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032","tagName":"xplatResourceTag9032","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032/tagValues/ygtag-value","tagValue":"ygtag-value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag","tagName":"yugangw-tag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v1","tagValue":"yugangw-tag-v1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v2","tagValue":"yugangw-tag-v2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2","tagName":"yugangw-tag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2/tagValues/yugangw-tag2-v1","tagValue":"yugangw-tag2-v1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test","tagName":"zhoxing-test","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/ value","tagValue":" value","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2","tagName":"zhoxing_test2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2/tagValues/1","tagValue":"1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType","tagName":"StorageType","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType/tagValues/Standard_LRS","tagValue":"Standard_LRS","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type","tagName":"type","count":{"type":"Total","value":34},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type/tagValues/test","tagValue":"test","count":{"type":"Total","value":34}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product","tagName":"product","count":{"type":"Total","value":62},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product/tagValues/azurecli","tagValue":"azurecli","count":{"type":"Total","value":62}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause","tagName":"cause","count":{"type":"Total","value":62},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause/tagValues/automation","tagValue":"automation","count":{"type":"Total","value":62}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date","tagName":"date","count":{"type":"Total","value":62},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-07-07T07:20:04Z","tagValue":"2020-07-07T07:20:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-07-07T07:26:53Z","tagValue":"2020-07-07T07:26:53Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-07-13T12:34:07Z","tagValue":"2020-07-13T12:34:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-08-14T19:58:12Z","tagValue":"2020-08-14T19:58:12Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-08-17T07:53:26Z","tagValue":"2020-08-17T07:53:26Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-08-18T11:38:44Z","tagValue":"2020-08-18T11:38:44Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-08-28T19:38:38Z","tagValue":"2020-08-28T19:38:38Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-09-02T03:08:21Z","tagValue":"2020-09-02T03:08:21Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-09-04T19:39:20Z","tagValue":"2020-09-04T19:39:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-10-28T15:05:07Z","tagValue":"2020-10-28T15:05:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-10-29T04:44:18Z","tagValue":"2020-10-29T04:44:18Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-09-15T11:43:24Z","tagValue":"2020-09-15T11:43:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-09-15T12:02:24Z","tagValue":"2020-09-15T12:02:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-09-15T12:21:41Z","tagValue":"2020-09-15T12:21:41Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-09-21T10:26:08Z","tagValue":"2020-09-21T10:26:08Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-10-14T16:44:31Z","tagValue":"2020-10-14T16:44:31Z","count":{"type":"Total","value":5}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-10-14T16:56:30Z","tagValue":"2020-10-14T16:56:30Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-10-16T19:04:24Z","tagValue":"2020-10-16T19:04:24Z","count":{"type":"Total","value":5}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-10-16T19:11:59Z","tagValue":"2020-10-16T19:11:59Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-10-18T16:41:58Z","tagValue":"2020-10-18T16:41:58Z","count":{"type":"Total","value":5}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-10-18T18:19:42Z","tagValue":"2020-10-18T18:19:42Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-10-23T16:31:42Z","tagValue":"2020-10-23T16:31:42Z","count":{"type":"Total","value":5}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-10-27T03:23:24Z","tagValue":"2020-10-27T03:23:24Z","count":{"type":"Total","value":5}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-10-27T03:31:42Z","tagValue":"2020-10-27T03:31:42Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-15T03:15:42Z","tagValue":"2020-04-15T03:15:42Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-10T06:47:57Z","tagValue":"2020-05-10T06:47:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-03T07:10:50Z","tagValue":"2020-06-03T07:10:50Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:54:47Z","tagValue":"2019-10-15T16:54:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:55:16Z","tagValue":"2019-10-15T16:55:16Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:15Z","tagValue":"2019-10-15T16:56:15Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:26Z","tagValue":"2019-10-15T16:56:26Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-16T14:48:47Z","tagValue":"2019-10-16T14:48:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:42:46Z","tagValue":"2019-10-17T15:42:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:43:24Z","tagValue":"2019-10-17T15:43:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:44:46Z","tagValue":"2019-10-17T15:44:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-18T00:59:19Z","tagValue":"2019-10-18T00:59:19Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:35Z","tagValue":"2019-11-11T08:59:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:39Z","tagValue":"2019-11-11T08:59:39Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:40Z","tagValue":"2019-11-11T08:59:40Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-27T22:15:53Z","tagValue":"2019-12-27T22:15:53Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-30T02:24:44Z","tagValue":"2019-12-30T02:24:44Z","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imageTemplateName","tagName":"imageTemplateName","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imageTemplateName/tagValues/acctest-IBT-0710-2","tagValue":"acctest-IBT-0710-2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imageTemplateResourceGroupName","tagName":"imageTemplateResourceGroupName","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imageTemplateResourceGroupName/tagValues/acctestRG-ibt-24","tagValue":"acctestRG-ibt-24","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/special_sig","tagName":"special_sig","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/special_sig/tagValues/yes","tagValue":"yes","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost + Center","tagName":"Cost Center","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost + Center/tagValues/","tagValue":"","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag3602","tagName":"xplatResourceGroupTag3602","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7142","tagName":"xplatResourceGroupTag7142","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7429","tagName":"xplatResourceGroupTag7429","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7670","tagName":"xplatResourceGroupTag7670","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9838","tagName":"xplatResourceGroupTag9838","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag1210","tagName":"xplatResourceTag1210","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag3833","tagName":"xplatResourceTag3833","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag7831","tagName":"xplatResourceTag7831","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8311","tagName":"xplatResourceTag8311","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8732","tagName":"xplatResourceTag8732","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag875","tagName":"xplatResourceTag875","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9329","tagName":"xplatResourceTag9329","count":{"type":"Total","value":0},"values":[]}]}' headers: cache-control: - no-cache content-length: - - '5343' + - '26087' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:56:59 GMT + - Thu, 29 Oct 2020 05:37:40 GMT expires: - '-1' pragma: @@ -145,8 +140,8 @@ interactions: Content-Length: - '0' User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: DELETE @@ -160,7 +155,7 @@ interactions: content-length: - '0' date: - - Wed, 01 Jul 2020 00:57:01 GMT + - Thu, 29 Oct 2020 05:37:42 GMT expires: - '-1' pragma: @@ -186,8 +181,8 @@ interactions: Content-Length: - '0' User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: DELETE @@ -201,7 +196,7 @@ interactions: content-length: - '0' date: - - Wed, 01 Jul 2020 00:57:04 GMT + - Thu, 29 Oct 2020 05:37:45 GMT expires: - '-1' pragma: diff --git a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource_features.test_features.yaml b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource_features.test_features.yaml index 2ccc06915b6b..1dff3229b567 100644 --- a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource_features.test_features.yaml +++ b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource_features.test_features.yaml @@ -9,24 +9,24 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/features?api-version=2015-12-01 response: body: - string: '{"value":[{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RedHatOpenShift/features/preview","type":"Microsoft.Features/providers/features","name":"Microsoft.RedHatOpenShift/preview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIaaS/features/cloudSimpleRp1","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIaaS/cloudSimpleRp1"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp10","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp10"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp11","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp11"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp12","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp12"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp13","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp13"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp14","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp14"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp15","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp15"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp16","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp16"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp17","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp17"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp18","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp18"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp19","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp19"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp2","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp20","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp20"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp21","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp21"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp22","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp22"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp23","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp23"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp24","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp24"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp25","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp25"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp6","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp6"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp7","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp7"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp8","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp8"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp9","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp9"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/stagingRP","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/stagingRP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AAD/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.AAD/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AAD/features/previewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.AAD/previewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AAD/features/tipAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.AAD/tipAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.aadiam/features/betalogconnector","type":"Microsoft.Features/providers/features","name":"microsoft.aadiam/betalogconnector"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.aadiam/features/testinproduction","type":"Microsoft.Features/providers/features","name":"microsoft.aadiam/testinproduction"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Advisor/features/dev","type":"Microsoft.Features/providers/features","name":"Microsoft.Advisor/dev"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.alertsmanagement/features/enableSmartDiagnostics","type":"Microsoft.Features/providers/features","name":"microsoft.alertsmanagement/enableSmartDiagnostics"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AnalysisServices/features/prodNorthEurope","type":"Microsoft.Features/providers/features","name":"Microsoft.AnalysisServices/prodNorthEurope"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AnalysisServices/features/prodWestUS","type":"Microsoft.Features/providers/features","name":"Microsoft.AnalysisServices/prodWestUS"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AnalysisServices/features/Scaleout","type":"Microsoft.Features/providers/features","name":"Microsoft.AnalysisServices/Scaleout"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AnalysisServices/features/UnifiedGateway","type":"Microsoft.Features/providers/features","name":"Microsoft.AnalysisServices/UnifiedGateway"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ApiManagement/features/testinproduction","type":"Microsoft.Features/providers/features","name":"Microsoft.ApiManagement/testinproduction"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ApiManagement/features/testinproductionmdm","type":"Microsoft.Features/providers/features","name":"Microsoft.ApiManagement/testinproductionmdm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Archive/features/PreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Archive/PreviewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Automation/features/aseAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Automation/aseAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Automation/features/ccAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Automation/ccAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Automation/features/ciAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Automation/ciAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Automation/features/dsc","type":"Microsoft.Features/providers/features","name":"Microsoft.Automation/dsc"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Automation/features/eapAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Automation/eapAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Automation/features/ncusAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Automation/ncusAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Automation/features/neAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Automation/neAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Automation/features/scusAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Automation/scusAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Automation/features/wcusuksAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Automation/wcusuksAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AzureActiveDirectory/features/B2CV2Resource","type":"Microsoft.Features/providers/features","name":"Microsoft.AzureActiveDirectory/B2CV2Resource"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AzureActiveDirectory/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.AzureActiveDirectory/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AzureActiveDirectory/features/CPIMCSP","type":"Microsoft.Features/providers/features","name":"Microsoft.AzureActiveDirectory/CPIMCSP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AzureData/features/eosEarlyAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.AzureData/eosEarlyAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AzureData/features/tinaEarlyAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.AzureData/tinaEarlyAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AzureStack/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.AzureStack/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AzureStack/features/Marketplace","type":"Microsoft.Features/providers/features","name":"Microsoft.AzureStack/Marketplace"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Batch/features/BatchAccountWhitelistSAN","type":"Microsoft.Features/providers/features","name":"Microsoft.Batch/BatchAccountWhitelistSAN"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Batch/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Batch/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Batch/features/portaltest","type":"Microsoft.Features/providers/features","name":"Microsoft.Batch/portaltest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Batch/features/portaltest2","type":"Microsoft.Features/providers/features","name":"Microsoft.Batch/portaltest2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Batch/features/SwiftProd","type":"Microsoft.Features/providers/features","name":"Microsoft.Batch/SwiftProd"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.BatchAI/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.BatchAI/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.BatchAI/features/workspace","type":"Microsoft.Features/providers/features","name":"Microsoft.BatchAI/workspace"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.BigAnalytics/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.BigAnalytics/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Blockchain/features/privatePreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Blockchain/privatePreviewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Cache/features/betaAccess2","type":"Microsoft.Features/providers/features","name":"Microsoft.Cache/betaAccess2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Cache/features/betaAccess3","type":"Microsoft.Features/providers/features","name":"Microsoft.Cache/betaAccess3"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.cache/features/CanaryCheckNameAvailability","type":"Microsoft.Features/providers/features","name":"microsoft.cache/CanaryCheckNameAvailability"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ClassicIaaSMigrate/features/ClassicIaaSMigrate","type":"Microsoft.Features/providers/features","name":"Microsoft.ClassicIaaSMigrate/ClassicIaaSMigrate"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ClassicInfrastructureMigrate/features/ClassicInfrastructureMigrate","type":"Microsoft.Features/providers/features","name":"Microsoft.ClassicInfrastructureMigrate/ClassicInfrastructureMigrate"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ClassicSubscription/features/InternalTest","type":"Microsoft.Features/providers/features","name":"Microsoft.ClassicSubscription/InternalTest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.cloudes/features/internalmsft","type":"Microsoft.Features/providers/features","name":"microsoft.cloudes/internalmsft"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.cloudes/features/internalonly","type":"Microsoft.Features/providers/features","name":"microsoft.cloudes/internalonly"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.cloudes/features/testinproduction","type":"Microsoft.Features/providers/features","name":"microsoft.cloudes/testinproduction"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.CognitiveServices/features/AutoApproveFeature","type":"Microsoft.Features/providers/features","name":"Microsoft.CognitiveServices/AutoApproveFeature"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.CognitiveServices/features/formUnderstandingPrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.CognitiveServices/formUnderstandingPrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.CognitiveServices/features/TokenAuthPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.CognitiveServices/TokenAuthPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/CanonicalEssentialsPlan","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/CanonicalEssentialsPlan"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/CanonicalAdvancedSupport","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/CanonicalAdvancedSupport"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/CanonicalEssentialSupport","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/CanonicalEssentialSupport"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/CanonicalEssentialsSupport","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/CanonicalEssentialsSupport"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/CAPSImagePublishing","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/CAPSImagePublishing"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/CanonicalStandardSupport","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/CanonicalStandardSupport"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/CorPersistence","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/CorPersistence"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/DedicatedNodeGroup","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/DedicatedNodeGroup"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/disableDisksAndSnapshotsPerRGLimit","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/disableDisksAndSnapshotsPerRGLimit"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/DisableSerialConsole","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/DisableSerialConsole"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/DisableServiceHealing","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/DisableServiceHealing"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/DsmsSecrets","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/DsmsSecrets"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/EnableCrossSubscriptionWithKeyVaultResources","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/EnableCrossSubscriptionWithKeyVaultResources"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/ExtensionsFastpath","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/ExtensionsFastpath"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/ExtraLargeVMScaleSetPerfEvaluation","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/ExtraLargeVMScaleSetPerfEvaluation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.AllowUnhealthyNode","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.AllowUnhealthyNode"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.AzSM.NewDeployment.OptOut","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.AzSM.NewDeployment.OptOut"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.DisableServiceHealing","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.DisableServiceHealing"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.DisableLiveMigrationGen","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.DisableLiveMigrationGen"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.DisableTenantLeaseOperationsOnNode","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.DisableTenantLeaseOperationsOnNode"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.DisableVMFaultInjectorForTenant","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.DisableVMFaultInjectorForTenant"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.EnableDeadMigrationGen","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.EnableDeadMigrationGen"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.EnableCustomizedTenantLiveMigration","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.EnableCustomizedTenantLiveMigration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.EnableLiveMigrationGen","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.EnableLiveMigrationGen"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.EnableLiveMigration","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.EnableLiveMigration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.EnableStopMigrateForSub","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.EnableStopMigrateForSub"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.EnableStopMigrateDiskCopyForTenant","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.EnableStopMigrateDiskCopyForTenant"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.EnableTenantLeaseOperationsOnNode","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.EnableTenantLeaseOperationsOnNode"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.EnableStopMigrateGen","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.EnableStopMigrateGen"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.StopMigrateSkipDiskCopyForSub","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.StopMigrateSkipDiskCopyForSub"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.EnableVMFaultInjectorForTenant","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.EnableVMFaultInjectorForTenant"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.VMPreprovisioning","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.VMPreprovisioning"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.compute/features/Fabric.UDWithinFDAlignment","type":"Microsoft.Features/providers/features","name":"Microsoft.compute/Fabric.UDWithinFDAlignment"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/FastPollingOptIn","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/FastPollingOptIn"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Feature.AllowUnhealthyNode","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Feature.AllowUnhealthyNode"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Feature.EnableCustomizedTenantLiveMigration","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Feature.EnableCustomizedTenantLiveMigration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Feature.DisableServiceHealing","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Feature.DisableServiceHealing"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Foobar","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Foobar"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/GalleryImageBigBlob","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/GalleryImageBigBlob"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/GalleryApplicationPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/GalleryApplicationPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/GalleryImageHighScale","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/GalleryImageHighScale"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/GalleryPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/GalleryPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/GalleryRemoveUserSourceDependency","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/GalleryRemoveUserSourceDependency"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/ImpedeFastPolling","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/ImpedeFastPolling"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/InGuestPatchVMPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/InGuestPatchVMPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/IncrementalSnapshots","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/IncrementalSnapshots"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/InGuestVMUpdate","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/InGuestVMUpdate"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/LocalDiffDiskPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/LocalDiffDiskPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/lowprioritysinglevm","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/lowprioritysinglevm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/ManagedDisksPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/ManagedDisksPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/ManagedResourcesMove","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/ManagedResourcesMove"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/MRProfile","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/MRProfile"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.compute/features/MultipleAvailabilityZones","type":"Microsoft.Features/providers/features","name":"microsoft.compute/MultipleAvailabilityZones"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/NetworkPlacementGroupsPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/NetworkPlacementGroupsPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/NewAllocator","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/NewAllocator"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/NodeFlight","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/NodeFlight"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/OptOutScaleSetPipelinePreemption","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/OptOutScaleSetPipelinePreemption"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/OSUpgradeForServiceFabric","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/OSUpgradeForServiceFabric"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.compute/features/OverProvision","type":"Microsoft.Features/providers/features","name":"microsoft.compute/OverProvision"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/OverprovisionedExtensionDelay","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/OverprovisionedExtensionDelay"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/OverProvisionWithUDBalance","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/OverProvisionWithUDBalance"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/OverProvisionWithFDBalancing","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/OverProvisionWithFDBalancing"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/OverProvisionWithUDBalancing","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/OverProvisionWithUDBalancing"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/PerfTestSubscription","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/PerfTestSubscription"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/PremiumDiskLatencyOptimized","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/PremiumDiskLatencyOptimized"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/ProximityPlacementGroupsPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/ProximityPlacementGroupsPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/RegionalUltraSSDVMs","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/RegionalUltraSSDVMs"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/RepairVMScaleSetInstancesPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/RepairVMScaleSetInstancesPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.compute/features/Reprovisioning","type":"Microsoft.Features/providers/features","name":"microsoft.compute/Reprovisioning"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/RollingUpgradePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/RollingUpgradePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/RollingUpgradePolicyOverride","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/RollingUpgradePolicyOverride"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/RunScripts","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/RunScripts"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SIGEnablePremiumLRSReplication","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SIGEnablePremiumLRSReplication"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.compute/features/SpotMeterValidation","type":"Microsoft.Features/providers/features","name":"Microsoft.compute/SpotMeterValidation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQLG5NP","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQLG5NP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQLG6NP","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQLG6NP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/StandardSSD","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/StandardSSD"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/TenantReserveActivate","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/TenantReserveActivate"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.compute/features/TestSubscription","type":"Microsoft.Features/providers/features","name":"microsoft.compute/TestSubscription"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/TipNode","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/TipNode"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/UDWithinFDAlignment","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/UDWithinFDAlignment"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/UltraSSDWithVMSS","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/UltraSSDWithVMSS"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/UnifiedDiskEncryption","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/UnifiedDiskEncryption"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/UnifiedDiskEncryptionForVMs","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/UnifiedDiskEncryptionForVMs"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/UnifiedDiskEncryptionWithOSUpgrades","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/UnifiedDiskEncryptionWithOSUpgrades"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/UsePreprovisionedVMs","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/UsePreprovisionedVMs"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/UserImageSharing","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/UserImageSharing"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/VirtualMachineRuntimeServiceDisablePackageValidation","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/VirtualMachineRuntimeServiceDisablePackageValidation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/VMPipelineBatchingPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/VMPipelineBatchingPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/vmssApiPreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/vmssApiPreviewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/vmssApiPreviewV2Access","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/vmssApiPreviewV2Access"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/ZRSImagesAndSnapshots","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/ZRSImagesAndSnapshots"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ConnectedEnvironment/features/tip","type":"Microsoft.Features/providers/features","name":"Microsoft.ConnectedEnvironment/tip"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerInstance/features/aciOnAtlas","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerInstance/aciOnAtlas"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerInstance/features/extension","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerInstance/extension"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerInstance/features/privatepreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerInstance/privatepreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerInstance/features/previewSubscription","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerInstance/previewSubscription"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerRegisry/features/BlockRegion","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerRegisry/BlockRegion"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerInstance/features/privilegedSubscription","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerInstance/privilegedSubscription"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerRegistry/features/BlockRegion","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerRegistry/BlockRegion"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerRegistry/features/BetaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerRegistry/BetaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerRegistry/features/PrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerRegistry/PrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AAD","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AAD"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/ACS-EUAP","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/ACS-EUAP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/ACSVNext","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/ACSVNext"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AddContainerInsightsSolution","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AddContainerInsightsSolution"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-AzurePolicyAutoApprove","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-AzurePolicyAutoApprove"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-CanadaCentral","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-CanadaCentral"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-CanadaEast","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-CanadaEast"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-CentralUS","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-CentralUS"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-EastUS","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-EastUS"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-EnableAzureDataPlanePolicy","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-EnableAzureDataPlanePolicy"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-INT","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-INT"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-RegionEarlyAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-RegionEarlyAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-UKWest","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-UKWest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKSAuditLog","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKSAuditLog"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-WestUS2","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-WestUS2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AksBypassRegionWritesDisabled","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AksBypassRegionWritesDisabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKSAzureStandardLoadBalancer","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKSAzureStandardLoadBalancer"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKSHTTPCustomFeatures","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKSHTTPCustomFeatures"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AksBypassServiceGate","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AksBypassServiceGate"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKSLockingDownEgressPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKSLockingDownEgressPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKSImage","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKSImage"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AllowPreReleaseRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AllowPreReleaseRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKSPrivateLinkPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKSPrivateLinkPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AllowSwarmWindowsAgent","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AllowSwarmWindowsAgent"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AllowValidationRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AllowValidationRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/APIServerSecurityPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/APIServerSecurityPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AROGA","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AROGA"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/ARORemoteGateway","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/ARORemoteGateway"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AvailabilityZonePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AvailabilityZonePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/ControlPlaneUnderlay","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/ControlPlaneUnderlay"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/DockerEngineImage","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/DockerEngineImage"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/EnableCCPMutatingWebhook","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/EnableCCPMutatingWebhook"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/EnableNetworkPolicy","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/EnableNetworkPolicy"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/EnableSingleIPPerCCP","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/EnableSingleIPPerCCP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/HTTP-Application-Routing","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/HTTP-Application-Routing"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/EnableXTablesLock","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/EnableXTablesLock"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/ManagedCluster","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/ManagedCluster"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/LowPriorityPoolPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/LowPriorityPoolPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/MSIPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/MSIPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/MobyImage","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/MobyImage"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/MultiAgentpoolPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/MultiAgentpoolPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/NodePublicIPPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/NodePublicIPPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/OpenVPN","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/OpenVPN"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/OpenshiftManagedCluster","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/OpenshiftManagedCluster"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/OSABypassMarketplace","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/OSABypassMarketplace"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/OSAInProgressFeature","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/OSAInProgressFeature"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/PodSecurityPolicyPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/PodSecurityPolicyPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/RBAC","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/RBAC"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/V20180331API","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/V20180331API"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/SaveOSATestConfig","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/SaveOSATestConfig"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/WindowsPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/WindowsPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/VMSSPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/VMSSPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Contoso/features/RPaaSSampleApp","type":"Microsoft.Features/providers/features","name":"Microsoft.Contoso/RPaaSSampleApp"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.CostManagementBeta/features/TenantRegistration","type":"Microsoft.Features/providers/features","name":"Microsoft.CostManagementBeta/TenantRegistration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.CustomerInsights/features/privatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.CustomerInsights/privatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.CustomProviders/features/customrp","type":"Microsoft.Features/providers/features","name":"Microsoft.CustomProviders/customrp"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.CustomProviders/features/associations","type":"Microsoft.Features/providers/features","name":"Microsoft.CustomProviders/associations"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.CustomProviders/features/UpcomingRegion","type":"Microsoft.Features/providers/features","name":"Microsoft.CustomProviders/UpcomingRegion"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databox/features/HeavyCreateAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Databox/HeavyCreateAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataBoxEdge/features/DBEIntAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataBoxEdge/DBEIntAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataBoxEdge/features/EdgeSignUp","type":"Microsoft.Features/providers/features","name":"Microsoft.DataBoxEdge/EdgeSignUp"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataBoxEdge/features/PassiveStampAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataBoxEdge/PassiveStampAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databricks/features/DatabricksEUAPAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Databricks/DatabricksEUAPAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databricks/features/DatabricksControlPlane","type":"Microsoft.Features/providers/features","name":"Microsoft.Databricks/DatabricksControlPlane"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databricks/features/TowboatAllowedSubscription","type":"Microsoft.Features/providers/features","name":"Microsoft.Databricks/TowboatAllowedSubscription"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databricks/features/DatabricksTestEnv","type":"Microsoft.Features/providers/features","name":"Microsoft.Databricks/DatabricksTestEnv"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataCatalog/features/PPEAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataCatalog/PPEAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataCatalog/features/PRODAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataCatalog/PRODAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataCatalog/features/PRODAccessNew","type":"Microsoft.Features/providers/features","name":"Microsoft.DataCatalog/PRODAccessNew"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataFactory/features/DFAccessInBuildout","type":"Microsoft.Features/providers/features","name":"Microsoft.DataFactory/DFAccessInBuildout"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataExchange/features/workspacePreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataExchange/workspacePreviewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataFactory/features/GatewayHAPrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.DataFactory/GatewayHAPrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataFactory/features/GatewayHAPublicPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.DataFactory/GatewayHAPublicPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataLakeAnalytics/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataLakeAnalytics/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataLakeAnalytics/features/requestedBetaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataLakeAnalytics/requestedBetaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataLakeStore/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataLakeStore/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataLakeStore/features/requestedBetaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataLakeStore/requestedBetaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataMigration/features/BuddyA","type":"Microsoft.Features/providers/features","name":"Microsoft.DataMigration/BuddyA"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataMigration/features/demo","type":"Microsoft.Features/providers/features","name":"Microsoft.DataMigration/demo"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataMigration/features/int","type":"Microsoft.Features/providers/features","name":"Microsoft.DataMigration/int"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataMigration/features/staging","type":"Microsoft.Features/providers/features","name":"Microsoft.DataMigration/staging"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataShare/features/ReactSqlUxPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.DataShare/ReactSqlUxPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMariaDB/features/georeplica","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMariaDB/georeplica"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMariaDB/features/firewallRuleAllowAzureServices","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMariaDB/firewallRuleAllowAzureServices"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMariaDB/features/newStorageLimit","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMariaDB/newStorageLimit"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMariaDB/features/georestore","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMariaDB/georestore"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMariaDB/features/replica","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMariaDB/replica"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForMariaDB/features/privatePreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForMariaDB/privatePreviewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMariaDB/features/storageautogrow","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMariaDB/storageautogrow"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMariaDB/features/resourceHealth","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMariaDB/resourceHealth"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMariaDB/features/vnet","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMariaDB/vnet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMariaDB/features/threatdetection","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMariaDB/threatdetection"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMySQL/features/firewallRuleAllowAzureServices","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMySQL/firewallRuleAllowAzureServices"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMariaDB/features/workloadInsight","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMariaDB/workloadInsight"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMySQL/features/georestore","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMySQL/georestore"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForMySQL/features/georeplica","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForMySQL/georeplica"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMySQL/features/largeStorage","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMySQL/largeStorage"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMySQL/features/newStorageLimit","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMySQL/newStorageLimit"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DbforMySQL/features/replica","type":"Microsoft.Features/providers/features","name":"Microsoft.DbforMySQL/replica"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMySQL/features/resourceHealth","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMySQL/resourceHealth"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMySQL/features/storageautogrow","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMySQL/storageautogrow"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMySQL/features/vnet","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMySQL/vnet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.dbformysql/features/webappnewbizmodel","type":"Microsoft.Features/providers/features","name":"microsoft.dbformysql/webappnewbizmodel"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForMySQL/features/workloadInsight","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForMySQL/workloadInsight"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForPostgreSQL/features/citus64vCores","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForPostgreSQL/citus64vCores"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforPostgreSQL/features/cituspreview","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforPostgreSQL/cituspreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForPostgreSQL/features/citusRoles","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForPostgreSQL/citusRoles"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforPostgreSQL/features/firewallRuleAllowAzureServices","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforPostgreSQL/firewallRuleAllowAzureServices"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForPostgreSQL/features/georeplica","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForPostgreSQL/georeplica"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforPostgreSQL/features/georestore","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforPostgreSQL/georestore"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforPostgreSQL/features/indexAdvisor","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforPostgreSQL/indexAdvisor"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForPostgreSQL/features/largeStorage","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForPostgreSQL/largeStorage"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforPostgreSQL/features/newStorageLimit","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforPostgreSQL/newStorageLimit"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforPostgreSQL/features/ossazureactivedirectoryadmin","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforPostgreSQL/ossazureactivedirectoryadmin"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.dbforpostgresql/features/pgversionten","type":"Microsoft.Features/providers/features","name":"microsoft.dbforpostgresql/pgversionten"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForPostgreSQL/features/replica","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForPostgreSQL/replica"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforPostgreSQL/features/resourceHealth","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforPostgreSQL/resourceHealth"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforPostgreSQL/features/storageautogrow","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforPostgreSQL/storageautogrow"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForPostgreSQL/features/vnet","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForPostgreSQL/vnet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.dbforpostgresql/features/webappnewbizmodel","type":"Microsoft.Features/providers/features","name":"microsoft.dbforpostgresql/webappnewbizmodel"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforPostgreSQL/features/workloadInsight","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforPostgreSQL/workloadInsight"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DeploymentManager/features/admdev","type":"Microsoft.Features/providers/features","name":"Microsoft.DeploymentManager/admdev"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DeploymentManager/features/ignite2018PreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DeploymentManager/ignite2018PreviewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DeploymentManager/features/tip","type":"Microsoft.Features/providers/features","name":"Microsoft.DeploymentManager/tip"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.devices/features/AzureIoTElasticPools","type":"Microsoft.Features/providers/features","name":"microsoft.devices/AzureIoTElasticPools"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.devices/features/AzureIoTProvisioningService","type":"Microsoft.Features/providers/features","name":"microsoft.devices/AzureIoTProvisioningService"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Devices/features/PublicPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Devices/PublicPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DevSpaces/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DevSpaces/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DevTestLab/features/Integration","type":"Microsoft.Features/providers/features","name":"Microsoft.DevTestLab/Integration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DevTestLab/features/Test2","type":"Microsoft.Features/providers/features","name":"Microsoft.DevTestLab/Test2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DevTestLab/features/Test3","type":"Microsoft.Features/providers/features","name":"Microsoft.DevTestLab/Test3"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DevTestLab/features/Test4","type":"Microsoft.Features/providers/features","name":"Microsoft.DevTestLab/Test4"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.dns/features/privatepreview","type":"Microsoft.Features/providers/features","name":"microsoft.dns/privatepreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DocumentDB/features/autopilot-flight-3","type":"Microsoft.Features/providers/features","name":"Microsoft.DocumentDB/autopilot-flight-3"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DocumentDB/features/storageanalytics-public-preview","type":"Microsoft.Features/providers/features","name":"Microsoft.DocumentDB/storageanalytics-public-preview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DomainRegistration/features/betaGD","type":"Microsoft.Features/providers/features","name":"Microsoft.DomainRegistration/betaGD"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.EventGrid/features/storageEventSubscriptions","type":"Microsoft.Features/providers/features","name":"Microsoft.EventGrid/storageEventSubscriptions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Experimentation/features/POC","type":"Microsoft.Features/providers/features","name":"Microsoft.Experimentation/POC"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ExpressPod/features/DataBoxCanaryTest","type":"Microsoft.Features/providers/features","name":"Microsoft.ExpressPod/DataBoxCanaryTest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ExpressPod/features/DataIngestionService","type":"Microsoft.Features/providers/features","name":"Microsoft.ExpressPod/DataIngestionService"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ExpressPod/features/DeviceImportAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.ExpressPod/DeviceImportAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Expresspod/features/diskimportaccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Expresspod/diskimportaccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ExpressPod/features/ExpressPodCanary","type":"Microsoft.Features/providers/features","name":"Microsoft.ExpressPod/ExpressPodCanary"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Expresspod/features/IgniteSignup","type":"Microsoft.Features/providers/features","name":"Microsoft.Expresspod/IgniteSignup"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ExpressPod/features/MockGdcoAndUps","type":"Microsoft.Features/providers/features","name":"Microsoft.ExpressPod/MockGdcoAndUps"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Expresspod/features/MockXtService","type":"Microsoft.Features/providers/features","name":"Microsoft.Expresspod/MockXtService"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ExternalShim/features/ExternalShimAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.ExternalShim/ExternalShimAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Genomics/features/DevelopmentEnvironmentAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Genomics/DevelopmentEnvironmentAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.GuestConfiguration/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.GuestConfiguration/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.GuestConfiguration/features/CanaryParticipation","type":"Microsoft.Features/providers/features","name":"Microsoft.GuestConfiguration/CanaryParticipation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.GuestConfiguration/features/GA20181120","type":"Microsoft.Features/providers/features","name":"Microsoft.GuestConfiguration/GA20181120"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.HanaOnAzure/features/noAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.HanaOnAzure/noAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.HardwareSecurityModules/features/AzureDedicatedHsm","type":"Microsoft.Features/providers/features","name":"Microsoft.HardwareSecurityModules/AzureDedicatedHsm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.HardwareSecurityModules/features/DedicatedHsmEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.HardwareSecurityModules/DedicatedHsmEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.HardwareSecurityModules/features/deploymentVerification","type":"Microsoft.Features/providers/features","name":"Microsoft.HardwareSecurityModules/deploymentVerification"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.HardwareSecurityModules/features/drillVerification","type":"Microsoft.Features/providers/features","name":"Microsoft.HardwareSecurityModules/drillVerification"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.HardwareSecurityModules/features/UseDogfoodHSM","type":"Microsoft.Features/providers/features","name":"Microsoft.HardwareSecurityModules/UseDogfoodHSM"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.HardwareSecurityModules/features/UseDogfoodHsmAdminPlane","type":"Microsoft.Features/providers/features","name":"Microsoft.HardwareSecurityModules/UseDogfoodHsmAdminPlane"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.HybridCompute/features/HybridComputePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.HybridCompute/HybridComputePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.hybridcompute/features/HybridComputeExtensionPreview","type":"Microsoft.Features/providers/features","name":"microsoft.hybridcompute/HybridComputeExtensionPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.HybridCompute/features/HybridRPCanary","type":"Microsoft.Features/providers/features","name":"Microsoft.HybridCompute/HybridRPCanary"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.HybridData/features/PreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.HybridData/PreviewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/AIMONEnvironment","type":"Microsoft.Features/providers/features","name":"microsoft.insights/AIMONEnvironment"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/actiongrouptestinproduction","type":"Microsoft.Features/providers/features","name":"microsoft.insights/actiongrouptestinproduction"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/azurehealthlimitedpreview","type":"Microsoft.Features/providers/features","name":"microsoft.insights/azurehealthlimitedpreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/azurehealthpreview","type":"Microsoft.Features/providers/features","name":"microsoft.insights/azurehealthpreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/baseline-preview","type":"Microsoft.Features/providers/features","name":"microsoft.insights/baseline-preview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/baseline-dogfood","type":"Microsoft.Features/providers/features","name":"microsoft.insights/baseline-dogfood"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/billingv3","type":"Microsoft.Features/providers/features","name":"microsoft.insights/billingv3"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/diagnosticsettingpreview","type":"Microsoft.Features/providers/features","name":"microsoft.insights/diagnosticsettingpreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/customMetric","type":"Microsoft.Features/providers/features","name":"microsoft.insights/customMetric"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/EnableCCAN","type":"Microsoft.Features/providers/features","name":"microsoft.insights/EnableCCAN"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Insights/features/EnableCHNRegion","type":"Microsoft.Features/providers/features","name":"Microsoft.Insights/EnableCHNRegion"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/EnableCID","type":"Microsoft.Features/providers/features","name":"microsoft.insights/EnableCID"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Insights/features/EnableNOERegion","type":"Microsoft.Features/providers/features","name":"Microsoft.Insights/EnableNOERegion"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Insights/features/EnableNOWRegion","type":"Microsoft.Features/providers/features","name":"Microsoft.Insights/EnableNOWRegion"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/EnableSEA","type":"Microsoft.Features/providers/features","name":"microsoft.insights/EnableSEA"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Insights/features/EnableSEAURegion","type":"Microsoft.Features/providers/features","name":"Microsoft.Insights/EnableSEAURegion"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/EnableSUK","type":"Microsoft.Features/providers/features","name":"microsoft.insights/EnableSUK"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/EnableWestUS2","type":"Microsoft.Features/providers/features","name":"microsoft.insights/EnableWestUS2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/metricalertprivatepreview","type":"Microsoft.Features/providers/features","name":"microsoft.insights/metricalertprivatepreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/metricalertmultidimprivatepreview","type":"Microsoft.Features/providers/features","name":"microsoft.insights/metricalertmultidimprivatepreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/NotificationRulePreview","type":"Microsoft.Features/providers/features","name":"microsoft.insights/NotificationRulePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/NotificationGroupPreview","type":"Microsoft.Features/providers/features","name":"microsoft.insights/NotificationGroupPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/ScheduledQueryRulesPROD","type":"Microsoft.Features/providers/features","name":"microsoft.insights/ScheduledQueryRulesPROD"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/ScheduledQueryRulesAIMON","type":"Microsoft.Features/providers/features","name":"microsoft.insights/ScheduledQueryRulesAIMON"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Insights/features/testinproduction","type":"Microsoft.Features/providers/features","name":"Microsoft.Insights/testinproduction"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/testinproductionmdm","type":"Microsoft.Features/providers/features","name":"microsoft.insights/testinproductionmdm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/testinproductionnms","type":"Microsoft.Features/providers/features","name":"microsoft.insights/testinproductionnms"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.IoTCentral/features/metering","type":"Microsoft.Features/providers/features","name":"Microsoft.IoTCentral/metering"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.IoTSpaces/features/CanaryCustomers","type":"Microsoft.Features/providers/features","name":"Microsoft.IoTSpaces/CanaryCustomers"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.IoTSpaces/features/MVP","type":"Microsoft.Features/providers/features","name":"Microsoft.IoTSpaces/MVP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.IotSpaces/features/PPECustomers","type":"Microsoft.Features/providers/features","name":"Microsoft.IotSpaces/PPECustomers"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.IotSpaces/features/PreviewCustomers","type":"Microsoft.Features/providers/features","name":"Microsoft.IotSpaces/PreviewCustomers"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.IoTSpaces/features/ScaleTestCustomers","type":"Microsoft.Features/providers/features","name":"Microsoft.IoTSpaces/ScaleTestCustomers"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.KeyVault/features/EventGridPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.KeyVault/EventGridPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.KeyVault/features/HSMPoolEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.KeyVault/HSMPoolEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kona/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Kona/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kona/features/betaAccess2","type":"Microsoft.Features/providers/features","name":"Microsoft.Kona/betaAccess2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kubernetes/features/previewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Kubernetes/previewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.KubernetesConfiguration/features/sourceControlConfiguration","type":"Microsoft.Features/providers/features","name":"Microsoft.KubernetesConfiguration/sourceControlConfiguration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/AllowSwitzerlandNorth","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/AllowSwitzerlandNorth"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/UseSharedIdentities","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/UseSharedIdentities"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.LabServices/features/DevInProdIntegration","type":"Microsoft.Features/providers/features","name":"Microsoft.LabServices/DevInProdIntegration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Logic/features/AllowCrossSubscriptionGatewayAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Logic/AllowCrossSubscriptionGatewayAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Logic/features/AmeProjectionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Logic/AmeProjectionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Logic/features/AllowUnlimitedLogicApps","type":"Microsoft.Features/providers/features","name":"Microsoft.Logic/AllowUnlimitedLogicApps"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Logic/features/FairfaxDemo","type":"Microsoft.Features/providers/features","name":"Microsoft.Logic/FairfaxDemo"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Logic/features/HostingEnvironmentsPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Logic/HostingEnvironmentsPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Logic/features/IsolatedEnvironmentsPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Logic/IsolatedEnvironmentsPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Logic/features/IsolatedEnvironmentsPrivateRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Logic/IsolatedEnvironmentsPrivateRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Logic/features/IsolatedEnvironmentsPreviewDisable","type":"Microsoft.Features/providers/features","name":"Microsoft.Logic/IsolatedEnvironmentsPreviewDisable"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.MachineLearningCompute/features/ViennaPublicPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.MachineLearningCompute/ViennaPublicPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.MachineLearningExperimentation/features/CanaryFeature","type":"Microsoft.Features/providers/features","name":"Microsoft.MachineLearningExperimentation/CanaryFeature"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Maintenance/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Maintenance/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ManagedIdentity/features/EnableSecurityGroups","type":"Microsoft.Features/providers/features","name":"Microsoft.ManagedIdentity/EnableSecurityGroups"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ManagedNetwork/features/mncbetaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.ManagedNetwork/mncbetaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Microsoft/features/AllowNetworkWatcherAzureReachabilityReport","type":"Microsoft.Features/providers/features","name":"Microsoft.Microsoft/AllowNetworkWatcherAzureReachabilityReport"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Mindaro/features/tip2","type":"Microsoft.Features/providers/features","name":"Microsoft.Mindaro/tip2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Mindaro/features/tip","type":"Microsoft.Features/providers/features","name":"Microsoft.Mindaro/tip"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/AllowSMB","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/AllowSMB"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/AllowValidationRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/AllowValidationRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFBackupPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFBackupPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFGATenant","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFGATenant"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFNFSv4Preview","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFNFSv4Preview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFReplicationPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFReplicationPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFSnapRestorePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFSnapRestorePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/managementNicAdmin","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/managementNicAdmin"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/testing","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/testing"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAcceleratedNetworkingFeature","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAcceleratedNetworkingFeature"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAccessRuleExtendedProperties","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAccessRuleExtendedProperties"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAcceleratedNetworkingForLinux","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAcceleratedNetworkingForLinux"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAllocateOptimizations","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAllocateOptimizations"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAllocateAsyncValidation","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAllocateAsyncValidation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAppGwWafBotManagerRuleSet","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAppGwWafBotManagerRuleSet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAppGwPerSiteFirewallPolicy","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAppGwPerSiteFirewallPolicy"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowApplicationGatewayClientAuthentication","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowApplicationGatewayClientAuthentication"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAppGwWafCustomRuleGeoMatch","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAppGwWafCustomRuleGeoMatch"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowApplicationGatewayLoadDistributionPolicy","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowApplicationGatewayLoadDistributionPolicy"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowApplicationGatewayV2WildcardListener","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowApplicationGatewayV2WildcardListener"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowApplicationSecurityGroups","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowApplicationSecurityGroups"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowApplicationGatewayZonePinning","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowApplicationGatewayZonePinning"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAzureFirewall","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAzureFirewall"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAsgsOnVmScaleSet","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAsgsOnVmScaleSet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowBaremetalServers","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowBaremetalServers"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowBastionHostPrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowBastionHostPrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowBastionHost","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowBastionHost"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowClassicCrossSubscriptionPeering","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowClassicCrossSubscriptionPeering"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowBringYourOwnPublicIpAddress","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowBringYourOwnPublicIpAddress"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowCoExistenceAnyOrder","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowCoExistenceAnyOrder"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowCortexExpressRouteGateway","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowCortexExpressRouteGateway"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowCortexAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowCortexAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowCortexGlobalVnetPeering","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowCortexGlobalVnetPeering"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowCortexSecurity","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowCortexSecurity"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowDdosProtectionPlan","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowDdosProtectionPlan"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowDisableBgpRouteProgagation","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowDisableBgpRouteProgagation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowDestinationServiceEndpoints","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowDestinationServiceEndpoints"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowDSeriesForBrooklyn","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowDSeriesForBrooklyn"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.network/features/allowERArmProviderPortal","type":"Microsoft.Features/providers/features","name":"microsoft.network/allowERArmProviderPortal"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowDynamicRedirectToTestGwm","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowDynamicRedirectToTestGwm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowExRCrossRegionResourceValidation","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowExRCrossRegionResourceValidation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowFpgaEnabledClustersFeature","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowFpgaEnabledClustersFeature"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowFrontdoor","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowFrontdoor"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowGlobalCrpHttpClient","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowGlobalCrpHttpClient"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowGlobalTagsForSql","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowGlobalTagsForSql"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowGlobalPeeringTransit","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowGlobalPeeringTransit"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowGlobalVnetPeering","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowGlobalVnetPeering"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowGlobalTagsForStorage","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowGlobalTagsForStorage"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowHidingCrossSubscriptionResources","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowHidingCrossSubscriptionResources"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowGRPeerConnection","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowGRPeerConnection"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowILBAllPortsRule","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowILBAllPortsRule"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowIntendedPolicies","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowIntendedPolicies"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowIntentedPolicies","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowIntentedPolicies"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowInterfaceEndpoints","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowInterfaceEndpoints"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowInternalDelegations","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowInternalDelegations"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowIpTags","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowIpTags"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowIpGroups","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowIpGroups"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowIPv6CAOnStandardLB","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowIPv6CAOnStandardLB"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowIpv6GlobalReach","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowIpv6GlobalReach"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowIPv6VirtualNetwork","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowIPv6VirtualNetwork"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowLBPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowLBPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowLBPreviewWave2","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowLBPreviewWave2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowLBPreviewWave3","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowLBPreviewWave3"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowLBSNATallocationPolicy","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowLBSNATallocationPolicy"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowLoadBalancingOnSecondaryIpConfigs","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowLoadBalancingOnSecondaryIpConfigs"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowMacPreservation","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowMacPreservation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowMaxPrivateLinkServicesPerLoadBalancerOptimization","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowMaxPrivateLinkServicesPerLoadBalancerOptimization"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowMultiNicOnVMScaleSet","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowMultiNicOnVMScaleSet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowMultipleAddressPrefixesOnSubnet","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowMultipleAddressPrefixesOnSubnet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowMultipleIpConfigurationsPerNic","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowMultipleIpConfigurationsPerNic"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowMutipleAddressPrefixesOnSubnet","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowMutipleAddressPrefixesOnSubnet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNatGateway","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNatGateway"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNetwatcherAzureReachabilityReport","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNetwatcherAzureReachabilityReport"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNetworkIntentPolicies","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNetworkIntentPolicies"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNetworkProfiles","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNetworkProfiles"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNetworkWatcher","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNetworkWatcher"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNetworkWatcherAzureReachabilityReport","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNetworkWatcherAzureReachabilityReport"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNetworkWatcherConnectivityCheck","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNetworkWatcherConnectivityCheck"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNfvrpFirewallPolicyPrivate","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNfvrpFirewallPolicyPrivate"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNfvrpFirewallPolicySlice","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNfvrpFirewallPolicySlice"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNfvrpFirewallPolicyValidation","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNfvrpFirewallPolicyValidation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNfvrpResourcePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNfvrpResourcePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNfvrpVirtualRouterSlice","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNfvrpVirtualRouterSlice"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowOutboundNatRule","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowOutboundNatRule"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowP2SCortexAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowP2SCortexAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPaaSEndpointAcl","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPaaSEndpointAcl"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPingMesh","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPingMesh"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPreflightValidation","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPreflightValidation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPrepareNetworkPoliciesAction","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPrepareNetworkPoliciesAction"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPreReleaseRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPreReleaseRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPrivateAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPrivateAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPrivateEndpoints","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPrivateEndpoints"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPrivateLinkServices","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPrivateLinkServices"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPseudoClientAppId","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPseudoClientAppId"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPublicIpMobility","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPublicIpMobility"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPublicIPOnVMScaleSetVMs","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPublicIPOnVMScaleSetVMs"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPublicIpPrefix","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPublicIpPrefix"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPublicIpsAndLoadBalancingOnSecondaryIpConfigsInVMScaleSet","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPublicIpsAndLoadBalancingOnSecondaryIpConfigsInVMScaleSet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRedirectGwmCallsToApplicationGatewayBvt1Gwm","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRedirectGwmCallsToApplicationGatewayBvt1Gwm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRedirectGwmCallsToExpressRouteBvt2Gwm","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRedirectGwmCallsToExpressRouteBvt2Gwm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRedirectGwmCallsToExpressRouteBvt3Gwm","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRedirectGwmCallsToExpressRouteBvt3Gwm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRedirectGwmCallsToExpressRouteCPGwm","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRedirectGwmCallsToExpressRouteCPGwm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRedirectGwmCallsToExpressRouteDPGwm","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRedirectGwmCallsToExpressRouteDPGwm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRedirectGwmCallsToExpressRouteMXGwm","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRedirectGwmCallsToExpressRouteMXGwm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRedirectGwmCallsToExpressRouteRSGwm","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRedirectGwmCallsToExpressRouteRSGwm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRedirectMaps","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRedirectMaps"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRegionalGatewayManagerForSecureGateway","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRegionalGatewayManagerForSecureGateway"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRegionalVMSSVirtualNetworkGateway","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRegionalVMSSVirtualNetworkGateway"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRouteServiceAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRouteServiceAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRouteTables","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRouteTables"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRoutingPreferenceFeature","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRoutingPreferenceFeature"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRPGateway","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRPGateway"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowSecureVnets","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowSecureVnets"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowServiceEndpointPolicies","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowServiceEndpointPolicies"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowSingleNicAndMultiNicInSameAvailabilitySet","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowSingleNicAndMultiNicInSameAvailabilitySet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowStandardLBOutboundRulesPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowStandardLBOutboundRulesPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowStaticPublicIpAsInstanceIp","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowStaticPublicIpAsInstanceIp"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowSubnetDelegation","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowSubnetDelegation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowSubscriptionMigration","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowSubscriptionMigration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowThrottleCrpOperations","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowThrottleCrpOperations"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowValidationRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowValidationRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowVMsFromDifferentVnetsOnAvailabilitySet","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowVMsFromDifferentVnetsOnAvailabilitySet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowVMSSVirtualNetworkGateway","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowVMSSVirtualNetworkGateway"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowVmssHealthProbe","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowVmssHealthProbe"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowVnetPeering","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowVnetPeering"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowVnetGatewayOpenVpnProtocol","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowVnetGatewayOpenVpnProtocol"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.network/features/AllowVpnclientIpsecPoliciesSet","type":"Microsoft.Features/providers/features","name":"microsoft.network/AllowVpnclientIpsecPoliciesSet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/armApiPreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/armApiPreviewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/azurednspreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/azurednspreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/bastionShareableLink","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/bastionShareableLink"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/CloudDnsAliasPortalTest","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/CloudDnsAliasPortalTest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/CloudDnsBdmProd","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/CloudDnsBdmProd"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/CloudDnsBdmPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/CloudDnsBdmPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/CloudDnsReleaseCandidate","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/CloudDnsReleaseCandidate"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/CloudDnsThrottling","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/CloudDnsThrottling"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/EnableDdosProtectionPlanBilling","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/EnableDdosProtectionPlanBilling"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/EnableOperationBatching","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/EnableOperationBatching"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/EnableTenantNoSyncLock","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/EnableTenantNoSyncLock"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/EnableTenantOperationBatching","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/EnableTenantOperationBatching"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/EnableValidationInBackgroundTask","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/EnableValidationInBackgroundTask"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/HybridRegionPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/HybridRegionPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/ExrGwGatewaySubscription","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/ExrGwGatewaySubscription"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/InternetAnalyzerPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/InternetAnalyzerPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/isVMSSVirtualNetworkGatewayAllowed","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/isVMSSVirtualNetworkGatewayAllowed"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/PrivateDnsGcpPPE","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/PrivateDnsGcpPPE"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/PrivateDnsGcpDaily","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/PrivateDnsGcpDaily"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/SkipPseudoVipGeneration","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/SkipPseudoVipGeneration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/SecureGwGatewaySubscription","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/SecureGwGatewaySubscription"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/ThrottleArmOperationsRnm","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/ThrottleArmOperationsRnm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/TestFlag","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/TestFlag"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/TrafficManagerHeatMap","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/TrafficManagerHeatMap"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Netwotk/features/AllowGlobalPeeringTransit","type":"Microsoft.Features/providers/features","name":"Microsoft.Netwotk/AllowGlobalPeeringTransit"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/VpnGwGatewaySubscription","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/VpnGwGatewaySubscription"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NotificationHubs/features/NHubMetrics","type":"Microsoft.Features/providers/features","name":"Microsoft.NotificationHubs/NHubMetrics"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.OperationalInsights/features/LAClusterApiEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.OperationalInsights/LAClusterApiEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.OperationalInsights/features/SwitzerlandRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.OperationalInsights/SwitzerlandRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Peering/features/AllowCarrierInterconnect","type":"Microsoft.Features/providers/features","name":"Microsoft.Peering/AllowCarrierInterconnect"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Peering/features/AllowDirectInterconnect","type":"Microsoft.Features/providers/features","name":"Microsoft.Peering/AllowDirectInterconnect"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Peering/features/AllowCDNInterconnect","type":"Microsoft.Features/providers/features","name":"Microsoft.Peering/AllowCDNInterconnect"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Peering/features/AllowDirectPeering","type":"Microsoft.Features/providers/features","name":"Microsoft.Peering/AllowDirectPeering"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Peering/features/AllowExchangeInterconnect","type":"Microsoft.Features/providers/features","name":"Microsoft.Peering/AllowExchangeInterconnect"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Peering/features/AllowPeeringService","type":"Microsoft.Features/providers/features","name":"Microsoft.Peering/AllowPeeringService"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Peering/features/AllowExchangePeering","type":"Microsoft.Features/providers/features","name":"Microsoft.Peering/AllowExchangePeering"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.PolicyInsights/features/AKS-DataPlaneAutoApprove","type":"Microsoft.Features/providers/features","name":"Microsoft.PolicyInsights/AKS-DataPlaneAutoApprove"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.PolicyInsights/features/Insights","type":"Microsoft.Features/providers/features","name":"Microsoft.PolicyInsights/Insights"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.PolicyInsights/features/Events","type":"Microsoft.Features/providers/features","name":"Microsoft.PolicyInsights/Events"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.PolicyInsights/features/States","type":"Microsoft.Features/providers/features","name":"Microsoft.PolicyInsights/States"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Project/features/tip","type":"Microsoft.Features/providers/features","name":"Microsoft.Project/tip"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.PowerBIDedicated/features/whitelistedsubs","type":"Microsoft.Features/providers/features","name":"Microsoft.PowerBIDedicated/whitelistedsubs"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/32DiskBackupPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/32DiskBackupPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/AzureFileShareBackup","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/AzureFileShareBackup"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/BackupPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/BackupPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/BlockedFeature","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/BlockedFeature"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/CrossRegionRestore","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/CrossRegionRestore"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/HanaBackup","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/HanaBackup"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/InstantBackupandRecovery","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/InstantBackupandRecovery"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/ItemLevelRecovery","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/ItemLevelRecovery"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/LargeDiskVMBackupPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/LargeDiskVMBackupPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/MABAlertingFeature","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/MABAlertingFeature"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/MercuryAutoProtection","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/MercuryAutoProtection"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/PPEAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/PPEAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/PremiumStorageBackup","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/PremiumStorageBackup"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/RecoveryServicesCanada","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/RecoveryServicesCanada"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/RecoveryServicesBeta","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/RecoveryServicesBeta"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/RecoveryServicesResourceMove","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/RecoveryServicesResourceMove"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/RecoveryServicesUK","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/RecoveryServicesUK"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/RecoveryServicesWUS2","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/RecoveryServicesWUS2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/ResourceGraphSyncEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/ResourceGraphSyncEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/WorkloadBackup","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/WorkloadBackup"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RemoteApp/features/CspTest","type":"Microsoft.Features/providers/features","name":"Microsoft.RemoteApp/CspTest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RemoteApp/features/PrivacyEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.RemoteApp/PrivacyEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RemoteApp/features/ple","type":"Microsoft.Features/providers/features","name":"Microsoft.RemoteApp/ple"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resouces/features/EUAPParticipation","type":"Microsoft.Features/providers/features","name":"Microsoft.Resouces/EUAPParticipation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RemoteApp/features/privatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.RemoteApp/privatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/AllowInternalDelegations","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/AllowInternalDelegations"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/ARMDisableResourcesPerRGLimit","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/ARMDisableResourcesPerRGLimit"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/ARMLimitx2","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/ARMLimitx2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/AvailabilityZones","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/AvailabilityZones"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/AzureBuildout","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/AzureBuildout"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/DataControlAgreement","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/DataControlAgreement"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/EUAPParticipation","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/EUAPParticipation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/FairfaxDemo","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/FairfaxDemo"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/GermanyNorth","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/GermanyNorth"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/GermanyRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/GermanyRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/GermanyWestCentral","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/GermanyWestCentral"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/mandatoryRetentionPeriodEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/mandatoryRetentionPeriodEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/NorwayEast","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/NorwayEast"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/NorwayRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/NorwayRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/NorwayWest","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/NorwayWest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/SouthAfricaRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/SouthAfricaRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.resources/features/SwitzerlandNorth","type":"Microsoft.Features/providers/features","name":"microsoft.resources/SwitzerlandNorth"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/SwitzerlandRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/SwitzerlandRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.resources/features/SwitzerlandWest","type":"Microsoft.Features/providers/features","name":"microsoft.resources/SwitzerlandWest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/TestFlag","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/TestFlag"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/ThrottledSubscriptions","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/ThrottledSubscriptions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/UAERegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/UAERegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Saas/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Saas/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/AdvancedThreatProtection","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/AdvancedThreatProtection"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/ApplicationWhitelisting","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/ApplicationWhitelisting"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/ApplicationWhiteliting","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/ApplicationWhiteliting"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/appwhitelistingaccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/appwhitelistingaccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.security/features/Assessments","type":"Microsoft.Features/providers/features","name":"microsoft.security/Assessments"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/CoreDev1","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/CoreDev1"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/Dev1","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/Dev1"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/Dev2","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/Dev2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/Dev3","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/Dev3"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/discoveredSecuritySolutions","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/discoveredSecuritySolutions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/externalSecuritySolutions","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/externalSecuritySolutions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/Integration","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/Integration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/jitnac-dev2","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/jitnac-dev2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/jitnac-dev3","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/jitnac-dev3"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/jitnac-int","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/jitnac-int"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/jitnac-rome3int","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/jitnac-rome3int"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/jitvmaccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/jitvmaccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/NacJIT","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/NacJIT"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.security/features/NetworkData","type":"Microsoft.Features/providers/features","name":"microsoft.security/NetworkData"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/networkMap","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/networkMap"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/northSouth","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/northSouth"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/PricingBundles","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/PricingBundles"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/ShzadaTest","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/ShzadaTest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/VaGrayLabel","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/VaGrayLabel"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/WindowsDefenderAtp","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/WindowsDefenderAtp"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.SerialConsole/features/PreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.SerialConsole/PreviewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ServiceFabric/features/seabreezePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ServiceFabric/seabreezePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ServiceFabric/features/seabreezePrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ServiceFabric/seabreezePrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ServiceFabric/features/serviceFabricEngineering","type":"Microsoft.Features/providers/features","name":"Microsoft.ServiceFabric/serviceFabricEngineering"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ServiceFabric/features/serviceFabricStageAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.ServiceFabric/serviceFabricStageAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ServiceFabricMesh/features/seabreezePrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ServiceFabricMesh/seabreezePrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ServiceFabricMesh/features/serviceFabricEngineering","type":"Microsoft.Features/providers/features","name":"Microsoft.ServiceFabricMesh/serviceFabricEngineering"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Services/features/RPSaaSPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Services/RPSaaSPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.SignalR/features/betaaccess","type":"Microsoft.Features/providers/features","name":"Microsoft.SignalR/betaaccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.SignalRService/features/betaaccess","type":"Microsoft.Features/providers/features","name":"Microsoft.SignalRService/betaaccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Solutions/features/ApplianceEastUS2EUAP","type":"Microsoft.Features/providers/features","name":"Microsoft.Solutions/ApplianceEastUS2EUAP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Solutions/features/ApplianceMultiRegion","type":"Microsoft.Features/providers/features","name":"Microsoft.Solutions/ApplianceMultiRegion"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Solutions/features/AppliancePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Solutions/AppliancePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Solutions/features/ApplicationGA","type":"Microsoft.Features/providers/features","name":"Microsoft.Solutions/ApplicationGA"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/4tbpool","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/4tbpool"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/4TBOption","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/4TBOption"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/dataSync","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/dataSync"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.SQL/features/dataeditor-publicpreview","type":"Microsoft.Features/providers/features","name":"Microsoft.SQL/dataeditor-publicpreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/dw-asa","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/dw-asa"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/ExternalTdeCertificate","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/ExternalTdeCertificate"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/firewall-enforce-azure-policy","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/firewall-enforce-azure-policy"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/hyperscale-publicpreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/hyperscale-publicpreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/IndexAdvisor","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/IndexAdvisor"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/IndexAdvisorPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/IndexAdvisorPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/IndexAdvisorPublic","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/IndexAdvisorPublic"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.SQL/features/LongTermRetention","type":"Microsoft.Features/providers/features","name":"Microsoft.SQL/LongTermRetention"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/LongTermRetentionV2","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/LongTermRetentionV2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.SQL/features/ManagedInstancePublic","type":"Microsoft.Features/providers/features","name":"Microsoft.SQL/ManagedInstancePublic"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.SQL/features/multiaz-preview","type":"Microsoft.Features/providers/features","name":"Microsoft.SQL/multiaz-preview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.SQL/features/multiaz-test","type":"Microsoft.Features/providers/features","name":"Microsoft.SQL/multiaz-test"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/pesto","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/pesto"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/pesto-lite","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/pesto-lite"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/queryeditor","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/queryeditor"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/queryeditor-publicpreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/queryeditor-publicpreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/queryeditor-webqueryendpoint","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/queryeditor-webqueryendpoint"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/QueryPerformanceInsightPublic","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/QueryPerformanceInsightPublic"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/serverless-publicpreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/serverless-publicpreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/SQL-DW","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/SQL-DW"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/sqldb-4tb-publicpreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/sqldb-4tb-publicpreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/sqldb-ActiveDirectoryAdmin","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/sqldb-ActiveDirectoryAdmin"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.SQL/features/sqldb-addonstorage","type":"Microsoft.Features/providers/features","name":"Microsoft.SQL/sqldb-addonstorage"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/sqldb-ElasticJobs","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/sqldb-ElasticJobs"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/sqldb-elasticpool","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/sqldb-elasticpool"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/sqldb-fsv2","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/sqldb-fsv2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/sqldb-higherStandardPerDbDtu","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/sqldb-higherStandardPerDbDtu"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/sqldb-JobAccounts","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/sqldb-JobAccounts"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/sqldb-mseries","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/sqldb-mseries"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/sqldb-premiumrs","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/sqldb-premiumrs"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/sqldb-vcoremodel","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/sqldb-vcoremodel"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/sqldbsterling","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/sqldbsterling"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/sqldbtde","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/sqldbtde"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/tdeAkvIntegration","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/tdeAkvIntegration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/ADLSGen1Shim","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/ADLSGen1Shim"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/adlsgen2BlobInterop","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/adlsgen2BlobInterop"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowADFS","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowADFS"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowArchive","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowArchive"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowHNS","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowHNS"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowLinuxOptimizedShares","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowLinuxOptimizedShares"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.storage/features/AllowNFSV3","type":"Microsoft.Features/providers/features","name":"microsoft.storage/AllowNFSV3"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowPreReleaseRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowPreReleaseRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowStorageV1Accounts","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowStorageV1Accounts"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowTargetStampSpecification","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowTargetStampSpecification"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowValidationRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowValidationRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/armApiPreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/armApiPreviewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/BlobIndex","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/BlobIndex"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/BlobQuery","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/BlobQuery"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/Changefeed","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/Changefeed"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.storage/features/ContainerSoftDelete","type":"Microsoft.Features/providers/features","name":"microsoft.storage/ContainerSoftDelete"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/CustomerControlledFailover","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/CustomerControlledFailover"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/EncryptionAtRest","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/EncryptionAtRest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.storage/features/jurobins","type":"Microsoft.Features/providers/features","name":"microsoft.storage/jurobins"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/LivesiteThrottling","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/LivesiteThrottling"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/ObjectReplication","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/ObjectReplication"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/premiumblob","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/premiumblob"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/PremiumFilesFirstTierSettings","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/PremiumFilesFirstTierSettings"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.storage/features/PremiumHns","type":"Microsoft.Features/providers/features","name":"Microsoft.storage/PremiumHns"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/RestoreBlobRanges","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/RestoreBlobRanges"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/Tags","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/Tags"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/version","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/version"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/Versioning","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/Versioning"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/XArchive","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/XArchive"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.StorageCache/features/generalAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.StorageCache/generalAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.storagereplication/features/SOS","type":"Microsoft.Features/providers/features","name":"microsoft.storagereplication/SOS"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.StorSimple/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.StorSimple/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.StorSimple/features/betaAcess","type":"Microsoft.Features/providers/features","name":"Microsoft.StorSimple/betaAcess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.StorSimple/features/EnableUnsupportedGeo","type":"Microsoft.Features/providers/features","name":"Microsoft.StorSimple/EnableUnsupportedGeo"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.StorSimple/features/StorSimpleGardaIbizaInGA","type":"Microsoft.Features/providers/features","name":"Microsoft.StorSimple/StorSimpleGardaIbizaInGA"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.StorSimple/features/StorSimpleGardaIbizaMigrated","type":"Microsoft.Features/providers/features","name":"Microsoft.StorSimple/StorSimpleGardaIbizaMigrated"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.StreamAnalytics/features/ASA_NewRegion","type":"Microsoft.Features/providers/features","name":"Microsoft.StreamAnalytics/ASA_NewRegion"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.StreamAnalytics/features/ProdWestUSX","type":"Microsoft.Features/providers/features","name":"Microsoft.StreamAnalytics/ProdWestUSX"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.TimeSeriesInsights/features/extendedCapacityAndRetention","type":"Microsoft.Features/providers/features","name":"Microsoft.TimeSeriesInsights/extendedCapacityAndRetention"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.TimeSeriesInsights/features/previewV2","type":"Microsoft.Features/providers/features","name":"Microsoft.TimeSeriesInsights/previewV2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Token/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Token/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Uic/features/uxdevelopment","type":"Microsoft.Features/providers/features","name":"Microsoft.Uic/uxdevelopment"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VirtualMachineImages/features/CanaryAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.VirtualMachineImages/CanaryAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VisualStudio/features/ExtensionResource","type":"Microsoft.Features/providers/features","name":"Microsoft.VisualStudio/ExtensionResource"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/CloudSimpleRP1","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/CloudSimpleRP1"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/cloudSimpleRp11","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/cloudSimpleRp11"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/cloudSimpleRp12","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/cloudSimpleRp12"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/CloudSimpleRP16","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/CloudSimpleRP16"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/cloudSimpleRp17","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/cloudSimpleRp17"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/cloudSimpleRp18","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/cloudSimpleRp18"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/cloudSimpleRp2","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/cloudSimpleRp2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/cloudSimpleRp3","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/cloudSimpleRp3"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.vmwarecloudsimple/features/eastus-devtest-bl31","type":"Microsoft.Features/providers/features","name":"microsoft.vmwarecloudsimple/eastus-devtest-bl31"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-azure-eastus-devtest-01","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-azure-eastus-devtest-01"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-azure-eastus-devtest-02","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-azure-eastus-devtest-02"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-azure-eastus-devtest-03","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-azure-eastus-devtest-03"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-azure-eastus-devtest-04","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-azure-eastus-devtest-04"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-azure-eastus-devtest-05","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-azure-eastus-devtest-05"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-azure-eastus-devtest-06","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-azure-eastus-devtest-06"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-azure-eastus-devtest-07","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-azure-eastus-devtest-07"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-azure-eastus-devtest-08","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-azure-eastus-devtest-08"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-devtest-virt-01","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-devtest-virt-01"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-devtest-virt-02","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-devtest-virt-02"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-01","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-01"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-02","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-02"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-03","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-03"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-04","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-04"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-05","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-05"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-06","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-06"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-07","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-07"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-08","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-08"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-09","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-09"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-10","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-10"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-11","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-11"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-12","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-12"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-13","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-13"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-14","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-14"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-15","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-15"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-16","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-16"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-17","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-17"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-18","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-18"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-19","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-19"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-20","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-20"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-23","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-23"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-24","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-24"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-25","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-25"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-26","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-26"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-27","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-27"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-28","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-28"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-30","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-30"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-31","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-31"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-32","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-32"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-33","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-33"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-34","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-34"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-37","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-37"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-38","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-38"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-39","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-39"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-40","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-40"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-41","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-41"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-42","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-42"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-43","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-43"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-44","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-44"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-45","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-45"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-46","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-46"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-47","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-47"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-48","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-48"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-49","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-49"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-50","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-50"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-51","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-51"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-52","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-52"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-53","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-53"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-54","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-54"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-57","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-57"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-59","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-59"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-61","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-61"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-62","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-62"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-63","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-63"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-64","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-64"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-65","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-65"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-66","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-66"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-67","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-67"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-68","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-68"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-69","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-69"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-70","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-70"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-71","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-71"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-72","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-72"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-73","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-73"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-74","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-74"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-77","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-77"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-78","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-78"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-79","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-79"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMWareCloudSimple/features/env-cs-westus-devtest-80","type":"Microsoft.Features/providers/features","name":"Microsoft.VMWareCloudSimple/env-cs-westus-devtest-80"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMWareCloudSimple/features/env-cs-westus-devtest-81","type":"Microsoft.Features/providers/features","name":"Microsoft.VMWareCloudSimple/env-cs-westus-devtest-81"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMWareCloudSimple/features/env-cs-westus-devtest-82","type":"Microsoft.Features/providers/features","name":"Microsoft.VMWareCloudSimple/env-cs-westus-devtest-82"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMWareCloudSimple/features/env-cs-westus-devtest-83","type":"Microsoft.Features/providers/features","name":"Microsoft.VMWareCloudSimple/env-cs-westus-devtest-83"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMWareCloudSimple/features/env-cs-westus-devtest-84","type":"Microsoft.Features/providers/features","name":"Microsoft.VMWareCloudSimple/env-cs-westus-devtest-84"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMWareCloudSimple/features/expire-on-7-25-19","type":"Microsoft.Features/providers/features","name":"Microsoft.VMWareCloudSimple/expire-on-7-25-19"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMWareCloudSimple/features/itops-he","type":"Microsoft.Features/providers/features","name":"Microsoft.VMWareCloudSimple/itops-he"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMWareCloudSimple/features/kiev-test-demo","type":"Microsoft.Features/providers/features","name":"Microsoft.VMWareCloudSimple/kiev-test-demo"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/multi-region-1","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/multi-region-1"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/multi-region-2","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/multi-region-2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/multi-region-3","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/multi-region-3"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/multi-region-4","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/multi-region-4"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/mustEmitFractions","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/mustEmitFractions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/mustEmitNone","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/mustEmitNone"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/mustEmitOnes","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/mustEmitOnes"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/mustEmitZeros","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/mustEmitZeros"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/stg-csos","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/stg-csos"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/subscriptionsWhiteList","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/subscriptionsWhiteList"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMWareCloudSimple/features/westeurope-test","type":"Microsoft.Features/providers/features","name":"Microsoft.VMWareCloudSimple/westeurope-test"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/westus-he-test","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/westus-he-test"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/westus-maas","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/westus-maas"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/ASEInEastUS2EUAP","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/ASEInEastUS2EUAP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/AustraliaCentral2RegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/AustraliaCentral2RegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/AustraliaCentralRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/AustraliaCentralRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/AustraliaEastRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/AustraliaEastRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/AustraliaSouthEastRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/AustraliaSouthEastRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/BrazilSouthRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/BrazilSouthRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/CanadaCentralRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/CanadaCentralRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/CanadaEastRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/CanadaEastRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/CentralIndiaRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/CentralIndiaRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/CentralUSEUAPRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/CentralUSEUAPRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/EastAsiaRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/EastAsiaRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/EastAsiaStageRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/EastAsiaStageRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/EastUS2EUAPRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/EastUS2EUAPRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/EastUS2RegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/EastUS2RegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/EastUSRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/EastUSRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/EventGridIntegration","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/EventGridIntegration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/FranceCentralRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/FranceCentralRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/FranceSouthRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/FranceSouthRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/JapanEastRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/JapanEastRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/JapanWestRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/JapanWestRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/KoreaCentralRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/KoreaCentralRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/KoreaSouthRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/KoreaSouthRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/NorthCentralUSRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/NorthCentralUSRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/NorthEuropeRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/NorthEuropeRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/PinnedToGlobalEndpoint","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/PinnedToGlobalEndpoint"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/RegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/RegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/SouthCentralUSRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/SouthCentralUSRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/SouthEastAsiaRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/SouthEastAsiaRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/SouthIndiaRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/SouthIndiaRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/TestFeatureRegistration","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/TestFeatureRegistration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/UAECentral","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/UAECentral"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/UKSouthRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/UKSouthRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/UKWestRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/UKWestRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/Undelete","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/Undelete"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/UseTipForTopLevelProxyOnlyApis","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/UseTipForTopLevelProxyOnlyApis"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/WestCentralUSRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/WestCentralUSRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/WestEuropeRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/WestEuropeRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/WestIndiaRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/WestIndiaRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.WindowsIoT/features/DevelopmentEnvironmentAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.WindowsIoT/DevelopmentEnvironmentAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.WindowsIoT/features/WcusAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.WindowsIoT/WcusAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Xrm/features/uxdevelopment","type":"Microsoft.Features/providers/features","name":"Microsoft.Xrm/uxdevelopment"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowObjectReplication","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowObjectReplication"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/ESXiDedicatedHost","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/ESXiDedicatedHost"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowNfsFileShares","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowNfsFileShares"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/WorkloadBackupSoftDelete","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/WorkloadBackupSoftDelete"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RedHatOpenShift/features/PrivateClusters","type":"Microsoft.Features/providers/features","name":"Microsoft.RedHatOpenShift/PrivateClusters"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/PrivateClusters","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/PrivateClusters"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AROPrivateClusters","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AROPrivateClusters"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/MSvDedicatedHost","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/MSvDedicatedHost"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Capacity/features/QuotaAPI","type":"Microsoft.Features/providers/features","name":"Microsoft.Capacity/QuotaAPI"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Capacity/features/QuotaBetaTest","type":"Microsoft.Features/providers/features","name":"Microsoft.Capacity/QuotaBetaTest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/GermanyNorth","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/GermanyNorth"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/IsHybridServicesTestSubscription","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/IsHybridServicesTestSubscription"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/BlockCustomerManagedKey","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/BlockCustomerManagedKey"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/AllowLinkedNotificationsToHiddenRP","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/AllowLinkedNotificationsToHiddenRP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowAccountEncryptionKeyForQueues","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowAccountEncryptionKeyForQueues"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowAccountEncryptionKeyForTables","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowAccountEncryptionKeyForTables"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/NorwayWest","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/NorwayWest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.EventGrid/features/PartnerOperations","type":"Microsoft.Features/providers/features","name":"Microsoft.EventGrid/PartnerOperations"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Blockchain/features/WCUSParticipation","type":"Microsoft.Features/providers/features","name":"Microsoft.Blockchain/WCUSParticipation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/EnableComputeOnlyUpdates","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/EnableComputeOnlyUpdates"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/StaticSitesEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/StaticSitesEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kubernetes/features/ppeAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Kubernetes/ppeAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AAD-V2","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AAD-V2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMySQL/features/privateip","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMySQL/privateip"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforPostgreSQL/features/privateip","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforPostgreSQL/privateip"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMariaDB/features/privateip","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMariaDB/privateip"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DigitalTwins/features/EarlyAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DigitalTwins/EarlyAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SyncBookmark","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SyncBookmark"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/DCSizes","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/DCSizes"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/XLargeDisk","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/XLargeDisk"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/DV3Sizes","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/DV3Sizes"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQLG3","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQLG3"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQLG4","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQLG4"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQLG5","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQLG5"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQLG6","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQLG6"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQLGL","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQLGL"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQLDC","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQLDC"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQLDW","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQLDW"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQLGZ","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQLGZ"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQLGM","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQLGM"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQLACC","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQLACC"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQL","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQL"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/DDAGen5","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/DDAGen5"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/ASeriesInternal","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/ASeriesInternal"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Dv2Nested","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Dv2Nested"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Dv2Internal","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Dv2Internal"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.VnfManager/features/allowmecvendor","type":"Microsoft.Features/providers/features","name":"microsoft.VnfManager/allowmecvendor"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.VnfManager/features/allowmecvnf","type":"Microsoft.Features/providers/features","name":"microsoft.VnfManager/allowmecvnf"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.TimeSeriesInsights/features/Staging","type":"Microsoft.Features/providers/features","name":"Microsoft.TimeSeriesInsights/Staging"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKSNetworkModePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKSNetworkModePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.BlockchainTokens/features/PrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.BlockchainTokens/PrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMySQL/features/ossazureactivedirectoryadmin","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMySQL/ossazureactivedirectoryadmin"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNVAInVHub","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNVAInVHub"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DevSpaces/features/Helm3Preview","type":"Microsoft.Features/providers/features","name":"Microsoft.DevSpaces/Helm3Preview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/TEST","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/TEST"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/TEST2","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/TEST2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RedHatOpenShift/features/INT-APROVED","type":"Microsoft.Features/providers/features","name":"Microsoft.RedHatOpenShift/INT-APROVED"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/SpotPoolPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/SpotPoolPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RedHatOpenshift/features/INT-APPROVED","type":"Microsoft.Features/providers/features","name":"Microsoft.RedHatOpenshift/INT-APPROVED"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AzureData/features/azurearcprivatepreview","type":"Microsoft.Features/providers/features","name":"Microsoft.AzureData/azurearcprivatepreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-NewAPIVersion","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-NewAPIVersion"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowApplicationGatewayV2UrlRewrite","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowApplicationGatewayV2UrlRewrite"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataBox/features/HongKongBoxAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataBox/HongKongBoxAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataBox/features/IndiaBoxAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataBox/IndiaBoxAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.vmwarecloudsimple/features/new-region-test-client","type":"Microsoft.Features/providers/features","name":"microsoft.vmwarecloudsimple/new-region-test-client"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/EnablePrivateLink","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/EnablePrivateLink"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/AllowGenevaObtainer","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/AllowGenevaObtainer"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/MPAWorm","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/MPAWorm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/AllowMoveDatabase","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/AllowMoveDatabase"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.network/features/EnableRnmCallback","type":"Microsoft.Features/providers/features","name":"Microsoft.network/EnableRnmCallback"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/PartitionedDns","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/PartitionedDns"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Containerservice/features/AKS-AzurePolicyV2","type":"Microsoft.Features/providers/features","name":"Microsoft.Containerservice/AKS-AzurePolicyV2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.SQL/features/multiaz-gp-preview","type":"Microsoft.Features/providers/features","name":"Microsoft.SQL/multiaz-gp-preview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFBackupOperator","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFBackupOperator"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFTierChange","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFTierChange"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFFlexPool","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFFlexPool"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFSnapshotPolicy","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFSnapshotPolicy"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NotificationHubs/features/germanyWestCentral","type":"Microsoft.Features/providers/features","name":"Microsoft.NotificationHubs/germanyWestCentral"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Insights/features/MetricAPI","type":"Microsoft.Features/providers/features","name":"Microsoft.Insights/MetricAPI"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerInstance/features/vnetLocationCheckBypass","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerInstance/vnetLocationCheckBypass"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ARM.AFEC/features/multiaz-gp-preview","type":"Microsoft.Features/providers/features","name":"Microsoft.ARM.AFEC/multiaz-gp-preview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/AIWorkspacePreview","type":"Microsoft.Features/providers/features","name":"microsoft.insights/AIWorkspacePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerRegistry/features/TasksPrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerRegistry/TasksPrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/UseCustomizedUbuntuPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/UseCustomizedUbuntuPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SIGEncryption","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SIGEncryption"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databricks/features/DevFedRAMP","type":"Microsoft.Features/providers/features","name":"Microsoft.Databricks/DevFedRAMP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databricks/features/StagingFedRAMP","type":"Microsoft.Features/providers/features","name":"Microsoft.Databricks/StagingFedRAMP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databricks/features/ProdFedRAMP","type":"Microsoft.Features/providers/features","name":"Microsoft.Databricks/ProdFedRAMP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.vnfmanager/features/allowRegisteredSubscriptions","type":"Microsoft.Features/providers/features","name":"microsoft.vnfmanager/allowRegisteredSubscriptions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Providerhub/features/FeaturePutApi","type":"Microsoft.Features/providers/features","name":"Microsoft.Providerhub/FeaturePutApi"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.TerraformOSS/features/EnableTerraform","type":"Microsoft.Features/providers/features","name":"Microsoft.TerraformOSS/EnableTerraform"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Mv2SmallSizeSeries","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Mv2SmallSizeSeries"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.TerraformOSS/features/EnableTerraformWithWhitelistedTenant","type":"Microsoft.Features/providers/features","name":"Microsoft.TerraformOSS/EnableTerraformWithWhitelistedTenant"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AnmPRFeature","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AnmPRFeature"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataBoxEdge/features/DBEBvtAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataBoxEdge/DBEBvtAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DevSpaces/features/internalOnly","type":"Microsoft.Features/providers/features","name":"Microsoft.DevSpaces/internalOnly"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.GuestConfiguration/features/BestPracticePrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.GuestConfiguration/BestPracticePrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/OSANewUnderlayTesting","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/OSANewUnderlayTesting"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/InGuestHotPatchVMPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/InGuestHotPatchVMPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/InGuestAutoPatchVMPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/InGuestAutoPatchVMPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowApplicationGatewayV1AndV2InSameSubnet","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowApplicationGatewayV1AndV2InSameSubnet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowApplicationGatewayPrivateLink","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowApplicationGatewayPrivateLink"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/HnsSnapshot","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/HnsSnapshot"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.StorSimple/features/ShowBannerForDeviceUpdate","type":"Microsoft.Features/providers/features","name":"Microsoft.StorSimple/ShowBannerForDeviceUpdate"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SharedIdentityEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SharedIdentityEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ResourceHealth/features/EnableKustoClustersRhc","type":"Microsoft.Features/providers/features","name":"Microsoft.ResourceHealth/EnableKustoClustersRhc"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DigitalTwins/features/PrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.DigitalTwins/PrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DigitalTwins/features/Endpoints","type":"Microsoft.Features/providers/features","name":"Microsoft.DigitalTwins/Endpoints"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAzureNetworkManager","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAzureNetworkManager"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DigitalTwins/features/PPE","type":"Microsoft.Features/providers/features","name":"Microsoft.DigitalTwins/PPE"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/PremiumFilesInternalSettings","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/PremiumFilesInternalSettings"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForMySQL/features/ossdenypublicendpointaccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForMySQL/ossdenypublicendpointaccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForPostgreSQL/features/ossdenypublicendpointaccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForPostgreSQL/ossdenypublicendpointaccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Datadog/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Datadog/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/preproduction","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/preproduction"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAppGwPublicAndPrivateIpOnSamePort","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAppGwPublicAndPrivateIpOnSamePort"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAllocateVMValidationOptimizations","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAllocateVMValidationOptimizations"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRoutingToTestNfvrpInstance1","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRoutingToTestNfvrpInstance1"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRoutingToTestNfvrpInstance2","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRoutingToTestNfvrpInstance2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRoutingToTestNfvrpInstance3","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRoutingToTestNfvrpInstance3"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRoutingToTestNfvrpInstance4","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRoutingToTestNfvrpInstance4"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataBox/features/DataBoxExportAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataBox/DataBoxExportAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/UseComputeSubscriptionO365","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/UseComputeSubscriptionO365"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RedHatOpenShift/features/InProgress","type":"Microsoft.Features/providers/features","name":"Microsoft.RedHatOpenShift/InProgress"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/NoReserveActivateInColocation","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/NoReserveActivateInColocation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ServicesHub/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.ServicesHub/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/NodeImageUpgradePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/NodeImageUpgradePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.KeyVault/features/MHSM_HighCapacitySKU","type":"Microsoft.Features/providers/features","name":"Microsoft.KeyVault/MHSM_HighCapacitySKU"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForMariaDB/features/ossdenypublicendpointaccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForMariaDB/ossdenypublicendpointaccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/ListOfPinnedFabricClusters","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/ListOfPinnedFabricClusters"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.compute/features/NPSSizes","type":"Microsoft.Features/providers/features","name":"microsoft.compute/NPSSizes"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AISupercomputer/features/internalEngineering","type":"Microsoft.Features/providers/features","name":"Microsoft.AISupercomputer/internalEngineering"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RedHatOpenShift/features/SaveAROTestConfig","type":"Microsoft.Features/providers/features","name":"Microsoft.RedHatOpenShift/SaveAROTestConfig"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/USSTAGESCParticipation","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/USSTAGESCParticipation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/UseComputeSubscriptionDM","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/UseComputeSubscriptionDM"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/UseComputeSubscriptionEngine","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/UseComputeSubscriptionEngine"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/UseComputeSubscriptionCM","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/UseComputeSubscriptionCM"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/UseStorageSubscriptionDM","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/UseStorageSubscriptionDM"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/UseStorageSubscriptionCM","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/UseStorageSubscriptionCM"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/UseStorageSubscriptionEngine","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/UseStorageSubscriptionEngine"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/TestDFInProduction","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/TestDFInProduction"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.IndustryDataLifecycle/features/Microsoft.AIDLS.Service","type":"Microsoft.Features/providers/features","name":"Microsoft.IndustryDataLifecycle/Microsoft.AIDLS.Service"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RedHatOpenShift/features/aropreview","type":"Microsoft.Features/providers/features","name":"Microsoft.RedHatOpenShift/aropreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNsgAndRouteTableOnBMDelegatedSubnet","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNsgAndRouteTableOnBMDelegatedSubnet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowFirewallPremium","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowFirewallPremium"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ChangeAnalysis/features/NotificationsPrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ChangeAnalysis/NotificationsPrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowRequireInfrastructureEncryption","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowRequireInfrastructureEncryption"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ServiceFabric/features/armApiInternalAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.ServiceFabric/armApiInternalAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-IngressApplicationGatewayAddon","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-IngressApplicationGatewayAddon"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/EncryptionAtHost","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/EncryptionAtHost"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/Gen2VMPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/Gen2VMPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.StreamAnalytics/features/DedicatedClusters","type":"Microsoft.Features/providers/features","name":"Microsoft.StreamAnalytics/DedicatedClusters"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/DisableDeploymentGrooming","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/DisableDeploymentGrooming"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/BastionFeaturesEnableKerberos","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/BastionFeaturesEnableKerberos"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Synapse/features/SparkCatalogInSAS","type":"Microsoft.Features/providers/features","name":"Microsoft.Synapse/SparkCatalogInSAS"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowSMBMultichannel","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowSMBMultichannel"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.KeyVault/features/RbacAuthorizationPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.KeyVault/RbacAuthorizationPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Wandisco.Fusion/features/LiveDataMigrator","type":"Microsoft.Features/providers/features","name":"Wandisco.Fusion/LiveDataMigrator"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Wandisco.Fusion/features/LiveDataPlane","type":"Microsoft.Features/providers/features","name":"Wandisco.Fusion/LiveDataPlane"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Wandisco.Fusion/features/LiveDataPlatform","type":"Microsoft.Features/providers/features","name":"Wandisco.Fusion/LiveDataPlatform"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.EventHub/features/AllowPrivateEndpointProxies","type":"Microsoft.Features/providers/features","name":"Microsoft.EventHub/AllowPrivateEndpointProxies"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/AllowRequireInfrastructureEncryption","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/AllowRequireInfrastructureEncryption"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ChangeAnalysis/features/ResourceChangesPrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ChangeAnalysis/ResourceChangesPrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/TrustedVMBackfillEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/TrustedVMBackfillEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Logic/features/EnableApiConnectionKeys","type":"Microsoft.Features/providers/features","name":"Microsoft.Logic/EnableApiConnectionKeys"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/MaxSurgePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/MaxSurgePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/AZ_germanywestcentral","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/AZ_germanywestcentral"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AAD/features/testAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.AAD/testAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/OpenShiftSupportGate","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/OpenShiftSupportGate"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowBringYourOwnIpAddressForThirdParties","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowBringYourOwnIpAddressForThirdParties"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowVipswap","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowVipswap"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/EnableAzureRBACPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/EnableAzureRBACPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Confluent/features/confluentOrgAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Confluent/confluentOrgAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.securitygraph/features/IsgAccess","type":"Microsoft.Features/providers/features","name":"microsoft.securitygraph/IsgAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/ProximityPlacementGroupPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/ProximityPlacementGroupPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowSubscriptionLoadBalancerCaching","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowSubscriptionLoadBalancerCaching"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataCollaboration/features/devEnvironment","type":"Microsoft.Features/providers/features","name":"Microsoft.DataCollaboration/devEnvironment"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.hybridnetwork/features/allowVnfVendor","type":"Microsoft.Features/providers/features","name":"microsoft.hybridnetwork/allowVnfVendor"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.hybridnetwork/features/allowVnfCustomer","type":"Microsoft.Features/providers/features","name":"microsoft.hybridnetwork/allowVnfCustomer"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.HybridNetwork/features/HybridNetworkRPaaSRegistration","type":"Microsoft.Features/providers/features","name":"microsoft.HybridNetwork/HybridNetworkRPaaSRegistration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Notebooks/features/AzureNBDevTestTraffic","type":"Microsoft.Features/providers/features","name":"Microsoft.Notebooks/AzureNBDevTestTraffic"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/InGuestAutoPatchSubscriptionPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/InGuestAutoPatchSubscriptionPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForPostgreSQL/features/orcastls","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForPostgreSQL/orcastls"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForMySQL/features/orcastls","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForMySQL/orcastls"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForMariaDB/features/orcastls","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForMariaDB/orcastls"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/EnableEncryptionAtHostPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/EnableEncryptionAtHostPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/EnableAzureDiskFileCSIDriver","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/EnableAzureDiskFileCSIDriver"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DigitalTwins/features/PPE-NEU","type":"Microsoft.Features/providers/features","name":"Microsoft.DigitalTwins/PPE-NEU"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/JediBetaTest","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/JediBetaTest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMariaDB/features/largeStorage","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMariaDB/largeStorage"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/SQLInVMPresenceVisibility","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/SQLInVMPresenceVisibility"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/useContainerd","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/useContainerd"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/ContainerRuntime","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/ContainerRuntime"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/JediBetaTestAntares","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/JediBetaTestAntares"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/GPUDedicatedVHDPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/GPUDedicatedVHDPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/MicrosoftRRDCLab1","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/MicrosoftRRDCLab1"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/westus2mockedge","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/westus2mockedge"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Notebooks/features/AzureNBCanaryTraffic","type":"Microsoft.Features/providers/features","name":"Microsoft.Notebooks/AzureNBCanaryTraffic"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-OMSAppMonitoring","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-OMSAppMonitoring"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/LogSearchAlertsV2","type":"Microsoft.Features/providers/features","name":"microsoft.insights/LogSearchAlertsV2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.PowerBI/features/DailyPrivateLinkServicesForPowerBI","type":"Microsoft.Features/providers/features","name":"Microsoft.PowerBI/DailyPrivateLinkServicesForPowerBI"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataBoxEdge/features/ResourceMoveAllowed","type":"Microsoft.Features/providers/features","name":"Microsoft.DataBoxEdge/ResourceMoveAllowed"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/CopyV2","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/CopyV2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/MabAfecTestEv2","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/MabAfecTestEv2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Authorization/features/PolicyExemptionPrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Authorization/PolicyExemptionPrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ApiManagement/features/dummyfeature","type":"Microsoft.Features/providers/features","name":"Microsoft.ApiManagement/dummyfeature"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowSTOnBMDelegatedSubnet","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowSTOnBMDelegatedSubnet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/UserAssignedIdentityPreviewInternalTest","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/UserAssignedIdentityPreviewInternalTest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.KubernetesConfiguration/features/AKS-GitOps-FeatureFlag","type":"Microsoft.Features/providers/features","name":"Microsoft.KubernetesConfiguration/AKS-GitOps-FeatureFlag"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.PolicyInsights/features/attestations","type":"Microsoft.Features/providers/features","name":"Microsoft.PolicyInsights/attestations"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/EnableUltraSSD","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/EnableUltraSSD"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowMoreASPerLBfWithoutVMSS","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowMoreASPerLBfWithoutVMSS"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AutomaticRepairsWithConfigurableRepairActions","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AutomaticRepairsWithConfigurableRepairActions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/EV2TestAFECFlag","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/EV2TestAFECFlag"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/UseCustomizedContainerRuntime","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/UseCustomizedContainerRuntime"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/AzureEdgeZones","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/AzureEdgeZones"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ImportExport/features/SouthAfricaNorthAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.ImportExport/SouthAfricaNorthAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowWorkloadTypeOnBM","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowWorkloadTypeOnBM"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.cdn/features/EnablePrivateLink","type":"Microsoft.Features/providers/features","name":"Microsoft.cdn/EnablePrivateLink"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/AZ_brazilsouth","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/AZ_brazilsouth"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SystemPriorityCopy","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SystemPriorityCopy"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/CentralUSRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/CentralUSRegionEnabled"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/WestUS2RegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/WestUS2RegionEnabled"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/WestUSRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/WestUSRegionEnabled"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AppConfiguration/features/InternalGA","type":"Microsoft.Features/providers/features","name":"Microsoft.AppConfiguration/InternalGA"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AHUB","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AHUB"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AllowManagedDisksReplaceOSDisk","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AllowManagedDisksReplaceOSDisk"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AllowPreReleaseRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AllowPreReleaseRegions"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AllowValidationRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AllowValidationRegions"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/armApiPreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/armApiPreviewAccess"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AutomaticOSUpgradeWithGalleryImage","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AutomaticOSUpgradeWithGalleryImage"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AutoOSUpgradePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AutoOSUpgradePreview"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AvailabilitySetPinning","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AvailabilitySetPinning"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AZAPInternalVMSKU","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AZAPInternalVMSKU"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AzAP","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AzAP"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFGA","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFGA"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AzureVirtualMachineSerialConsole","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AzureVirtualMachineSerialConsole"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/DisableNetworkWatcherAutocreation","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/DisableNetworkWatcherAutocreation"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VirtualMachineImages/features/RelAPI","type":"Microsoft.Features/providers/features","name":"Microsoft.VirtualMachineImages/RelAPI"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VirtualMachineImages/features/VirtualMachineTemplatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.VirtualMachineImages/VirtualMachineTemplatePreview"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AZBalancing","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AZBalancing"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/BatchGetTenantInformantionRequests","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/BatchGetTenantInformantionRequests"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowVirtualNetworkTap","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowVirtualNetworkTap"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.TerraformOSS/features/EnableTerraformPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.TerraformOSS/EnableTerraformPreview"}]}' + string: '{"value":[{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RedHatOpenShift/features/preview","type":"Microsoft.Features/providers/features","name":"Microsoft.RedHatOpenShift/preview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIaaS/features/cloudSimpleRp1","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIaaS/cloudSimpleRp1"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp10","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp10"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp11","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp11"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp12","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp12"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp13","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp13"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp14","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp14"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp15","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp15"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp16","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp16"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp17","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp17"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp18","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp18"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp19","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp19"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp2","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp20","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp20"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp21","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp21"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp22","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp22"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp23","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp23"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp24","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp24"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp25","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp25"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp6","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp6"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp7","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp7"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp8","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp8"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/cloudSimpleRp9","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp9"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/CloudSimple.PrivateCloudIAAS/features/stagingRP","type":"Microsoft.Features/providers/features","name":"CloudSimple.PrivateCloudIAAS/stagingRP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AAD/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.AAD/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AAD/features/previewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.AAD/previewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AAD/features/tipAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.AAD/tipAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.aadiam/features/betalogconnector","type":"Microsoft.Features/providers/features","name":"microsoft.aadiam/betalogconnector"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.aadiam/features/testinproduction","type":"Microsoft.Features/providers/features","name":"microsoft.aadiam/testinproduction"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.alertsmanagement/features/enableSmartDiagnostics","type":"Microsoft.Features/providers/features","name":"microsoft.alertsmanagement/enableSmartDiagnostics"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ApiManagement/features/testinproduction","type":"Microsoft.Features/providers/features","name":"Microsoft.ApiManagement/testinproduction"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ApiManagement/features/testinproductionmdm","type":"Microsoft.Features/providers/features","name":"Microsoft.ApiManagement/testinproductionmdm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Archive/features/PreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Archive/PreviewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Automation/features/aseAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Automation/aseAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Automation/features/ccAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Automation/ccAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Automation/features/ciAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Automation/ciAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Automation/features/eapAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Automation/eapAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Automation/features/ncusAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Automation/ncusAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Automation/features/neAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Automation/neAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Automation/features/scusAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Automation/scusAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Automation/features/wcusuksAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Automation/wcusuksAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AzureActiveDirectory/features/B2CV2Resource","type":"Microsoft.Features/providers/features","name":"Microsoft.AzureActiveDirectory/B2CV2Resource"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AzureActiveDirectory/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.AzureActiveDirectory/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AzureActiveDirectory/features/CPIMCSP","type":"Microsoft.Features/providers/features","name":"Microsoft.AzureActiveDirectory/CPIMCSP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AzureData/features/eosEarlyAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.AzureData/eosEarlyAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AzureData/features/tinaEarlyAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.AzureData/tinaEarlyAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AzureStack/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.AzureStack/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AzureStack/features/Marketplace","type":"Microsoft.Features/providers/features","name":"Microsoft.AzureStack/Marketplace"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Batch/features/BatchAccountWhitelistSAN","type":"Microsoft.Features/providers/features","name":"Microsoft.Batch/BatchAccountWhitelistSAN"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Batch/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Batch/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Batch/features/portaltest","type":"Microsoft.Features/providers/features","name":"Microsoft.Batch/portaltest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Batch/features/portaltest2","type":"Microsoft.Features/providers/features","name":"Microsoft.Batch/portaltest2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Batch/features/SwiftProd","type":"Microsoft.Features/providers/features","name":"Microsoft.Batch/SwiftProd"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.BatchAI/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.BatchAI/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.BatchAI/features/workspace","type":"Microsoft.Features/providers/features","name":"Microsoft.BatchAI/workspace"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.BigAnalytics/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.BigAnalytics/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Blockchain/features/privatePreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Blockchain/privatePreviewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Cache/features/betaAccess2","type":"Microsoft.Features/providers/features","name":"Microsoft.Cache/betaAccess2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Cache/features/betaAccess3","type":"Microsoft.Features/providers/features","name":"Microsoft.Cache/betaAccess3"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.cache/features/CanaryCheckNameAvailability","type":"Microsoft.Features/providers/features","name":"microsoft.cache/CanaryCheckNameAvailability"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ClassicIaaSMigrate/features/ClassicIaaSMigrate","type":"Microsoft.Features/providers/features","name":"Microsoft.ClassicIaaSMigrate/ClassicIaaSMigrate"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ClassicInfrastructureMigrate/features/ClassicInfrastructureMigrate","type":"Microsoft.Features/providers/features","name":"Microsoft.ClassicInfrastructureMigrate/ClassicInfrastructureMigrate"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ClassicSubscription/features/InternalTest","type":"Microsoft.Features/providers/features","name":"Microsoft.ClassicSubscription/InternalTest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.cloudes/features/internalmsft","type":"Microsoft.Features/providers/features","name":"microsoft.cloudes/internalmsft"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.cloudes/features/internalonly","type":"Microsoft.Features/providers/features","name":"microsoft.cloudes/internalonly"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.cloudes/features/testinproduction","type":"Microsoft.Features/providers/features","name":"microsoft.cloudes/testinproduction"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.CognitiveServices/features/AutoApproveFeature","type":"Microsoft.Features/providers/features","name":"Microsoft.CognitiveServices/AutoApproveFeature"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.CognitiveServices/features/formUnderstandingPrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.CognitiveServices/formUnderstandingPrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.CognitiveServices/features/TokenAuthPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.CognitiveServices/TokenAuthPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/CanonicalEssentialsPlan","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/CanonicalEssentialsPlan"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/CanonicalAdvancedSupport","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/CanonicalAdvancedSupport"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/CanonicalEssentialSupport","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/CanonicalEssentialSupport"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/CanonicalEssentialsSupport","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/CanonicalEssentialsSupport"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/CAPSImagePublishing","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/CAPSImagePublishing"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/CanonicalStandardSupport","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/CanonicalStandardSupport"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/CorPersistence","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/CorPersistence"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/DedicatedNodeGroup","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/DedicatedNodeGroup"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/disableDisksAndSnapshotsPerRGLimit","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/disableDisksAndSnapshotsPerRGLimit"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/DisableSerialConsole","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/DisableSerialConsole"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/DisableServiceHealing","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/DisableServiceHealing"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/DsmsSecrets","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/DsmsSecrets"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/EnableCrossSubscriptionWithKeyVaultResources","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/EnableCrossSubscriptionWithKeyVaultResources"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/ExtensionsFastpath","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/ExtensionsFastpath"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/ExtraLargeVMScaleSetPerfEvaluation","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/ExtraLargeVMScaleSetPerfEvaluation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.AllowUnhealthyNode","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.AllowUnhealthyNode"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.AzSM.NewDeployment.OptOut","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.AzSM.NewDeployment.OptOut"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.DisableServiceHealing","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.DisableServiceHealing"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.DisableLiveMigrationGen","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.DisableLiveMigrationGen"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.DisableTenantLeaseOperationsOnNode","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.DisableTenantLeaseOperationsOnNode"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.DisableVMFaultInjectorForTenant","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.DisableVMFaultInjectorForTenant"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.EnableDeadMigrationGen","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.EnableDeadMigrationGen"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.EnableCustomizedTenantLiveMigration","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.EnableCustomizedTenantLiveMigration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.EnableLiveMigrationGen","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.EnableLiveMigrationGen"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.EnableLiveMigration","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.EnableLiveMigration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.EnableStopMigrateForSub","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.EnableStopMigrateForSub"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.EnableStopMigrateDiskCopyForTenant","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.EnableStopMigrateDiskCopyForTenant"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.EnableTenantLeaseOperationsOnNode","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.EnableTenantLeaseOperationsOnNode"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.EnableStopMigrateGen","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.EnableStopMigrateGen"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.StopMigrateSkipDiskCopyForSub","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.StopMigrateSkipDiskCopyForSub"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.EnableVMFaultInjectorForTenant","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.EnableVMFaultInjectorForTenant"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.VMPreprovisioning","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.VMPreprovisioning"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.compute/features/Fabric.UDWithinFDAlignment","type":"Microsoft.Features/providers/features","name":"Microsoft.compute/Fabric.UDWithinFDAlignment"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/FastPollingOptIn","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/FastPollingOptIn"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Feature.AllowUnhealthyNode","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Feature.AllowUnhealthyNode"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Feature.EnableCustomizedTenantLiveMigration","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Feature.EnableCustomizedTenantLiveMigration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Feature.DisableServiceHealing","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Feature.DisableServiceHealing"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Foobar","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Foobar"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/GalleryImageBigBlob","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/GalleryImageBigBlob"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/GalleryApplicationPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/GalleryApplicationPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/GalleryImageHighScale","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/GalleryImageHighScale"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/GalleryRemoveUserSourceDependency","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/GalleryRemoveUserSourceDependency"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/ImpedeFastPolling","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/ImpedeFastPolling"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/InGuestVMUpdate","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/InGuestVMUpdate"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/ManagedDisksPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/ManagedDisksPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/ManagedResourcesMove","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/ManagedResourcesMove"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/MRProfile","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/MRProfile"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/NetworkPlacementGroupsPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/NetworkPlacementGroupsPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/NewAllocator","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/NewAllocator"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/NodeFlight","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/NodeFlight"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/OptOutScaleSetPipelinePreemption","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/OptOutScaleSetPipelinePreemption"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/OSUpgradeForServiceFabric","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/OSUpgradeForServiceFabric"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.compute/features/OverProvision","type":"Microsoft.Features/providers/features","name":"microsoft.compute/OverProvision"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/OverprovisionedExtensionDelay","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/OverprovisionedExtensionDelay"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/OverProvisionWithUDBalance","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/OverProvisionWithUDBalance"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/OverProvisionWithFDBalancing","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/OverProvisionWithFDBalancing"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/OverProvisionWithUDBalancing","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/OverProvisionWithUDBalancing"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/PerfTestSubscription","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/PerfTestSubscription"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/PremiumDiskLatencyOptimized","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/PremiumDiskLatencyOptimized"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/RegionalUltraSSDVMs","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/RegionalUltraSSDVMs"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/RepairVMScaleSetInstancesPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/RepairVMScaleSetInstancesPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.compute/features/Reprovisioning","type":"Microsoft.Features/providers/features","name":"microsoft.compute/Reprovisioning"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/RollingUpgradePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/RollingUpgradePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/RollingUpgradePolicyOverride","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/RollingUpgradePolicyOverride"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/RunScripts","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/RunScripts"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SIGEnablePremiumLRSReplication","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SIGEnablePremiumLRSReplication"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.compute/features/SpotMeterValidation","type":"Microsoft.Features/providers/features","name":"Microsoft.compute/SpotMeterValidation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQLG5NP","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQLG5NP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQLG6NP","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQLG6NP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/TenantReserveActivate","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/TenantReserveActivate"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/TipNode","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/TipNode"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/UDWithinFDAlignment","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/UDWithinFDAlignment"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/UnifiedDiskEncryptionWithOSUpgrades","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/UnifiedDiskEncryptionWithOSUpgrades"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/VirtualMachineRuntimeServiceDisablePackageValidation","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/VirtualMachineRuntimeServiceDisablePackageValidation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/VMPipelineBatchingPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/VMPipelineBatchingPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/vmssApiPreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/vmssApiPreviewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/vmssApiPreviewV2Access","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/vmssApiPreviewV2Access"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ConnectedEnvironment/features/tip","type":"Microsoft.Features/providers/features","name":"Microsoft.ConnectedEnvironment/tip"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerInstance/features/aciOnAtlas","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerInstance/aciOnAtlas"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerInstance/features/extension","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerInstance/extension"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerInstance/features/privatepreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerInstance/privatepreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerInstance/features/previewSubscription","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerInstance/previewSubscription"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerRegisry/features/BlockRegion","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerRegisry/BlockRegion"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerInstance/features/privilegedSubscription","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerInstance/privilegedSubscription"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerRegistry/features/BlockRegion","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerRegistry/BlockRegion"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerRegistry/features/BetaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerRegistry/BetaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AAD","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AAD"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/ACS-EUAP","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/ACS-EUAP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/ACSVNext","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/ACSVNext"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AddContainerInsightsSolution","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AddContainerInsightsSolution"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-AzurePolicyAutoApprove","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-AzurePolicyAutoApprove"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-CanadaCentral","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-CanadaCentral"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-CanadaEast","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-CanadaEast"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-CentralUS","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-CentralUS"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-EastUS","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-EastUS"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-EnableAzureDataPlanePolicy","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-EnableAzureDataPlanePolicy"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-INT","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-INT"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-RegionEarlyAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-RegionEarlyAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKSAuditLog","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKSAuditLog"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AksBypassRegionWritesDisabled","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AksBypassRegionWritesDisabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKSAzureStandardLoadBalancer","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKSAzureStandardLoadBalancer"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKSHTTPCustomFeatures","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKSHTTPCustomFeatures"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AksBypassServiceGate","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AksBypassServiceGate"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKSLockingDownEgressPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKSLockingDownEgressPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKSImage","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKSImage"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AllowPreReleaseRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AllowPreReleaseRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKSPrivateLinkPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKSPrivateLinkPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AllowSwarmWindowsAgent","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AllowSwarmWindowsAgent"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AllowValidationRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AllowValidationRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/APIServerSecurityPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/APIServerSecurityPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AROGA","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AROGA"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/ARORemoteGateway","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/ARORemoteGateway"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AvailabilityZonePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AvailabilityZonePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/ControlPlaneUnderlay","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/ControlPlaneUnderlay"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/DockerEngineImage","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/DockerEngineImage"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/EnableCCPMutatingWebhook","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/EnableCCPMutatingWebhook"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/EnableNetworkPolicy","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/EnableNetworkPolicy"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/EnableSingleIPPerCCP","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/EnableSingleIPPerCCP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/HTTP-Application-Routing","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/HTTP-Application-Routing"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/EnableXTablesLock","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/EnableXTablesLock"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/LowPriorityPoolPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/LowPriorityPoolPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/MobyImage","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/MobyImage"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/MultiAgentpoolPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/MultiAgentpoolPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/NodePublicIPPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/NodePublicIPPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/OpenVPN","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/OpenVPN"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/OpenshiftManagedCluster","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/OpenshiftManagedCluster"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/OSABypassMarketplace","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/OSABypassMarketplace"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/OSAInProgressFeature","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/OSAInProgressFeature"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/RBAC","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/RBAC"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/V20180331API","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/V20180331API"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/SaveOSATestConfig","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/SaveOSATestConfig"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/VMSSPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/VMSSPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Contoso/features/RPaaSSampleApp","type":"Microsoft.Features/providers/features","name":"Microsoft.Contoso/RPaaSSampleApp"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.CostManagementBeta/features/TenantRegistration","type":"Microsoft.Features/providers/features","name":"Microsoft.CostManagementBeta/TenantRegistration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.CustomerInsights/features/privatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.CustomerInsights/privatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.CustomProviders/features/customrp","type":"Microsoft.Features/providers/features","name":"Microsoft.CustomProviders/customrp"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.CustomProviders/features/associations","type":"Microsoft.Features/providers/features","name":"Microsoft.CustomProviders/associations"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.CustomProviders/features/UpcomingRegion","type":"Microsoft.Features/providers/features","name":"Microsoft.CustomProviders/UpcomingRegion"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataBoxEdge/features/DBEIntAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataBoxEdge/DBEIntAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataBoxEdge/features/EdgeSignUp","type":"Microsoft.Features/providers/features","name":"Microsoft.DataBoxEdge/EdgeSignUp"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataBoxEdge/features/PassiveStampAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataBoxEdge/PassiveStampAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databricks/features/DatabricksControlPlane","type":"Microsoft.Features/providers/features","name":"Microsoft.Databricks/DatabricksControlPlane"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databricks/features/TowboatAllowedSubscription","type":"Microsoft.Features/providers/features","name":"Microsoft.Databricks/TowboatAllowedSubscription"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataCatalog/features/PPEAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataCatalog/PPEAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataCatalog/features/PRODAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataCatalog/PRODAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataCatalog/features/PRODAccessNew","type":"Microsoft.Features/providers/features","name":"Microsoft.DataCatalog/PRODAccessNew"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataFactory/features/DFAccessInBuildout","type":"Microsoft.Features/providers/features","name":"Microsoft.DataFactory/DFAccessInBuildout"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataExchange/features/workspacePreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataExchange/workspacePreviewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataFactory/features/GatewayHAPrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.DataFactory/GatewayHAPrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataFactory/features/GatewayHAPublicPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.DataFactory/GatewayHAPublicPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataLakeAnalytics/features/requestedBetaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataLakeAnalytics/requestedBetaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataLakeStore/features/requestedBetaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataLakeStore/requestedBetaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataMigration/features/BuddyA","type":"Microsoft.Features/providers/features","name":"Microsoft.DataMigration/BuddyA"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataMigration/features/demo","type":"Microsoft.Features/providers/features","name":"Microsoft.DataMigration/demo"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataMigration/features/int","type":"Microsoft.Features/providers/features","name":"Microsoft.DataMigration/int"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataMigration/features/staging","type":"Microsoft.Features/providers/features","name":"Microsoft.DataMigration/staging"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataShare/features/ReactSqlUxPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.DataShare/ReactSqlUxPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMariaDB/features/georeplica","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMariaDB/georeplica"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMariaDB/features/firewallRuleAllowAzureServices","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMariaDB/firewallRuleAllowAzureServices"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMariaDB/features/newStorageLimit","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMariaDB/newStorageLimit"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMariaDB/features/georestore","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMariaDB/georestore"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMariaDB/features/replica","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMariaDB/replica"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForMariaDB/features/privatePreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForMariaDB/privatePreviewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMariaDB/features/storageautogrow","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMariaDB/storageautogrow"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMariaDB/features/resourceHealth","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMariaDB/resourceHealth"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMariaDB/features/vnet","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMariaDB/vnet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMariaDB/features/threatdetection","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMariaDB/threatdetection"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMySQL/features/firewallRuleAllowAzureServices","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMySQL/firewallRuleAllowAzureServices"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMariaDB/features/workloadInsight","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMariaDB/workloadInsight"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMySQL/features/georestore","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMySQL/georestore"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForMySQL/features/georeplica","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForMySQL/georeplica"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMySQL/features/largeStorage","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMySQL/largeStorage"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMySQL/features/newStorageLimit","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMySQL/newStorageLimit"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DbforMySQL/features/replica","type":"Microsoft.Features/providers/features","name":"Microsoft.DbforMySQL/replica"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMySQL/features/resourceHealth","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMySQL/resourceHealth"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMySQL/features/storageautogrow","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMySQL/storageautogrow"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMySQL/features/vnet","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMySQL/vnet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.dbformysql/features/webappnewbizmodel","type":"Microsoft.Features/providers/features","name":"microsoft.dbformysql/webappnewbizmodel"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForMySQL/features/workloadInsight","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForMySQL/workloadInsight"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForPostgreSQL/features/citus64vCores","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForPostgreSQL/citus64vCores"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForPostgreSQL/features/citusHA","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForPostgreSQL/citusHA"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforPostgreSQL/features/cituspreview","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforPostgreSQL/cituspreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForPostgreSQL/features/citusRoles","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForPostgreSQL/citusRoles"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforPostgreSQL/features/firewallRuleAllowAzureServices","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforPostgreSQL/firewallRuleAllowAzureServices"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForPostgreSQL/features/georeplica","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForPostgreSQL/georeplica"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforPostgreSQL/features/georestore","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforPostgreSQL/georestore"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforPostgreSQL/features/indexAdvisor","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforPostgreSQL/indexAdvisor"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForPostgreSQL/features/largeStorage","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForPostgreSQL/largeStorage"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforPostgreSQL/features/newStorageLimit","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforPostgreSQL/newStorageLimit"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforPostgreSQL/features/ossazureactivedirectoryadmin","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforPostgreSQL/ossazureactivedirectoryadmin"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.dbforpostgresql/features/pgversionten","type":"Microsoft.Features/providers/features","name":"microsoft.dbforpostgresql/pgversionten"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForPostgreSQL/features/replica","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForPostgreSQL/replica"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforPostgreSQL/features/resourceHealth","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforPostgreSQL/resourceHealth"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforPostgreSQL/features/storageautogrow","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforPostgreSQL/storageautogrow"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForPostgreSQL/features/vnet","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForPostgreSQL/vnet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.dbforpostgresql/features/webappnewbizmodel","type":"Microsoft.Features/providers/features","name":"microsoft.dbforpostgresql/webappnewbizmodel"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforPostgreSQL/features/workloadInsight","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforPostgreSQL/workloadInsight"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DeploymentManager/features/admdev","type":"Microsoft.Features/providers/features","name":"Microsoft.DeploymentManager/admdev"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DeploymentManager/features/ignite2018PreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DeploymentManager/ignite2018PreviewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DeploymentManager/features/tip","type":"Microsoft.Features/providers/features","name":"Microsoft.DeploymentManager/tip"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.devices/features/AzureIoTElasticPools","type":"Microsoft.Features/providers/features","name":"microsoft.devices/AzureIoTElasticPools"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.devices/features/AzureIoTProvisioningService","type":"Microsoft.Features/providers/features","name":"microsoft.devices/AzureIoTProvisioningService"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Devices/features/PublicPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Devices/PublicPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DevSpaces/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DevSpaces/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DevTestLab/features/Integration","type":"Microsoft.Features/providers/features","name":"Microsoft.DevTestLab/Integration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DevTestLab/features/Test2","type":"Microsoft.Features/providers/features","name":"Microsoft.DevTestLab/Test2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DevTestLab/features/Test3","type":"Microsoft.Features/providers/features","name":"Microsoft.DevTestLab/Test3"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DevTestLab/features/Test4","type":"Microsoft.Features/providers/features","name":"Microsoft.DevTestLab/Test4"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.dns/features/privatepreview","type":"Microsoft.Features/providers/features","name":"microsoft.dns/privatepreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DocumentDB/features/autopilot-flight-3","type":"Microsoft.Features/providers/features","name":"Microsoft.DocumentDB/autopilot-flight-3"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DocumentDB/features/storageanalytics-public-preview","type":"Microsoft.Features/providers/features","name":"Microsoft.DocumentDB/storageanalytics-public-preview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DomainRegistration/features/betaGD","type":"Microsoft.Features/providers/features","name":"Microsoft.DomainRegistration/betaGD"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.EventGrid/features/storageEventSubscriptions","type":"Microsoft.Features/providers/features","name":"Microsoft.EventGrid/storageEventSubscriptions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Experimentation/features/POC","type":"Microsoft.Features/providers/features","name":"Microsoft.Experimentation/POC"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ExpressPod/features/DataBoxCanaryTest","type":"Microsoft.Features/providers/features","name":"Microsoft.ExpressPod/DataBoxCanaryTest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ExpressPod/features/DataIngestionService","type":"Microsoft.Features/providers/features","name":"Microsoft.ExpressPod/DataIngestionService"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ExpressPod/features/DeviceImportAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.ExpressPod/DeviceImportAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Expresspod/features/diskimportaccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Expresspod/diskimportaccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ExpressPod/features/ExpressPodCanary","type":"Microsoft.Features/providers/features","name":"Microsoft.ExpressPod/ExpressPodCanary"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Expresspod/features/IgniteSignup","type":"Microsoft.Features/providers/features","name":"Microsoft.Expresspod/IgniteSignup"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ExpressPod/features/MockGdcoAndUps","type":"Microsoft.Features/providers/features","name":"Microsoft.ExpressPod/MockGdcoAndUps"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Expresspod/features/MockXtService","type":"Microsoft.Features/providers/features","name":"Microsoft.Expresspod/MockXtService"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ExternalShim/features/ExternalShimAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.ExternalShim/ExternalShimAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Genomics/features/DevelopmentEnvironmentAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Genomics/DevelopmentEnvironmentAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.GuestConfiguration/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.GuestConfiguration/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.GuestConfiguration/features/CanaryParticipation","type":"Microsoft.Features/providers/features","name":"Microsoft.GuestConfiguration/CanaryParticipation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.GuestConfiguration/features/GA20181120","type":"Microsoft.Features/providers/features","name":"Microsoft.GuestConfiguration/GA20181120"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.HanaOnAzure/features/noAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.HanaOnAzure/noAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.HardwareSecurityModules/features/DedicatedHsmEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.HardwareSecurityModules/DedicatedHsmEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.HardwareSecurityModules/features/deploymentVerification","type":"Microsoft.Features/providers/features","name":"Microsoft.HardwareSecurityModules/deploymentVerification"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.HardwareSecurityModules/features/drillVerification","type":"Microsoft.Features/providers/features","name":"Microsoft.HardwareSecurityModules/drillVerification"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.HardwareSecurityModules/features/UseDogfoodHSM","type":"Microsoft.Features/providers/features","name":"Microsoft.HardwareSecurityModules/UseDogfoodHSM"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.HardwareSecurityModules/features/UseDogfoodHsmAdminPlane","type":"Microsoft.Features/providers/features","name":"Microsoft.HardwareSecurityModules/UseDogfoodHsmAdminPlane"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.HybridCompute/features/HybridComputePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.HybridCompute/HybridComputePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.hybridcompute/features/HybridComputeExtensionPreview","type":"Microsoft.Features/providers/features","name":"microsoft.hybridcompute/HybridComputeExtensionPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.HybridCompute/features/HybridRPCanary","type":"Microsoft.Features/providers/features","name":"Microsoft.HybridCompute/HybridRPCanary"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.HybridData/features/PreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.HybridData/PreviewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/actiongrouptestinproduction","type":"Microsoft.Features/providers/features","name":"microsoft.insights/actiongrouptestinproduction"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/azurehealthlimitedpreview","type":"Microsoft.Features/providers/features","name":"microsoft.insights/azurehealthlimitedpreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/azurehealthpreview","type":"Microsoft.Features/providers/features","name":"microsoft.insights/azurehealthpreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/baseline-preview","type":"Microsoft.Features/providers/features","name":"microsoft.insights/baseline-preview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/baseline-dogfood","type":"Microsoft.Features/providers/features","name":"microsoft.insights/baseline-dogfood"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/billingv3","type":"Microsoft.Features/providers/features","name":"microsoft.insights/billingv3"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/diagnosticsettingpreview","type":"Microsoft.Features/providers/features","name":"microsoft.insights/diagnosticsettingpreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/customMetric","type":"Microsoft.Features/providers/features","name":"microsoft.insights/customMetric"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/EnableCCAN","type":"Microsoft.Features/providers/features","name":"microsoft.insights/EnableCCAN"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Insights/features/EnableCHNRegion","type":"Microsoft.Features/providers/features","name":"Microsoft.Insights/EnableCHNRegion"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/EnableCID","type":"Microsoft.Features/providers/features","name":"microsoft.insights/EnableCID"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Insights/features/EnableNOERegion","type":"Microsoft.Features/providers/features","name":"Microsoft.Insights/EnableNOERegion"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Insights/features/EnableNOWRegion","type":"Microsoft.Features/providers/features","name":"Microsoft.Insights/EnableNOWRegion"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/EnableSEA","type":"Microsoft.Features/providers/features","name":"microsoft.insights/EnableSEA"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Insights/features/EnableSEAURegion","type":"Microsoft.Features/providers/features","name":"Microsoft.Insights/EnableSEAURegion"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/EnableSUK","type":"Microsoft.Features/providers/features","name":"microsoft.insights/EnableSUK"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/EnableWestUS2","type":"Microsoft.Features/providers/features","name":"microsoft.insights/EnableWestUS2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/metricalertprivatepreview","type":"Microsoft.Features/providers/features","name":"microsoft.insights/metricalertprivatepreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/metricalertmultidimprivatepreview","type":"Microsoft.Features/providers/features","name":"microsoft.insights/metricalertmultidimprivatepreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/NotificationRulePreview","type":"Microsoft.Features/providers/features","name":"microsoft.insights/NotificationRulePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/NotificationGroupPreview","type":"Microsoft.Features/providers/features","name":"microsoft.insights/NotificationGroupPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Insights/features/testinproduction","type":"Microsoft.Features/providers/features","name":"Microsoft.Insights/testinproduction"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/testinproductionmdm","type":"Microsoft.Features/providers/features","name":"microsoft.insights/testinproductionmdm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/testinproductionnms","type":"Microsoft.Features/providers/features","name":"microsoft.insights/testinproductionnms"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.IoTCentral/features/metering","type":"Microsoft.Features/providers/features","name":"Microsoft.IoTCentral/metering"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.IoTSpaces/features/CanaryCustomers","type":"Microsoft.Features/providers/features","name":"Microsoft.IoTSpaces/CanaryCustomers"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.IoTSpaces/features/MVP","type":"Microsoft.Features/providers/features","name":"Microsoft.IoTSpaces/MVP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.IotSpaces/features/PPECustomers","type":"Microsoft.Features/providers/features","name":"Microsoft.IotSpaces/PPECustomers"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.IotSpaces/features/PreviewCustomers","type":"Microsoft.Features/providers/features","name":"Microsoft.IotSpaces/PreviewCustomers"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.IoTSpaces/features/ScaleTestCustomers","type":"Microsoft.Features/providers/features","name":"Microsoft.IoTSpaces/ScaleTestCustomers"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.KeyVault/features/EventGridPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.KeyVault/EventGridPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.KeyVault/features/HSMPoolEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.KeyVault/HSMPoolEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kona/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Kona/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kona/features/betaAccess2","type":"Microsoft.Features/providers/features","name":"Microsoft.Kona/betaAccess2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kubernetes/features/previewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Kubernetes/previewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.KubernetesConfiguration/features/sourceControlConfiguration","type":"Microsoft.Features/providers/features","name":"Microsoft.KubernetesConfiguration/sourceControlConfiguration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/AllowSwitzerlandNorth","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/AllowSwitzerlandNorth"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/UseSharedIdentities","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/UseSharedIdentities"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.LabServices/features/DevInProdIntegration","type":"Microsoft.Features/providers/features","name":"Microsoft.LabServices/DevInProdIntegration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Logic/features/AllowCrossSubscriptionGatewayAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Logic/AllowCrossSubscriptionGatewayAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Logic/features/AmeProjectionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Logic/AmeProjectionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Logic/features/AllowUnlimitedLogicApps","type":"Microsoft.Features/providers/features","name":"Microsoft.Logic/AllowUnlimitedLogicApps"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Logic/features/FairfaxDemo","type":"Microsoft.Features/providers/features","name":"Microsoft.Logic/FairfaxDemo"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Logic/features/HostingEnvironmentsPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Logic/HostingEnvironmentsPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Logic/features/IsolatedEnvironmentsPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Logic/IsolatedEnvironmentsPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Logic/features/IsolatedEnvironmentsPrivateRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Logic/IsolatedEnvironmentsPrivateRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Logic/features/IsolatedEnvironmentsPreviewDisable","type":"Microsoft.Features/providers/features","name":"Microsoft.Logic/IsolatedEnvironmentsPreviewDisable"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.MachineLearningCompute/features/ViennaPublicPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.MachineLearningCompute/ViennaPublicPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.MachineLearningExperimentation/features/CanaryFeature","type":"Microsoft.Features/providers/features","name":"Microsoft.MachineLearningExperimentation/CanaryFeature"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Maintenance/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Maintenance/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Microsoft/features/AllowNetworkWatcherAzureReachabilityReport","type":"Microsoft.Features/providers/features","name":"Microsoft.Microsoft/AllowNetworkWatcherAzureReachabilityReport"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Mindaro/features/tip2","type":"Microsoft.Features/providers/features","name":"Microsoft.Mindaro/tip2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Mindaro/features/tip","type":"Microsoft.Features/providers/features","name":"Microsoft.Mindaro/tip"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/AllowSMB","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/AllowSMB"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/AllowValidationRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/AllowValidationRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFBackupPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFBackupPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFGATenant","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFGATenant"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFNFSv4Preview","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFNFSv4Preview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFReplicationPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFReplicationPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFSnapRestorePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFSnapRestorePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/managementNicAdmin","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/managementNicAdmin"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/testing","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/testing"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAllocateOptimizations","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAllocateOptimizations"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAllocateAsyncValidation","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAllocateAsyncValidation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAppGwWafBotManagerRuleSet","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAppGwWafBotManagerRuleSet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAppGwPerSiteFirewallPolicy","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAppGwPerSiteFirewallPolicy"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowApplicationGatewayClientAuthentication","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowApplicationGatewayClientAuthentication"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAppGwWafCustomRuleGeoMatch","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAppGwWafCustomRuleGeoMatch"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowApplicationGatewayLoadDistributionPolicy","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowApplicationGatewayLoadDistributionPolicy"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowApplicationGatewayZonePinning","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowApplicationGatewayZonePinning"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAzureFirewall","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAzureFirewall"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAsgsOnVmScaleSet","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAsgsOnVmScaleSet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowBastionHostPrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowBastionHostPrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowBastionHost","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowBastionHost"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowClassicCrossSubscriptionPeering","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowClassicCrossSubscriptionPeering"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowCoExistenceAnyOrder","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowCoExistenceAnyOrder"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowCortexGlobalVnetPeering","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowCortexGlobalVnetPeering"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowDdosProtectionPlan","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowDdosProtectionPlan"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowDisableBgpRouteProgagation","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowDisableBgpRouteProgagation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowDSeriesForBrooklyn","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowDSeriesForBrooklyn"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.network/features/allowERArmProviderPortal","type":"Microsoft.Features/providers/features","name":"microsoft.network/allowERArmProviderPortal"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowDynamicRedirectToTestGwm","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowDynamicRedirectToTestGwm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowExRCrossRegionResourceValidation","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowExRCrossRegionResourceValidation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowFpgaEnabledClustersFeature","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowFpgaEnabledClustersFeature"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowFrontdoor","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowFrontdoor"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowGlobalCrpHttpClient","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowGlobalCrpHttpClient"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowGlobalTagsForSql","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowGlobalTagsForSql"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowGlobalPeeringTransit","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowGlobalPeeringTransit"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowGlobalVnetPeering","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowGlobalVnetPeering"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowGlobalTagsForStorage","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowGlobalTagsForStorage"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowHidingCrossSubscriptionResources","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowHidingCrossSubscriptionResources"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowIntendedPolicies","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowIntendedPolicies"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowIntentedPolicies","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowIntentedPolicies"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowInternalDelegations","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowInternalDelegations"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowLBPreviewWave2","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowLBPreviewWave2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowLBPreviewWave3","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowLBPreviewWave3"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowLBSNATallocationPolicy","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowLBSNATallocationPolicy"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowMacPreservation","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowMacPreservation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowMaxPrivateLinkServicesPerLoadBalancerOptimization","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowMaxPrivateLinkServicesPerLoadBalancerOptimization"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowMultiNicOnVMScaleSet","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowMultiNicOnVMScaleSet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowMultipleAddressPrefixesOnSubnet","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowMultipleAddressPrefixesOnSubnet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowMutipleAddressPrefixesOnSubnet","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowMutipleAddressPrefixesOnSubnet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNatGateway","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNatGateway"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNetwatcherAzureReachabilityReport","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNetwatcherAzureReachabilityReport"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNetworkIntentPolicies","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNetworkIntentPolicies"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNetworkProfiles","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNetworkProfiles"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNetworkWatcherAzureReachabilityReport","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNetworkWatcherAzureReachabilityReport"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNfvrpFirewallPolicyPrivate","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNfvrpFirewallPolicyPrivate"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNfvrpFirewallPolicySlice","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNfvrpFirewallPolicySlice"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNfvrpFirewallPolicyValidation","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNfvrpFirewallPolicyValidation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNfvrpResourcePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNfvrpResourcePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowOutboundNatRule","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowOutboundNatRule"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPaaSEndpointAcl","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPaaSEndpointAcl"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPingMesh","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPingMesh"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPreflightValidation","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPreflightValidation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPreReleaseRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPreReleaseRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPrivateAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPrivateAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPseudoClientAppId","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPseudoClientAppId"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPublicIpMobility","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPublicIpMobility"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPublicIPOnVMScaleSetVMs","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPublicIPOnVMScaleSetVMs"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPublicIpPrefix","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPublicIpPrefix"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPublicIpsAndLoadBalancingOnSecondaryIpConfigsInVMScaleSet","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPublicIpsAndLoadBalancingOnSecondaryIpConfigsInVMScaleSet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRedirectGwmCallsToApplicationGatewayBvt1Gwm","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRedirectGwmCallsToApplicationGatewayBvt1Gwm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRedirectGwmCallsToExpressRouteBvt2Gwm","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRedirectGwmCallsToExpressRouteBvt2Gwm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRedirectGwmCallsToExpressRouteBvt3Gwm","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRedirectGwmCallsToExpressRouteBvt3Gwm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRedirectGwmCallsToExpressRouteCPGwm","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRedirectGwmCallsToExpressRouteCPGwm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRedirectGwmCallsToExpressRouteDPGwm","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRedirectGwmCallsToExpressRouteDPGwm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRedirectGwmCallsToExpressRouteMXGwm","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRedirectGwmCallsToExpressRouteMXGwm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRedirectGwmCallsToExpressRouteRSGwm","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRedirectGwmCallsToExpressRouteRSGwm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRedirectMaps","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRedirectMaps"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRegionalGatewayManagerForSecureGateway","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRegionalGatewayManagerForSecureGateway"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRegionalVMSSVirtualNetworkGateway","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRegionalVMSSVirtualNetworkGateway"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRouteServiceAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRouteServiceAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRoutingPreferenceFeature","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRoutingPreferenceFeature"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRPGateway","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRPGateway"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowServiceEndpointPolicies","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowServiceEndpointPolicies"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowSingleNicAndMultiNicInSameAvailabilitySet","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowSingleNicAndMultiNicInSameAvailabilitySet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowStandardLBOutboundRulesPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowStandardLBOutboundRulesPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowStaticPublicIpAsInstanceIp","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowStaticPublicIpAsInstanceIp"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowSubnetDelegation","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowSubnetDelegation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowSubscriptionMigration","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowSubscriptionMigration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowThrottleCrpOperations","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowThrottleCrpOperations"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowValidationRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowValidationRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowVirtualNetworkTap","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowVirtualNetworkTap"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowVMsFromDifferentVnetsOnAvailabilitySet","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowVMsFromDifferentVnetsOnAvailabilitySet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowVMSSVirtualNetworkGateway","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowVMSSVirtualNetworkGateway"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowVnetGatewayOpenVpnProtocol","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowVnetGatewayOpenVpnProtocol"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.network/features/AllowVpnclientIpsecPoliciesSet","type":"Microsoft.Features/providers/features","name":"microsoft.network/AllowVpnclientIpsecPoliciesSet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/armApiPreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/armApiPreviewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/azurednspreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/azurednspreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/bastionShareableLink","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/bastionShareableLink"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/CloudDnsAliasPortalTest","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/CloudDnsAliasPortalTest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/CloudDnsBdmProd","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/CloudDnsBdmProd"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/CloudDnsBdmPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/CloudDnsBdmPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/CloudDnsReleaseCandidate","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/CloudDnsReleaseCandidate"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/DisableNetworkWatcherAutocreation","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/DisableNetworkWatcherAutocreation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/CloudDnsThrottling","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/CloudDnsThrottling"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/EnableDdosProtectionPlanBilling","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/EnableDdosProtectionPlanBilling"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/EnableOperationBatching","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/EnableOperationBatching"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/EnableTenantNoSyncLock","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/EnableTenantNoSyncLock"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/EnableTenantOperationBatching","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/EnableTenantOperationBatching"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/EnableValidationInBackgroundTask","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/EnableValidationInBackgroundTask"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/HybridRegionPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/HybridRegionPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/ExrGwGatewaySubscription","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/ExrGwGatewaySubscription"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/InternetAnalyzerPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/InternetAnalyzerPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/isVMSSVirtualNetworkGatewayAllowed","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/isVMSSVirtualNetworkGatewayAllowed"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/PrivateDnsGcpPPE","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/PrivateDnsGcpPPE"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/PrivateDnsGcpDaily","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/PrivateDnsGcpDaily"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/SecureGwGatewaySubscription","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/SecureGwGatewaySubscription"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/ThrottleArmOperationsRnm","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/ThrottleArmOperationsRnm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/TestFlag","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/TestFlag"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/TrafficManagerHeatMap","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/TrafficManagerHeatMap"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Netwotk/features/AllowGlobalPeeringTransit","type":"Microsoft.Features/providers/features","name":"Microsoft.Netwotk/AllowGlobalPeeringTransit"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/VpnGwGatewaySubscription","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/VpnGwGatewaySubscription"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NotificationHubs/features/NHubMetrics","type":"Microsoft.Features/providers/features","name":"Microsoft.NotificationHubs/NHubMetrics"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.OperationalInsights/features/SwitzerlandRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.OperationalInsights/SwitzerlandRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Peering/features/AllowCarrierInterconnect","type":"Microsoft.Features/providers/features","name":"Microsoft.Peering/AllowCarrierInterconnect"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Peering/features/AllowDirectInterconnect","type":"Microsoft.Features/providers/features","name":"Microsoft.Peering/AllowDirectInterconnect"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Peering/features/AllowCDNInterconnect","type":"Microsoft.Features/providers/features","name":"Microsoft.Peering/AllowCDNInterconnect"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Peering/features/AllowExchangeInterconnect","type":"Microsoft.Features/providers/features","name":"Microsoft.Peering/AllowExchangeInterconnect"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.PolicyInsights/features/AKS-DataPlaneAutoApprove","type":"Microsoft.Features/providers/features","name":"Microsoft.PolicyInsights/AKS-DataPlaneAutoApprove"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.PolicyInsights/features/Insights","type":"Microsoft.Features/providers/features","name":"Microsoft.PolicyInsights/Insights"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.PolicyInsights/features/Events","type":"Microsoft.Features/providers/features","name":"Microsoft.PolicyInsights/Events"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.PolicyInsights/features/States","type":"Microsoft.Features/providers/features","name":"Microsoft.PolicyInsights/States"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Project/features/tip","type":"Microsoft.Features/providers/features","name":"Microsoft.Project/tip"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/32DiskBackupPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/32DiskBackupPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/AzureFileShareBackup","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/AzureFileShareBackup"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/BackupPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/BackupPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/BlockedFeature","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/BlockedFeature"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/CrossRegionRestore","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/CrossRegionRestore"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/HanaBackup","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/HanaBackup"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/InstantBackupandRecovery","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/InstantBackupandRecovery"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/ItemLevelRecovery","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/ItemLevelRecovery"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/LargeDiskVMBackupPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/LargeDiskVMBackupPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/MABAlertingFeature","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/MABAlertingFeature"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/MercuryAutoProtection","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/MercuryAutoProtection"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/PPEAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/PPEAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/PremiumStorageBackup","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/PremiumStorageBackup"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/RecoveryServicesCanada","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/RecoveryServicesCanada"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/RecoveryServicesBeta","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/RecoveryServicesBeta"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/RecoveryServicesResourceMove","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/RecoveryServicesResourceMove"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/RecoveryServicesUK","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/RecoveryServicesUK"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/RecoveryServicesWUS2","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/RecoveryServicesWUS2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/WorkloadBackup","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/WorkloadBackup"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RemoteApp/features/CspTest","type":"Microsoft.Features/providers/features","name":"Microsoft.RemoteApp/CspTest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RemoteApp/features/PrivacyEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.RemoteApp/PrivacyEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RemoteApp/features/ple","type":"Microsoft.Features/providers/features","name":"Microsoft.RemoteApp/ple"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RemoteApp/features/privatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.RemoteApp/privatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/AllowInternalDelegations","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/AllowInternalDelegations"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/ARMDisableResourcesPerRGLimit","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/ARMDisableResourcesPerRGLimit"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/ARMLimitx2","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/ARMLimitx2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/AzureBuildout","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/AzureBuildout"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/DataControlAgreement","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/DataControlAgreement"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/FairfaxDemo","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/FairfaxDemo"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/GermanyNorth","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/GermanyNorth"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/GermanyRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/GermanyRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/GermanyWestCentral","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/GermanyWestCentral"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/mandatoryRetentionPeriodEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/mandatoryRetentionPeriodEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/NorwayEast","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/NorwayEast"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/NorwayRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/NorwayRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/NorwayWest","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/NorwayWest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/SouthAfricaRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/SouthAfricaRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.resources/features/SwitzerlandNorth","type":"Microsoft.Features/providers/features","name":"microsoft.resources/SwitzerlandNorth"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/SwitzerlandRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/SwitzerlandRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.resources/features/SwitzerlandWest","type":"Microsoft.Features/providers/features","name":"microsoft.resources/SwitzerlandWest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/TestFlag","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/TestFlag"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/ThrottledSubscriptions","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/ThrottledSubscriptions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/UAERegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/UAERegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Saas/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Saas/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/AdvancedThreatProtection","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/AdvancedThreatProtection"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/ApplicationWhitelisting","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/ApplicationWhitelisting"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/ApplicationWhiteliting","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/ApplicationWhiteliting"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/appwhitelistingaccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/appwhitelistingaccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.security/features/Assessments","type":"Microsoft.Features/providers/features","name":"microsoft.security/Assessments"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/CoreDev1","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/CoreDev1"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/Dev1","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/Dev1"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/Dev2","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/Dev2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/Dev3","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/Dev3"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/discoveredSecuritySolutions","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/discoveredSecuritySolutions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/externalSecuritySolutions","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/externalSecuritySolutions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/Integration","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/Integration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/jitnac-dev2","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/jitnac-dev2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/jitnac-dev3","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/jitnac-dev3"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/jitnac-int","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/jitnac-int"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/jitnac-rome3int","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/jitnac-rome3int"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/jitvmaccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/jitvmaccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/NacJIT","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/NacJIT"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.security/features/NetworkData","type":"Microsoft.Features/providers/features","name":"microsoft.security/NetworkData"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/networkMap","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/networkMap"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/northSouth","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/northSouth"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/PricingBundles","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/PricingBundles"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/ShzadaTest","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/ShzadaTest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/VaGrayLabel","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/VaGrayLabel"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Security/features/WindowsDefenderAtp","type":"Microsoft.Features/providers/features","name":"Microsoft.Security/WindowsDefenderAtp"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.SerialConsole/features/PreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.SerialConsole/PreviewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ServiceFabric/features/seabreezePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ServiceFabric/seabreezePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ServiceFabric/features/seabreezePrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ServiceFabric/seabreezePrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ServiceFabric/features/serviceFabricEngineering","type":"Microsoft.Features/providers/features","name":"Microsoft.ServiceFabric/serviceFabricEngineering"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ServiceFabric/features/serviceFabricStageAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.ServiceFabric/serviceFabricStageAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ServiceFabricMesh/features/seabreezePrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ServiceFabricMesh/seabreezePrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ServiceFabricMesh/features/serviceFabricEngineering","type":"Microsoft.Features/providers/features","name":"Microsoft.ServiceFabricMesh/serviceFabricEngineering"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Services/features/RPSaaSPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Services/RPSaaSPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.SignalR/features/betaaccess","type":"Microsoft.Features/providers/features","name":"Microsoft.SignalR/betaaccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Solutions/features/ApplianceMultiRegion","type":"Microsoft.Features/providers/features","name":"Microsoft.Solutions/ApplianceMultiRegion"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Solutions/features/AppliancePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Solutions/AppliancePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Solutions/features/ApplicationGA","type":"Microsoft.Features/providers/features","name":"Microsoft.Solutions/ApplicationGA"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/4tbpool","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/4tbpool"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/4TBOption","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/4TBOption"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/dataSync","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/dataSync"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.SQL/features/dataeditor-publicpreview","type":"Microsoft.Features/providers/features","name":"Microsoft.SQL/dataeditor-publicpreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/dw-asa","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/dw-asa"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/ExternalTdeCertificate","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/ExternalTdeCertificate"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/firewall-enforce-azure-policy","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/firewall-enforce-azure-policy"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/hyperscale-publicpreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/hyperscale-publicpreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/IndexAdvisor","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/IndexAdvisor"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/IndexAdvisorPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/IndexAdvisorPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/IndexAdvisorPublic","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/IndexAdvisorPublic"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.SQL/features/LongTermRetention","type":"Microsoft.Features/providers/features","name":"Microsoft.SQL/LongTermRetention"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/LongTermRetentionV2","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/LongTermRetentionV2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.SQL/features/ManagedInstancePublic","type":"Microsoft.Features/providers/features","name":"Microsoft.SQL/ManagedInstancePublic"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.SQL/features/multiaz-preview","type":"Microsoft.Features/providers/features","name":"Microsoft.SQL/multiaz-preview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.SQL/features/multiaz-test","type":"Microsoft.Features/providers/features","name":"Microsoft.SQL/multiaz-test"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/pesto","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/pesto"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/pesto-lite","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/pesto-lite"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/queryeditor","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/queryeditor"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/queryeditor-publicpreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/queryeditor-publicpreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/queryeditor-webqueryendpoint","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/queryeditor-webqueryendpoint"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/QueryPerformanceInsightPublic","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/QueryPerformanceInsightPublic"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/serverless-publicpreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/serverless-publicpreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/SQL-DW","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/SQL-DW"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/sqldb-4tb-publicpreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/sqldb-4tb-publicpreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/sqldb-ActiveDirectoryAdmin","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/sqldb-ActiveDirectoryAdmin"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.SQL/features/sqldb-addonstorage","type":"Microsoft.Features/providers/features","name":"Microsoft.SQL/sqldb-addonstorage"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/sqldb-ElasticJobs","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/sqldb-ElasticJobs"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/sqldb-elasticpool","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/sqldb-elasticpool"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/sqldb-fsv2","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/sqldb-fsv2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/sqldb-higherStandardPerDbDtu","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/sqldb-higherStandardPerDbDtu"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/sqldb-JobAccounts","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/sqldb-JobAccounts"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/sqldb-mseries","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/sqldb-mseries"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/sqldb-premiumrs","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/sqldb-premiumrs"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/sqldb-vcoremodel","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/sqldb-vcoremodel"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/sqldbsterling","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/sqldbsterling"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/sqldbtde","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/sqldbtde"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/tdeAkvIntegration","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/tdeAkvIntegration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/ADLSGen1Shim","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/ADLSGen1Shim"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/adlsgen2BlobInterop","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/adlsgen2BlobInterop"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowADFS","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowADFS"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowArchive","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowArchive"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowHNS","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowHNS"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowLinuxOptimizedShares","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowLinuxOptimizedShares"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.storage/features/AllowNFSV3","type":"Microsoft.Features/providers/features","name":"microsoft.storage/AllowNFSV3"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowPreReleaseRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowPreReleaseRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowStorageV1Accounts","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowStorageV1Accounts"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowTargetStampSpecification","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowTargetStampSpecification"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowValidationRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowValidationRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/armApiPreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/armApiPreviewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/CustomerControlledFailover","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/CustomerControlledFailover"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/EncryptionAtRest","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/EncryptionAtRest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.storage/features/jurobins","type":"Microsoft.Features/providers/features","name":"microsoft.storage/jurobins"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/LivesiteThrottling","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/LivesiteThrottling"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/ObjectReplication","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/ObjectReplication"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/premiumblob","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/premiumblob"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.storage/features/PremiumHns","type":"Microsoft.Features/providers/features","name":"Microsoft.storage/PremiumHns"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/Tags","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/Tags"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/version","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/version"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/XArchive","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/XArchive"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.storagereplication/features/SOS","type":"Microsoft.Features/providers/features","name":"microsoft.storagereplication/SOS"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.StorSimple/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.StorSimple/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.StorSimple/features/betaAcess","type":"Microsoft.Features/providers/features","name":"Microsoft.StorSimple/betaAcess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.StorSimple/features/EnableUnsupportedGeo","type":"Microsoft.Features/providers/features","name":"Microsoft.StorSimple/EnableUnsupportedGeo"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.StorSimple/features/StorSimpleGardaIbizaInGA","type":"Microsoft.Features/providers/features","name":"Microsoft.StorSimple/StorSimpleGardaIbizaInGA"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.StorSimple/features/StorSimpleGardaIbizaMigrated","type":"Microsoft.Features/providers/features","name":"Microsoft.StorSimple/StorSimpleGardaIbizaMigrated"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.StreamAnalytics/features/ASA_NewRegion","type":"Microsoft.Features/providers/features","name":"Microsoft.StreamAnalytics/ASA_NewRegion"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.StreamAnalytics/features/ProdWestUSX","type":"Microsoft.Features/providers/features","name":"Microsoft.StreamAnalytics/ProdWestUSX"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.TimeSeriesInsights/features/extendedCapacityAndRetention","type":"Microsoft.Features/providers/features","name":"Microsoft.TimeSeriesInsights/extendedCapacityAndRetention"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.TimeSeriesInsights/features/previewV2","type":"Microsoft.Features/providers/features","name":"Microsoft.TimeSeriesInsights/previewV2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Token/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Token/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Uic/features/uxdevelopment","type":"Microsoft.Features/providers/features","name":"Microsoft.Uic/uxdevelopment"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VirtualMachineImages/features/CanaryAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.VirtualMachineImages/CanaryAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VisualStudio/features/ExtensionResource","type":"Microsoft.Features/providers/features","name":"Microsoft.VisualStudio/ExtensionResource"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/CloudSimpleRP1","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/CloudSimpleRP1"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/cloudSimpleRp11","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/cloudSimpleRp11"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/cloudSimpleRp12","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/cloudSimpleRp12"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/CloudSimpleRP16","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/CloudSimpleRP16"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/cloudSimpleRp17","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/cloudSimpleRp17"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/cloudSimpleRp18","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/cloudSimpleRp18"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/cloudSimpleRp2","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/cloudSimpleRp2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/cloudSimpleRp3","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/cloudSimpleRp3"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.vmwarecloudsimple/features/eastus-devtest-bl31","type":"Microsoft.Features/providers/features","name":"microsoft.vmwarecloudsimple/eastus-devtest-bl31"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-azure-eastus-devtest-01","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-azure-eastus-devtest-01"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-azure-eastus-devtest-02","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-azure-eastus-devtest-02"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-azure-eastus-devtest-03","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-azure-eastus-devtest-03"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-azure-eastus-devtest-04","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-azure-eastus-devtest-04"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-azure-eastus-devtest-05","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-azure-eastus-devtest-05"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-azure-eastus-devtest-06","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-azure-eastus-devtest-06"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-azure-eastus-devtest-07","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-azure-eastus-devtest-07"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-azure-eastus-devtest-08","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-azure-eastus-devtest-08"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-devtest-virt-01","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-devtest-virt-01"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-devtest-virt-02","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-devtest-virt-02"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-01","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-01"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-02","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-02"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-03","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-03"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-04","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-04"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-05","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-05"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-06","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-06"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-07","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-07"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-08","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-08"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-09","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-09"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-10","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-10"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-11","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-11"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-12","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-12"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-13","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-13"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-14","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-14"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-15","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-15"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-16","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-16"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-17","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-17"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-18","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-18"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-19","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-19"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-20","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-20"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-23","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-23"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-24","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-24"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-25","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-25"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-26","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-26"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-27","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-27"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-28","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-28"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-30","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-30"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-31","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-31"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-32","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-32"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-33","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-33"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-34","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-34"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-37","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-37"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-38","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-38"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-39","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-39"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-40","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-40"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-41","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-41"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-42","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-42"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-43","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-43"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-44","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-44"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-45","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-45"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-46","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-46"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-47","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-47"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-48","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-48"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-49","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-49"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-50","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-50"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-51","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-51"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-52","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-52"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-53","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-53"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-54","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-54"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-57","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-57"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-59","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-59"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-61","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-61"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-62","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-62"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-63","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-63"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-64","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-64"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-65","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-65"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-66","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-66"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-67","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-67"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-68","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-68"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-69","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-69"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-70","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-70"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-71","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-71"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-72","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-72"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-73","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-73"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-74","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-74"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-77","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-77"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-78","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-78"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/env-cs-westus-devtest-79","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/env-cs-westus-devtest-79"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMWareCloudSimple/features/env-cs-westus-devtest-80","type":"Microsoft.Features/providers/features","name":"Microsoft.VMWareCloudSimple/env-cs-westus-devtest-80"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMWareCloudSimple/features/env-cs-westus-devtest-81","type":"Microsoft.Features/providers/features","name":"Microsoft.VMWareCloudSimple/env-cs-westus-devtest-81"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMWareCloudSimple/features/env-cs-westus-devtest-82","type":"Microsoft.Features/providers/features","name":"Microsoft.VMWareCloudSimple/env-cs-westus-devtest-82"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMWareCloudSimple/features/env-cs-westus-devtest-83","type":"Microsoft.Features/providers/features","name":"Microsoft.VMWareCloudSimple/env-cs-westus-devtest-83"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMWareCloudSimple/features/env-cs-westus-devtest-84","type":"Microsoft.Features/providers/features","name":"Microsoft.VMWareCloudSimple/env-cs-westus-devtest-84"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMWareCloudSimple/features/expire-on-7-25-19","type":"Microsoft.Features/providers/features","name":"Microsoft.VMWareCloudSimple/expire-on-7-25-19"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMWareCloudSimple/features/itops-he","type":"Microsoft.Features/providers/features","name":"Microsoft.VMWareCloudSimple/itops-he"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMWareCloudSimple/features/kiev-test-demo","type":"Microsoft.Features/providers/features","name":"Microsoft.VMWareCloudSimple/kiev-test-demo"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/multi-region-1","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/multi-region-1"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/multi-region-2","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/multi-region-2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/multi-region-3","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/multi-region-3"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/multi-region-4","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/multi-region-4"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/mustEmitFractions","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/mustEmitFractions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/mustEmitNone","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/mustEmitNone"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/mustEmitOnes","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/mustEmitOnes"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/mustEmitZeros","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/mustEmitZeros"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/stg-csos","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/stg-csos"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/subscriptionsWhiteList","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/subscriptionsWhiteList"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMWareCloudSimple/features/westeurope-test","type":"Microsoft.Features/providers/features","name":"Microsoft.VMWareCloudSimple/westeurope-test"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/westus-he-test","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/westus-he-test"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VMwareCloudSimple/features/westus-maas","type":"Microsoft.Features/providers/features","name":"Microsoft.VMwareCloudSimple/westus-maas"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/ASEInEastUS2EUAP","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/ASEInEastUS2EUAP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/AustraliaCentral2RegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/AustraliaCentral2RegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/AustraliaCentralRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/AustraliaCentralRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/AustraliaEastRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/AustraliaEastRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/AustraliaSouthEastRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/AustraliaSouthEastRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/BrazilSouthRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/BrazilSouthRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/CanadaCentralRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/CanadaCentralRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/CanadaEastRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/CanadaEastRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/CentralIndiaRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/CentralIndiaRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/CentralUSEUAPRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/CentralUSEUAPRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/EastAsiaStageRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/EastAsiaStageRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/EastUS2EUAPRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/EastUS2EUAPRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/EastUS2RegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/EastUS2RegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/EventGridIntegration","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/EventGridIntegration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/FranceCentralRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/FranceCentralRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/FranceSouthRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/FranceSouthRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/JapanEastRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/JapanEastRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/KoreaCentralRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/KoreaCentralRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/KoreaSouthRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/KoreaSouthRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/NorthCentralUSRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/NorthCentralUSRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/NorthEuropeRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/NorthEuropeRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/PinnedToGlobalEndpoint","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/PinnedToGlobalEndpoint"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/RegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/RegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/SouthCentralUSRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/SouthCentralUSRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/SouthEastAsiaRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/SouthEastAsiaRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/SouthIndiaRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/SouthIndiaRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/TestFeatureRegistration","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/TestFeatureRegistration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/UAECentral","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/UAECentral"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/UKSouthRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/UKSouthRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/UKWestRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/UKWestRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/Undelete","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/Undelete"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/UseTipForTopLevelProxyOnlyApis","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/UseTipForTopLevelProxyOnlyApis"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/WestCentralUSRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/WestCentralUSRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/WestEuropeRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/WestEuropeRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/WestIndiaRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/WestIndiaRegionEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.WindowsIoT/features/DevelopmentEnvironmentAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.WindowsIoT/DevelopmentEnvironmentAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.WindowsIoT/features/WcusAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.WindowsIoT/WcusAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/ESXiDedicatedHost","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/ESXiDedicatedHost"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/WorkloadBackupSoftDelete","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/WorkloadBackupSoftDelete"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RedHatOpenShift/features/PrivateClusters","type":"Microsoft.Features/providers/features","name":"Microsoft.RedHatOpenShift/PrivateClusters"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/PrivateClusters","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/PrivateClusters"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AROPrivateClusters","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AROPrivateClusters"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/MSvDedicatedHost","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/MSvDedicatedHost"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Capacity/features/QuotaAPI","type":"Microsoft.Features/providers/features","name":"Microsoft.Capacity/QuotaAPI"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Capacity/features/QuotaBetaTest","type":"Microsoft.Features/providers/features","name":"Microsoft.Capacity/QuotaBetaTest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/GermanyNorth","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/GermanyNorth"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/IsHybridServicesTestSubscription","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/IsHybridServicesTestSubscription"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/BlockCustomerManagedKey","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/BlockCustomerManagedKey"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/AllowLinkedNotificationsToHiddenRP","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/AllowLinkedNotificationsToHiddenRP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/NorwayWest","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/NorwayWest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.EventGrid/features/PartnerOperations","type":"Microsoft.Features/providers/features","name":"Microsoft.EventGrid/PartnerOperations"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Blockchain/features/WCUSParticipation","type":"Microsoft.Features/providers/features","name":"Microsoft.Blockchain/WCUSParticipation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/EnableComputeOnlyUpdates","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/EnableComputeOnlyUpdates"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/StaticSitesEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/StaticSitesEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kubernetes/features/ppeAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Kubernetes/ppeAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AAD-V2","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AAD-V2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMySQL/features/privateip","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMySQL/privateip"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforPostgreSQL/features/privateip","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforPostgreSQL/privateip"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMariaDB/features/privateip","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMariaDB/privateip"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ServiceFabric/features/managedClustersTestRegionPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ServiceFabric/managedClustersTestRegionPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DigitalTwins/features/EarlyAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DigitalTwins/EarlyAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SyncBookmark","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SyncBookmark"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/DCSizes","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/DCSizes"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/XLargeDisk","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/XLargeDisk"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/DV3Sizes","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/DV3Sizes"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQLG3","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQLG3"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQLG4","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQLG4"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQLG5","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQLG5"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQLG6","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQLG6"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQLGL","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQLGL"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQLDC","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQLDC"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQLDW","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQLDW"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQLGZ","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQLGZ"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQLGM","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQLGM"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQLACC","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQLACC"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SQL","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SQL"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/DDAGen5","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/DDAGen5"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/ASeriesInternal","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/ASeriesInternal"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Dv2Nested","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Dv2Nested"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Dv2Internal","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Dv2Internal"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.VnfManager/features/allowmecvendor","type":"Microsoft.Features/providers/features","name":"microsoft.VnfManager/allowmecvendor"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.VnfManager/features/allowmecvnf","type":"Microsoft.Features/providers/features","name":"microsoft.VnfManager/allowmecvnf"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.TimeSeriesInsights/features/Staging","type":"Microsoft.Features/providers/features","name":"Microsoft.TimeSeriesInsights/Staging"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKSNetworkModePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKSNetworkModePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMySQL/features/ossazureactivedirectoryadmin","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMySQL/ossazureactivedirectoryadmin"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DevSpaces/features/Helm3Preview","type":"Microsoft.Features/providers/features","name":"Microsoft.DevSpaces/Helm3Preview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/TEST","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/TEST"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/TEST2","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/TEST2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RedHatOpenShift/features/INT-APROVED","type":"Microsoft.Features/providers/features","name":"Microsoft.RedHatOpenShift/INT-APROVED"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/SpotPoolPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/SpotPoolPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RedHatOpenshift/features/INT-APPROVED","type":"Microsoft.Features/providers/features","name":"Microsoft.RedHatOpenshift/INT-APPROVED"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AzureData/features/azurearcprivatepreview","type":"Microsoft.Features/providers/features","name":"Microsoft.AzureData/azurearcprivatepreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-NewAPIVersion","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-NewAPIVersion"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataBox/features/HongKongBoxAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataBox/HongKongBoxAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataBox/features/IndiaBoxAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataBox/IndiaBoxAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.vmwarecloudsimple/features/new-region-test-client","type":"Microsoft.Features/providers/features","name":"microsoft.vmwarecloudsimple/new-region-test-client"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/EnablePrivateLink","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/EnablePrivateLink"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/MPAWorm","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/MPAWorm"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/AllowMoveDatabase","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/AllowMoveDatabase"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.network/features/EnableRnmCallback","type":"Microsoft.Features/providers/features","name":"Microsoft.network/EnableRnmCallback"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/PartitionedDns","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/PartitionedDns"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.SQL/features/multiaz-gp-preview","type":"Microsoft.Features/providers/features","name":"Microsoft.SQL/multiaz-gp-preview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFBackupOperator","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFBackupOperator"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFTierChange","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFTierChange"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFFlexPool","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFFlexPool"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFSnapshotPolicy","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFSnapshotPolicy"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NotificationHubs/features/germanyWestCentral","type":"Microsoft.Features/providers/features","name":"Microsoft.NotificationHubs/germanyWestCentral"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Insights/features/MetricAPI","type":"Microsoft.Features/providers/features","name":"Microsoft.Insights/MetricAPI"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerInstance/features/vnetLocationCheckBypass","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerInstance/vnetLocationCheckBypass"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ARM.AFEC/features/multiaz-gp-preview","type":"Microsoft.Features/providers/features","name":"Microsoft.ARM.AFEC/multiaz-gp-preview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerRegistry/features/TasksPrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerRegistry/TasksPrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/UseCustomizedUbuntuPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/UseCustomizedUbuntuPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databricks/features/DevFedRAMP","type":"Microsoft.Features/providers/features","name":"Microsoft.Databricks/DevFedRAMP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databricks/features/StagingFedRAMP","type":"Microsoft.Features/providers/features","name":"Microsoft.Databricks/StagingFedRAMP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databricks/features/ProdFedRAMP","type":"Microsoft.Features/providers/features","name":"Microsoft.Databricks/ProdFedRAMP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.vnfmanager/features/allowRegisteredSubscriptions","type":"Microsoft.Features/providers/features","name":"microsoft.vnfmanager/allowRegisteredSubscriptions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Providerhub/features/FeaturePutApi","type":"Microsoft.Features/providers/features","name":"Microsoft.Providerhub/FeaturePutApi"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Mv2SmallSizeSeries","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Mv2SmallSizeSeries"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AnmPRFeature","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AnmPRFeature"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/VMOrchestratorMultiFD","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/VMOrchestratorMultiFD"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataBoxEdge/features/DBEBvtAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataBoxEdge/DBEBvtAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DevSpaces/features/internalOnly","type":"Microsoft.Features/providers/features","name":"Microsoft.DevSpaces/internalOnly"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/OSANewUnderlayTesting","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/OSANewUnderlayTesting"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/InGuestHotPatchVMPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/InGuestHotPatchVMPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowApplicationGatewayV1AndV2InSameSubnet","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowApplicationGatewayV1AndV2InSameSubnet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/HnsSnapshot","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/HnsSnapshot"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.StorSimple/features/ShowBannerForDeviceUpdate","type":"Microsoft.Features/providers/features","name":"Microsoft.StorSimple/ShowBannerForDeviceUpdate"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ResourceHealth/features/EnableKustoClustersRhc","type":"Microsoft.Features/providers/features","name":"Microsoft.ResourceHealth/EnableKustoClustersRhc"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DigitalTwins/features/PrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.DigitalTwins/PrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DigitalTwins/features/Endpoints","type":"Microsoft.Features/providers/features","name":"Microsoft.DigitalTwins/Endpoints"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAzureNetworkManager","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAzureNetworkManager"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DigitalTwins/features/PPE","type":"Microsoft.Features/providers/features","name":"Microsoft.DigitalTwins/PPE"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForMySQL/features/ossdenypublicendpointaccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForMySQL/ossdenypublicendpointaccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForPostgreSQL/features/ossdenypublicendpointaccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForPostgreSQL/ossdenypublicendpointaccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/preproduction","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/preproduction"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAppGwPublicAndPrivateIpOnSamePort","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAppGwPublicAndPrivateIpOnSamePort"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAllocateVMValidationOptimizations","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAllocateVMValidationOptimizations"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRoutingToTestNfvrpInstance1","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRoutingToTestNfvrpInstance1"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRoutingToTestNfvrpInstance2","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRoutingToTestNfvrpInstance2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRoutingToTestNfvrpInstance3","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRoutingToTestNfvrpInstance3"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRoutingToTestNfvrpInstance4","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRoutingToTestNfvrpInstance4"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataBox/features/DataBoxExportAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataBox/DataBoxExportAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/UseComputeSubscriptionO365","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/UseComputeSubscriptionO365"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RedHatOpenShift/features/InProgress","type":"Microsoft.Features/providers/features","name":"Microsoft.RedHatOpenShift/InProgress"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/NoReserveActivateInColocation","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/NoReserveActivateInColocation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ServicesHub/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.ServicesHub/betaAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/NodeImageUpgradePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/NodeImageUpgradePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.KeyVault/features/MHSM_HighCapacitySKU","type":"Microsoft.Features/providers/features","name":"Microsoft.KeyVault/MHSM_HighCapacitySKU"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForMariaDB/features/ossdenypublicendpointaccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForMariaDB/ossdenypublicendpointaccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/ListOfPinnedFabricClusters","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/ListOfPinnedFabricClusters"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.compute/features/NPSSizes","type":"Microsoft.Features/providers/features","name":"microsoft.compute/NPSSizes"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AISupercomputer/features/internalEngineering","type":"Microsoft.Features/providers/features","name":"Microsoft.AISupercomputer/internalEngineering"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RedHatOpenShift/features/SaveAROTestConfig","type":"Microsoft.Features/providers/features","name":"Microsoft.RedHatOpenShift/SaveAROTestConfig"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/USSTAGESCParticipation","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/USSTAGESCParticipation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/UseComputeSubscriptionDM","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/UseComputeSubscriptionDM"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/UseComputeSubscriptionEngine","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/UseComputeSubscriptionEngine"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/UseComputeSubscriptionCM","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/UseComputeSubscriptionCM"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/UseStorageSubscriptionDM","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/UseStorageSubscriptionDM"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/UseStorageSubscriptionCM","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/UseStorageSubscriptionCM"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/UseStorageSubscriptionEngine","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/UseStorageSubscriptionEngine"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/TestDFInProduction","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/TestDFInProduction"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.IndustryDataLifecycle/features/Microsoft.AIDLS.Service","type":"Microsoft.Features/providers/features","name":"Microsoft.IndustryDataLifecycle/Microsoft.AIDLS.Service"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RedHatOpenShift/features/aropreview","type":"Microsoft.Features/providers/features","name":"Microsoft.RedHatOpenShift/aropreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNsgAndRouteTableOnBMDelegatedSubnet","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNsgAndRouteTableOnBMDelegatedSubnet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowFirewallPremium","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowFirewallPremium"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ChangeAnalysis/features/NotificationsPrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ChangeAnalysis/NotificationsPrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-IngressApplicationGatewayAddon","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-IngressApplicationGatewayAddon"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/Gen2VMPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/Gen2VMPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/DisableDeploymentGrooming","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/DisableDeploymentGrooming"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/BastionFeaturesEnableKerberos","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/BastionFeaturesEnableKerberos"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Synapse/features/SparkCatalogInSAS","type":"Microsoft.Features/providers/features","name":"Microsoft.Synapse/SparkCatalogInSAS"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.KeyVault/features/RbacAuthorizationPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.KeyVault/RbacAuthorizationPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Wandisco.Fusion/features/LiveDataMigrator","type":"Microsoft.Features/providers/features","name":"Wandisco.Fusion/LiveDataMigrator"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Wandisco.Fusion/features/LiveDataPlane","type":"Microsoft.Features/providers/features","name":"Wandisco.Fusion/LiveDataPlane"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Wandisco.Fusion/features/LiveDataPlatform","type":"Microsoft.Features/providers/features","name":"Wandisco.Fusion/LiveDataPlatform"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Sql/features/AllowRequireInfrastructureEncryption","type":"Microsoft.Features/providers/features","name":"Microsoft.Sql/AllowRequireInfrastructureEncryption"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ChangeAnalysis/features/ResourceChangesPrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ChangeAnalysis/ResourceChangesPrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/TrustedVMBackfillEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/TrustedVMBackfillEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Logic/features/EnableApiConnectionKeys","type":"Microsoft.Features/providers/features","name":"Microsoft.Logic/EnableApiConnectionKeys"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/MaxSurgePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/MaxSurgePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/AZ_germanywestcentral","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/AZ_germanywestcentral"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AAD/features/testAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.AAD/testAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/OpenShiftSupportGate","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/OpenShiftSupportGate"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowBringYourOwnIpAddressForThirdParties","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowBringYourOwnIpAddressForThirdParties"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowVipswap","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowVipswap"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/EnableAzureRBACPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/EnableAzureRBACPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.securitygraph/features/IsgAccess","type":"Microsoft.Features/providers/features","name":"microsoft.securitygraph/IsgAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/ProximityPlacementGroupPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/ProximityPlacementGroupPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowSubscriptionLoadBalancerCaching","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowSubscriptionLoadBalancerCaching"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.hybridnetwork/features/allowVnfVendor","type":"Microsoft.Features/providers/features","name":"microsoft.hybridnetwork/allowVnfVendor"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.hybridnetwork/features/allowVnfCustomer","type":"Microsoft.Features/providers/features","name":"microsoft.hybridnetwork/allowVnfCustomer"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.HybridNetwork/features/HybridNetworkRPaaSRegistration","type":"Microsoft.Features/providers/features","name":"microsoft.HybridNetwork/HybridNetworkRPaaSRegistration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Notebooks/features/AzureNBDevTestTraffic","type":"Microsoft.Features/providers/features","name":"Microsoft.Notebooks/AzureNBDevTestTraffic"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/InGuestAutoPatchSubscriptionPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/InGuestAutoPatchSubscriptionPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForPostgreSQL/features/orcastls","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForPostgreSQL/orcastls"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForMySQL/features/orcastls","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForMySQL/orcastls"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForMariaDB/features/orcastls","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForMariaDB/orcastls"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/EnableEncryptionAtHostPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/EnableEncryptionAtHostPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/EnableAzureDiskFileCSIDriver","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/EnableAzureDiskFileCSIDriver"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DigitalTwins/features/PPE-NEU","type":"Microsoft.Features/providers/features","name":"Microsoft.DigitalTwins/PPE-NEU"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/JediBetaTest","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/JediBetaTest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMariaDB/features/largeStorage","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMariaDB/largeStorage"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/SQLInVMPresenceVisibility","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/SQLInVMPresenceVisibility"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/useContainerd","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/useContainerd"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/ContainerRuntime","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/ContainerRuntime"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/JediBetaTestAntares","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/JediBetaTestAntares"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/GPUDedicatedVHDPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/GPUDedicatedVHDPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/westus2mockedge","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/westus2mockedge"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-OMSAppMonitoring","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-OMSAppMonitoring"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.PowerBI/features/DailyPrivateLinkServicesForPowerBI","type":"Microsoft.Features/providers/features","name":"Microsoft.PowerBI/DailyPrivateLinkServicesForPowerBI"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataBoxEdge/features/ResourceMoveAllowed","type":"Microsoft.Features/providers/features","name":"Microsoft.DataBoxEdge/ResourceMoveAllowed"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/CopyV2","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/CopyV2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/MabAfecTestEv2","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/MabAfecTestEv2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Authorization/features/PolicyExemptionPrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Authorization/PolicyExemptionPrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ApiManagement/features/dummyfeature","type":"Microsoft.Features/providers/features","name":"Microsoft.ApiManagement/dummyfeature"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowSTOnBMDelegatedSubnet","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowSTOnBMDelegatedSubnet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/UserAssignedIdentityPreviewInternalTest","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/UserAssignedIdentityPreviewInternalTest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.KubernetesConfiguration/features/AKS-GitOps-FeatureFlag","type":"Microsoft.Features/providers/features","name":"Microsoft.KubernetesConfiguration/AKS-GitOps-FeatureFlag"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/EnableUltraSSD","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/EnableUltraSSD"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowMoreASPerLBfWithoutVMSS","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowMoreASPerLBfWithoutVMSS"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AutomaticRepairsWithConfigurableRepairActions","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AutomaticRepairsWithConfigurableRepairActions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/EV2TestAFECFlag","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/EV2TestAFECFlag"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/UseCustomizedContainerRuntime","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/UseCustomizedContainerRuntime"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowWorkloadTypeOnBM","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowWorkloadTypeOnBM"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.cdn/features/EnablePrivateLink","type":"Microsoft.Features/providers/features","name":"Microsoft.cdn/EnablePrivateLink"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/AZ_brazilsouth","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/AZ_brazilsouth"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SystemPriorityCopy","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SystemPriorityCopy"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Swiftlet/features/AllowValidationRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Swiftlet/AllowValidationRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/UserAssignedIdentityPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/UserAssignedIdentityPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Codespaces/features/CanaryUSEC","type":"Microsoft.Features/providers/features","name":"Microsoft.Codespaces/CanaryUSEC"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resiliency/features/PreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Resiliency/PreviewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.IntelligentITDigitalTwin/features/AccessControl","type":"Microsoft.Features/providers/features","name":"Microsoft.IntelligentITDigitalTwin/AccessControl"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNetappInfraOnBM","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNetappInfraOnBM"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.migrate/features/TestFeatureEV2","type":"Microsoft.Features/providers/features","name":"microsoft.migrate/TestFeatureEV2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFDoubleEncryption","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFDoubleEncryption"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AutomaticExtensionUpgradePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AutomaticExtensionUpgradePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SIGPhaseScaleOutCopies","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SIGPhaseScaleOutCopies"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SIGSharing","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SIGSharing"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-GitOps","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-GitOps"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/NewRegions","type":"Microsoft.Features/providers/features","name":"microsoft.insights/NewRegions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/FastPathEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/FastPathEnabled"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.migrate/features/TestFeatureEV2Migrate","type":"Microsoft.Features/providers/features","name":"microsoft.migrate/TestFeatureEV2Migrate"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Automation/features/PrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Automation/PrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/ForwardAzGatewayTags","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/ForwardAzGatewayTags"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databox/features/DataBoxExportHeavyAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Databox/DataBoxExportHeavyAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.GuestConfiguration/features/GCEV2TestFeature001","type":"Microsoft.Features/providers/features","name":"Microsoft.GuestConfiguration/GCEV2TestFeature001"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/DsmsSecrets","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/DsmsSecrets"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ServiceFabric/features/ManagedClustersPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ServiceFabric/ManagedClustersPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/EastUS2EUAPMockEdge","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/EastUS2EUAPMockEdge"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/QueryPacks","type":"Microsoft.Features/providers/features","name":"microsoft.insights/QueryPacks"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.KubernetesConfiguration/features/Extensions","type":"Microsoft.Features/providers/features","name":"Microsoft.KubernetesConfiguration/Extensions"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/EnableEphemeralOSDiskPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/EnableEphemeralOSDiskPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/EnableDscpConfiguration","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/EnableDscpConfiguration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DocumentDB/features/pitr-public-preview","type":"Microsoft.Features/providers/features","name":"Microsoft.DocumentDB/pitr-public-preview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/USSTAGEEParticipation","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/USSTAGEEParticipation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DeviceUpdate/features/AzureDeviceUpdateInt","type":"Microsoft.Features/providers/features","name":"Microsoft.DeviceUpdate/AzureDeviceUpdateInt"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DeviceUpdate/features/AzureDeviceUpdatePPE","type":"Microsoft.Features/providers/features","name":"Microsoft.DeviceUpdate/AzureDeviceUpdatePPE"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DeviceUpdate/features/AzureDeviceUpdateCanary","type":"Microsoft.Features/providers/features","name":"Microsoft.DeviceUpdate/AzureDeviceUpdateCanary"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/HnsAppendBlob","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/HnsAppendBlob"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/FixedMaintenanceWindow","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/FixedMaintenanceWindow"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPrivateEndpointNSG","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPrivateEndpointNSG"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ExtendedLocation/features/CustomLocations-pp","type":"Microsoft.Features/providers/features","name":"Microsoft.ExtendedLocation/CustomLocations-pp"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ExtendedLocation/features/CustomLocations-ppauto","type":"Microsoft.Features/providers/features","name":"Microsoft.ExtendedLocation/CustomLocations-ppauto"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ServiceFabric/features/spotPriorityServiceFabric","type":"Microsoft.Features/providers/features","name":"Microsoft.ServiceFabric/spotPriorityServiceFabric"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFSMBEncryption","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFSMBEncryption"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFSMBCAShare","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFSMBCAShare"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DigitalTwins/features/EarlyAccessGA","type":"Microsoft.Features/providers/features","name":"Microsoft.DigitalTwins/EarlyAccessGA"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Capacity/features/CentrallyManagedLicenses","type":"Microsoft.Features/providers/features","name":"Microsoft.Capacity/CentrallyManagedLicenses"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.GuestConfiguration/features/GCEV2TestFeature002","type":"Microsoft.Features/providers/features","name":"Microsoft.GuestConfiguration/GCEV2TestFeature002"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforPostgreSQL/features/ossrdbmsinfrastructureencryption","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforPostgreSQL/ossrdbmsinfrastructureencryption"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMySQL/features/ossrdbmsinfrastructureencryption","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMySQL/ossrdbmsinfrastructureencryption"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMySQL/features/ossrdbmsbyokga","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMySQL/ossrdbmsbyokga"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforPostgreSQL/features/ossrdbmsbyokga","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforPostgreSQL/ossrdbmsbyokga"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.HybridNetwork/features/Routing-CanaryCentralEUAP","type":"Microsoft.Features/providers/features","name":"Microsoft.HybridNetwork/Routing-CanaryCentralEUAP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databricks/features/SwitzerlandNorth","type":"Microsoft.Features/providers/features","name":"Microsoft.Databricks/SwitzerlandNorth"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataCollaboration/features/privatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.DataCollaboration/privatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.IndustryDataLifecycle/features/Microsoft.AIDLS.Services.WcusOnly","type":"Microsoft.Features/providers/features","name":"Microsoft.IndustryDataLifecycle/Microsoft.AIDLS.Services.WcusOnly"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.IndustryDataLifecycle/features/Microsoft.AIDLS.Services.NonWcus","type":"Microsoft.Features/providers/features","name":"Microsoft.IndustryDataLifecycle/Microsoft.AIDLS.Services.NonWcus"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForMariaDB/features/orcasconfignopdl","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForMariaDB/orcasconfignopdl"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFMultiOU","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFMultiOU"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFLdapoverTls","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFLdapoverTls"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFLdapExtendedGroups","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFLdapExtendedGroups"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/EnableEastUS2EUAP","type":"Microsoft.Features/providers/features","name":"microsoft.insights/EnableEastUS2EUAP"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/EnableJapanWest","type":"Microsoft.Features/providers/features","name":"microsoft.insights/EnableJapanWest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/EnableAustraliaCentral","type":"Microsoft.Features/providers/features","name":"microsoft.insights/EnableAustraliaCentral"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DeviceUpdate/features/PublicPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.DeviceUpdate/PublicPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Contoso/features/RPaaSBridge","type":"Microsoft.Features/providers/features","name":"Microsoft.Contoso/RPaaSBridge"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Cdn/features/EUAPRunnerRPV2","type":"Microsoft.Features/providers/features","name":"Microsoft.Cdn/EUAPRunnerRPV2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowStorageServiceEncryptionIdentity","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowStorageServiceEncryptionIdentity"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.SqlVirtualMachine/features/BulkRegistration","type":"Microsoft.Features/providers/features","name":"Microsoft.SqlVirtualMachine/BulkRegistration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.CustomerLockbox/features/CustomerLockboxFeature","type":"Microsoft.Features/providers/features","name":"Microsoft.CustomerLockbox/CustomerLockboxFeature"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/ReserveMacOnCreateNic","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/ReserveMacOnCreateNic"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowAttributeBasedAccessControl","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowAttributeBasedAccessControl"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFSharedAD","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFSharedAD"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.HybridCompute/features/UpdateCenter","type":"Microsoft.Features/providers/features","name":"Microsoft.HybridCompute/UpdateCenter"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/UseStorageSubscriptionKOps","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/UseStorageSubscriptionKOps"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/UseComputeSubscriptionKOps","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/UseComputeSubscriptionKOps"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/UseStorageSubscriptionSE","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/UseStorageSubscriptionSE"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Kusto/features/UseComputeSubscriptionSE","type":"Microsoft.Features/providers/features","name":"Microsoft.Kusto/UseComputeSubscriptionSE"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Chaos/features/PreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Chaos/PreviewAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Chaos/features/SquallTest","type":"Microsoft.Features/providers/features","name":"Microsoft.Chaos/SquallTest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/InGuestHotPatchVMPreviewRebootless","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/InGuestHotPatchVMPreviewRebootless"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForPostgresql/features/singleServerHA","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForPostgresql/singleServerHA"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForPostgresql/features/singleServerCMW","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForPostgresql/singleServerCMW"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForPostgresql/features/singleServerVnet","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForPostgresql/singleServerVnet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Cdn/features/PilotRunnerRPV2","type":"Microsoft.Features/providers/features","name":"Microsoft.Cdn/PilotRunnerRPV2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Cdn/features/RunnerRPV2","type":"Microsoft.Features/providers/features","name":"Microsoft.Cdn/RunnerRPV2"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Cdn/features/RunnerRPV1","type":"Microsoft.Features/providers/features","name":"Microsoft.Cdn/RunnerRPV1"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/RegionsInTesting","type":"Microsoft.Features/providers/features","name":"microsoft.insights/RegionsInTesting"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForPostgresql/features/citusComputeScaling","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForPostgresql/citusComputeScaling"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPreProvisionedVmReuseWithSingleNicAndAccelNet","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPreProvisionedVmReuseWithSingleNicAndAccelNet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DigitalTwins/features/EarlyVerify","type":"Microsoft.Features/providers/features","name":"Microsoft.DigitalTwins/EarlyVerify"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.SecurityInsights/features/IncidentsThrottlingTestFeature","type":"Microsoft.Features/providers/features","name":"Microsoft.SecurityInsights/IncidentsThrottlingTestFeature"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RedHatOpenShift/features/EnableSnapshots","type":"Microsoft.Features/providers/features","name":"Microsoft.RedHatOpenShift/EnableSnapshots"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForpostgresql/features/citusStorageScaling","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForpostgresql/citusStorageScaling"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/StartStopPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/StartStopPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AVS/features/nsxSimplifiedExperience","type":"Microsoft.Features/providers/features","name":"Microsoft.AVS/nsxSimplifiedExperience"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AppAssessment/features/migratePrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.AppAssessment/migratePrivatePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFAesEncryption","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFAesEncryption"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFLdapSigning","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFLdapSigning"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DeviceUpdate/features/AzureDeviceUpdatePerf","type":"Microsoft.Features/providers/features","name":"Microsoft.DeviceUpdate/AzureDeviceUpdatePerf"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databox/features/UACDataboxAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Databox/UACDataboxAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.dbformysql/features/singleServerCMW","type":"Microsoft.Features/providers/features","name":"Microsoft.dbformysql/singleServerCMW"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.dbformysql/features/singleServerVnet","type":"Microsoft.Features/providers/features","name":"Microsoft.dbformysql/singleServerVnet"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databox/features/BrazilSouthAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Databox/BrazilSouthAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databox/features/BRSDataboxAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Databox/BRSDataboxAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databox/features/BRSDiskAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Databox/BRSDiskAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databox/features/BRSHeavyAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Databox/BRSHeavyAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databox/features/UACHeavyAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Databox/UACHeavyAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databox/features/UACDiskAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Databox/UACDiskAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databox/features/UAECentralAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Databox/UAECentralAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databox/features/UKSouthAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Databox/UKSouthAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databox/features/UKSDataboxAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Databox/UKSDataboxAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databox/features/UKSDiskAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Databox/UKSDiskAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databox/features/UKSHeavyAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Databox/UKSHeavyAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databox/features/SZNHeavyAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Databox/SZNHeavyAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databox/features/SZNDiskAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Databox/SZNDiskAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databox/features/SZNDataboxAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Databox/SZNDataboxAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databox/features/SwitzerlandNorthAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Databox/SwitzerlandNorthAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFVolumeGroup","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFVolumeGroup"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforpostgresql/features/singleServerHelpRequest","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforpostgresql/singleServerHelpRequest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBforMysql/features/singleServerHelpRequest","type":"Microsoft.Features/providers/features","name":"Microsoft.DBforMysql/singleServerHelpRequest"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/LogicApps-2020-09-RegionsPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/LogicApps-2020-09-RegionsPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.ContainerService/features/MigrateToMSIClusterPreview","type":"Microsoft.Features/providers/features","name":"microsoft.ContainerService/MigrateToMSIClusterPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AVS/features/portalSiteToSiteVpn","type":"Microsoft.Features/providers/features","name":"Microsoft.AVS/portalSiteToSiteVpn"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AutomaticRepairsWithVMScaleSetsAtScale","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AutomaticRepairsWithVMScaleSetsAtScale"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DigitalTwins/features/MSIPrivateLinkEarlyAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DigitalTwins/MSIPrivateLinkEarlyAccess"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataBoxEdge/features/IsCloudManagementEnabledForSub","type":"Microsoft.Features/providers/features","name":"Microsoft.DataBoxEdge/IsCloudManagementEnabledForSub"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DigitalTwins/features/DenyList","type":"Microsoft.Features/providers/features","name":"Microsoft.DigitalTwins/DenyList"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.resources/features/InternalAzureEdgeZones","type":"Microsoft.Features/providers/features","name":"microsoft.resources/InternalAzureEdgeZones"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Bing/features/InternalTesting","type":"Microsoft.Features/providers/features","name":"Microsoft.Bing/InternalTesting"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AVS/features/portalSRMAddon","type":"Microsoft.Features/providers/features","name":"Microsoft.AVS/portalSRMAddon"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DevTestLab/features/DisableVirtualMachineQuota","type":"Microsoft.Features/providers/features","name":"Microsoft.DevTestLab/DisableVirtualMachineQuota"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DevTestLab/features/DisableLabVirtualMachineQuota","type":"Microsoft.Features/providers/features","name":"Microsoft.DevTestLab/DisableLabVirtualMachineQuota"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Communication/features/PhoneNumberInboundCallingAllowed","type":"Microsoft.Features/providers/features","name":"Microsoft.Communication/PhoneNumberInboundCallingAllowed"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Insights/features/EUAPParticipation","type":"Microsoft.Features/providers/features","name":"Microsoft.Insights/EUAPParticipation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.OpenLogisticsPlatform/features/WorkspacesOperations","type":"Microsoft.Features/providers/features","name":"Microsoft.OpenLogisticsPlatform/WorkspacesOperations"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFAzureKeyVaultEncryption","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFAzureKeyVaultEncryption"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/HnsOnMigration","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/HnsOnMigration"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AutoOSUpgradeSDPWithGalleryImage","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AutoOSUpgradeSDPWithGalleryImage"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForMySQL/features/singleServerHA","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForMySQL/singleServerHA"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.AzSM.NewDeployment.Spanning.OptOut","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.AzSM.NewDeployment.Spanning.OptOut"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.SignalRService/features/AllowCustomDomainCertificate","type":"Microsoft.Features/providers/features","name":"Microsoft.SignalRService/AllowCustomDomainCertificate"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.securityinsights/features/SatelliteClusterAustralia","type":"Microsoft.Features/providers/features","name":"microsoft.securityinsights/SatelliteClusterAustralia"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAppGwWafPolicyHigherLimits","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAppGwWafPolicyHigherLimits"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.operationalinsights/features/QueryPacks","type":"Microsoft.Features/providers/features","name":"microsoft.operationalinsights/QueryPacks"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/NoRollingUpgradeForSFAutoOSUpgrade","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/NoRollingUpgradeForSFAutoOSUpgrade"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/UseElasticPipelineOptimization","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/UseElasticPipelineOptimization"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.network/features/approveNRPFeature","type":"Microsoft.Features/providers/features","name":"microsoft.network/approveNRPFeature"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DeviceUpdate/features/AzureDeviceUpdateProd","type":"Microsoft.Features/providers/features","name":"Microsoft.DeviceUpdate/AzureDeviceUpdateProd"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AzureData/features/ArcDataRPaas","type":"Microsoft.Features/providers/features","name":"Microsoft.AzureData/ArcDataRPaas"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.ContainerService/features/AutoUpgradePreview","type":"Microsoft.Features/providers/features","name":"microsoft.ContainerService/AutoUpgradePreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.AzSM.NewDeployment.AzPE.OptOut","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.AzSM.NewDeployment.AzPE.OptOut"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Maintenance/features/SQLFixedMaintenanceWindowCanary","type":"Microsoft.Features/providers/features","name":"Microsoft.Maintenance/SQLFixedMaintenanceWindowCanary"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/SQLFixedMaintenanceWindowCanary","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/SQLFixedMaintenanceWindowCanary"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/EnableResourceLevelLocking","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/EnableResourceLevelLocking"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AVS/features/isVwanDeploy","type":"Microsoft.Features/providers/features","name":"Microsoft.AVS/isVwanDeploy"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.HybridNetwork/features/AllowVendorTestingRedirection","type":"Microsoft.Features/providers/features","name":"Microsoft.HybridNetwork/AllowVendorTestingRedirection"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AzureArcData/features/ArcDataRpaasDev","type":"Microsoft.Features/providers/features","name":"Microsoft.AzureArcData/ArcDataRpaasDev"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.ContainerService/features/PodSubnetPreview","type":"Microsoft.Features/providers/features","name":"microsoft.ContainerService/PodSubnetPreview"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AlertsManagement/features/rhartestinproduction","type":"Microsoft.Features/providers/features","name":"Microsoft.AlertsManagement/rhartestinproduction"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/Fabric.AzSM.NewDeployment.Spanning.OptIn","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/Fabric.AzSM.NewDeployment.Spanning.OptIn"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.operationalinsights/features/EnableQueryPacks","type":"Microsoft.Features/providers/features","name":"microsoft.operationalinsights/EnableQueryPacks"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/RestorePointsRetrieveSAS","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/RestorePointsRetrieveSAS"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DBForMySQL/features/flexibleServerReplica","type":"Microsoft.Features/providers/features","name":"Microsoft.DBForMySQL/flexibleServerReplica"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Automation/features/dsc","type":"Microsoft.Features/providers/features","name":"Microsoft.Automation/dsc"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.BatchAI/features/alphaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.BatchAI/alphaAccess"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AHUB","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AHUB"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AllowLowPriorityUnrestricted","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AllowLowPriorityUnrestricted"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AllowManagedDisksReplaceOSDisk","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AllowManagedDisksReplaceOSDisk"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AllowValidationRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AllowValidationRegions"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AllowPreReleaseRegions","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AllowPreReleaseRegions"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/armApiPreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/armApiPreviewAccess"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AutomaticOSUpgradeWithGalleryImage","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AutomaticOSUpgradeWithGalleryImage"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AutoOSUpgradePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AutoOSUpgradePreview"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AvailabilitySetPinning","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AvailabilitySetPinning"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AZAPInternalVMSKU","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AZAPInternalVMSKU"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AzAP","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AzAP"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.compute/features/hostspreview","type":"Microsoft.Features/providers/features","name":"microsoft.compute/hostspreview"},{"properties":{"state":"Unregistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/GalleryPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/GalleryPreview"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/IncrementalSnapshots","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/IncrementalSnapshots"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/LocalDiffDiskPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/LocalDiffDiskPreview"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/LowPrioritySingleVM","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/LowPrioritySingleVM"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/MultipleAvailabilityZones","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/MultipleAvailabilityZones"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.compute/features/proximityplacementgroupspreview","type":"Microsoft.Features/providers/features","name":"microsoft.compute/proximityplacementgroupspreview"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/StandardSSD","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/StandardSSD"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/UltraSSD","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/UltraSSD"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/UltraSSDWithVMSS","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/UltraSSDWithVMSS"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/UnifiedDiskEncryption","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/UnifiedDiskEncryption"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.compute/features/UnifiedDiskEncryptionForVMs","type":"Microsoft.Features/providers/features","name":"microsoft.compute/UnifiedDiskEncryptionForVMs"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/UsePreprovisionedVMs","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/UsePreprovisionedVMs"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/UsePreprovisionedWindowsVMs","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/UsePreprovisionedWindowsVMs"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/UserImageSharing","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/UserImageSharing"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/ZRSImagesAndSnapshots","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/ZRSImagesAndSnapshots"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-UKWest","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-UKWest"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/AKS-WestUS2","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/AKS-WestUS2"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/ManagedCluster","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/ManagedCluster"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/MSIPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/MSIPreview"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataLakeAnalytics/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataLakeAnalytics/betaAccess"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataLakeStore/features/betaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataLakeStore/betaAccess"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ManagedIdentity/features/EnableSecurityGroups","type":"Microsoft.Features/providers/features","name":"Microsoft.ManagedIdentity/EnableSecurityGroups"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ManagedIdentity/features/explicitBeta","type":"Microsoft.Features/providers/features","name":"Microsoft.ManagedIdentity/explicitBeta"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ManagedNetwork/features/mncbetaAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.ManagedNetwork/mncbetaAccess"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ManagedServices/features/ManagedServicesPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ManagedServices/ManagedServicesPreview"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.NetApp/features/ANFGA","type":"Microsoft.Features/providers/features","name":"Microsoft.NetApp/ANFGA"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAcceleratedNetworkingFeature","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAcceleratedNetworkingFeature"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAcceleratedNetworkingForLinux","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAcceleratedNetworkingForLinux"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowAccessRuleExtendedProperties","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowAccessRuleExtendedProperties"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowApplicationGatewayEnableFIPS","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowApplicationGatewayEnableFIPS"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowApplicationSecurityGroups","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowApplicationSecurityGroups"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowBringYourOwnPublicIpAddress","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowBringYourOwnPublicIpAddress"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowCortexAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowCortexAccess"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowCortexExpressRouteGateway","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowCortexExpressRouteGateway"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowCortexSecurity","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowCortexSecurity"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowDisableBgpRoutePropagation","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowDisableBgpRoutePropagation"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowILBAllPortsRule","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowILBAllPortsRule"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowInterfaceEndpoints","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowInterfaceEndpoints"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowIpGroups","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowIpGroups"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowIpTags","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowIpTags"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowIPv6CAOnStandardLB","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowIPv6CAOnStandardLB"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowIpv6Networking","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowIpv6Networking"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowIPv6StdILB","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowIPv6StdILB"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowIPv6VirtualNetwork","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowIPv6VirtualNetwork"},{"properties":{"state":"Unregistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowLBPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowLBPreview"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowLoadBalancingOnSecondaryIpConfigs","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowLoadBalancingOnSecondaryIpConfigs"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowMultipleIpConfigurationsPerNic","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowMultipleIpConfigurationsPerNic"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNetworkWatcher","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNetworkWatcher"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNetworkWatcherConnectivityCheck","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNetworkWatcherConnectivityCheck"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowP2SCortexAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowP2SCortexAccess"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPrivateEndpoints","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPrivateEndpoints"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPrivateLinkServices","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPrivateLinkServices"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRegionalGatewayManagerForBrooklyn","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRegionalGatewayManagerForBrooklyn"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRegionalGatewayManagerForExpressRoute","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRegionalGatewayManagerForExpressRoute"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowRouteTables","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowRouteTables"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowSecureVnets","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowSecureVnets"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowServiceTunneling","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowServiceTunneling"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowVmssHealthProbe","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowVmssHealthProbe"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowVnetPeering","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowVnetPeering"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowVnetPrivateAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowVnetPrivateAccess"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowVnetServiceEndpoints","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowVnetServiceEndpoints"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/SkipPseudoVipGeneration","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/SkipPseudoVipGeneration"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Peering/features/AllowDirectPeering","type":"Microsoft.Features/providers/features","name":"Microsoft.Peering/AllowDirectPeering"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Peering/features/AllowExchangePeering","type":"Microsoft.Features/providers/features","name":"Microsoft.Peering/AllowExchangePeering"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Peering/features/AllowPeeringService","type":"Microsoft.Features/providers/features","name":"Microsoft.Peering/AllowPeeringService"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.RecoveryServices/features/ResourceGraphSyncEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.RecoveryServices/ResourceGraphSyncEnabled"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/AvailabilityZones","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/AvailabilityZones"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/EUAPParticipation","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/EUAPParticipation"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.SignalRService/features/betaaccess","type":"Microsoft.Features/providers/features","name":"Microsoft.SignalRService/betaaccess"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.solutions/features/ApplianceEastUS2EUAP","type":"Microsoft.Features/providers/features","name":"microsoft.solutions/ApplianceEastUS2EUAP"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowNetworkAcls","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowNetworkAcls"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VirtualMachineImages/features/VirtualMachineTemplatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.VirtualMachineImages/VirtualMachineTemplatePreview"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/CentralUSRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/CentralUSRegionEnabled"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/EastAsiaRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/EastAsiaRegionEnabled"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/EastUSRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/EastUSRegionEnabled"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/JapanWestRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/JapanWestRegionEnabled"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/WestUS2RegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/WestUS2RegionEnabled"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Web/features/WestUSRegionEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.Web/WestUSRegionEnabled"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Xrm/features/uxdevelopment","type":"Microsoft.Features/providers/features","name":"Microsoft.Xrm/uxdevelopment"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/EncryptionAtRestWithCustomerKey","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/EncryptionAtRestWithCustomerKey"},{"properties":{"state":"Unregistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowObjectReplication","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowObjectReplication"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/Changefeed","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/Changefeed"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowAccountEncryptionKeyForQueues","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowAccountEncryptionKeyForQueues"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowAccountEncryptionKeyForTables","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowAccountEncryptionKeyForTables"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerRegistry/features/PrivatePreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerRegistry/PrivatePreview"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/PodSecurityPolicyPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/PodSecurityPolicyPreview"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/WindowsPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.ContainerService/WindowsPreview"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AzureVirtualMachineSerialConsole","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AzureVirtualMachineSerialConsole"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AZBalancing","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AZBalancing"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/BatchGetTenantInformantionRequests","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/BatchGetTenantInformantionRequests"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.StorageCache/features/generalAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.StorageCache/generalAccess"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/RestoreBlobRanges","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/RestoreBlobRanges"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowNfsFileShares","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowNfsFileShares"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowApplicationGatewayV2WildcardListener","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowApplicationGatewayV2WildcardListener"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowApplicationGatewayV2UrlRewrite","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowApplicationGatewayV2UrlRewrite"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataBox/features/TipAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataBox/TipAccess"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataBox/features/MockHWISService","type":"Microsoft.Features/providers/features","name":"Microsoft.DataBox/MockHWISService"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataBox/features/MockGdcoAndUps","type":"Microsoft.Features/providers/features","name":"Microsoft.DataBox/MockGdcoAndUps"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataBox/features/wcusAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataBox/wcusAccess"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.DataBox/features/HeavyCreateAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.DataBox/HeavyCreateAccess"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SharedDisksForPremium","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SharedDisksForPremium"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SharedDisks","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SharedDisks"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/AIMonEnvironment","type":"Microsoft.Features/providers/features","name":"microsoft.insights/AIMonEnvironment"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/AIWorkspacePreview","type":"Microsoft.Features/providers/features","name":"microsoft.insights/AIWorkspacePreview"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.OperationalInsights/features/LAClusterApiEnabled","type":"Microsoft.Features/providers/features","name":"Microsoft.OperationalInsights/LAClusterApiEnabled"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/Versioning","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/Versioning"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SIGEncryption","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SIGEncryption"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.VirtualMachineImages/features/RelAPI","type":"Microsoft.Features/providers/features","name":"Microsoft.VirtualMachineImages/RelAPI"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databricks/features/EnableStorageByok","type":"Microsoft.Features/providers/features","name":"Microsoft.Databricks/EnableStorageByok"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databricks/features/DatabricksEUAPAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.Databricks/DatabricksEUAPAccess"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resouces/features/EUAPParticipation","type":"Microsoft.Features/providers/features","name":"Microsoft.Resouces/EUAPParticipation"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowRequireInfrastructureEncryption","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowRequireInfrastructureEncryption"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowPrepareNetworkPoliciesAction","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowPrepareNetworkPoliciesAction"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/BlobIndex","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/BlobIndex"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SharedVMExtension","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SharedVMExtension"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Databricks/features/DatabricksTestEnv","type":"Microsoft.Features/providers/features","name":"Microsoft.Databricks/DatabricksTestEnv"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowIpv6GlobalReach","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowIpv6GlobalReach"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowGRPeerConnection","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowGRPeerConnection"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNVAInVHub","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNVAInVHub"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowIpv6PrivatePeering","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowIpv6PrivatePeering"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowApplicationGatewayPrivateLink","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowApplicationGatewayPrivateLink"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.AzureStackHCI/features/hiddenPreviewAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.AzureStackHCI/hiddenPreviewAccess"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/EncryptionAtHost","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/EncryptionAtHost"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/BlobQuery","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/BlobQuery"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Storage/features/AllowSMBMultichannel","type":"Microsoft.Features/providers/features","name":"Microsoft.Storage/AllowSMBMultichannel"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Swiftlet/features/AllowSwiftRp","type":"Microsoft.Features/providers/features","name":"Microsoft.Swiftlet/AllowSwiftRp"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/DedicatedHostGroupAutomaticPlacement","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/DedicatedHostGroupAutomaticPlacement"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/AutomaticVMPlacementToDedicatedHostGroup","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/AutomaticVMPlacementToDedicatedHostGroup"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/VmssOnDedicatedHostGroup","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/VmssOnDedicatedHostGroup"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/InGuestAutoPatchVMPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/InGuestAutoPatchVMPreview"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.keyvault/features/deploymentverification","type":"Microsoft.Features/providers/features","name":"microsoft.keyvault/deploymentverification"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.keyvault/features/previewaccess","type":"Microsoft.Features/providers/features","name":"microsoft.keyvault/previewaccess"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.FootprintMonitoring/features/FirstPartyAccess","type":"Microsoft.Features/providers/features","name":"Microsoft.FootprintMonitoring/FirstPartyAccess"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.keyvault/features/mhsmpreviewaccess","type":"Microsoft.Features/providers/features","name":"microsoft.keyvault/mhsmpreviewaccess"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowDestinationServiceEndpoints","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowDestinationServiceEndpoints"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Insights/features/LogSearchAlertsV2","type":"Microsoft.Features/providers/features","name":"Microsoft.Insights/LogSearchAlertsV2"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.network/features/AllowGlobalLBPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.network/AllowGlobalLBPreview"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/InGuestPatchVMPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/InGuestPatchVMPreview"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/InferTier","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/InferTier"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/UltraDisk512E","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/UltraDisk512E"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/ScheduledQueryRulesAIMON","type":"Microsoft.Features/providers/features","name":"microsoft.insights/ScheduledQueryRulesAIMON"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.insights/features/ScheduledQueryRulesPROD","type":"Microsoft.Features/providers/features","name":"microsoft.insights/ScheduledQueryRulesPROD"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowNfvrpVirtualRouterSlice","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowNfvrpVirtualRouterSlice"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/microsoft.storage/features/ContainerSoftDelete","type":"Microsoft.Features/providers/features","name":"microsoft.storage/ContainerSoftDelete"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/TemplateSpecsPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/TemplateSpecsPreview"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.HardwareSecurityModules/features/AzureDedicatedHSM","type":"Microsoft.Features/providers/features","name":"Microsoft.HardwareSecurityModules/AzureDedicatedHSM"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Network/features/AllowBaremetalServers","type":"Microsoft.Features/providers/features","name":"Microsoft.Network/AllowBaremetalServers"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Compute/features/SIGTrustedVM","type":"Microsoft.Features/providers/features","name":"Microsoft.Compute/SIGTrustedVM"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.TerraformOSS/features/EnableTerraform","type":"Microsoft.Features/providers/features","name":"Microsoft.TerraformOSS/EnableTerraform"},{"properties":{"state":"Registered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/AzureEdgeZones","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/AzureEdgeZones"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.Resources/features/MicrosoftRRDCLab1","type":"Microsoft.Features/providers/features","name":"Microsoft.Resources/MicrosoftRRDCLab1"}]}' headers: cache-control: - no-cache content-length: - - '323700' + - '373764' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:57:06 GMT + - Thu, 29 Oct 2020 05:37:47 GMT expires: - '-1' pragma: @@ -52,24 +52,24 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.TerraformOSS/features?api-version=2015-12-01 response: body: - string: '{"value":[{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.TerraformOSS/features/EnableTerraform","type":"Microsoft.Features/providers/features","name":"Microsoft.TerraformOSS/EnableTerraform"},{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.TerraformOSS/features/EnableTerraformWithWhitelistedTenant","type":"Microsoft.Features/providers/features","name":"Microsoft.TerraformOSS/EnableTerraformWithWhitelistedTenant"},{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.TerraformOSS/features/EnableTerraformPreview","type":"Microsoft.Features/providers/features","name":"Microsoft.TerraformOSS/EnableTerraformPreview"}]}' + string: '{"value":[{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.TerraformOSS/features/EnableTerraform","type":"Microsoft.Features/providers/features","name":"Microsoft.TerraformOSS/EnableTerraform"}]}' headers: cache-control: - no-cache content-length: - - '907' + - '287' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:57:07 GMT + - Thu, 29 Oct 2020 05:37:47 GMT expires: - '-1' pragma: @@ -95,24 +95,24 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.TerraformOSS/features/EnableTerraform?api-version=2015-12-01 response: body: - string: '{"properties":{"state":"NotRegistered"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.TerraformOSS/features/EnableTerraform","type":"Microsoft.Features/providers/features","name":"Microsoft.TerraformOSS/EnableTerraform"}' + string: '{"properties":{"state":"Pending"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/providers/Microsoft.TerraformOSS/features/EnableTerraform","type":"Microsoft.Features/providers/features","name":"Microsoft.TerraformOSS/EnableTerraform"}' headers: cache-control: - no-cache content-length: - - '281' + - '275' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:57:08 GMT + - Thu, 29 Oct 2020 05:37:48 GMT expires: - '-1' pragma: @@ -140,8 +140,8 @@ interactions: Content-Length: - '0' User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: POST @@ -157,7 +157,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:57:11 GMT + - Thu, 29 Oct 2020 05:37:49 GMT expires: - '-1' pragma: @@ -171,7 +171,7 @@ interactions: x-content-type-options: - nosniff x-ms-ratelimit-remaining-subscription-writes: - - '1197' + - '1199' status: code: 200 message: OK diff --git a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource_links.test_links.yaml b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource_links.test_links.yaml index ed4e8262fe93..fa686f6f511e 100644 --- a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource_links.test_links.yaml +++ b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource_links.test_links.yaml @@ -13,8 +13,8 @@ interactions: Content-Type: - application/json; charset=utf-8 User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: PUT @@ -33,7 +33,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:57:26 GMT + - Thu, 29 Oct 2020 05:38:00 GMT expires: - '-1' pragma: @@ -50,15 +50,15 @@ interactions: x-content-type-options: - nosniff x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/PutVM3Min;238,Microsoft.Compute/PutVM30Min;1196 + - Microsoft.Compute/PutVM3Min;237,Microsoft.Compute/PutVM30Min;1196 x-ms-ratelimit-remaining-subscription-writes: - - '1199' + - '1197' status: code: 200 message: OK - request: - body: 'b''b\''{"properties": {"targetId": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_links_test_links7650e8a/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a", - "notes": "Testing links"}}\''''' + body: 'b''{"properties": {"targetId": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_links_test_links7650e8a/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a", + "notes": "Testing links"}}''' headers: Accept: - application/json @@ -71,8 +71,8 @@ interactions: Content-Type: - application/json; charset=utf-8 User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: PUT @@ -89,7 +89,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:57:27 GMT + - Thu, 29 Oct 2020 05:38:01 GMT expires: - '-1' pragma: @@ -99,7 +99,7 @@ interactions: x-content-type-options: - nosniff x-ms-ratelimit-remaining-subscription-writes: - - '1197' + - '1199' status: code: 201 message: Created @@ -113,8 +113,8 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET @@ -131,7 +131,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:57:38 GMT + - Thu, 29 Oct 2020 05:38:11 GMT expires: - '-1' pragma: @@ -157,8 +157,8 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET @@ -175,7 +175,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:57:38 GMT + - Thu, 29 Oct 2020 05:38:11 GMT expires: - '-1' pragma: @@ -201,8 +201,8 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET @@ -219,7 +219,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:57:38 GMT + - Thu, 29 Oct 2020 05:38:11 GMT expires: - '-1' pragma: @@ -245,8 +245,8 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET @@ -263,7 +263,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:57:38 GMT + - Thu, 29 Oct 2020 05:38:11 GMT expires: - '-1' pragma: @@ -291,8 +291,8 @@ interactions: Content-Length: - '0' User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: DELETE @@ -306,7 +306,7 @@ interactions: content-length: - '0' date: - - Wed, 01 Jul 2020 00:57:38 GMT + - Thu, 29 Oct 2020 05:38:11 GMT expires: - '-1' pragma: @@ -316,7 +316,7 @@ interactions: x-content-type-options: - nosniff x-ms-ratelimit-remaining-subscription-deletes: - - '14997' + - '14999' status: code: 200 message: OK diff --git a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource_locks.test_locks.yaml b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource_locks.test_locks.yaml index 7e6490268578..1c540a455f8e 100644 --- a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource_locks.test_locks.yaml +++ b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource_locks.test_locks.yaml @@ -13,8 +13,8 @@ interactions: Content-Type: - application/json; charset=utf-8 User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: PUT @@ -30,7 +30,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:57:48 GMT + - Thu, 29 Oct 2020 05:38:19 GMT expires: - '-1' pragma: @@ -40,7 +40,7 @@ interactions: x-content-type-options: - nosniff x-ms-ratelimit-remaining-subscription-writes: - - '1197' + - '1196' status: code: 201 message: Created @@ -54,8 +54,8 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET @@ -71,7 +71,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:57:48 GMT + - Thu, 29 Oct 2020 05:38:19 GMT expires: - '-1' pragma: @@ -99,8 +99,8 @@ interactions: Content-Length: - '0' User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: DELETE @@ -114,7 +114,7 @@ interactions: content-length: - '0' date: - - Wed, 01 Jul 2020 00:57:48 GMT + - Thu, 29 Oct 2020 05:38:19 GMT expires: - '-1' pragma: @@ -124,7 +124,7 @@ interactions: x-content-type-options: - nosniff x-ms-ratelimit-remaining-subscription-deletes: - - '14998' + - '14997' status: code: 200 message: OK diff --git a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource_policy.test_policy_definition.yaml b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource_policy.test_policy_definition.yaml index 1df5b1af29dc..5e14bc08ba59 100644 --- a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource_policy.test_policy_definition.yaml +++ b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource_policy.test_policy_definition.yaml @@ -16,8 +16,8 @@ interactions: Content-Type: - application/json; charset=utf-8 User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: PUT @@ -25,7 +25,7 @@ interactions: response: body: string: '{"properties":{"policyType":"Custom","mode":"Indexed","description":"Don''t - create a VM anywhere","metadata":{"createdBy":"123743cc-88ef-49ee-920e-13958fe5697d","createdOn":"2020-07-01T00:57:59.6846659Z","updatedBy":null,"updatedOn":null},"policyRule":{"if":{"allOf":[{"source":"action","equals":"Microsoft.Compute/virtualMachines/write"},{"field":"location","in":["eastus","eastus2","centralus"]}]},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0","type":"Microsoft.Authorization/policyDefinitions","name":"pypolicyea4a13f0"}' + create a VM anywhere","metadata":{"createdBy":"78977f10-9b8e-42f0-a820-b66e67fe9f1a","createdOn":"2020-10-29T05:38:28.2771569Z","updatedBy":null,"updatedOn":null},"policyRule":{"if":{"allOf":[{"source":"action","equals":"Microsoft.Compute/virtualMachines/write"},{"field":"location","in":["eastus","eastus2","centralus"]}]},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0","type":"Microsoft.Authorization/policyDefinitions","name":"pypolicyea4a13f0"}' headers: cache-control: - no-cache @@ -34,7 +34,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:57:59 GMT + - Thu, 29 Oct 2020 05:38:28 GMT expires: - '-1' pragma: @@ -58,8 +58,8 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET @@ -67,7 +67,7 @@ interactions: response: body: string: '{"properties":{"policyType":"Custom","mode":"Indexed","description":"Don''t - create a VM anywhere","metadata":{"createdBy":"123743cc-88ef-49ee-920e-13958fe5697d","createdOn":"2020-07-01T00:57:59.6846659Z","updatedBy":null,"updatedOn":null},"policyRule":{"if":{"allOf":[{"source":"action","equals":"Microsoft.Compute/virtualMachines/write"},{"field":"location","in":["eastus","eastus2","centralus"]}]},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0","type":"Microsoft.Authorization/policyDefinitions","name":"pypolicyea4a13f0"}' + create a VM anywhere","metadata":{"createdBy":"78977f10-9b8e-42f0-a820-b66e67fe9f1a","createdOn":"2020-10-29T05:38:28.2771569Z","updatedBy":null,"updatedOn":null},"policyRule":{"if":{"allOf":[{"source":"action","equals":"Microsoft.Compute/virtualMachines/write"},{"field":"location","in":["eastus","eastus2","centralus"]}]},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0","type":"Microsoft.Authorization/policyDefinitions","name":"pypolicyea4a13f0"}' headers: cache-control: - no-cache @@ -76,7 +76,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:57:59 GMT + - Thu, 29 Oct 2020 05:38:28 GMT expires: - '-1' pragma: @@ -102,8450 +102,31560 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions?api-version=2019-09-01 response: body: - string: '{"value":[{"properties":{"displayName":"Microsoft Managed Control 1599 - - Developer Configuration Management | Software / Firmware Integrity Verification","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1599"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0004bbf0-5099-4179-869e-e9ffe5fb0945","type":"Microsoft.Authorization/policyDefinitions","name":"0004bbf0-5099-4179-869e-e9ffe5fb0945"},{"properties":{"displayName":"Audit - virtual machines without disaster recovery configured","policyType":"BuiltIn","mode":"All","description":"Audit - virtual machines which do not have disaster recovery configured. To learn - more about disaster recovery, visit https://aka.ms/asr-doc.","metadata":{"version":"1.0.0","category":"Compute"},"parameters":{},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.Resources/links","existenceCondition":{"field":"name","like":"ASR-Protect-*"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56","type":"Microsoft.Authorization/policyDefinitions","name":"0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56"},{"properties":{"displayName":"[Deprecated]: - Audit Web Sockets state for a Function App","policyType":"BuiltIn","mode":"All","description":"The - Web Sockets protocol is vulnerable to different types of security threats. - Use of Web Sockets within an Function app must be carefully reviewed.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"functionapp"},{"field":"kind","equals":"functionapp,linux"},{"field":"kind","equals":"functionapp,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"DisableWebSockets","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/001802d1-4969-4c82-a700-c29c6c6f9bbd","type":"Microsoft.Authorization/policyDefinitions","name":"001802d1-4969-4c82-a700-c29c6c6f9bbd"},{"properties":{"displayName":"Microsoft - Managed Control 1375 - Incident Response Assistance | Automation Support For - Availability Of Information / Support","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1375"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/00379355-8932-4b52-b63a-3bc6daf3451a","type":"Microsoft.Authorization/policyDefinitions","name":"00379355-8932-4b52-b63a-3bc6daf3451a"},{"properties":{"displayName":"Microsoft - Managed Control 1605 - Developer Security Testing And Evaluation | Static - Code Analysis","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1605"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0062eb8b-dc75-4718-8ea5-9bb4a9606655","type":"Microsoft.Authorization/policyDefinitions","name":"0062eb8b-dc75-4718-8ea5-9bb4a9606655"},{"properties":{"displayName":"Azure - Backup should be enabled for Virtual Machines","policyType":"BuiltIn","mode":"Indexed","description":"This - policy helps audit if Azure Backup service is enabled for all Virtual machines. - Azure Backup is a cost-effective, one-click backup solution simplifies data - recovery and is easier to enable than other cloud backup services.","metadata":{"version":"1.0.0","category":"Backup"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachines"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.RecoveryServices/backupprotecteditems"}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","type":"Microsoft.Authorization/policyDefinitions","name":"013e242c-8828-4970-87b3-ab247555486d"},{"properties":{"displayName":"Microsoft - Managed Control 1142 - Security Assessment And Authorization Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1142"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/01524fa8-4555-48ce-ba5f-c3b8dcef5147","type":"Microsoft.Authorization/policyDefinitions","name":"01524fa8-4555-48ce-ba5f-c3b8dcef5147"},{"properties":{"displayName":"Microsoft - Managed Control 1099 - Security Training Records","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Awareness and Training control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1099"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/01910bab-8639-4bd0-84ef-cc53b24d79ba","type":"Microsoft.Authorization/policyDefinitions","name":"01910bab-8639-4bd0-84ef-cc53b24d79ba"},{"properties":{"displayName":"Microsoft - Managed Control 1285 - Telecommunications Services | Provider Contingency - Plan","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1285"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/01f7726b-db54-45c2-bcb5-9bd7a43796ee","type":"Microsoft.Authorization/policyDefinitions","name":"01f7726b-db54-45c2-bcb5-9bd7a43796ee"},{"properties":{"displayName":"Microsoft - Managed Control 1709 - Security Function Verification","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1709"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/025992d6-7fee-4137-9bbf-2ffc39c0686c","type":"Microsoft.Authorization/policyDefinitions","name":"025992d6-7fee-4137-9bbf-2ffc39c0686c"},{"properties":{"displayName":"Microsoft - Managed Control 1052 - Session Lock","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1052"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/027cae1c-ec3e-4492-9036-4168d540c42a","type":"Microsoft.Authorization/policyDefinitions","name":"027cae1c-ec3e-4492-9036-4168d540c42a"},{"properties":{"displayName":"Microsoft - Managed Control 1034 - Least Privilege","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1034"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/02a5ed00-6d2e-4e97-9a98-46c32c057329","type":"Microsoft.Authorization/policyDefinitions","name":"02a5ed00-6d2e-4e97-9a98-46c32c057329"},{"properties":{"displayName":"Show - audit results from Windows VMs on which the remote host connection status - does not match the specified one","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines on which the remote host connection status - does not match the specified one. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsRemoteConnection","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/02a84be7-c304-421f-9bb7-5d2c26af54ad","type":"Microsoft.Authorization/policyDefinitions","name":"02a84be7-c304-421f-9bb7-5d2c26af54ad"},{"properties":{"displayName":"Microsoft - Managed Control 1623 - Boundary Protection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1623"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/02ce1b22-412a-4528-8630-c42146f917ed","type":"Microsoft.Authorization/policyDefinitions","name":"02ce1b22-412a-4528-8630-c42146f917ed"},{"properties":{"displayName":"Microsoft - Managed Control 1515 - Personnel Termination","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1515"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/02dd141a-a2b2-49a7-bcbd-ca31142f6211","type":"Microsoft.Authorization/policyDefinitions","name":"02dd141a-a2b2-49a7-bcbd-ca31142f6211"},{"properties":{"displayName":"Microsoft - Managed Control 1327 - Authenticator Management | Password-Based Authentication","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1327"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/03188d8f-1ae5-4fe1-974d-2d7d32ef937d","type":"Microsoft.Authorization/policyDefinitions","name":"03188d8f-1ae5-4fe1-974d-2d7d32ef937d"},{"properties":{"displayName":"Microsoft - Managed Control 1229 - Information System Component Inventory | No Duplicate - Accounting Of Components","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1229"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/03752212-103c-4ab8-a306-7e813022ca9d","type":"Microsoft.Authorization/policyDefinitions","name":"03752212-103c-4ab8-a306-7e813022ca9d"},{"properties":{"displayName":"Cognitive - Services accounts should restrict network access","policyType":"BuiltIn","mode":"Indexed","description":"Network - access to Cognitive Services accounts should be restricted. Configure network - rules so only applications from allowed networks can access the Cognitive - Services account. To allow connections from specific internet or on-premises - clients, access can be granted to traffic from specific Azure virtual networks - or to public internet IP address ranges.","metadata":{"version":"1.0.0","category":"Cognitive - Services"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.CognitiveServices/accounts"},{"field":"Microsoft.CognitiveServices/accounts/networkAcls.defaultAction","notEquals":"Deny"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","type":"Microsoft.Authorization/policyDefinitions","name":"037eea7a-bd0a-46c5-9a66-03aea78705d3"},{"properties":{"displayName":"Microsoft - Managed Control 1123 - Audit Review, Analysis, And Reporting | Audit Level - Adjustment","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1123"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/03996055-37a4-45a5-8b70-3f1caa45f87d","type":"Microsoft.Authorization/policyDefinitions","name":"03996055-37a4-45a5-8b70-3f1caa45f87d"},{"properties":{"displayName":"Microsoft - Managed Control 1474 - Emergency Power | Long-Term Alternate Power Supply - - Minimal Operational Capability","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1474"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/03ad326e-d7a1-44b1-9a76-e17492efc9e4","type":"Microsoft.Authorization/policyDefinitions","name":"03ad326e-d7a1-44b1-9a76-e17492efc9e4"},{"properties":{"displayName":"Microsoft - Managed Control 1227 - Information System Component Inventory | Automated - Unauthorized Component Detection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1227"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/03b78f5e-4877-4303-b0f4-eb6583f25768","type":"Microsoft.Authorization/policyDefinitions","name":"03b78f5e-4877-4303-b0f4-eb6583f25768"},{"properties":{"displayName":"Microsoft - Managed Control 1361 - Incident Handling","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1361"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/03ed3be1-7276-4452-9a5d-e4168565ac67","type":"Microsoft.Authorization/policyDefinitions","name":"03ed3be1-7276-4452-9a5d-e4168565ac67"},{"properties":{"displayName":"Microsoft - Managed Control 1594 - Developer Configuration Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1594"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/042ba2a1-8bb8-45f4-b080-c78cf62b90e9","type":"Microsoft.Authorization/policyDefinitions","name":"042ba2a1-8bb8-45f4-b080-c78cf62b90e9"},{"properties":{"displayName":"Azure - Cosmos DB allowed locations","policyType":"BuiltIn","mode":"Indexed","description":"This - policy enables you to restrict the locations your organization can specify - when deploying Azure Cosmos DB resources. Use to enforce your geo-compliance - requirements.","metadata":{"version":"1.0.0","category":"Cosmos DB"},"parameters":{"listOfAllowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying Azure Cosmos DB resources.","strongType":"location"}},"policyEffect":{"type":"String","metadata":{"displayName":"Policy - Effect","description":"The desired effect of the policy."},"allowedValues":["deny","audit","disabled"],"defaultValue":"deny"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"count":{"field":"Microsoft.DocumentDB/databaseAccounts/Locations[*]","where":{"value":"[replace(toLower(first(field(''Microsoft.DocumentDB/databaseAccounts/Locations[*].locationName''))), - '' '', '''')]","in":"[parameters(''listOfAllowedLocations'')]"}},"notEquals":"[length(field(''Microsoft.DocumentDB/databaseAccounts/Locations[*]''))]"}]},"then":{"effect":"[parameters(''policyEffect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0473574d-2d43-4217-aefe-941fcdf7e684","type":"Microsoft.Authorization/policyDefinitions","name":"0473574d-2d43-4217-aefe-941fcdf7e684"},{"properties":{"displayName":"SQL - Managed Instance TDE protector should be encrypted with your own key","policyType":"BuiltIn","mode":"Indexed","description":"Transparent - Data Encryption (TDE) with your own key support provides increased transparency - and control over the TDE Protector, increased security with an HSM-backed - external service, and promotion of separation of duties.","metadata":{"version":"1.0.1","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/managedInstances"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/managedInstances/encryptionProtector","name":"current","existenceCondition":{"allOf":[{"field":"Microsoft.Sql/managedInstances/encryptionProtector/serverKeyType","equals":"AzureKeyVault"},{"field":"Microsoft.Sql/managedInstances/encryptionProtector/uri","notEquals":""},{"field":"Microsoft.Sql/managedInstances/encryptionProtector/uri","exists":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","type":"Microsoft.Authorization/policyDefinitions","name":"048248b0-55cd-46da-b1ff-39efd52db260"},{"properties":{"displayName":"[Preview]: - Network traffic data collection agent should be installed on Linux virtual - machines","policyType":"BuiltIn","mode":"Indexed","description":"Security - Center uses the Microsoft Dependency agent to collect network traffic data - from your Azure virtual machines to enable advanced network protection features - such as traffic visualization on the network map, network hardening recommendations - and specific network threats.","metadata":{"version":"1.0.1-preview","category":"Monitoring","preview":"true"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable Dependency Agent for Linux VMs monitoring"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["14.04.0-LTS","14.04.1-LTS","14.04.5-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["16.04-LTS","16.04.0-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["18.04-LTS"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["12-SP2","12-SP3","12-SP4"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"DependencyAgentLinux"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","type":"Microsoft.Authorization/policyDefinitions","name":"04c4380f-3fae-46e8-96c9-30193528f602"},{"properties":{"displayName":"Deploy - Diagnostic Settings for Service Bus to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Service Bus to stream to a regional Log Analytics - workspace when any Service Bus which is missing this diagnostic settings is - created or updated.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"},"defaultValue":"setbypolicy_logAnalytics"},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"],"defaultValue":"False"},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Log Analytics workspace - - True or False"},"allowedValues":["True","False"],"defaultValue":"True"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ServiceBus/namespaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.ServiceBus/namespaces/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"OperationalLogs","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/04d53d87-841c-4f23-8a5b-21564380b55e","type":"Microsoft.Authorization/policyDefinitions","name":"04d53d87-841c-4f23-8a5b-21564380b55e"},{"properties":{"displayName":"Microsoft - Managed Control 1572 - Acquisition Process","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1572"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/04f5fb00-80bb-48a9-a75b-4cb4d4c97c36","type":"Microsoft.Authorization/policyDefinitions","name":"04f5fb00-80bb-48a9-a75b-4cb4d4c97c36"},{"properties":{"displayName":"Deploy - Log Analytics agent for Linux VMs","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Log Analytics agent for Linux VMs if the VM Image (OS) is in the list defined - and the agent is not installed.","metadata":{"version":"1.0.1","category":"Monitoring"},"parameters":{"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"listOfImageIdToInclude":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Linux OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"},"defaultValue":[]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"12*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"14.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"16.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"18.04*LTS"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7.*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"OmsAgentForLinux"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"}},"variables":{"vmExtensionName":"MMAExtension","vmExtensionPublisher":"Microsoft.EnterpriseCloud.Monitoring","vmExtensionType":"OmsAgentForLinux","vmExtensionTypeHandlerVersion":"1.7"},"resources":[{"name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","apiVersion":"2018-06-01","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","typeHandlerVersion":"[variables(''vmExtensionTypeHandlerVersion'')]","autoUpgradeMinorVersion":true,"settings":{"workspaceId":"[reference(parameters(''logAnalytics''), - ''2015-03-20'').customerId]","stopOnMultipleConnections":"true"},"protectedSettings":{"workspaceKey":"[listKeys(parameters(''logAnalytics''), - ''2015-03-20'').primarySharedKey]"}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/053d3325-282c-4e5c-b944-24faffd30d77","type":"Microsoft.Authorization/policyDefinitions","name":"053d3325-282c-4e5c-b944-24faffd30d77"},{"properties":{"displayName":"Microsoft - Managed Control 1331 - Authenticator Management | Password-Based Authentication","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1331"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/05460fe2-301f-4ed1-8174-d62c8bb92ff4","type":"Microsoft.Authorization/policyDefinitions","name":"05460fe2-301f-4ed1-8174-d62c8bb92ff4"},{"properties":{"displayName":"Private - endpoint should be enabled for PostgreSQL servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits PostgreSQL servers not configured to use a private endpoint. - For more details, visit https://aka.ms/pgprivatelink.","metadata":{"version":"1.0.1","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforPostgreSQL/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforPostgreSQL/servers/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DBforPostgreSQL/servers/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","type":"Microsoft.Authorization/policyDefinitions","name":"0564d078-92f5-4f97-8398-b9f58a51f70b"},{"properties":{"displayName":"Vulnerability - Assessment settings for SQL server should contain an email address to receive - scan reports","policyType":"BuiltIn","mode":"Indexed","description":"Ensure - that an email address is provided for the ''Send scan reports to'' field in - the Vulnerability Assessment settings. This email address receives scan result - summary after a periodic scan runs on SQL servers.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/vulnerabilityAssessments","name":"default","existenceCondition":{"field":"Microsoft.Sql/servers/vulnerabilityAssessments/default.recurringScans.emails[*]","notEquals":""}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/057d6cfe-9c4f-4a6d-bc60-14420ea1f1a9","type":"Microsoft.Authorization/policyDefinitions","name":"057d6cfe-9c4f-4a6d-bc60-14420ea1f1a9"},{"properties":{"displayName":"Diagnostic - logs in Azure Data Lake Store should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of diagnostic logs. This enables you to recreate activity trails - to use for investigation purposes; when a security incident occurs or when - your network is compromised","metadata":{"version":"3.0.0","category":"Data - Lake"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataLakeStore/accounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","type":"Microsoft.Authorization/policyDefinitions","name":"057ef27e-665e-4328-8ea3-04b3122bd9fb"},{"properties":{"displayName":"Microsoft - Managed Control 1132 - Protection Of Audit Information | Audit Backup On Separate - Physical Systems / Components","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1132"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/05938e10-cdbd-4a54-9b2b-1cbcfc141ad0","type":"Microsoft.Authorization/policyDefinitions","name":"05938e10-cdbd-4a54-9b2b-1cbcfc141ad0"},{"properties":{"displayName":"Microsoft - Managed Control 1223 - Information System Component Inventory","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1223"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/05a1bb01-ad5a-49c1-aad3-b0c893b2ec3a","type":"Microsoft.Authorization/policyDefinitions","name":"05a1bb01-ad5a-49c1-aad3-b0c893b2ec3a"},{"properties":{"displayName":"Microsoft - Managed Control 1640 - Transmission Confidentiality And Integrity","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1640"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/05a289ce-6a20-4b75-a0f3-dc8601b6acd0","type":"Microsoft.Authorization/policyDefinitions","name":"05a289ce-6a20-4b75-a0f3-dc8601b6acd0"},{"properties":{"displayName":"Microsoft - Managed Control 1420 - Maintenance Personnel","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1420"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/05ae08cc-a282-413b-90c7-21a2c60b8404","type":"Microsoft.Authorization/policyDefinitions","name":"05ae08cc-a282-413b-90c7-21a2c60b8404"},{"properties":{"displayName":"Microsoft - Managed Control 1658 - Secure Name / Address Resolution Service (Recursive - Or Caching Resolver)","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1658"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/063b540e-4bdc-4e7a-a569-3a42ddf22098","type":"Microsoft.Authorization/policyDefinitions","name":"063b540e-4bdc-4e7a-a569-3a42ddf22098"},{"properties":{"displayName":"Microsoft - Managed Control 1688 - Information System Monitoring","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1688"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/063c3f09-e0f0-4587-8fd5-f4276fae675f","type":"Microsoft.Authorization/policyDefinitions","name":"063c3f09-e0f0-4587-8fd5-f4276fae675f"},{"properties":{"displayName":"Microsoft - Managed Control 1332 - Authenticator Management | Password-Based Authentication","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1332"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/068260be-a5e6-4b0a-a430-cd27071c226a","type":"Microsoft.Authorization/policyDefinitions","name":"068260be-a5e6-4b0a-a430-cd27071c226a"},{"properties":{"displayName":"Microsoft - Managed Control 1455 - Physical Access Control","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1455"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/068a88d4-e520-434e-baf0-9005a8164e6a","type":"Microsoft.Authorization/policyDefinitions","name":"068a88d4-e520-434e-baf0-9005a8164e6a"},{"properties":{"displayName":"[Deprecated]: - Audit SQL DB Level Audit Setting","policyType":"BuiltIn","mode":"All","description":"Audit - DB level audit setting for SQL databases","metadata":{"version":"1.0.0-deprecated","category":"SQL","deprecated":true},"parameters":{"setting":{"type":"String","metadata":{"displayName":"[Deprecated]: - Audit Setting"},"allowedValues":["enabled","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers/databases"},{"field":"name","notEquals":"master"}]},"then":{"effect":"AuditIfNotExists","details":{"type":"Microsoft.Sql/servers/databases/auditingSettings","name":"default","existenceCondition":{"allOf":[{"field":"Microsoft.Sql/auditingSettings.state","equals":"[parameters(''setting'')]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a12","type":"Microsoft.Authorization/policyDefinitions","name":"06a78e20-9358-41c9-923c-fb736d382a12"},{"properties":{"displayName":"Audit - VMs that do not use managed disks","policyType":"BuiltIn","mode":"All","description":"This - policy audits VMs that do not use managed disks","metadata":{"version":"1.0.0","category":"Compute"},"parameters":{},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/virtualMachines/osDisk.uri","exists":"True"}]},{"allOf":[{"field":"type","equals":"Microsoft.Compute/VirtualMachineScaleSets"},{"anyOf":[{"field":"Microsoft.Compute/VirtualMachineScaleSets/osDisk.vhdContainers","exists":"True"},{"field":"Microsoft.Compute/VirtualMachineScaleSets/osdisk.imageUrl","exists":"True"}]}]}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a4d","type":"Microsoft.Authorization/policyDefinitions","name":"06a78e20-9358-41c9-923c-fb736d382a4d"},{"properties":{"displayName":"Microsoft - Managed Control 1366 - Incident Handling | Information Correlation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1366"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/06c45c30-ae44-4f0f-82be-41331da911cc","type":"Microsoft.Authorization/policyDefinitions","name":"06c45c30-ae44-4f0f-82be-41331da911cc"},{"properties":{"displayName":"Public - network access should be disabled for Cognitive Services accounts","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Cognitive Services account in your environment with public - network access enabled. Public network access should be disabled so that only - connections from private endpoints are allowed.","metadata":{"version":"1.0.0","category":"Cognitive - Services"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.CognitiveServices/accounts"},{"field":"Microsoft.CognitiveServices/accounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","type":"Microsoft.Authorization/policyDefinitions","name":"0725b4dd-7e76-479c-a735-68e7ee23d5ca"},{"properties":{"displayName":"Microsoft - Managed Control 1633 - Boundary Protection | Route Traffic To Authenticated - Proxy Servers","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1633"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/07557aa0-e02f-4460-9a81-8ecd2fed601a","type":"Microsoft.Authorization/policyDefinitions","name":"07557aa0-e02f-4460-9a81-8ecd2fed601a"},{"properties":{"displayName":"CORS - should not allow every resource to access your Function Apps","policyType":"BuiltIn","mode":"Indexed","description":"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your Function - app. Allow only required domains to interact with your Function app.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","existenceCondition":{"field":"Microsoft.Web/sites/config/web.cors.allowedOrigins[*]","notEquals":"*"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","type":"Microsoft.Authorization/policyDefinitions","name":"0820b7b9-23aa-4725-a1ce-ae4558f718e5"},{"properties":{"displayName":"Deploy - Log Analytics agent for Windows VMs","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Log Analytics agent for Windows VMs if the VM Image (OS) is in the list defined - and the agent is not installed. The list of OS images will be updated over - time as support is updated.","metadata":{"version":"1.0.1","category":"Monitoring"},"parameters":{"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"listOfImageIdToInclude":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Windows OS to add to scope","description":"Example - values: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"},"defaultValue":[]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"MicrosoftMonitoringAgent"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"}},"variables":{"vmExtensionName":"MMAExtension","vmExtensionPublisher":"Microsoft.EnterpriseCloud.Monitoring","vmExtensionType":"MicrosoftMonitoringAgent","vmExtensionTypeHandlerVersion":"1.0"},"resources":[{"name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","apiVersion":"2018-06-01","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","typeHandlerVersion":"[variables(''vmExtensionTypeHandlerVersion'')]","autoUpgradeMinorVersion":true,"settings":{"workspaceId":"[reference(parameters(''logAnalytics''), - ''2015-03-20'').customerId]","stopOnMultipleConnections":"true"},"protectedSettings":{"workspaceKey":"[listKeys(parameters(''logAnalytics''), - ''2015-03-20'').primarySharedKey]"}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0868462e-646c-4fe3-9ced-a733534b6a2c","type":"Microsoft.Authorization/policyDefinitions","name":"0868462e-646c-4fe3-9ced-a733534b6a2c"},{"properties":{"displayName":"Microsoft - Managed Control 1583 - Information System Documentation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1583"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0882d488-8e80-4466-bc0f-0cd15b6cb66d","type":"Microsoft.Authorization/policyDefinitions","name":"0882d488-8e80-4466-bc0f-0cd15b6cb66d"},{"properties":{"displayName":"[Deprecated]: - Audit Web Applications that are not using latest supported PHP Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported PHP version for the latest security classes. Using older - classes and types can make your application vulnerable.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"},{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestPHP","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/08b17839-76c6-4015-90e0-33d9d54d219c","type":"Microsoft.Authorization/policyDefinitions","name":"08b17839-76c6-4015-90e0-33d9d54d219c"},{"properties":{"displayName":"Deploy - Diagnostic Settings for Search Services to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Search Services to stream to a regional Log Analytics - workspace when any Search Services which is missing this diagnostic settings - is created or updated.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"},"defaultValue":"setbypolicy_logAnalytics"},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"],"defaultValue":"False"},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Log Analytics workspace - - True or False"},"allowedValues":["True","False"],"defaultValue":"True"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Search/searchServices"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.Search/searchServices/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"OperationLogs","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/08ba64b8-738f-4918-9686-730d2ed79c7d","type":"Microsoft.Authorization/policyDefinitions","name":"08ba64b8-738f-4918-9686-730d2ed79c7d"},{"properties":{"displayName":"Adaptive - Network Hardening recommendations should be applied on internet facing virtual - machines","policyType":"BuiltIn","mode":"Indexed","description":"Azure Security - Center analyzes the traffic patterns of Internet facing virtual machines and - provides Network Security Group rule recommendations that reduce the potential - attack surface","metadata":{"version":"1.0.0","category":"Security Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachines"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"adaptiveNetworkHardenings","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","type":"Microsoft.Authorization/policyDefinitions","name":"08e6af2d-db70-460a-bfe9-d5bd474ba9d6"},{"properties":{"displayName":"There - should be more than one owner assigned to your subscription","policyType":"BuiltIn","mode":"All","description":"It - is recommended to designate more than one subscription owner in order to have - administrator access redundancy.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"DesignateMoreThanOneOwner","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","type":"Microsoft.Authorization/policyDefinitions","name":"09024ccc-0c5f-475e-9457-b7c0d9ed487b"},{"properties":{"displayName":"Microsoft - Managed Control 1159 - Security Authorization","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1159"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0925f098-7877-450b-8ba4-d1e55f2d8795","type":"Microsoft.Authorization/policyDefinitions","name":"0925f098-7877-450b-8ba4-d1e55f2d8795"},{"properties":{"displayName":"Disk - encryption should be applied on virtual machines","policyType":"BuiltIn","mode":"All","description":"VMs - without an enabled disk encryption will be monitored by Azure Security Center - as recommendations","metadata":{"version":"1.0.0","category":"Security Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachines"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"encryption","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","type":"Microsoft.Authorization/policyDefinitions","name":"0961003e-5a0a-4549-abde-af6a37f2724d"},{"properties":{"displayName":"Microsoft - Managed Control 1302 - Identification And Authentication (Org. Users) | Network - Access To Non-Privileged Accounts","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1302"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/09828c65-e323-422b-9774-9d5c646124da","type":"Microsoft.Authorization/policyDefinitions","name":"09828c65-e323-422b-9774-9d5c646124da"},{"properties":{"displayName":"Configure - backup on VMs of a location to an existing central Vault in the same location","policyType":"BuiltIn","mode":"Indexed","description":"This - policy configures Azure Backup protection on VMs in a given location to an - existing central vault in the same location. It applies to only those VMs - that are not already configured for backup. It is recommended that this policy - is assigned to not more than 200 VMs. If the policy is assigned for more than - 200 VMs, it can result in the backup getting triggered a few hours beyond - the defined schedule. This policy will be enhanced to support more VM images.","metadata":{"version":"1.0.0","category":"Backup"},"parameters":{"vaultLocation":{"type":"String","metadata":{"displayName":"Location - (Specify the location of the VMs that you want to protect)","description":"Specify - the location of the VMs that you want to protect. VMs should be backed up - to a vault in the same location.\nFor example - southeastasia","strongType":"location"}},"backupPolicyId":{"type":"String","metadata":{"displayName":"Backup - Policy (of type Azure VM from a vault in the location chosen above)","description":"Specify - the id of the Azure backup policy to configure backup of the virtual machines. - The selected Azure backup policy should be of type Azure virtual machine. - This policy needs to be in a vault that is present in the location chosen - above.\nFor example - /subscriptions//resourceGroups//providers/Microsoft.RecoveryServices/vaults//backupPolicies/","strongType":"Microsoft.RecoveryServices/vaults/backupPolicies"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["deployIfNotExists","auditIfNotExists","disabled"],"defaultValue":"deployIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"location","equals":"[parameters(''vaultLocation'')]"},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"12*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"14.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"16.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"18.04*LTS"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7.*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c","/providers/microsoft.authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b"],"type":"Microsoft.RecoveryServices/backupprotecteditems","deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"backupPolicyId":{"type":"String"},"fabricName":{"type":"String"},"protectionContainers":{"type":"String"},"protectedItems":{"type":"String"},"sourceResourceId":{"type":"String"}},"resources":[{"apiVersion":"2017-05-10","name":"[concat(''DeployProtection-'',uniqueString(parameters(''protectedItems'')))]","type":"Microsoft.Resources/deployments","resourceGroup":"[first(skip(split(parameters(''backupPolicyId''), - ''/''), 4))]","subscriptionId":"[first(skip(split(parameters(''backupPolicyId''), - ''/''), 2))]","properties":{"mode":"Incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"backupPolicyId":{"type":"String"},"fabricName":{"type":"String"},"protectionContainers":{"type":"String"},"protectedItems":{"type":"String"},"sourceResourceId":{"type":"String"}},"resources":[{"type":"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems","name":"[concat(first(skip(split(parameters(''backupPolicyId''), - ''/''), 8)), ''/'', parameters(''fabricName''), ''/'',parameters(''protectionContainers''), - ''/'', parameters(''protectedItems''))]","apiVersion":"2016-06-01","properties":{"protectedItemType":"Microsoft.Compute/virtualMachines","policyId":"[parameters(''backupPolicyId'')]","sourceResourceId":"[parameters(''sourceResourceId'')]"}}]},"parameters":{"backupPolicyId":{"value":"[parameters(''backupPolicyId'')]"},"fabricName":{"value":"[parameters(''fabricName'')]"},"protectionContainers":{"value":"[parameters(''protectionContainers'')]"},"protectedItems":{"value":"[parameters(''protectedItems'')]"},"sourceResourceId":{"value":"[parameters(''sourceResourceId'')]"}}}}]},"parameters":{"backupPolicyId":{"value":"[parameters(''backupPolicyId'')]"},"fabricName":{"value":"Azure"},"protectionContainers":{"value":"[concat(''iaasvmcontainer;iaasvmcontainerv2;'', - resourceGroup().name, '';'' ,field(''name''))]"},"protectedItems":{"value":"[concat(''vm;iaasvmcontainerv2;'', - resourceGroup().name, '';'' ,field(''name''))]"},"sourceResourceId":{"value":"[concat(''/subscriptions/'', - subscription().subscriptionId, ''/resourceGroups/'', resourceGroup().name, - ''/providers/Microsoft.Compute/virtualMachines/'',field(''name''))]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/09ce66bc-1220-4153-8104-e3f51c936913","type":"Microsoft.Authorization/policyDefinitions","name":"09ce66bc-1220-4153-8104-e3f51c936913"},{"properties":{"displayName":"Private - endpoint should be enabled for MariaDB servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits MariaDB servers not configured to use a private endpoint. For - more details, visit https://aka.ms/mariadbprivatelink.","metadata":{"version":"1.0.1","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforMariaDB/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforMariaDB/servers/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DBforMariaDB/servers/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","type":"Microsoft.Authorization/policyDefinitions","name":"0a1302fb-a631-4106-9753-f3d494733990"},{"properties":{"displayName":"[Preview]: - Kubernetes Management Policy add-on should be installed and enabled on your - clusters","policyType":"BuiltIn","mode":"Indexed","description":"Azure Kubernetes - Management Policy add-on extends Gatekeeper v3, an admission controller webhook - for Open Policy Agent (OPA), to apply at-scale enforcements and safeguards - on your clusters in a centralized, consistent manner.","metadata":{"version":"1.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"anyOf":[{"field":"Microsoft.ContainerService/managedClusters/addonProfiles.azurePolicy.enabled","exists":"false"},{"field":"Microsoft.ContainerService/managedClusters/addonProfiles.azurePolicy.enabled","equals":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","type":"Microsoft.Authorization/policyDefinitions","name":"0a15ec92-a229-4763-bb14-0ea34a568f8d"},{"properties":{"displayName":"Microsoft - Managed Control 1654 - Voice Over Internet Protocol","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1654"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0a2ee16e-ab1f-414a-800b-d1608835862b","type":"Microsoft.Authorization/policyDefinitions","name":"0a2ee16e-ab1f-414a-800b-d1608835862b"},{"properties":{"displayName":"Microsoft - Managed Control 1402 - Controlled Maintenance | Automated Maintenance Activities","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1402"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0a560d32-8075-4fec-9615-9f7c853f4ea9","type":"Microsoft.Authorization/policyDefinitions","name":"0a560d32-8075-4fec-9615-9f7c853f4ea9"},{"properties":{"displayName":"Microsoft - Managed Control 1428 - Media Access","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Media Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1428"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0a77fcc7-b8d8-451a-ab52-56197913c0c7","type":"Microsoft.Authorization/policyDefinitions","name":"0a77fcc7-b8d8-451a-ab52-56197913c0c7"},{"properties":{"displayName":"Audit - resource location matches resource group location","policyType":"BuiltIn","mode":"Indexed","description":"Audit - that the resource location matches its resource group location","metadata":{"version":"1.0.0","category":"General"},"policyRule":{"if":{"field":"location","notIn":["[resourcegroup().location]","global"]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0a914e76-4921-4c19-b460-a2d36003525a","type":"Microsoft.Authorization/policyDefinitions","name":"0a914e76-4921-4c19-b460-a2d36003525a"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''System Audit Policies - - Account Management''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''System Audit Policies - - Account Management''. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesAccountManagement","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SystemAuditPoliciesAccountManagement"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0a9991e6-21be-49f9-8916-a06d934bcf29","type":"Microsoft.Authorization/policyDefinitions","name":"0a9991e6-21be-49f9-8916-a06d934bcf29"},{"properties":{"displayName":"Microsoft - Managed Control 1044 - Unsuccessful Logon Attempts","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1044"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0abbac52-57cf-450d-8408-1208d0dd9e90","type":"Microsoft.Authorization/policyDefinitions","name":"0abbac52-57cf-450d-8408-1208d0dd9e90"},{"properties":{"displayName":"Microsoft - Managed Control 1253 - Contingency Plan | Resume Essential Missions / Business - Functions","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1253"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0afce0b3-dd9f-42bb-af28-1e4284ba8311","type":"Microsoft.Authorization/policyDefinitions","name":"0afce0b3-dd9f-42bb-af28-1e4284ba8311"},{"properties":{"displayName":"Email - notification to subscription owner for high severity alerts should be enabled","policyType":"BuiltIn","mode":"All","description":"Enable - emailing security alerts to the subscription owner, in order to have them - receive security alert emails from Microsoft. This ensures that they are aware - of any potential security issues and can mitigate the risk in a timely fashion","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/securityContacts","existenceCondition":{"field":"Microsoft.Security/securityContacts/alertsToAdmins","notEquals":"Off"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","type":"Microsoft.Authorization/policyDefinitions","name":"0b15565f-aa9e-48ba-8619-45960f2c314d"},{"properties":{"displayName":"Microsoft - Managed Control 1046 - Automatic Account Lock | Purge / Wipe Mobile Device","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1046"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0b1aa965-7502-41f9-92be-3e2fe7cc392a","type":"Microsoft.Authorization/policyDefinitions","name":"0b1aa965-7502-41f9-92be-3e2fe7cc392a"},{"properties":{"displayName":"Microsoft - Managed Control 1020 - Account Management | Role-Based Schemes","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1020"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0b291ee8-3140-4cad-beb7-568c077c78ce","type":"Microsoft.Authorization/policyDefinitions","name":"0b291ee8-3140-4cad-beb7-568c077c78ce"},{"properties":{"displayName":"Key - Vault objects should be recoverable","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits if key vault objects are not recoverable. Soft Delete feature - helps to effectively hold the resources for a given retention period (90 days) - even after a DELETE operation, while giving the appearance that the object - is deleted. When ''Purge protection'' is on, a vault or an object in deleted - state cannot be purged until the retention period of 90 days has passed. These - vaults and objects can still be recovered, assuring customers that the retention - policy will be followed.","metadata":{"version":"1.0.0","category":"Key Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/vaults"},{"anyOf":[{"field":"Microsoft.KeyVault/vaults/enableSoftDelete","exists":"false"},{"field":"Microsoft.KeyVault/vaults/enablePurgeProtection","exists":"false"},{"field":"Microsoft.KeyVault/vaults/enableSoftDelete","equals":"false"},{"field":"Microsoft.KeyVault/vaults/enablePurgeProtection","equals":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","type":"Microsoft.Authorization/policyDefinitions","name":"0b60c0b2-2dc2-4e1c-b5c9-abbed971de53"},{"properties":{"displayName":"Microsoft - Managed Control 1115 - Audit Review, Analysis, And Reporting","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1115"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0b653845-2ad9-4e09-a4f3-5a7c1d78353d","type":"Microsoft.Authorization/policyDefinitions","name":"0b653845-2ad9-4e09-a4f3-5a7c1d78353d"},{"properties":{"displayName":"Azure - Cosmos DB throughput should be limited","policyType":"BuiltIn","mode":"All","description":"This - policy enables you to restrict the maximum throughput your organization can - specify when creating Azure Cosmos DB databases and containers through the - resource provider. It blocks the creation of autoscale resources.","metadata":{"version":"1.0.0","category":"Cosmos - DB"},"parameters":{"throughputMax":{"type":"Integer","metadata":{"displayName":"Max - RUs","description":"The maximum throughput (RU/s) that can be assigned to - a container via the Resource Provider during create or update."}},"effect":{"type":"String","metadata":{"displayName":"Policy - Effect","description":"The desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"deny"}},"policyRule":{"if":{"allOf":[{"anyOf":[{"field":"type","like":"Microsoft.DocumentDB/databaseAccounts/*/throughputSettings"},{"field":"type","in":["Microsoft.DocumentDB/databaseAccounts/sqlDatabases","Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers","Microsoft.DocumentDB/databaseAccounts/mongodbDatabases","Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections","Microsoft.DocumentDB/databaseAccounts/gremlinDatabases","Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs","Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces","Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables","Microsoft.DocumentDB/databaseAccounts/tables"]}]},{"anyOf":[{"value":"[requestContext().apiVersion]","less":"2019-08-01"},{"value":"[if(equals(field(''Microsoft.DocumentDB/databaseAccounts/sqlDatabases/options.throughput''), - ''''), 0, int(field(''Microsoft.DocumentDB/databaseAccounts/sqlDatabases/options.throughput'')))]","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/options","containsKey":"ProvisionedThroughputSettings"},{"field":"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/throughputSettings/default.resource.throughput","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/throughputSettings/default.resource.provisionedThroughputSettings","exists":"true"},{"value":"[if(equals(field(''Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/options.throughput''), - ''''), 0, int(field(''Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/options.throughput'')))]","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/options","containsKey":"ProvisionedThroughputSettings"},{"field":"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/throughputSettings/default.resource.throughput","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/throughputSettings/default.resource.provisionedThroughputSettings","exists":"true"},{"value":"[if(equals(field(''Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/options.throughput''), - ''''), 0, int(field(''Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/options.throughput'')))]","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/options","containsKey":"ProvisionedThroughputSettings"},{"field":"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/throughputSettings/default.resource.throughput","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/throughputSettings/default.resource.provisionedThroughputSettings","exists":"true"},{"value":"[if(equals(field(''Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/options.throughput''), - ''''), 0, int(field(''Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/options.throughput'')))]","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/options","containsKey":"ProvisionedThroughputSettings"},{"field":"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/throughputSettings/default.resource.throughput","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/throughputSettings/default.resource.provisionedThroughputSettings","exists":"true"},{"value":"[if(equals(field(''Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/options.throughput''), - ''''), 0, int(field(''Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/options.throughput'')))]","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/options","containsKey":"ProvisionedThroughputSettings"},{"field":"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/throughputSettings/default.resource.throughput","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/throughputSettings/default.resource.provisionedThroughputSettings","exists":"true"},{"value":"[if(equals(field(''Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/options.throughput''), - ''''), 0, int(field(''Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/options.throughput'')))]","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/options","containsKey":"ProvisionedThroughputSettings"},{"field":"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/throughputSettings/default.resource.throughput","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/throughputSettings/default.resource.provisionedThroughputSettings","exists":"true"},{"value":"[if(equals(field(''Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/options.throughput''), - ''''), 0, int(field(''Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/options.throughput'')))]","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/options","containsKey":"ProvisionedThroughputSettings"},{"field":"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/throughputSettings/default.resource.throughput","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/throughputSettings/default.resource.provisionedThroughputSettings","exists":"true"},{"value":"[if(equals(field(''Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/options.throughput''), - ''''), 0, int(field(''Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/options.throughput'')))]","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/options","containsKey":"ProvisionedThroughputSettings"},{"field":"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/throughputSettings/default.resource.throughput","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/throughputSettings/default.resource.provisionedThroughputSettings","exists":"true"},{"value":"[if(equals(field(''Microsoft.DocumentDB/databaseAccounts/tables/options.throughput''), - ''''), 0, int(field(''Microsoft.DocumentDB/databaseAccounts/tables/options.throughput'')))]","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/tables/options","containsKey":"ProvisionedThroughputSettings"},{"field":"Microsoft.DocumentDB/databaseAccounts/tables/throughputSettings/default.resource.throughput","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/tables/throughputSettings/default.resource.provisionedThroughputSettings","exists":"true"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0b7ef78e-a035-4f23-b9bd-aff122a1b1cf","type":"Microsoft.Authorization/policyDefinitions","name":"0b7ef78e-a035-4f23-b9bd-aff122a1b1cf"},{"properties":{"displayName":"Microsoft - Managed Control 1239 - User-Installed Software","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1239"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0be51298-f643-4556-88af-d7db90794879","type":"Microsoft.Authorization/policyDefinitions","name":"0be51298-f643-4556-88af-d7db90794879"},{"properties":{"displayName":"Ensure - API app has ''Client Certificates (Incoming client certificates)'' set to - ''On''","policyType":"BuiltIn","mode":"Indexed","description":"Client certificates - allow for the app to request a certificate for incoming requests. Only clients - that have a valid certificate will be able to reach the app.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"},{"field":"Microsoft.Web/sites/clientCertEnabled","equals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","type":"Microsoft.Authorization/policyDefinitions","name":"0c192fe8-9cbb-4516-85b3-0ade8bd03886"},{"properties":{"displayName":"Microsoft - Managed Control 1496 - System Security Plan","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1496"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0ca96127-2f87-46ab-a4fc-0d2a786df1c8","type":"Microsoft.Authorization/policyDefinitions","name":"0ca96127-2f87-46ab-a4fc-0d2a786df1c8"},{"properties":{"displayName":"SQL - server TDE protector should be encrypted with your own key","policyType":"BuiltIn","mode":"Indexed","description":"Transparent - Data Encryption (TDE) with your own key support provides increased transparency - and control over the TDE Protector, increased security with an HSM-backed - external service, and promotion of separation of duties.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/encryptionProtector","name":"current","existenceCondition":{"allOf":[{"field":"Microsoft.Sql/servers/encryptionProtector/serverKeyType","equals":"AzureKeyVault"},{"field":"Microsoft.Sql/servers/encryptionProtector/uri","notEquals":""},{"field":"Microsoft.Sql/servers/encryptionProtector/uri","exists":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","type":"Microsoft.Authorization/policyDefinitions","name":"0d134df8-db83-46fb-ad72-fe0c9428c8dd"},{"properties":{"displayName":"Microsoft - Managed Control 1518 - Personnel Termination","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1518"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0d58f734-c052-40e9-8b2f-a1c2bff0b815","type":"Microsoft.Authorization/policyDefinitions","name":"0d58f734-c052-40e9-8b2f-a1c2bff0b815"},{"properties":{"displayName":"Microsoft - Managed Control 1713 - Software, Firmware, And Information Integrity | Integrity - Checks","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1713"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0d87c70b-5012-48e9-994b-e70dd4b8def0","type":"Microsoft.Authorization/policyDefinitions","name":"0d87c70b-5012-48e9-994b-e70dd4b8def0"},{"properties":{"displayName":"Microsoft - Managed Control 1466 - Visitor Access Records","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1466"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0d943a9c-a6f1-401f-a792-740cdb09c451","type":"Microsoft.Authorization/policyDefinitions","name":"0d943a9c-a6f1-401f-a792-740cdb09c451"},{"properties":{"displayName":"[Deprecated]: - Show audit results from Windows VMs on which Windows Defender Exploit Guard - is not enabled","policyType":"BuiltIn","mode":"All","description":"This policy - should only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines on which Windows Defender Exploit Guard is not enabled. For - more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsDefenderExploitGuard","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0d9b45ff-9ddd-43fc-bf59-fbd1c8423053","type":"Microsoft.Authorization/policyDefinitions","name":"0d9b45ff-9ddd-43fc-bf59-fbd1c8423053"},{"properties":{"displayName":"Managed - identity should be used in your Function App","policyType":"BuiltIn","mode":"Indexed","description":"Use - a managed identity for enhanced authentication security","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/managedServiceIdentityId","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","type":"Microsoft.Authorization/policyDefinitions","name":"0da106f2-4ca3-48e8-bc85-c638fe6aea8f"},{"properties":{"displayName":"Microsoft - Managed Control 1718 - Software, Firmware, And Information Integrity | Binary - Or Machine Executable Code","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1718"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0dced7ab-9ce5-4137-93aa-14c13e06ab17","type":"Microsoft.Authorization/policyDefinitions","name":"0dced7ab-9ce5-4137-93aa-14c13e06ab17"},{"properties":{"displayName":"[Preview]: - Authorized IP ranges should be defined on Kubernetes Services","policyType":"BuiltIn","mode":"All","description":"Restrict - access to the Kubernetes Service Management API by granting API access only - to IP addresses in specific ranges. It is recommended to limit access to authorized - IP ranges to ensure that only applications from allowed networks can access - the cluster.","metadata":{"version":"1.0.1-preview","category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.authorizedIPRanges","exists":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","type":"Microsoft.Authorization/policyDefinitions","name":"0e246bcf-5f6f-4f87-bc6f-775d4712c7ea"},{"properties":{"displayName":"Remote - debugging should be turned off for Function Apps","policyType":"BuiltIn","mode":"Indexed","description":"Remote - debugging requires inbound ports to be opened on function apps. Remote debugging - should be turned off.","metadata":{"version":"1.0.0","category":"App Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","existenceCondition":{"field":"Microsoft.Web/sites/config/web.remoteDebuggingEnabled","equals":"false"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","type":"Microsoft.Authorization/policyDefinitions","name":"0e60b895-3786-45da-8377-9c6b4b6ac5f9"},{"properties":{"displayName":"Advanced - threat protection should be enabled on Key Vault","policyType":"BuiltIn","mode":"All","description":"Advanced - threat protection standard tier should be enabled on Key Vault. This provides - an additional layer of protection of security intelligence by detecting unusual - and potentially harmful attempts to access or exploit key vault accounts.","metadata":{"version":"1.0.1","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/pricings","name":"KeyVaults","existenceScope":"subscription","existenceCondition":{"field":"Microsoft.Security/pricings/pricingTier","equals":"Standard"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","type":"Microsoft.Authorization/policyDefinitions","name":"0e6763cc-5078-4e64-889d-ff4d9a839047"},{"properties":{"displayName":"Geo-redundant - backup should be enabled for Azure Database for MariaDB","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Azure Database for MariaDB with geo-redundant backup not - enabled.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DBforMariaDB/servers"},{"field":"Microsoft.DBforMariaDB/servers/storageProfile.geoRedundantBackup","notEquals":"Enabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","type":"Microsoft.Authorization/policyDefinitions","name":"0ec47710-77ff-4a3d-9181-6aa50af424d0"},{"properties":{"displayName":"Deploy - prerequisites to enable Guest Configuration Policy on Windows VMs.","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration on Windows VMs. This is a prerequisite for Guest Configuration - Policy and must be assigned to the scope before using any Guest Configuration - policy. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol.","metadata":{"category":"Guest Configuration","version":"1.2.0","requiredProviders":["Microsoft.GuestConfiguration"]},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.Compute/virtualMachines/extensions","name":"AzurePolicyforWindows","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.GuestConfiguration"},{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"ConfigurationforWindows"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"resources":[{"apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0ecd903d-91e7-4726-83d3-a229d7f2e293","type":"Microsoft.Authorization/policyDefinitions","name":"0ecd903d-91e7-4726-83d3-a229d7f2e293"},{"properties":{"displayName":"Microsoft - Managed Control 1601 - Developer Security Testing And Evaluation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1601"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0ee79a0c-addf-4ce9-9b3c-d9576ed5e20e","type":"Microsoft.Authorization/policyDefinitions","name":"0ee79a0c-addf-4ce9-9b3c-d9576ed5e20e"},{"properties":{"displayName":"[Preview]: - Audit Azure Spring Cloud instances where distributed tracing is not enabled","policyType":"BuiltIn","mode":"Indexed","description":"Distributed - tracing tools in Azure Spring Cloud allow debugging and monitoring the complex - interconnections between microservices in an application. Distributed tracing - tools should be enabled and in a healthy state.","metadata":{"version":"1.0.0-preview","category":"App - Platform","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.AppPlatform/Spring"},{"anyOf":[{"field":"Microsoft.AppPlatform/Spring/trace.enabled","notEquals":"true"},{"field":"Microsoft.AppPlatform/Spring/trace.state","notEquals":"Succeeded"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0f2d8593-4667-4932-acca-6a9f187af109","type":"Microsoft.Authorization/policyDefinitions","name":"0f2d8593-4667-4932-acca-6a9f187af109"},{"properties":{"displayName":"Microsoft - Managed Control 1476 - Fire Protection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1476"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0f3c4ac2-3e35-4906-a80b-473b12a622d7","type":"Microsoft.Authorization/policyDefinitions","name":"0f3c4ac2-3e35-4906-a80b-473b12a622d7"},{"properties":{"displayName":"Microsoft - Managed Control 1204 - Access Restrictions For Change | Review System Changes","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1204"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0f4f6750-d1ab-4a4c-8dfd-af3237682665","type":"Microsoft.Authorization/policyDefinitions","name":"0f4f6750-d1ab-4a4c-8dfd-af3237682665"},{"properties":{"displayName":"Microsoft - Managed Control 1430 - Media Marking","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Media Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1430"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0f559588-5e53-4b14-a7c4-85d28ebc2234","type":"Microsoft.Authorization/policyDefinitions","name":"0f559588-5e53-4b14-a7c4-85d28ebc2234"},{"properties":{"displayName":"Microsoft - Managed Control 1574 - Acquisition Process","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1574"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0f935dab-83d6-47b8-85ef-68b8584161b9","type":"Microsoft.Authorization/policyDefinitions","name":"0f935dab-83d6-47b8-85ef-68b8584161b9"},{"properties":{"displayName":"Microsoft - Managed Control 1164 - Continuous Monitoring","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1164"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0fb8d3ce-9e96-481c-9c68-88d4e3019310","type":"Microsoft.Authorization/policyDefinitions","name":"0fb8d3ce-9e96-481c-9c68-88d4e3019310"},{"properties":{"displayName":"Microsoft - Managed Control 1017 - Account Management | Inactivity Logout","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1017"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0fc3db37-e59a-48c1-84e9-1780cedb409e","type":"Microsoft.Authorization/policyDefinitions","name":"0fc3db37-e59a-48c1-84e9-1780cedb409e"},{"properties":{"displayName":"CORS - should not allow every domain to access your API for FHIR","policyType":"BuiltIn","mode":"Indexed","description":"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your API for - FHIR. To protect your API for FHIR, remove access for all domains and explicitly - define the domains allowed to connect.","metadata":{"version":"1.0.0","category":"API - for FHIR"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["audit","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.HealthcareApis/services"},{"not":{"field":"Microsoft.HealthcareApis/services/corsConfiguration.origins[*]","notEquals":"*"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0fea8f8a-4169-495d-8307-30ec335f387d","type":"Microsoft.Authorization/policyDefinitions","name":"0fea8f8a-4169-495d-8307-30ec335f387d"},{"properties":{"displayName":"Microsoft - Managed Control 1087 - Security Awareness And Training Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Awareness and Training control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1087"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/100c82ba-42e9-4d44-a2ba-94b209248583","type":"Microsoft.Authorization/policyDefinitions","name":"100c82ba-42e9-4d44-a2ba-94b209248583"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs that do not contain the specified certificates - in Trusted Root","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows VMs that - do not contain the specified certificates in the Trusted Root Certification - Authorities certificate store (Cert:\\LocalMachine\\Root). It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"CertificateThumbprints":{"type":"String","metadata":{"displayName":"Certificate - thumbprints","description":"A semicolon-separated list of certificate thumbprints - that should exist under the Trusted Root certificate store (Cert:\\LocalMachine\\Root). - e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsCertificateInTrustedRoot","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude'', - ''='', parameters(''CertificateThumbprints'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WindowsCertificateInTrustedRoot"},"CertificateThumbprints":{"value":"[parameters(''CertificateThumbprints'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"CertificateThumbprints":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude","value":"[parameters(''CertificateThumbprints'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude","value":"[parameters(''CertificateThumbprints'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/106ccbe4-a791-4f33-a44a-06796944b8d5","type":"Microsoft.Authorization/policyDefinitions","name":"106ccbe4-a791-4f33-a44a-06796944b8d5"},{"properties":{"displayName":"Microsoft - Managed Control 1554 - Vulnerability Scanning | Discoverable Information","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Risk Assessment control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1554"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/10984b4e-c93e-48d7-bf20-9c03b04e9eca","type":"Microsoft.Authorization/policyDefinitions","name":"10984b4e-c93e-48d7-bf20-9c03b04e9eca"},{"properties":{"displayName":"Ensure - that ''.NET Framework'' version is the latest, if used as a part of the Function - App","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for .NET Framework software either due to security - flaws or to include additional functionality. Using the latest .NET framework - version for web apps is recommended in order to take advantage of security - fixes, if any, and/or new functionalities of the latest version.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/web.netFrameworkVersion","in":["v3.0","v4.0"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/10c1859c-e1a7-4df3-ab97-a487fa8059f6","type":"Microsoft.Authorization/policyDefinitions","name":"10c1859c-e1a7-4df3-ab97-a487fa8059f6"},{"properties":{"displayName":"Custom - subscription owner roles should not exist","policyType":"BuiltIn","mode":"All","description":"This - policy ensures that no custom subscription owner roles exist.","metadata":{"version":"2.0.0","category":"General"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Authorization/roleDefinitions"},{"field":"Microsoft.Authorization/roleDefinitions/type","equals":"CustomRole"},{"anyOf":[{"not":{"field":"Microsoft.Authorization/roleDefinitions/permissions[*].actions[*]","notEquals":"*"}},{"not":{"field":"Microsoft.Authorization/roleDefinitions/permissions.actions[*]","notEquals":"*"}}]},{"anyOf":[{"not":{"field":"Microsoft.Authorization/roleDefinitions/assignableScopes[*]","notIn":["[concat(subscription().id,''/'')]","[subscription().id]","/"]}},{"not":{"field":"Microsoft.Authorization/roleDefinitions/assignableScopes[*]","notLike":"/providers/Microsoft.Management/*"}}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/10ee2ea2-fb4d-45b8-a7e9-a2e770044cd9","type":"Microsoft.Authorization/policyDefinitions","name":"10ee2ea2-fb4d-45b8-a7e9-a2e770044cd9"},{"properties":{"displayName":"Microsoft - Managed Control 1230 - Configuration Management Plan","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1230"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/11158848-f679-4e9b-aa7b-9fb07d945071","type":"Microsoft.Authorization/policyDefinitions","name":"11158848-f679-4e9b-aa7b-9fb07d945071"},{"properties":{"displayName":"Microsoft - Managed Control 1432 - Media Storage","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Media Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1432"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1140e542-b80d-4048-af45-3f7245be274b","type":"Microsoft.Authorization/policyDefinitions","name":"1140e542-b80d-4048-af45-3f7245be274b"},{"properties":{"displayName":"Cognitive - Services accounts should use customer owned storage or enable data encryption.","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Cognitive Services account not using customer owned storage - nor data encryption. For each Cognitive Services account with storage, use - either customer owned storage or enable data encryption.","metadata":{"version":"1.0.0","category":"Cognitive - Services"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.CognitiveServices/accounts"},{"count":{"field":"Microsoft.CognitiveServices/accounts/userOwnedStorage[*]"},"less":1},{"field":"Microsoft.CognitiveServices/accounts/encryption.keySource","exists":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/11566b39-f7f7-4b82-ab06-68d8700eb0a4","type":"Microsoft.Authorization/policyDefinitions","name":"11566b39-f7f7-4b82-ab06-68d8700eb0a4"},{"properties":{"displayName":"Audit - Dependency agent deployment - VM Image (OS) unlisted","policyType":"BuiltIn","mode":"Indexed","description":"Reports - VMs as non-compliant if the VM Image (OS) is not in the list defined and the - agent is not installed. The list of OS images will be updated over time as - support is updated.","metadata":{"version":"1.0.1","category":"Monitoring"},"parameters":{"listOfImageIdToInclude_windows":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Windows OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"},"defaultValue":[]},"listOfImageIdToInclude_linux":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Linux OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"},"defaultValue":[]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"not":{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude_windows'')]"},{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude_linux'')]"},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["12-SP2","12-SP3","12-SP4"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["14.04.0-LTS","14.04.1-LTS","14.04.5-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["16.04-LTS","16.04.0-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["18.04-LTS"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["Centos","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/11ac78e3-31bc-4f0c-8434-37ab963cea07","type":"Microsoft.Authorization/policyDefinitions","name":"11ac78e3-31bc-4f0c-8434-37ab963cea07"},{"properties":{"displayName":"Microsoft - Managed Control 1655 - Voice Over Internet Protocol","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1655"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/121eab72-390e-4629-a7e2-6d6184f57c6b","type":"Microsoft.Authorization/policyDefinitions","name":"121eab72-390e-4629-a7e2-6d6184f57c6b"},{"properties":{"displayName":"Whitelisting - rules in your adaptive application control policy should be updated","policyType":"BuiltIn","mode":"All","description":"Monitor - for changes in behavior on groups of machines configured for auditing by Azure - Security Center''s adaptive application controls. Security Center uses machine - learning to analyze the running processes on your machines and suggest a list - of known-safe applications. These are presented as recommended apps to whitelist - in adaptive application control policies.","metadata":{"version":"1.0.1","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"applicationWhitelistingUpdate","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","type":"Microsoft.Authorization/policyDefinitions","name":"123a3936-f020-408a-ba0c-47873faf1534"},{"properties":{"displayName":"Microsoft - Managed Control 1681 - Malicious Code Protection | Automatic Updates","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1681"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/12623e7e-4736-4b2e-b776-c1600f35f93a","type":"Microsoft.Authorization/policyDefinitions","name":"12623e7e-4736-4b2e-b776-c1600f35f93a"},{"properties":{"displayName":"Microsoft - Managed Control 1240 - User-Installed Software","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1240"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/129eb39f-d79a-4503-84cd-92f036b5e429","type":"Microsoft.Authorization/policyDefinitions","name":"129eb39f-d79a-4503-84cd-92f036b5e429"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''Security Options - - System objects''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - System objects''. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsSystemobjects","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsSystemobjects"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/12ae2d24-3805-4b37-9fa9-465968bfbcfa","type":"Microsoft.Authorization/policyDefinitions","name":"12ae2d24-3805-4b37-9fa9-465968bfbcfa"},{"properties":{"displayName":"Microsoft - Managed Control 1666 - System And Information Integrity Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1666"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/12e30ee3-61e6-4509-8302-a871e8ebb91e","type":"Microsoft.Authorization/policyDefinitions","name":"12e30ee3-61e6-4509-8302-a871e8ebb91e"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs that do not have the specified applications - installed","policyType":"BuiltIn","mode":"Indexed","description":"This policy - creates a Guest Configuration assignment to audit Windows virtual machines - that do not have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"installedApplication":{"type":"String","metadata":{"displayName":"Application - names (supports wildcards)","description":"A semicolon-separated list of the - names of the applications that should be installed. e.g. ''Microsoft SQL Server - 2014 (64-bit); Microsoft Visual Studio Code'' or ''Microsoft SQL Server 2014*'' - (to match any application starting with ''Microsoft SQL Server 2014'')"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WhitelistedApplication","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[InstalledApplication]bwhitelistedapp;Name'', - ''='', parameters(''installedApplication'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WhitelistedApplication"},"installedApplication":{"value":"[parameters(''installedApplication'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"installedApplication":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[InstalledApplication]bwhitelistedapp;Name","value":"[parameters(''installedApplication'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[InstalledApplication]bwhitelistedapp;Name","value":"[parameters(''installedApplication'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/12f7e5d0-42a7-4630-80d8-54fb7cff9bd6","type":"Microsoft.Authorization/policyDefinitions","name":"12f7e5d0-42a7-4630-80d8-54fb7cff9bd6"},{"properties":{"displayName":"Microsoft - Managed Control 1347 - Identification And Authentication (Non-Org. Users) - | Acceptance Of PIV Creds. From Other Agys.","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1347"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/131a2706-61e9-4916-a164-00e052056462","type":"Microsoft.Authorization/policyDefinitions","name":"131a2706-61e9-4916-a164-00e052056462"},{"properties":{"displayName":"Microsoft - Managed Control 1450 - Physical Access Authorizations","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1450"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/134d7a13-ba3e-41e2-b236-91bfcfa24e01","type":"Microsoft.Authorization/policyDefinitions","name":"134d7a13-ba3e-41e2-b236-91bfcfa24e01"},{"properties":{"displayName":"Microsoft - Managed Control 1184 - Configuration Change Control","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1184"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/13579d0e-0ab0-4b26-b0fb-d586f6d7ed20","type":"Microsoft.Authorization/policyDefinitions","name":"13579d0e-0ab0-4b26-b0fb-d586f6d7ed20"},{"properties":{"displayName":"Microsoft - Managed Control 1085 - Publicly Accessible Content","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1085"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/13d117e0-38b0-4bbb-aaab-563be5dd10ba","type":"Microsoft.Authorization/policyDefinitions","name":"13d117e0-38b0-4bbb-aaab-563be5dd10ba"},{"properties":{"displayName":"Microsoft - Managed Control 1404 - Maintenance Tools","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1404"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/13d8f903-0cd6-449f-a172-50f6579c182b","type":"Microsoft.Authorization/policyDefinitions","name":"13d8f903-0cd6-449f-a172-50f6579c182b"},{"properties":{"displayName":"Microsoft - Managed Control 1695 - Information System Monitoring | Wireless Intrusion - Detection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1695"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/13fcf812-ec82-4eda-9b89-498de9efd620","type":"Microsoft.Authorization/policyDefinitions","name":"13fcf812-ec82-4eda-9b89-498de9efd620"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs in which the Administrators group contains - any of the specified members","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - in which the Administrators group contains any of the specified members. It - also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"MembersToExclude":{"type":"String","metadata":{"displayName":"Members - to exclude","description":"A semicolon-separated list of members that should - be excluded in the Administrators local group. Ex: Administrator; myUser1; - myUser2"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AdministratorsGroupMembersToExclude","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[LocalGroup]AdministratorsGroup;MembersToExclude'', - ''='', parameters(''MembersToExclude'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AdministratorsGroupMembersToExclude"},"MembersToExclude":{"value":"[parameters(''MembersToExclude'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"MembersToExclude":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[LocalGroup]AdministratorsGroup;MembersToExclude","value":"[parameters(''MembersToExclude'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[LocalGroup]AdministratorsGroup;MembersToExclude","value":"[parameters(''MembersToExclude'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/144f1397-32f9-4598-8c88-118decc3ccba","type":"Microsoft.Authorization/policyDefinitions","name":"144f1397-32f9-4598-8c88-118decc3ccba"},{"properties":{"displayName":"Microsoft - Managed Control 1157 - Plan Of Action And Milestones","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1157"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/15495367-cf68-464c-bbc3-f53ca5227b7a","type":"Microsoft.Authorization/policyDefinitions","name":"15495367-cf68-464c-bbc3-f53ca5227b7a"},{"properties":{"displayName":"Microsoft - Managed Control 1491 - Security Planning Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1491"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1571dd40-dafc-4ef4-8f55-16eba27efc7b","type":"Microsoft.Authorization/policyDefinitions","name":"1571dd40-dafc-4ef4-8f55-16eba27efc7b"},{"properties":{"displayName":"Microsoft - Managed Control 1564 - System Development Life Cycle","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1564"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/157f0ef9-143f-496d-b8f9-f8c8eeaad801","type":"Microsoft.Authorization/policyDefinitions","name":"157f0ef9-143f-496d-b8f9-f8c8eeaad801"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs that do not have a minimum password age - of 1 day","policyType":"BuiltIn","mode":"Indexed","description":"This policy - creates a Guest Configuration assignment to audit Windows virtual machines - that do not have a minimum password age of 1 day. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"MinimumPasswordAge","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"MinimumPasswordAge"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/16390df4-2f73-4b42-af13-c801066763df","type":"Microsoft.Authorization/policyDefinitions","name":"16390df4-2f73-4b42-af13-c801066763df"},{"properties":{"displayName":"Microsoft - Managed Control 1662 - Fail In Known State","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1662"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/165cb91f-7ea8-4ab7-beaf-8636b98c9d15","type":"Microsoft.Authorization/policyDefinitions","name":"165cb91f-7ea8-4ab7-beaf-8636b98c9d15"},{"properties":{"displayName":"Microsoft - Managed Control 1684 - Information System Monitoring","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1684"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/16bfdb59-db38-47a5-88a9-2e9371a638cf","type":"Microsoft.Authorization/policyDefinitions","name":"16bfdb59-db38-47a5-88a9-2e9371a638cf"},{"properties":{"displayName":"Show - audit results from Windows VMs that do not have the specified Windows PowerShell - modules installed","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have the specified Windows PowerShell - modules installed. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsPowerShellModules","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/16f9b37c-4408-4c30-bc17-254958f2e2d6","type":"Microsoft.Authorization/policyDefinitions","name":"16f9b37c-4408-4c30-bc17-254958f2e2d6"},{"properties":{"displayName":"Microsoft - Managed Control 1103 - Audit Events","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1103"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/16feeb31-6377-437e-bbab-d7f73911896d","type":"Microsoft.Authorization/policyDefinitions","name":"16feeb31-6377-437e-bbab-d7f73911896d"},{"properties":{"displayName":"Microsoft - Managed Control 1007 - Account Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1007"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/17200329-bf6c-46d8-ac6d-abf4641c2add","type":"Microsoft.Authorization/policyDefinitions","name":"17200329-bf6c-46d8-ac6d-abf4641c2add"},{"properties":{"displayName":"Microsoft - Managed Control 1349 - Identification And Authentication (Non-Org. Users) - | Use Of FICAM-Approved Products","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1349"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/17641f70-94cd-4a5d-a613-3d1143e20e34","type":"Microsoft.Authorization/policyDefinitions","name":"17641f70-94cd-4a5d-a613-3d1143e20e34"},{"properties":{"displayName":"Deploy - associations for a managed application","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - an association resource that associates selected resource types to the specified - managed application. This policy deployment does not support nested resource - types.","metadata":{"version":"1.0.0","category":"Managed Application"},"parameters":{"targetManagedApplicationId":{"type":"String","metadata":{"displayName":"Managed - application ID","description":"Resource ID of the managed application to which - resources need to be associated."}},"resourceTypesToAssociate":{"type":"Array","metadata":{"displayName":"Resource - types to associate","description":"The list of resource types to be associated - to the managed application.","strongType":"resourceTypes"}},"associationNamePrefix":{"type":"String","metadata":{"displayName":"Association - name prefix","description":"Prefix to be added to the name of the association - resource being created."},"defaultValue":"DeployedByPolicy"}},"policyRule":{"if":{"field":"type","in":"[parameters(''resourceTypesToAssociate'')]"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.CustomProviders/Associations","name":"[concat(parameters(''associationNamePrefix''), - ''-'', uniqueString(parameters(''targetManagedApplicationId'')))]","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"associatedResourceName":{"type":"string"},"resourceTypesToAssociate":{"type":"string"},"targetManagedApplicationId":{"type":"string"},"associationNamePrefix":{"type":"string"}},"variables":{"resourceType":"[concat(parameters(''resourceTypesToAssociate''), - ''/providers/associations'')]","resourceName":"[concat(parameters(''associatedResourceName''), - ''/microsoft.customproviders/'', parameters(''associationNamePrefix''), ''-'', - uniqueString(parameters(''targetManagedApplicationId'')))]"},"resources":[{"type":"Microsoft.Resources/deployments","apiVersion":"2017-05-10","name":"[concat(deployment().Name, - ''-2'')]","properties":{"mode":"Incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","resources":[{"type":"[variables(''resourceType'')]","name":"[variables(''resourceName'')]","apiVersion":"2018-09-01-preview","properties":{"targetResourceId":"[parameters(''targetManagedApplicationId'')]"}}]}}}]},"parameters":{"resourceTypesToAssociate":{"value":"[field(''type'')]"},"associatedResourceName":{"value":"[field(''name'')]"},"targetManagedApplicationId":{"value":"[parameters(''targetManagedApplicationId'')]"},"associationNamePrefix":{"value":"[parameters(''associationNamePrefix'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/17763ad9-70c0-4794-9397-53d765932634","type":"Microsoft.Authorization/policyDefinitions","name":"17763ad9-70c0-4794-9397-53d765932634"},{"properties":{"displayName":"Transparent - Data Encryption on SQL databases should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Transparent - data encryption should be enabled to protect data-at-rest and meet compliance - requirements","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers/databases"},{"field":"name","notEquals":"master"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/databases/transparentDataEncryption","name":"current","existenceCondition":{"allOf":[{"field":"Microsoft.Sql/transparentDataEncryption.status","equals":"enabled"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","type":"Microsoft.Authorization/policyDefinitions","name":"17k78e20-9358-41c9-923c-fb736d382a12"},{"properties":{"displayName":"Microsoft - Managed Control 1325 - Authenticator Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1325"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1845796a-7581-49b2-ae20-443121538e19","type":"Microsoft.Authorization/policyDefinitions","name":"1845796a-7581-49b2-ae20-443121538e19"},{"properties":{"displayName":"Microsoft - Managed Control 1480 - Temperature And Humidity Controls","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1480"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/18a767cc-1947-4338-a240-bc058c81164f","type":"Microsoft.Authorization/policyDefinitions","name":"18a767cc-1947-4338-a240-bc058c81164f"},{"properties":{"displayName":"Bring - your own key data protection should be enabled for PostgreSQL servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits PostgreSQL servers in your environment without bring your own - key data protection enabled. For more details, visit https://aka.ms/postgresqlbyok.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforPostgreSQL/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforPostgreSQL/servers/keys","existenceCondition":{"allOf":[{"field":"Microsoft.DBforPostgreSQL/servers/keys/serverKeyType","equals":"AzureKeyVault"},{"field":"Microsoft.DBforPostgreSQL/servers/keys/uri","notEquals":""},{"field":"Microsoft.DBforPostgreSQL/servers/keys/uri","exists":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","type":"Microsoft.Authorization/policyDefinitions","name":"18adea5e-f416-4d0f-8aa8-d24321e3e274"},{"properties":{"displayName":"Microsoft - Managed Control 1369 - Incident Monitoring","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1369"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/18cc35ed-a429-486d-8d59-cb47e87304ed","type":"Microsoft.Authorization/policyDefinitions","name":"18cc35ed-a429-486d-8d59-cb47e87304ed"},{"properties":{"displayName":"Microsoft - Managed Control 1269 - Alternate Storage Site | Separation From Primary Site","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1269"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/19b9439d-865d-4474-b17d-97d2702fdb66","type":"Microsoft.Authorization/policyDefinitions","name":"19b9439d-865d-4474-b17d-97d2702fdb66"},{"properties":{"displayName":"Microsoft - Managed Control 1071 - Wireless Access | Restrict Configurations By Users","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1071"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1a437f5b-9ad6-4f28-8861-de404d511ae4","type":"Microsoft.Authorization/policyDefinitions","name":"1a437f5b-9ad6-4f28-8861-de404d511ae4"},{"properties":{"displayName":"Azure - Monitor log profile should collect logs for categories ''write,'' ''delete,'' - and ''action''","policyType":"BuiltIn","mode":"All","description":"This policy - ensures that a log profile collects logs for categories ''write,'' ''delete,'' - and ''action''","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/logprofiles","existenceCondition":{"allOf":[{"not":{"field":"Microsoft.Insights/logProfiles/categories[*]","notEquals":"Write"}},{"not":{"field":"Microsoft.Insights/logProfiles/categories[*]","notEquals":"Delete"}},{"not":{"field":"Microsoft.Insights/logProfiles/categories[*]","notEquals":"Action"}}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1a4e592a-6a6e-44a5-9814-e36264ca96e7","type":"Microsoft.Authorization/policyDefinitions","name":"1a4e592a-6a6e-44a5-9814-e36264ca96e7"},{"properties":{"displayName":"[Deprecated]: - Access to App Services should be restricted","policyType":"BuiltIn","mode":"All","description":"Azure - security center has discovered that the networking configuration of some of - your app services are overly permissive and allow inbound traffic from ranges - that are too broad","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"Disabled"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Web/sites"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"restrictAccessToAppServices","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1a833ff1-d297-4a0f-9944-888428f8e0ff","type":"Microsoft.Authorization/policyDefinitions","name":"1a833ff1-d297-4a0f-9944-888428f8e0ff"},{"properties":{"displayName":"Vulnerability - assessment should be enabled on SQL Managed Instance","policyType":"BuiltIn","mode":"Indexed","description":"Audit - each SQL Managed Instance which doesn''t have recurring vulnerability assessment - scans enabled. Vulnerability assessment can discover, track, and help you - remediate potential database vulnerabilities.","metadata":{"version":"1.0.1","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/managedInstances"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/managedInstances/vulnerabilityAssessments","name":"default","existenceCondition":{"field":"Microsoft.Sql/managedInstances/vulnerabilityAssessments/recurringScans.isEnabled","equals":"True"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","type":"Microsoft.Authorization/policyDefinitions","name":"1b7aa243-30e4-4c9e-bca8-d0d3022b634a"},{"properties":{"displayName":"Audit - public network access setting for Azure SQL Database","policyType":"BuiltIn","mode":"Indexed","description":"Customers - use public network access property to control public vs private connectivity - to Azure SQL Database. This policy audits that public network access property - is set to ''Disabled'' so that no public connectivity is allowed.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers"},{"field":"Microsoft.Sql/servers/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","type":"Microsoft.Authorization/policyDefinitions","name":"1b8ca024-1d5c-4dec-8995-b1a932b41780"},{"properties":{"displayName":"Ensure - that ''PHP version'' is the latest, if used as a part of the Api app","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for PHP software either due to security flaws - or to include additional functionality. Using the latest PHP version for API - apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"PHPLatestVersion":{"type":"String","metadata":{"displayName":"Latest - PHP version","description":"Latest supported PHP version for App Services"},"defaultValue":"7.3"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","notContains":"PHP"},{"field":"Microsoft.Web/sites/config/web.phpVersion","equals":""}]},{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","equals":"[concat(''PHP|'', - parameters(''PHPLatestVersion''))]"},{"field":"Microsoft.Web/sites/config/web.phpVersion","equals":""}]},{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","equals":""},{"field":"Microsoft.Web/sites/config/web.phpVersion","equals":"[parameters(''PHPLatestVersion'')]"}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","type":"Microsoft.Authorization/policyDefinitions","name":"1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba"},{"properties":{"displayName":"Deploy - Dependency agent for Windows virtual machines","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Dependency agent for Windows virtual machines if the VM Image (OS) is in the - list defined and the agent is not installed. The list of OS images will be - updated over time as support is updated.","metadata":{"version":"1.1.1","category":"Monitoring"},"parameters":{"listOfImageIdToInclude":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Windows OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"},"defaultValue":[]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"DependencyAgentWindows"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"variables":{"vmExtensionName":"DependencyAgent","vmExtensionPublisher":"Microsoft.Azure.Monitoring.DependencyAgent","vmExtensionType":"DependencyAgentWindows","vmExtensionTypeHandlerVersion":"9.6"},"resources":[{"type":"Microsoft.Compute/virtualMachines/extensions","name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","apiVersion":"2019-12-01","location":"[parameters(''location'')]","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","typeHandlerVersion":"[variables(''vmExtensionTypeHandlerVersion'')]","autoUpgradeMinorVersion":true,"enableAutomaticUpgrade":true,"settings":{}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1c210e94-a481-4beb-95fa-1571b434fb04","type":"Microsoft.Authorization/policyDefinitions","name":"1c210e94-a481-4beb-95fa-1571b434fb04"},{"properties":{"displayName":"Microsoft - Managed Control 1072 - Wireless Access | Antennas / Transmission Power Levels","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1072"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1ca29e41-34ec-4e70-aba9-6248aca18c31","type":"Microsoft.Authorization/policyDefinitions","name":"1ca29e41-34ec-4e70-aba9-6248aca18c31"},{"properties":{"displayName":"Microsoft - Managed Control 1656 - Secure Name / Address Resolution Service (Authoritative - Source)","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1656"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1cb067d5-c8b5-4113-a7ee-0a493633924b","type":"Microsoft.Authorization/policyDefinitions","name":"1cb067d5-c8b5-4113-a7ee-0a493633924b"},{"properties":{"displayName":"Microsoft - Managed Control 1592 - External Information System Services | Consistent Interests - Of Consumers And Providers","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1592"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1d01ba6c-289f-42fd-a408-494b355b6222","type":"Microsoft.Authorization/policyDefinitions","name":"1d01ba6c-289f-42fd-a408-494b355b6222"},{"properties":{"displayName":"Microsoft - Managed Control 1088 - Security Awareness And Training Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Awareness and Training control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1088"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1d50f99d-1356-49c0-934a-45f742ba7783","type":"Microsoft.Authorization/policyDefinitions","name":"1d50f99d-1356-49c0-934a-45f742ba7783"},{"properties":{"displayName":"[Preview]: - Deploy GitOps to Kubernetes cluster","policyType":"BuiltIn","mode":"All","description":"This - policy deploys a ''sourceControlConfiguration'' to Kubernetes clusters to - assure that the clusters get their source of truth from the defined git repo. - For instructions on using this policy, visit https://aka.ms/K8sGitOpsPolicy.","metadata":{"preview":true,"version":"1.0.0-preview","category":"Kubernetes"},"parameters":{"configurationResourceName":{"type":"String","metadata":{"displayName":"[Preview]: - Configuration resource name","description":"The name for the sourceControlConfiguration. Learn - more about setting up GitOps configuration: https://aka.ms/AzureArcK8sUsingGitOps."}},"operatorInstanceName":{"type":"String","metadata":{"displayName":"[Preview]: - Operator instance name","description":"The name of the operator associated - with this configuration. The instance name can contain up to 353 lower-case - alphanumeric characters, hyphen, or period. If enableHelmOperator is true, - then operatorInstanceName + operatorNamespace strings cannot exceed 47 characters - combined."}},"operatorNamespace":{"type":"String","metadata":{"displayName":"[Preview]: - Operator namespace","description":"The namespace to use for the configuration - operator. The namespace can contain up to 353 lower-case alphanumeric characters, - hyphen, or period. If enableHelmOperator is true, then operatorInstanceName - + operatorNamespace strings cannot exceed 47 characters combined."}},"operatorScope":{"type":"String","metadata":{"displayName":"[Preview]: - Operator scope","description":"The permission scope for the operator. Possible - values are ''cluster'' (full access) or ''namespace'' (restricted access)."},"allowedValues":["cluster","namespace"],"defaultValue":"namespace"},"operatorType":{"type":"String","metadata":{"displayName":"[Preview]: - Operator type","description":"The type of operator to install. Currently, - ''Flux'' is supported."},"allowedValues":["Flux"],"defaultValue":"Flux"},"operatorParams":{"type":"String","metadata":{"displayName":"[Preview]: - Operator parameters","description":"Parameters to set on the Flux operator, - separated by spaces. For example, --git-readonly --git-path=namespaces,workloads. Learn - more: http://aka.ms/AzureArcK8sFluxOperatorParams."},"defaultValue":""},"repositoryUrl":{"type":"String","metadata":{"displayName":"[Preview]: - Repository Url","description":"The URL for the source control repository. - Private repo: git@github.com:Contoso/cluster-config"}},"enableHelmOperator":{"type":"String","metadata":{"displayName":"[Preview]: - Enable Helm","description":"Indicate whether to enable Helm for this instance - of Flux. Learn more: http://aka.ms/AzureArcK8sGitOpsWithHelm."},"allowedValues":["true","false"],"defaultValue":"true"},"chartVersion":{"type":"String","metadata":{"displayName":"[Preview]: - Helm chart version for installing Flux Helm","description":"The version of - the Helm chart for installing Flux Helm. For example, 0.6.0"},"defaultValue":"0.6.0"},"chartValues":{"type":"String","metadata":{"displayName":"[Preview]: - Helm chart parameters for installing Flux Helm","description":"Parameters - for the Helm chart for installing Flux Helm, separated by spaces."},"defaultValue":""}},"policyRule":{"if":{"field":"type","in":["Microsoft.Kubernetes/connectedClusters","Microsoft.ContainerService/managedClusters"]},"then":{"effect":"DeployIfNotExists","details":{"type":"Microsoft.KubernetesConfiguration/sourceControlConfigurations","name":"[parameters(''configurationResourceName'')]","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deploymentScope":"ResourceGroup","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/operatorParams","in":["--git-readonly","[parameters(''operatorParams'')]","[concat(''--git-readonly - '',parameters(''operatorParams''))]"]},{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/repositoryUrl","equals":"[parameters(''repositoryUrl'')]"},{"anyOf":[{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator","equals":"false"},{"allOf":[{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator","equals":"true"},{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartVersion","equals":"[parameters(''chartVersion'')]"},{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartValues","equals":"[parameters(''chartValues'')]"}]}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"configurationResourceName":{"type":"string"},"clusterLocation":{"type":"string"},"clusterName":{"type":"string"},"operatorInstanceName":{"type":"string"},"operatorNamespace":{"type":"string"},"operatorScope":{"type":"string"},"operatorType":{"type":"string"},"operatorParams":{"type":"string"},"repositoryUrl":{"type":"string"},"enableHelmOperator":{"type":"string"},"chartVersion":{"type":"string"},"chartValues":{"type":"string"},"clusterResourceType":{"type":"string"}},"resources":[{"condition":"[contains(parameters(''clusterResourceType''), - ''connectedclusters'')]","type":"Microsoft.Kubernetes/connectedClusters/providers/sourceControlConfigurations","name":"[concat(parameters(''clusterName''), - ''/Microsoft.KubernetesConfiguration/'', parameters(''configurationResourceName''))]","apiVersion":"2019-11-01-preview","properties":{"operatorInstanceName":"[parameters(''operatorInstanceName'')]","operatorNamespace":"[parameters(''operatorNamespace'')]","operatorScope":"[parameters(''operatorScope'')]","operatorType":"[parameters(''operatorType'')]","operatorParams":"[parameters(''operatorParams'')]","repositoryUrl":"[parameters(''repositoryUrl'')]","enableHelmOperator":"[parameters(''enableHelmOperator'')]","helmOperatorProperties":{"chartVersion":"[parameters(''chartVersion'')]","chartValues":"[parameters(''chartValues'')]"}}},{"condition":"[contains(parameters(''clusterResourceType''), - ''managedclusters'')]","type":"Microsoft.ContainerService/managedClusters/providers/sourceControlConfigurations","name":"[concat(parameters(''clusterName''), - ''/Microsoft.KubernetesConfiguration/'', parameters(''configurationResourceName''))]","apiVersion":"2019-11-01-preview","properties":{"operatorInstanceName":"[parameters(''operatorInstanceName'')]","operatorNamespace":"[parameters(''operatorNamespace'')]","operatorScope":"[parameters(''operatorScope'')]","operatorType":"[parameters(''operatorType'')]","operatorParams":"[parameters(''operatorParams'')]","repositoryUrl":"[parameters(''repositoryUrl'')]","enableHelmOperator":"[parameters(''enableHelmOperator'')]","helmOperatorProperties":{"chartVersion":"[parameters(''chartVersion'')]","chartValues":"[parameters(''chartValues'')]"}}}]},"parameters":{"clusterLocation":{"value":"[field(''location'')]"},"clusterName":{"value":"[field(''name'')]"},"configurationResourceName":{"value":"[parameters(''configurationResourceName'')]"},"operatorInstanceName":{"value":"[parameters(''operatorInstanceName'')]"},"operatorNamespace":{"value":"[parameters(''operatorNamespace'')]"},"operatorScope":{"value":"[parameters(''operatorScope'')]"},"operatorType":{"value":"[parameters(''operatorType'')]"},"operatorParams":{"value":"[parameters(''operatorParams'')]"},"repositoryUrl":{"value":"[parameters(''repositoryUrl'')]"},"enableHelmOperator":{"value":"[parameters(''enableHelmOperator'')]"},"chartVersion":{"value":"[parameters(''chartVersion'')]"},"chartValues":{"value":"[parameters(''chartValues'')]"},"clusterResourceType":{"value":"[field(''type'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1d61c4d2-aef2-432b-87fc-7f96b019b7e1","type":"Microsoft.Authorization/policyDefinitions","name":"1d61c4d2-aef2-432b-87fc-7f96b019b7e1"},{"properties":{"displayName":"Microsoft - Managed Control 1538 - Security Categorization","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Risk Assessment control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1538"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1d7658b2-e827-49c3-a2ae-6d2bd0b45874","type":"Microsoft.Authorization/policyDefinitions","name":"1d7658b2-e827-49c3-a2ae-6d2bd0b45874"},{"properties":{"displayName":"Virtual - machines should be migrated to new Azure Resource Manager resources","policyType":"BuiltIn","mode":"All","description":"Use - new Azure Resource Manager for your virtual machines to provide security enhancements - such as: stronger access control (RBAC), better auditing, Azure Resource Manager - based deployment and governance, access to managed identities, access to key - vault for secrets, Azure AD-based authentication and support for tags and - resource groups for easier security management","metadata":{"version":"1.0.0","category":"Compute"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.ClassicCompute/virtualMachines","Microsoft.Compute/virtualMachines"]},{"value":"[field(''type'')]","equals":"Microsoft.ClassicCompute/virtualMachines"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","type":"Microsoft.Authorization/policyDefinitions","name":"1d84d5fb-01f6-4d12-ba4f-4a26081d403d"},{"properties":{"displayName":"Microsoft - Managed Control 1298 - Identification And Authentication Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1298"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1dc784b5-4895-4d27-9d40-a06b032bd1ee","type":"Microsoft.Authorization/policyDefinitions","name":"1dc784b5-4895-4d27-9d40-a06b032bd1ee"},{"properties":{"displayName":"[Deprecated]: - Audit API Applications that are not using latest supported .NET Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported .NET Framework version for the latest security classes. - Using older classes and types can make your application vulnerable.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestDotNet","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1de7b11d-1870-41a5-8181-507e7c663cfb","type":"Microsoft.Authorization/policyDefinitions","name":"1de7b11d-1870-41a5-8181-507e7c663cfb"},{"properties":{"displayName":"Microsoft - Managed Control 1595 - Developer Configuration Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1595"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1e0414e7-6ef5-4182-8076-aa82fbb53341","type":"Microsoft.Authorization/policyDefinitions","name":"1e0414e7-6ef5-4182-8076-aa82fbb53341"},{"properties":{"displayName":"Require - a tag and its value on resources","policyType":"BuiltIn","mode":"Indexed","description":"Enforces - a required tag and its value. Does not apply to resource groups.","metadata":{"version":"1.0.1","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"not":{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","equals":"[parameters(''tagValue'')]"}},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1e30110a-5ceb-460c-a204-c1c3969c6d62","type":"Microsoft.Authorization/policyDefinitions","name":"1e30110a-5ceb-460c-a204-c1c3969c6d62"},{"properties":{"displayName":"An - Azure Active Directory administrator should be provisioned for SQL servers","policyType":"BuiltIn","mode":"Indexed","description":"Audit - provisioning of an Azure Active Directory administrator for your SQL server - to enable Azure AD authentication. Azure AD authentication enables simplified - permission management and centralized identity management of database users - and other Microsoft services","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/administrators"}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","type":"Microsoft.Authorization/policyDefinitions","name":"1f314764-cb73-4fc9-b863-8eca98ac36e9"},{"properties":{"displayName":"Deploy - Diagnostic Settings for Event Hub to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Event Hub to stream to a regional Log Analytics - workspace when any Event Hub which is missing this diagnostic settings is - created or updated.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"},"defaultValue":"setbypolicy_logAnalytics"},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"],"defaultValue":"False"},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Log Analytics workspace - - True or False"},"allowedValues":["True","False"],"defaultValue":"True"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.EventHub/namespaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.EventHub/namespaces/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"ArchiveLogs","enabled":true,"retentionPolicy":{"enabled":false,"days":0}},{"category":"OperationalLogs","enabled":"[parameters(''logsEnabled'')]"},{"category":"AutoScaleLogs","enabled":"[parameters(''logsEnabled'')]"},{"category":"KafkaCoordinatorLogs","enabled":"[parameters(''logsEnabled'')]"},{"category":"EventHubVNetConnectionEvent","enabled":"[parameters(''logsEnabled'')]"},{"category":"CustomerManagedKeyUserLogs","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1f6e93e8-6b31-41b1-83f6-36e449a42579","type":"Microsoft.Authorization/policyDefinitions","name":"1f6e93e8-6b31-41b1-83f6-36e449a42579"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''Security Options - - Shutdown''","policyType":"BuiltIn","mode":"Indexed","description":"This policy - creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - Shutdown''. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn":{"type":"String","metadata":{"displayName":"Shutdown: - Allow system to be shut down without having to log on","description":"Specifies - whether a computer can be shut down when a user is not logged on. If this - policy setting is enabled, the shutdown command is available on the Windows - logon screen."},"defaultValue":"0"},"ShutdownClearVirtualMemoryPagefile":{"type":"String","metadata":{"displayName":"Shutdown: - Clear virtual memory pagefile","description":"Specifies whether the virtual - memory pagefile is cleared when the system is shut down. When this policy - setting is enabled, the system pagefile is cleared each time that the system - shuts down properly. For systems with large amounts of RAM, this could result - in substantial time needed to complete the shutdown."},"defaultValue":"0"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsShutdown","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Shutdown: - Allow system to be shut down without having to log on;ExpectedValue'', ''='', - parameters(''ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn''), '','', - ''Shutdown: Clear virtual memory pagefile;ExpectedValue'', ''='', parameters(''ShutdownClearVirtualMemoryPagefile'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsShutdown"},"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn":{"value":"[parameters(''ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn'')]"},"ShutdownClearVirtualMemoryPagefile":{"value":"[parameters(''ShutdownClearVirtualMemoryPagefile'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn":{"type":"string"},"ShutdownClearVirtualMemoryPagefile":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Shutdown: - Allow system to be shut down without having to log on;ExpectedValue","value":"[parameters(''ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn'')]"},{"name":"Shutdown: - Clear virtual memory pagefile;ExpectedValue","value":"[parameters(''ShutdownClearVirtualMemoryPagefile'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Shutdown: - Allow system to be shut down without having to log on;ExpectedValue","value":"[parameters(''ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn'')]"},{"name":"Shutdown: - Clear virtual memory pagefile;ExpectedValue","value":"[parameters(''ShutdownClearVirtualMemoryPagefile'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1f8c20ce-3414-4496-8b26-0e902a1541da","type":"Microsoft.Authorization/policyDefinitions","name":"1f8c20ce-3414-4496-8b26-0e902a1541da"},{"properties":{"displayName":"Azure - Cosmos DB account should use customer-managed keys to encrypt data at rest","policyType":"BuiltIn","mode":"Indexed","description":"Use - customer-managed keys to control the encryption at rest of the data stored - in Azure Cosmos DB when this is a regulatory or compliance requirement. Customer-managed - keys also deliver double encryption by adding a second layer of encryption - on top of the default one done with service-managed keys. See https://aka.ms/cosmosdb-cmk","metadata":{"version":"1.0.0","category":"Cosmos - DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"Microsoft.DocumentDB/databaseAccounts/keyVaultKeyUri","exists":false},{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","type":"Microsoft.Authorization/policyDefinitions","name":"1f905d99-2ab7-462c-a6b0-f709acca6c8f"},{"properties":{"displayName":"Microsoft - Managed Control 1616 - System And Communications Protection Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1616"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2006457a-48b3-4f7b-8d2e-1532287f9929","type":"Microsoft.Authorization/policyDefinitions","name":"2006457a-48b3-4f7b-8d2e-1532287f9929"},{"properties":{"displayName":"Microsoft - Managed Control 1650 - Public Key Infrastructure Certificates","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1650"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/201d3740-bd16-4baf-b4b8-7cda352228b7","type":"Microsoft.Authorization/policyDefinitions","name":"201d3740-bd16-4baf-b4b8-7cda352228b7"},{"properties":{"displayName":"[Deprecated]: - Web ports should be restricted on Network Security Groups associated to your - VM","policyType":"BuiltIn","mode":"All","description":"Azure security center - has discovered that some of your virtual machines are running web applications, - and the NSGs associated to these virtual machines are overly permissive with - regards to the web application ports","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"Disabled"}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"unprotectedWebApplication","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/201ea587-7c90-41c3-910f-c280ae01cfd6","type":"Microsoft.Authorization/policyDefinitions","name":"201ea587-7c90-41c3-910f-c280ae01cfd6"},{"properties":{"displayName":"VM - Image Builder templates should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Audit - VM Image Builder templates that do not have a virtual network configured. - When a virtual network is not configured, a public IP is created and used - instead which may expose resources directly to the internet and increase the - potential attack surface.","metadata":{"version":"1.0.0","category":"VM Image - Builder"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.VirtualMachineImages/imageTemplates"},{"field":"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig","exists":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","type":"Microsoft.Authorization/policyDefinitions","name":"2154edb9-244f-4741-9970-660785bccdaa"},{"properties":{"displayName":"Microsoft - Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1181"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/21839937-d241-4fa5-95c6-b669253d9ab9","type":"Microsoft.Authorization/policyDefinitions","name":"21839937-d241-4fa5-95c6-b669253d9ab9"},{"properties":{"displayName":"Microsoft - Managed Control 1111 - Response To Audit Processing Failures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1111"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/21de687c-f15e-4e51-bf8d-f35c8619965b","type":"Microsoft.Authorization/policyDefinitions","name":"21de687c-f15e-4e51-bf8d-f35c8619965b"},{"properties":{"displayName":"Microsoft - Managed Control 1596 - Developer Configuration Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1596"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/21e25e01-0ae0-41be-919e-04ce92b8e8b8","type":"Microsoft.Authorization/policyDefinitions","name":"21e25e01-0ae0-41be-919e-04ce92b8e8b8"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''Security Options - Audit''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Security Options - Audit''. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsAudit","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/21e2995e-683e-497a-9e81-2f42ad07050a","type":"Microsoft.Authorization/policyDefinitions","name":"21e2995e-683e-497a-9e81-2f42ad07050a"},{"properties":{"displayName":"Microsoft - Managed Control 1426 - Media Protection Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Media Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1426"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/21f639bc-f42b-46b1-8f40-7a2a389c291a","type":"Microsoft.Authorization/policyDefinitions","name":"21f639bc-f42b-46b1-8f40-7a2a389c291a"},{"properties":{"displayName":"[Deprecated]: - Audit API Apps that are not using custom domains","policyType":"BuiltIn","mode":"All","description":"Use - of custom domains protects a API app from common attacks such as phishing - and other DNS-related attacks.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UsedCustomDomains","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/224da9fe-0d38-4e79-adb3-0a6e2af942ac","type":"Microsoft.Authorization/policyDefinitions","name":"224da9fe-0d38-4e79-adb3-0a6e2af942ac"},{"properties":{"displayName":"Microsoft - Managed Control 1399 - Controlled Maintenance","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1399"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2256e638-eb23-480f-9e15-6cf1af0a76b3","type":"Microsoft.Authorization/policyDefinitions","name":"2256e638-eb23-480f-9e15-6cf1af0a76b3"},{"properties":{"displayName":"Microsoft - Managed Control 1221 - Least Functionality | Authorized Software / Whitelisting","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1221"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/22589a07-0007-486a-86ca-95355081ae2a","type":"Microsoft.Authorization/policyDefinitions","name":"22589a07-0007-486a-86ca-95355081ae2a"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''System Audit Policies - - Account Management''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''System Audit Policies - Account Management''. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesAccountManagement","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/225e937e-d32e-4713-ab74-13ce95b3519a","type":"Microsoft.Authorization/policyDefinitions","name":"225e937e-d32e-4713-ab74-13ce95b3519a"},{"properties":{"displayName":"Management - ports should be closed on your virtual machines","policyType":"BuiltIn","mode":"All","description":"Open - remote management ports are exposing your VM to a high level of risk from - Internet-based attacks. These attacks attempt to brute force credentials to - gain admin access to the machine.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"restrictAccessToManagementPorts","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","type":"Microsoft.Authorization/policyDefinitions","name":"22730e10-96f6-4aac-ad84-9383d35b5917"},{"properties":{"displayName":"Microsoft - Managed Control 1493 - System Security Plan","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1493"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/22b469b3-fccf-42da-aa3b-a28e6fb113ce","type":"Microsoft.Authorization/policyDefinitions","name":"22b469b3-fccf-42da-aa3b-a28e6fb113ce"},{"properties":{"displayName":"Only - secure connections to your Azure Cache for Redis should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of only connections via SSL to Azure Cache for Redis. Use of secure - connections ensures authentication between the server and the service and - protects data in transit from network layer attacks such as man-in-the-middle, - eavesdropping, and session-hijacking","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Cache/redis"},{"field":"Microsoft.Cache/Redis/enableNonSslPort","equals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","type":"Microsoft.Authorization/policyDefinitions","name":"22bee202-a82f-4305-9a2a-6d7f44d4dedb"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs that do not restrict the minimum password - length to 14 characters","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not restrict the minimum password length to 14 characters. It also - creates a system-assigned managed identity and deploys the VM extension for - Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"MinimumPasswordLength","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"MinimumPasswordLength"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/23020aa6-1135-4be2-bae2-149982b06eca","type":"Microsoft.Authorization/policyDefinitions","name":"23020aa6-1135-4be2-bae2-149982b06eca"},{"properties":{"displayName":"Microsoft - Managed Control 1256 - Contingency Plan | Identify Critical Assets","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1256"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/232ab24b-810b-4640-9019-74a7d0d6a980","type":"Microsoft.Authorization/policyDefinitions","name":"232ab24b-810b-4640-9019-74a7d0d6a980"},{"properties":{"displayName":"Service - Bus should use a virtual network service endpoint","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Service Bus not configured to use a virtual network service - endpoint.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ServiceBus/namespaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.ServiceBus/namespaces/virtualNetworkRules","existenceCondition":{"field":"Microsoft.ServiceBus/namespaces/virtualNetworkRules/virtualNetworkSubnetId","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/235359c5-7c52-4b82-9055-01c75cf9f60e","type":"Microsoft.Authorization/policyDefinitions","name":"235359c5-7c52-4b82-9055-01c75cf9f60e"},{"properties":{"displayName":"Deploy - Diagnostic Settings for Stream Analytics to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Stream Analytics to stream to a regional Log Analytics - workspace when any Stream Analytics which is missing this diagnostic settings - is created or updated.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"},"defaultValue":"setbypolicy_logAnalytics"},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"],"defaultValue":"False"},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Log Analytics workspace - - True or False"},"allowedValues":["True","False"],"defaultValue":"True"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.StreamAnalytics/streamingjobs"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.StreamAnalytics/streamingjobs/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"Execution","enabled":"[parameters(''logsEnabled'')]"},{"category":"Authoring","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/237e0f7e-b0e8-4ec4-ad46-8c12cb66d673","type":"Microsoft.Authorization/policyDefinitions","name":"237e0f7e-b0e8-4ec4-ad46-8c12cb66d673"},{"properties":{"displayName":"Microsoft - Managed Control 1268 - Alternate Storage Site","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1268"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/23f6e984-3053-4dfc-ab48-543b764781f5","type":"Microsoft.Authorization/policyDefinitions","name":"23f6e984-3053-4dfc-ab48-543b764781f5"},{"properties":{"displayName":"Microsoft - Managed Control 1122 - Audit Review, Analysis, And Reporting | Permitted Actions","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1122"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/243ec95e-800c-49d4-ba52-1fdd9f6b8b57","type":"Microsoft.Authorization/policyDefinitions","name":"243ec95e-800c-49d4-ba52-1fdd9f6b8b57"},{"properties":{"displayName":"Microsoft - Managed Control 1231 - Configuration Management Plan","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1231"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/244e0c05-cc45-4fe7-bf36-42dcf01f457d","type":"Microsoft.Authorization/policyDefinitions","name":"244e0c05-cc45-4fe7-bf36-42dcf01f457d"},{"properties":{"displayName":"Microsoft - Managed Control 1082 - Information Sharing","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1082"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/24d480ef-11a0-4b1b-8e70-4e023bf2be23","type":"Microsoft.Authorization/policyDefinitions","name":"24d480ef-11a0-4b1b-8e70-4e023bf2be23"},{"properties":{"displayName":"Show - audit results from Windows VMs that do not have a maximum password age of - 70 days","policyType":"BuiltIn","mode":"All","description":"This policy should - only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines that do not have a maximum password age of 70 days. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"MaximumPasswordAge","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/24dde96d-f0b1-425e-884f-4a1421e2dcdc","type":"Microsoft.Authorization/policyDefinitions","name":"24dde96d-f0b1-425e-884f-4a1421e2dcdc"},{"properties":{"displayName":"Deploy - Diagnostic Settings for Data Lake Storage Gen1 to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Data Lake Storage Gen1 to stream to a regional - Log Analytics workspace when any Data Lake Storage Gen1 which is missing this - diagnostic settings is created or updated.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"},"defaultValue":"setbypolicy_logAnalytics"},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"],"defaultValue":"False"},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Log Analytics workspace - - True or False"},"allowedValues":["True","False"],"defaultValue":"True"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataLakeStore/accounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.DataLakeStore/accounts/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"Audit","enabled":"[parameters(''logsEnabled'')]"},{"category":"Requests","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/25763a0a-5783-4f14-969e-79d4933eb74b","type":"Microsoft.Authorization/policyDefinitions","name":"25763a0a-5783-4f14-969e-79d4933eb74b"},{"properties":{"displayName":"Microsoft - Managed Control 1372 - Incident Reporting","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1372"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/25b96717-c912-4c00-9143-4e487f411726","type":"Microsoft.Authorization/policyDefinitions","name":"25b96717-c912-4c00-9143-4e487f411726"},{"properties":{"displayName":"Microsoft - Managed Control 1038 - Least Privilege | Privileged Accounts","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1038"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/26692e88-71b7-4a5f-a8ac-9f31dd05bd8e","type":"Microsoft.Authorization/policyDefinitions","name":"26692e88-71b7-4a5f-a8ac-9f31dd05bd8e"},{"properties":{"displayName":"Endpoint - protection solution should be installed on virtual machine scale sets","policyType":"BuiltIn","mode":"Indexed","description":"Audit - the existence and health of an endpoint protection solution on your virtual - machines scale sets, to protect them from threats and vulnerabilities.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"EndpointProtection","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","type":"Microsoft.Authorization/policyDefinitions","name":"26a828e1-e88f-464e-bbb3-c134a282b9de"},{"properties":{"displayName":"Microsoft - Managed Control 1649 - Collaborative Computing Devices","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1649"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/26d292cc-b0b8-4c29-9337-68abc758bf7b","type":"Microsoft.Authorization/policyDefinitions","name":"26d292cc-b0b8-4c29-9337-68abc758bf7b"},{"properties":{"displayName":"Metric - alert rules should be configured on Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Audit - configuration of metric alert rules on Batch account to enable the required - metric","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"metricName":{"type":"String","metadata":{"displayName":"Metric - name","description":"The metric name that an alert rule must be enabled on"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Batch/batchAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/alertRules","existenceScope":"Subscription","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/alertRules/isEnabled","equals":"true"},{"field":"Microsoft.Insights/alertRules/condition.dataSource.metricName","equals":"[parameters(''metricName'')]"},{"field":"Microsoft.Insights/alertRules/condition.dataSource.resourceUri","equals":"[concat(''/subscriptions/'', - subscription().subscriptionId, ''/resourcegroups/'', resourceGroup().name, - ''/providers/Microsoft.Batch/batchAccounts/'', field(''name''))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/26ee67a2-f81a-4ba8-b9ce-8550bd5ee1a7","type":"Microsoft.Authorization/policyDefinitions","name":"26ee67a2-f81a-4ba8-b9ce-8550bd5ee1a7"},{"properties":{"displayName":"Microsoft - Managed Control 1396 - Controlled Maintenance","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1396"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/276af98f-4ff9-4e69-99fb-c9b2452fb85f","type":"Microsoft.Authorization/policyDefinitions","name":"276af98f-4ff9-4e69-99fb-c9b2452fb85f"},{"properties":{"displayName":"Microsoft - Managed Control 1074 - Access Control For Mobile Devices","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1074"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/27a69937-af92-4198-9b86-08d355c7e59a","type":"Microsoft.Authorization/policyDefinitions","name":"27a69937-af92-4198-9b86-08d355c7e59a"},{"properties":{"displayName":"Microsoft - Managed Control 1527 - Access Agreements","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1527"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2823de66-332f-4bfd-94a3-3eb036cd3b67","type":"Microsoft.Authorization/policyDefinitions","name":"2823de66-332f-4bfd-94a3-3eb036cd3b67"},{"properties":{"displayName":"Deploy - default Microsoft IaaSAntimalware extension for Windows Server","policyType":"BuiltIn","mode":"Indexed","description":"This - policy deploys a Microsoft IaaSAntimalware extension with a default configuration - when a VM is not configured with the antimalware extension.","metadata":{"version":"1.0.0","category":"Compute"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk"]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"IaaSAntimalware"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Security"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"ExclusionsPaths":{"type":"string","defaultValue":"","metadata":{"description":"Semicolon - delimited list of file paths or locations to exclude from scanning"}},"ExclusionsExtensions":{"type":"string","defaultValue":"","metadata":{"description":"Semicolon - delimited list of file extensions to exclude from scanning"}},"ExclusionsProcesses":{"type":"string","defaultValue":"","metadata":{"description":"Semicolon - delimited list of process names to exclude from scanning"}},"RealtimeProtectionEnabled":{"type":"string","defaultValue":"true","metadata":{"description":"Indicates - whether or not real time protection is enabled (default is true)"}},"ScheduledScanSettingsIsEnabled":{"type":"string","defaultValue":"false","metadata":{"description":"Indicates - whether or not custom scheduled scan settings are enabled (default is false)"}},"ScheduledScanSettingsScanType":{"type":"string","defaultValue":"Quick","metadata":{"description":"Indicates - whether scheduled scan setting type is set to Quick or Full (default is Quick)"}},"ScheduledScanSettingsDay":{"type":"string","defaultValue":"7","metadata":{"description":"Day - of the week for scheduled scan (1-Sunday, 2-Monday, ..., 7-Saturday)"}},"ScheduledScanSettingsTime":{"type":"string","defaultValue":"120","metadata":{"description":"When - to perform the scheduled scan, measured in minutes from midnight (0-1440). - For example: 0 = 12AM, 60 = 1AM, 120 = 2AM."}}},"resources":[{"name":"[concat(parameters(''vmName''),''/IaaSAntimalware'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","apiVersion":"2017-12-01","properties":{"publisher":"Microsoft.Azure.Security","type":"IaaSAntimalware","typeHandlerVersion":"1.3","autoUpgradeMinorVersion":true,"settings":{"AntimalwareEnabled":true,"RealtimeProtectionEnabled":"[parameters(''RealtimeProtectionEnabled'')]","ScheduledScanSettings":{"isEnabled":"[parameters(''ScheduledScanSettingsIsEnabled'')]","day":"[parameters(''ScheduledScanSettingsDay'')]","time":"[parameters(''ScheduledScanSettingsTime'')]","scanType":"[parameters(''ScheduledScanSettingsScanType'')]"},"Exclusions":{"Extensions":"[parameters(''ExclusionsExtensions'')]","Paths":"[parameters(''ExclusionsPaths'')]","Processes":"[parameters(''ExclusionsProcesses'')]"}}}}]},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"RealtimeProtectionEnabled":{"value":"true"},"ScheduledScanSettingsIsEnabled":{"value":"true"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2835b622-407b-4114-9198-6f7064cbe0dc","type":"Microsoft.Authorization/policyDefinitions","name":"2835b622-407b-4114-9198-6f7064cbe0dc"},{"properties":{"displayName":"Microsoft - Managed Control 1342 - Authenticator Management | Hardware Token-Based Authentication","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1342"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/283a4e29-69d5-4c94-b99e-29acf003c899","type":"Microsoft.Authorization/policyDefinitions","name":"283a4e29-69d5-4c94-b99e-29acf003c899"},{"properties":{"displayName":"Microsoft - Managed Control 1436 - Media Transport","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Media Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1436"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/28aab8b4-74fd-4b7c-9080-5a7be525d574","type":"Microsoft.Authorization/policyDefinitions","name":"28aab8b4-74fd-4b7c-9080-5a7be525d574"},{"properties":{"displayName":"Microsoft - Managed Control 1224 - Information System Component Inventory | Updates During - Installations / Removals","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1224"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/28cfa30b-7f72-47ce-ba3b-eed26c8d2c82","type":"Microsoft.Authorization/policyDefinitions","name":"28cfa30b-7f72-47ce-ba3b-eed26c8d2c82"},{"properties":{"displayName":"Microsoft - Managed Control 1148 - Security Assessments | Independent Assessors","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1148"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/28e62650-c7c2-4786-bdfa-17edc1673902","type":"Microsoft.Authorization/policyDefinitions","name":"28e62650-c7c2-4786-bdfa-17edc1673902"},{"properties":{"displayName":"Microsoft - Managed Control 1418 - Nonlocal Maintenance | Comparable Security / Sanitization","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1418"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/28e633fd-284e-4ea7-88b4-02ca157ed713","type":"Microsoft.Authorization/policyDefinitions","name":"28e633fd-284e-4ea7-88b4-02ca157ed713"},{"properties":{"displayName":"Advanced - threat protection should be enabled on App Service","policyType":"BuiltIn","mode":"All","description":"Advanced - threat protection standard tier should be enabled on App Service. This provides - real-time threat protection for App Service workloads and generates hardening - recommendations as well as alerts for suspicious activities.","metadata":{"version":"1.0.1","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/pricings","name":"AppServices","existenceScope":"subscription","existenceCondition":{"field":"Microsoft.Security/pricings/pricingTier","equals":"Standard"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","type":"Microsoft.Authorization/policyDefinitions","name":"2913021d-f2fd-4f3d-b958-22354e2bdbcb"},{"properties":{"displayName":"Microsoft - Managed Control 1634 - Boundary Protection | Prevent Unauthorized Exfiltration","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1634"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/292a7c44-37fa-4c68-af7c-9d836955ded2","type":"Microsoft.Authorization/policyDefinitions","name":"292a7c44-37fa-4c68-af7c-9d836955ded2"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''Security Options - User - Account Control''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Security Options - User Account Control''. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsUserAccountControl","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/29829ec2-489d-4925-81b7-bda06b1718e0","type":"Microsoft.Authorization/policyDefinitions","name":"29829ec2-489d-4925-81b7-bda06b1718e0"},{"properties":{"displayName":"Append - a tag and its value to resources","policyType":"BuiltIn","mode":"Indexed","description":"Appends - the specified tag and value when any resource which is missing this tag is - created or updated. Does not modify the tags of resources created before this - policy was applied until those resources are changed. Does not apply to resource - groups. New ''modify'' effect policies are available that support remediation - of tags on existing resources (see https://aka.ms/modifydoc).","metadata":{"version":"1.0.1","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},"then":{"effect":"append","details":[{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[parameters(''tagValue'')]"}]}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2a0e14a6-b0a6-4fab-991a-187a4f81c498","type":"Microsoft.Authorization/policyDefinitions","name":"2a0e14a6-b0a6-4fab-991a-187a4f81c498"},{"properties":{"displayName":"Microsoft - Managed Control 1219 - Least Functionality | Authorized Software / Whitelisting","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1219"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2a39ac75-622b-4c88-9a3f-45b7373f7ef7","type":"Microsoft.Authorization/policyDefinitions","name":"2a39ac75-622b-4c88-9a3f-45b7373f7ef7"},{"properties":{"displayName":"Microsoft - Managed Control 1274 - Alternate Processing Site","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1274"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2aee175f-cd16-4825-939a-a85349d96210","type":"Microsoft.Authorization/policyDefinitions","name":"2aee175f-cd16-4825-939a-a85349d96210"},{"properties":{"displayName":"Microsoft - Managed Control 1603 - Developer Security Testing And Evaluation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1603"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2b909c26-162f-47ce-8e15-0c1f55632eac","type":"Microsoft.Authorization/policyDefinitions","name":"2b909c26-162f-47ce-8e15-0c1f55632eac"},{"properties":{"displayName":"Managed - identity should be used in your Web App","policyType":"BuiltIn","mode":"Indexed","description":"Use - a managed identity for enhanced authentication security","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/managedServiceIdentityId","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","type":"Microsoft.Authorization/policyDefinitions","name":"2b9ad585-36bc-4615-b300-fd4435808332"},{"properties":{"displayName":"Cognitive - Services accounts should enable data encryption","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Cognitive Services account not using data encryption. For - each Cognitive Services account with storage, should enable data encryption - with either customer managed or Microsoft managed key.","metadata":{"version":"1.0.0","category":"Cognitive - Services"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.CognitiveServices/accounts"},{"field":"Microsoft.CognitiveServices/accounts/encryption.keySource","exists":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2bdd0062-9d75-436e-89df-487dd8e4b3c7","type":"Microsoft.Authorization/policyDefinitions","name":"2bdd0062-9d75-436e-89df-487dd8e4b3c7"},{"properties":{"displayName":"Microsoft - Managed Control 1434 - Media Transport","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Media Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1434"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2c18f06b-a68d-41c3-8863-b8cd3acb5f8f","type":"Microsoft.Authorization/policyDefinitions","name":"2c18f06b-a68d-41c3-8863-b8cd3acb5f8f"},{"properties":{"displayName":"Microsoft - Managed Control 1343 - Authenticator Management | Expiration Of Cached Authenticators","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1343"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2c251a55-31eb-4e53-99c6-e9c43c393ac2","type":"Microsoft.Authorization/policyDefinitions","name":"2c251a55-31eb-4e53-99c6-e9c43c393ac2"},{"properties":{"displayName":"Microsoft - Managed Control 1388 - Information Spillage Response","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1388"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2c7c575a-d4c5-4f6f-bd49-dee97a8cba55","type":"Microsoft.Authorization/policyDefinitions","name":"2c7c575a-d4c5-4f6f-bd49-dee97a8cba55"},{"properties":{"displayName":"Microsoft - Managed Control 1344 - Authenticator Feedback","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1344"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2c895fe7-2d8e-43a2-838c-3a533a5b355e","type":"Microsoft.Authorization/policyDefinitions","name":"2c895fe7-2d8e-43a2-838c-3a533a5b355e"},{"properties":{"displayName":"SSH - access from the Internet should be blocked","policyType":"BuiltIn","mode":"All","description":"This - policy audits any network security rule that allows SSH access from Internet","metadata":{"version":"2.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups/securityRules"},{"allOf":[{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Allow"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"},{"anyOf":[{"field":"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange","equals":"*"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange","equals":"22"},{"value":"[if(and(not(empty(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange''))), - contains(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange''),''-'')), - and(lessOrEquals(int(first(split(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange''), - ''-''))),22),greaterOrEquals(int(last(split(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange''), - ''-''))),22)), ''false'')]","equals":"true"},{"count":{"field":"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]","where":{"value":"[if(and(not(empty(first(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]'')))), - contains(first(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]'')),''-'')), - and(lessOrEquals(int(first(split(first(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]'')), - ''-''))),22),greaterOrEquals(int(last(split(first(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]'')), - ''-''))),22)) , ''false'')]","equals":"true"}},"greater":0},{"not":{"field":"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]","notEquals":"*"}},{"not":{"field":"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]","notEquals":"22"}}]},{"anyOf":[{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"*"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"Internet"},{"not":{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]","notEquals":"*"}},{"not":{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]","notEquals":"Internet"}}]}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2c89a2e5-7285-40fe-afe0-ae8654b92fab","type":"Microsoft.Authorization/policyDefinitions","name":"2c89a2e5-7285-40fe-afe0-ae8654b92fab"},{"properties":{"displayName":"Unattached - disks should be encrypted","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any unattached disk without encryption enabled.","metadata":{"version":"1.0.0","category":"Compute"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/disks"},{"field":"Microsoft.Compute/disks/diskState","equals":"Unattached"},{"anyOf":[{"field":"Microsoft.Compute/disks/encryptionSettingsCollection.enabled","exists":"false"},{"field":"Microsoft.Compute/disks/encryptionSettingsCollection.enabled","equals":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2c89a2e5-7285-40fe-afe0-ae8654b92fb2","type":"Microsoft.Authorization/policyDefinitions","name":"2c89a2e5-7285-40fe-afe0-ae8654b92fb2"},{"properties":{"displayName":"Microsoft - Managed Control 1593 - External Information System Services | Processing, - Storage, And Service Location","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1593"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2cd0a426-b5f5-4fe0-9539-a6043cdbc6fa","type":"Microsoft.Authorization/policyDefinitions","name":"2cd0a426-b5f5-4fe0-9539-a6043cdbc6fa"},{"properties":{"displayName":"Microsoft - Managed Control 1546 - Vulnerability Scanning","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Risk Assessment control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1546"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2ce1ea7e-4038-4e53-82f4-63e8859333c1","type":"Microsoft.Authorization/policyDefinitions","name":"2ce1ea7e-4038-4e53-82f4-63e8859333c1"},{"properties":{"displayName":"Microsoft - Managed Control 1414 - Nonlocal Maintenance","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1414"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2ce63a52-e47b-4ae2-adbb-6e40d967f9e6","type":"Microsoft.Authorization/policyDefinitions","name":"2ce63a52-e47b-4ae2-adbb-6e40d967f9e6"},{"properties":{"displayName":"Microsoft - Managed Control 1679 - Malicious Code Protection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1679"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2cf42a28-193e-41c5-98df-7688e7ef0a88","type":"Microsoft.Authorization/policyDefinitions","name":"2cf42a28-193e-41c5-98df-7688e7ef0a88"},{"properties":{"displayName":"Microsoft - Managed Control 1068 - Wireless Access","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1068"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2d045bca-a0fd-452e-9f41-4ec33769717c","type":"Microsoft.Authorization/policyDefinitions","name":"2d045bca-a0fd-452e-9f41-4ec33769717c"},{"properties":{"displayName":"App - Service should use a virtual network service endpoint","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any App Service not configured to use a virtual network service - endpoint.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/virtualNetworkConnections","existenceCondition":{"field":"Microsoft.Web/sites/virtualnetworkconnections/vnetResourceId","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2d21331d-a4c2-4def-a9ad-ee4e1e023beb","type":"Microsoft.Authorization/policyDefinitions","name":"2d21331d-a4c2-4def-a9ad-ee4e1e023beb"},{"properties":{"displayName":"Microsoft - Managed Control 1704 - Security Alerts, Advisories, And Directives","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1704"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2d44b6fa-1134-4ea6-ad4e-9edb68f65429","type":"Microsoft.Authorization/policyDefinitions","name":"2d44b6fa-1134-4ea6-ad4e-9edb68f65429"},{"properties":{"displayName":"Show - audit results from Windows VMs that do not store passwords using reversible - encryption","policyType":"BuiltIn","mode":"All","description":"This policy - should only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines that do not store passwords using reversible encryption. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"StorePasswordsUsingReversibleEncryption","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2d60d3b7-aa10-454c-88a8-de39d99d17c6","type":"Microsoft.Authorization/policyDefinitions","name":"2d60d3b7-aa10-454c-88a8-de39d99d17c6"},{"properties":{"displayName":"Show - audit results from Linux VMs that allow remote connections from accounts without - passwords","policyType":"BuiltIn","mode":"All","description":"This policy - should only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Linux - virtual machines that allow remote connections from accounts without passwords. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"3.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordPolicy_msid110","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2d67222d-05fd-4526-a171-2ee132ad9e83","type":"Microsoft.Authorization/policyDefinitions","name":"2d67222d-05fd-4526-a171-2ee132ad9e83"},{"properties":{"displayName":"Microsoft - Managed Control 1077 - Use Of External Information Systems","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1077"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2dad3668-797a-412e-a798-07d3849a7a79","type":"Microsoft.Authorization/policyDefinitions","name":"2dad3668-797a-412e-a798-07d3849a7a79"},{"properties":{"displayName":"Microsoft - Managed Control 1149 - Security Assessments | Specialized Assessments","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1149"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2e1b855b-a013-481a-aeeb-2bcb129fd35d","type":"Microsoft.Authorization/policyDefinitions","name":"2e1b855b-a013-481a-aeeb-2bcb129fd35d"},{"properties":{"displayName":"Microsoft - Managed Control 1497 - System Security Plan | Plan / Coordinate With Other - Organizational Entities","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1497"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2e3c5583-1729-4d36-8771-59c32f090a22","type":"Microsoft.Authorization/policyDefinitions","name":"2e3c5583-1729-4d36-8771-59c32f090a22"},{"properties":{"displayName":"Microsoft - Managed Control 1000 - Access Control Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1000"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2ef3cc79-733e-48ed-ab6f-7bf439e9b406","type":"Microsoft.Authorization/policyDefinitions","name":"2ef3cc79-733e-48ed-ab6f-7bf439e9b406"},{"properties":{"displayName":"Microsoft - Managed Control 1519 - Personnel Termination","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1519"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2f13915a-324c-4ab8-b45c-2eefeeefb098","type":"Microsoft.Authorization/policyDefinitions","name":"2f13915a-324c-4ab8-b45c-2eefeeefb098"},{"properties":{"displayName":"[Preview]: - Network traffic data collection agent should be installed on Windows virtual - machines","policyType":"BuiltIn","mode":"Indexed","description":"Security - Center uses the Microsoft Dependency agent to collect network traffic data - from your Azure virtual machines to enable advanced network protection features - such as traffic visualization on the network map, network hardening recommendations - and specific network threats.","metadata":{"version":"1.0.1-preview","category":"Monitoring","preview":"true"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable Dependency Agent for Windows VMs - monitoring"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"DependencyAgentWindows"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","type":"Microsoft.Authorization/policyDefinitions","name":"2f2ee1de-44aa-4762-b6bd-0893fc3f306d"},{"properties":{"displayName":"Microsoft - Managed Control 1144 - Security Assessments","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1144"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2fa15ff1-a693-4ee4-b094-324818dc9a51","type":"Microsoft.Authorization/policyDefinitions","name":"2fa15ff1-a693-4ee4-b094-324818dc9a51"},{"properties":{"displayName":"Microsoft - Managed Control 1090 - Security Awareness Training","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Awareness and Training control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1090"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2fb740e5-cbc7-4d10-8686-d1bf826652b1","type":"Microsoft.Authorization/policyDefinitions","name":"2fb740e5-cbc7-4d10-8686-d1bf826652b1"},{"properties":{"displayName":"[Deprecated]: - Web Application should only be accessible over HTTPS","policyType":"BuiltIn","mode":"All","description":"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"},{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"OnlyHttpsForWebApplication","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2fde8a98-6892-426a-83ba-050e640c0ce0","type":"Microsoft.Authorization/policyDefinitions","name":"2fde8a98-6892-426a-83ba-050e640c0ce0"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''Security Options - Network - Access''","policyType":"BuiltIn","mode":"All","description":"This policy should - only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines with non-compliant settings in Group Policy category: ''Security - Options - Network Access''. For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsNetworkAccess","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/30040dab-4e75-4456-8273-14b8f75d91d9","type":"Microsoft.Authorization/policyDefinitions","name":"30040dab-4e75-4456-8273-14b8f75d91d9"},{"properties":{"displayName":"Advanced - threat protection should be enabled on Storage accounts","policyType":"BuiltIn","mode":"All","description":"Advanced - threat protection standard tier should be enabled on Storage accounts. This - provides detections of unusual and potentially harmful attempts to access - or exploit Storage accounts.","metadata":{"version":"1.0.1","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/pricings","name":"StorageAccounts","existenceScope":"subscription","existenceCondition":{"field":"Microsoft.Security/pricings/pricingTier","equals":"Standard"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","type":"Microsoft.Authorization/policyDefinitions","name":"308fbb08-4ab8-4e67-9b29-592e93fb94fa"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs that are not joined to the specified domain","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that are not joined to the specified domain. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"DomainName":{"type":"String","metadata":{"displayName":"Domain - Name (FQDN)","description":"The fully qualified domain name (FQDN) that the - Windows VMs should be joined to"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsDomainMembership","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[DomainMembership]WindowsDomainMembership;DomainName'', - ''='', parameters(''DomainName'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WindowsDomainMembership"},"DomainName":{"value":"[parameters(''DomainName'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"DomainName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[DomainMembership]WindowsDomainMembership;DomainName","value":"[parameters(''DomainName'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[DomainMembership]WindowsDomainMembership;DomainName","value":"[parameters(''DomainName'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/315c850a-272d-4502-8935-b79010405970","type":"Microsoft.Authorization/policyDefinitions","name":"315c850a-272d-4502-8935-b79010405970"},{"properties":{"displayName":"Microsoft - Managed Control 1042 - Least Privilege | Auditing Use Of Privileged Functions","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1042"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/319dc4f0-0fed-4ac9-8fc3-7aeddee82c07","type":"Microsoft.Authorization/policyDefinitions","name":"319dc4f0-0fed-4ac9-8fc3-7aeddee82c07"},{"properties":{"displayName":"Microsoft - Managed Control 1698 - Information System Monitoring | Individuals Posing - Greater Risk","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1698"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/31b752c1-05a9-432a-8fce-c39b56550119","type":"Microsoft.Authorization/policyDefinitions","name":"31b752c1-05a9-432a-8fce-c39b56550119"},{"properties":{"displayName":"[Preview]: - Audit Log Analytics Agent Deployment - VM Image (OS) unlisted","policyType":"BuiltIn","mode":"Indexed","description":"Reports - VMs as non-compliant if the VM Image (OS) is not in the list defined and the - agent is not installed. The list of OS images will be updated over time as - support is updated.","metadata":{"version":"1.0.0-preview","category":"Monitoring","preview":true},"parameters":{"listOfImageIdToInclude_windows":{"type":"Array","metadata":{"displayName":"[Preview]: - Optional: List of VM images that have supported Windows OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"},"defaultValue":[]},"listOfImageIdToInclude_linux":{"type":"Array","metadata":{"displayName":"[Preview]: - Optional: List of VM images that have supported Linux OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"},"defaultValue":[]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"not":{"anyOf":[{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude_windows'')]"},{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude_linux'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"12*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"14.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"16.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"18.04*LTS"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7.*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/32133ab0-ee4b-4b44-98d6-042180979d50","type":"Microsoft.Authorization/policyDefinitions","name":"32133ab0-ee4b-4b44-98d6-042180979d50"},{"properties":{"displayName":"Microsoft - Managed Control 1587 - External Information System Services","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1587"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/32820956-9c6d-4376-934c-05cd8525be7c","type":"Microsoft.Authorization/policyDefinitions","name":"32820956-9c6d-4376-934c-05cd8525be7c"},{"properties":{"displayName":"Microsoft - Managed Control 1333 - Authenticator Management | Pki-Based Authentication","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1333"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3298d6bf-4bc6-4278-a95d-f7ef3ac6e594","type":"Microsoft.Authorization/policyDefinitions","name":"3298d6bf-4bc6-4278-a95d-f7ef3ac6e594"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs on which the specified services are not - installed and ''Running''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which the specified services are not installed and ''Running''. It also - creates a system-assigned managed identity and deploys the VM extension for - Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"ServiceName":{"type":"String","metadata":{"displayName":"Service - names (supports wildcards)","description":"A semicolon-separated list of the - names of the services that should be installed and ''Running''. e.g. ''WinRm;Wi*''"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsServiceStatus","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[WindowsServiceStatus]WindowsServiceStatus1;ServiceName'', - ''='', parameters(''ServiceName'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WindowsServiceStatus"},"ServiceName":{"value":"[parameters(''ServiceName'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"ServiceName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[WindowsServiceStatus]WindowsServiceStatus1;ServiceName","value":"[parameters(''ServiceName'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[WindowsServiceStatus]WindowsServiceStatus1;ServiceName","value":"[parameters(''ServiceName'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/32b1e4d4-6cd5-47b4-a935-169da8a5c262","type":"Microsoft.Authorization/policyDefinitions","name":"32b1e4d4-6cd5-47b4-a935-169da8a5c262"},{"properties":{"displayName":"Microsoft - Managed Control 1445 - Physical And Environmental Protection Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1445"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/32d07d59-2716-4972-b37b-214a67ac4a37","type":"Microsoft.Authorization/policyDefinitions","name":"32d07d59-2716-4972-b37b-214a67ac4a37"},{"properties":{"displayName":"[Preview]: - Deploy the Linux Guest Configuration extension to enable Guest Configuration - assignments on Linux virtual machines","policyType":"BuiltIn","mode":"Indexed","description":"This - policy deploys the Linux Guest Configuration extension to Linux virtual machines - hosted in Azure that are supported by Guest Configuration. The Linux Guest - Configuration extension is a prerequisite for all Linux Guest Configuration - assignments and must deployed to machines before using any Linux Guest Configuration - policy definition. For more information on Guest Configuration, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"1.0.0-preview","preview":true},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.Compute/virtualMachines/extensions","name":"AzurePolicyforLinux","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.GuestConfiguration"},{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"ConfigurationforLinux"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"resources":[{"apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforLinux'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforLinux","typeHandlerVersion":"1.0","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/331e8ea8-378a-410f-a2e5-ae22f38bb0da","type":"Microsoft.Authorization/policyDefinitions","name":"331e8ea8-378a-410f-a2e5-ae22f38bb0da"},{"properties":{"displayName":"MySQL - server should use a virtual network service endpoint","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits MySQL servers not configured to use a virtual network service - endpoint. For more details, visit https://aka.ms/mysqlvnet.","metadata":{"version":"1.0.1","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforMySQL/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforMySQL/servers/virtualNetworkRules","existenceCondition":{"field":"Microsoft.DBforMySQL/servers/virtualNetworkRules/virtualNetworkSubnetId","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3375856c-3824-4e0e-ae6a-79e011dd4c47","type":"Microsoft.Authorization/policyDefinitions","name":"3375856c-3824-4e0e-ae6a-79e011dd4c47"},{"properties":{"displayName":"Microsoft - Managed Control 1282 - Telecommunications Services | Single Points Of Failure","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1282"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/34042a97-ec6d-4263-93d2-8c1c46823b2a","type":"Microsoft.Authorization/policyDefinitions","name":"34042a97-ec6d-4263-93d2-8c1c46823b2a"},{"properties":{"displayName":"Deploy - prerequisites to audit Linux VMs that have accounts without passwords","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that have accounts without passwords. It also creates a system-assigned managed - identity and deploys the VM extension for Guest Configuration. This policy - should only be used along with its corresponding audit policy in an initiative. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"3.0.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordPolicy_msid232","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"PasswordPolicy_msid232"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforLinux'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforLinux","typeHandlerVersion":"1.0","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3470477a-b35a-49db-aca5-1073d04524fe","type":"Microsoft.Authorization/policyDefinitions","name":"3470477a-b35a-49db-aca5-1073d04524fe"},{"properties":{"displayName":"Microsoft - Managed Control 1151 - System Interconnections","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1151"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/347e3b69-7fb7-47df-a8ef-71a1a7b44bca","type":"Microsoft.Authorization/policyDefinitions","name":"347e3b69-7fb7-47df-a8ef-71a1a7b44bca"},{"properties":{"displayName":"Microsoft - Managed Control 1412 - Nonlocal Maintenance","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1412"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3492d949-0dbb-4589-88b3-7b59601cc764","type":"Microsoft.Authorization/policyDefinitions","name":"3492d949-0dbb-4589-88b3-7b59601cc764"},{"properties":{"displayName":"Microsoft - Managed Control 1475 - Emergency Lighting","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1475"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/34a63848-30cf-4081-937e-ce1a1c885501","type":"Microsoft.Authorization/policyDefinitions","name":"34a63848-30cf-4081-937e-ce1a1c885501"},{"properties":{"displayName":"Microsoft - Managed Control 1060 - Remote Access","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1060"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/34a987fd-2003-45de-a120-014956581f2b","type":"Microsoft.Authorization/policyDefinitions","name":"34a987fd-2003-45de-a120-014956581f2b"},{"properties":{"displayName":"Storage - accounts should restrict network access","policyType":"BuiltIn","mode":"Indexed","description":"Network - access to storage accounts should be restricted. Configure network rules so - only applications from allowed networks can access the storage account. To - allow connections from specific internet or on-premise clients, access can - be granted to traffic from specific Azure virtual networks or to public internet - IP address ranges","metadata":{"version":"1.1.0","category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"field":"Microsoft.Storage/storageAccounts/networkAcls.defaultAction","notEquals":"Deny"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","type":"Microsoft.Authorization/policyDefinitions","name":"34c877ad-507e-4c82-993e-3452a6e0ad3c"},{"properties":{"displayName":"Microsoft - Managed Control 1341 - Authenticator Management | Multiple Information System - Accounts","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1341"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/34cb7e92-fe4c-4826-b51e-8cd203fa5d35","type":"Microsoft.Authorization/policyDefinitions","name":"34cb7e92-fe4c-4826-b51e-8cd203fa5d35"},{"properties":{"displayName":"Diagnostic - logs in Logic Apps should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of diagnostic logs. This enables you to recreate activity trails - to use for investigation purposes; when a security incident occurs or when - your network is compromised","metadata":{"version":"3.0.0","category":"Logic - Apps"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Logic/workflows"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","type":"Microsoft.Authorization/policyDefinitions","name":"34f95f76-5386-4de7-b824-0d8478470c9d"},{"properties":{"displayName":"Microsoft - Managed Control 1210 - Configuration Settings","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1210"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3502c968-c490-4570-8167-1476f955e9b8","type":"Microsoft.Authorization/policyDefinitions","name":"3502c968-c490-4570-8167-1476f955e9b8"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs that do not have a maximum password age - of 70 days","policyType":"BuiltIn","mode":"Indexed","description":"This policy - creates a Guest Configuration assignment to audit Windows virtual machines - that do not have a maximum password age of 70 days. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"MaximumPasswordAge","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"MaximumPasswordAge"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/356a906e-05e5-4625-8729-90771e0ee934","type":"Microsoft.Authorization/policyDefinitions","name":"356a906e-05e5-4625-8729-90771e0ee934"},{"properties":{"displayName":"CORS - should not allow every resource to access your API App","policyType":"BuiltIn","mode":"Indexed","description":"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your API app. - Allow only required domains to interact with your API app.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","existenceCondition":{"field":"Microsoft.Web/sites/config/web.cors.allowedOrigins[*]","notEquals":"*"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","type":"Microsoft.Authorization/policyDefinitions","name":"358c20a6-3f9e-4f0e-97ff-c6ce485e2aac"},{"properties":{"displayName":"Microsoft - Managed Control 1659 - Architecture And Provisioning For Name / Address Resolution - Service","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1659"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/35a4102f-a778-4a2e-98c2-971056288df8","type":"Microsoft.Authorization/policyDefinitions","name":"35a4102f-a778-4a2e-98c2-971056288df8"},{"properties":{"displayName":"Gateway - subnets should not be configured with a network security group","policyType":"BuiltIn","mode":"All","description":"This - policy denies if a gateway subnet is configured with a network security group. - Assigning a network security group to a gateway subnet will cause the gateway - to stop functioning.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/virtualNetworks/subnets"},{"field":"name","equals":"GatewaySubnet"},{"field":"Microsoft.Network/virtualNetworks/subnets/networkSecurityGroup.id","exists":"true"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/35f9c03a-cc27-418e-9c0c-539ff999d010","type":"Microsoft.Authorization/policyDefinitions","name":"35f9c03a-cc27-418e-9c0c-539ff999d010"},{"properties":{"displayName":"Microsoft - Managed Control 1043 - Least Privilege | Prohibit Non-Privileged Users From - Executing Privileged Functions","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1043"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/361a77f6-0f9c-4748-8eec-bc13aaaa2455","type":"Microsoft.Authorization/policyDefinitions","name":"361a77f6-0f9c-4748-8eec-bc13aaaa2455"},{"properties":{"displayName":"Deploy - Advanced Threat Protection on Storage Accounts","policyType":"BuiltIn","mode":"Indexed","description":"This - policy enables Advanced Threat Protection on Storage Accounts.","metadata":{"version":"1.0.0","category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Storage/storageAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/advancedThreatProtectionSettings","name":"current","existenceCondition":{"field":"Microsoft.Security/advancedThreatProtectionSettings/isEnabled","equals":"true"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"storageAccountName":{"type":"string"}},"resources":[{"apiVersion":"2019-01-01","type":"Microsoft.Storage/storageAccounts/providers/advancedThreatProtectionSettings","name":"[concat(parameters(''storageAccountName''), - ''/Microsoft.Security/current'')]","properties":{"isEnabled":true}}]},"parameters":{"storageAccountName":{"value":"[field(''name'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/361c2074-3595-4e5d-8cab-4f21dffc835c","type":"Microsoft.Authorization/policyDefinitions","name":"361c2074-3595-4e5d-8cab-4f21dffc835c"},{"properties":{"displayName":"Microsoft - Managed Control 1313 - Identifier Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1313"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/36220f5b-79a1-4cdb-8c74-2d2449f9a510","type":"Microsoft.Authorization/policyDefinitions","name":"36220f5b-79a1-4cdb-8c74-2d2449f9a510"},{"properties":{"displayName":"Microsoft - Managed Control 1630 - Boundary Protection | External Telecommunications Services","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1630"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3643717a-3897-4bfd-8530-c7c96b26b2a0","type":"Microsoft.Authorization/policyDefinitions","name":"3643717a-3897-4bfd-8530-c7c96b26b2a0"},{"properties":{"displayName":"Automation - account variables should be encrypted","policyType":"BuiltIn","mode":"All","description":"It - is important to enable encryption of Automation account variable assets when - storing sensitive data","metadata":{"version":"1.1.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts/variables"},{"field":"Microsoft.Automation/automationAccounts/variables/isEncrypted","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","type":"Microsoft.Authorization/policyDefinitions","name":"3657f5a0-770e-44a3-b44e-9431ba1e9735"},{"properties":{"displayName":"Microsoft - Managed Control 1339 - Authenticator Management | Protection Of Authenticators","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1339"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/367ae386-db7f-4167-b672-984ff86277c0","type":"Microsoft.Authorization/policyDefinitions","name":"367ae386-db7f-4167-b672-984ff86277c0"},{"properties":{"displayName":"Microsoft - Managed Control 1685 - Information System Monitoring","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1685"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/36b0ef30-366f-4b1b-8652-a3511df11f53","type":"Microsoft.Authorization/policyDefinitions","name":"36b0ef30-366f-4b1b-8652-a3511df11f53"},{"properties":{"displayName":"Deploy - Threat Detection on SQL servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy ensures that Threat Detection is enabled on SQL Servers.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"DeployIfNotExists","details":{"type":"Microsoft.Sql/servers/securityAlertPolicies","name":"Default","existenceCondition":{"field":"Microsoft.Sql/securityAlertPolicies.state","equals":"Enabled"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serverName":{"type":"string"}},"variables":{},"resources":[{"name":"[concat(parameters(''serverName''), - ''/Default'')]","type":"Microsoft.Sql/servers/securityAlertPolicies","apiVersion":"2017-03-01-preview","properties":{"state":"Enabled","emailAccountAdmins":true}}]},"parameters":{"serverName":{"value":"[field(''name'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/36d49e87-48c4-4f2e-beed-ba4ed02b71f5","type":"Microsoft.Authorization/policyDefinitions","name":"36d49e87-48c4-4f2e-beed-ba4ed02b71f5"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''Security Options - - Network Security''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - Network Security''. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos":{"type":"String","metadata":{"displayName":"Network - Security: Configure encryption types allowed for Kerberos","description":"Specifies - the encryption types that Kerberos is allowed to use."},"defaultValue":"2147483644"},"NetworkSecurityLANManagerAuthenticationLevel":{"type":"String","metadata":{"displayName":"Network - security: LAN Manager authentication level","description":"Specify which challenge-response - authentication protocol is used for network logons. This choice affects the - level of authentication protocol used by clients, the level of session security - negotiated, and the level of authentication accepted by servers."},"defaultValue":"5"},"NetworkSecurityLDAPClientSigningRequirements":{"type":"String","metadata":{"displayName":"Network - security: LDAP client signing requirements","description":"Specify the level - of data signing that is requested on behalf of clients that issue LDAP BIND - requests."},"defaultValue":"1"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients":{"type":"String","metadata":{"displayName":"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients","description":"Specifies which behaviors are allowed by clients for - applications using the NTLM Security Support Provider (SSP). The SSP Interface - (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers - for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers","description":"Specifies which behaviors are allowed by servers for - applications using the NTLM Security Support Provider (SSP). The SSP Interface - (SSPI) is used by applications that need authentication services."},"defaultValue":"537395200"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsNetworkSecurity","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue'', - ''='', parameters(''NetworkSecurityConfigureEncryptionTypesAllowedForKerberos''), - '','', ''Network security: LAN Manager authentication level;ExpectedValue'', - ''='', parameters(''NetworkSecurityLANManagerAuthenticationLevel''), '','', - ''Network security: LDAP client signing requirements;ExpectedValue'', ''='', - parameters(''NetworkSecurityLDAPClientSigningRequirements''), '','', ''Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients;ExpectedValue'', ''='', parameters(''NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients''), - '','', ''Network security: Minimum session security for NTLM SSP based (including - secure RPC) servers;ExpectedValue'', ''='', parameters(''NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsNetworkSecurity"},"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos":{"value":"[parameters(''NetworkSecurityConfigureEncryptionTypesAllowedForKerberos'')]"},"NetworkSecurityLANManagerAuthenticationLevel":{"value":"[parameters(''NetworkSecurityLANManagerAuthenticationLevel'')]"},"NetworkSecurityLDAPClientSigningRequirements":{"value":"[parameters(''NetworkSecurityLDAPClientSigningRequirements'')]"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients":{"value":"[parameters(''NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients'')]"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"value":"[parameters(''NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos":{"type":"string"},"NetworkSecurityLANManagerAuthenticationLevel":{"type":"string"},"NetworkSecurityLDAPClientSigningRequirements":{"type":"string"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients":{"type":"string"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue","value":"[parameters(''NetworkSecurityConfigureEncryptionTypesAllowedForKerberos'')]"},{"name":"Network - security: LAN Manager authentication level;ExpectedValue","value":"[parameters(''NetworkSecurityLANManagerAuthenticationLevel'')]"},{"name":"Network - security: LDAP client signing requirements;ExpectedValue","value":"[parameters(''NetworkSecurityLDAPClientSigningRequirements'')]"},{"name":"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients;ExpectedValue","value":"[parameters(''NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients'')]"},{"name":"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers;ExpectedValue","value":"[parameters(''NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue","value":"[parameters(''NetworkSecurityConfigureEncryptionTypesAllowedForKerberos'')]"},{"name":"Network - security: LAN Manager authentication level;ExpectedValue","value":"[parameters(''NetworkSecurityLANManagerAuthenticationLevel'')]"},{"name":"Network - security: LDAP client signing requirements;ExpectedValue","value":"[parameters(''NetworkSecurityLDAPClientSigningRequirements'')]"},{"name":"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients;ExpectedValue","value":"[parameters(''NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients'')]"},{"name":"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers;ExpectedValue","value":"[parameters(''NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/36e17963-7202-494a-80c3-f508211c826b","type":"Microsoft.Authorization/policyDefinitions","name":"36e17963-7202-494a-80c3-f508211c826b"},{"properties":{"displayName":"Microsoft - Managed Control 1557 - Vulnerability Scanning | Review Historic Audit Logs","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Risk Assessment control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1557"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/36fbe499-f2f2-41b6-880e-52d7ea1d94a5","type":"Microsoft.Authorization/policyDefinitions","name":"36fbe499-f2f2-41b6-880e-52d7ea1d94a5"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''Security Options - - Interactive Logon''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - Interactive Logon''. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsInteractiveLogon","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsInteractiveLogon"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3750712b-43d0-478e-9966-d2c26f6141b9","type":"Microsoft.Authorization/policyDefinitions","name":"3750712b-43d0-478e-9966-d2c26f6141b9"},{"properties":{"displayName":"Microsoft - Managed Control 1624 - Boundary Protection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1624"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/37d079e3-d6aa-4263-a069-dd7ac6dd9684","type":"Microsoft.Authorization/policyDefinitions","name":"37d079e3-d6aa-4263-a069-dd7ac6dd9684"},{"properties":{"displayName":"Storage - accounts should be migrated to new Azure Resource Manager resources","policyType":"BuiltIn","mode":"All","description":"Use - new Azure Resource Manager for your storage accounts to provide security enhancements - such as: stronger access control (RBAC), better auditing, Azure Resource Manager - based deployment and governance, access to managed identities, access to key - vault for secrets, Azure AD-based authentication and support for tags and - resource groups for easier security management","metadata":{"version":"1.0.0","category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.ClassicStorage/storageAccounts","Microsoft.Storage/StorageAccounts"]},{"value":"[field(''type'')]","equals":"Microsoft.ClassicStorage/storageAccounts"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","type":"Microsoft.Authorization/policyDefinitions","name":"37e0d2fe-28a5-43d6-a273-67d37d1f5606"},{"properties":{"displayName":"Microsoft - Managed Control 1335 - Authenticator Management | Pki-Based Authentication","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1335"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/382016f3-d4ba-4e15-9716-55077ec4dc2a","type":"Microsoft.Authorization/policyDefinitions","name":"382016f3-d4ba-4e15-9716-55077ec4dc2a"},{"properties":{"displayName":"Diagnostic - logs in IoT Hub should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of diagnostic logs. This enables you to recreate activity trails - to use for investigation purposes; when a security incident occurs or when - your network is compromised","metadata":{"version":"2.0.0","category":"Internet - of Things"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Devices/IotHubs"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"not":{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"}},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","type":"Microsoft.Authorization/policyDefinitions","name":"383856f8-de7f-44a2-81fc-e5135b5c2aa4"},{"properties":{"displayName":"[Preview]: - Deploy the Windows Guest Configuration extension to enable Guest Configuration - assignments on Windows virtual machines","policyType":"BuiltIn","mode":"Indexed","description":"This - policy deploys the Windows Guest Configuration extension to Windows virtual - machines hosted in Azure that are supported by Guest Configuration. The Windows - Guest Configuration extension is a prerequisite for all Windows Guest Configuration - assignments and must deployed to machines before using any Windows Guest Configuration - policy definition. For more information on Guest Configuration, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"1.0.0-preview","preview":true},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.Compute/virtualMachines/extensions","name":"AzurePolicyforWindows","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.GuestConfiguration"},{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"ConfigurationforWindows"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"resources":[{"apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/385f5831-96d4-41db-9a3c-cd3af78aaae6","type":"Microsoft.Authorization/policyDefinitions","name":"385f5831-96d4-41db-9a3c-cd3af78aaae6"},{"properties":{"displayName":"Microsoft - Managed Control 1081 - Information Sharing","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1081"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3867f2a9-23bb-4729-851f-c3ad98580caf","type":"Microsoft.Authorization/policyDefinitions","name":"3867f2a9-23bb-4729-851f-c3ad98580caf"},{"properties":{"displayName":"Microsoft - Managed Control 1522 - Personnel Transfer","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1522"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/38b470cc-f939-4a15-80e0-9f0c74f2e2c9","type":"Microsoft.Authorization/policyDefinitions","name":"38b470cc-f939-4a15-80e0-9f0c74f2e2c9"},{"properties":{"displayName":"Microsoft - Managed Control 1416 - Nonlocal Maintenance | Document Nonlocal Maintenance","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1416"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/38dfd8a3-5290-4099-88b7-4081f4c4d8ae","type":"Microsoft.Authorization/policyDefinitions","name":"38dfd8a3-5290-4099-88b7-4081f4c4d8ae"},{"properties":{"displayName":"Microsoft - Managed Control 1397 - Controlled Maintenance","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1397"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/391af4ab-1117-46b9-b2c7-78bbd5cd995b","type":"Microsoft.Authorization/policyDefinitions","name":"391af4ab-1117-46b9-b2c7-78bbd5cd995b"},{"properties":{"displayName":"Microsoft - Managed Control 1556 - Vulnerability Scanning | Automated Trend Analyses","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Risk Assessment control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1556"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/391ff8b3-afed-405e-9f7d-ef2f8168d5da","type":"Microsoft.Authorization/policyDefinitions","name":"391ff8b3-afed-405e-9f7d-ef2f8168d5da"},{"properties":{"displayName":"[Deprecated]: - Advanced data security settings for SQL Managed Instance should contain an - email address to receive security alerts","policyType":"BuiltIn","mode":"Indexed","description":"Ensure - that an email address is provided for the ''Send alerts to'' field in the - advanced data security settings. This email address receives alert notifications - when anomalous activities are detected on SQL Managed Instance.","metadata":{"version":"1.0.1-deprecated","category":"SQL","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"Disabled"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/managedInstances"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/managedInstances/securityAlertPolicies","name":"default","existenceCondition":{"allOf":[{"field":"Microsoft.Sql/managedInstances/securityAlertPolicies/emailAddresses[*]","notEquals":""},{"field":"Microsoft.Sql/managedInstances/securityAlertPolicies/emailAddresses[*]","exists":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3965c43d-b5f4-482e-b74a-d89ee0e0b3a8","type":"Microsoft.Authorization/policyDefinitions","name":"3965c43d-b5f4-482e-b74a-d89ee0e0b3a8"},{"properties":{"displayName":"Microsoft - Managed Control 1232 - Configuration Management Plan","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1232"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/396ba986-eac1-4d6d-85c4-d3fda6b78272","type":"Microsoft.Authorization/policyDefinitions","name":"396ba986-eac1-4d6d-85c4-d3fda6b78272"},{"properties":{"displayName":"Microsoft - Managed Control 1246 - Contingency Plan","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1246"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/398eb61e-8111-40d5-a0c9-003df28f1753","type":"Microsoft.Authorization/policyDefinitions","name":"398eb61e-8111-40d5-a0c9-003df28f1753"},{"properties":{"displayName":"FTPS - only should be required in your Function App","policyType":"BuiltIn","mode":"Indexed","description":"Enable - FTPS enforcement for enhanced security","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/ftpsState","equals":"FtpsOnly"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","type":"Microsoft.Authorization/policyDefinitions","name":"399b2637-a50f-4f95-96f8-3a145476eb15"},{"properties":{"displayName":"Microsoft - Managed Control 1680 - Malicious Code Protection | Central Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1680"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/399cd6ee-0e18-41db-9dea-cde3bd712f38","type":"Microsoft.Authorization/policyDefinitions","name":"399cd6ee-0e18-41db-9dea-cde3bd712f38"},{"properties":{"displayName":"Microsoft - Managed Control 1228 - Information System Component Inventory | Accountability - Information","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1228"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/39c54140-5902-4079-8bb5-ad31936fe764","type":"Microsoft.Authorization/policyDefinitions","name":"39c54140-5902-4079-8bb5-ad31936fe764"},{"properties":{"displayName":"Microsoft - Managed Control 1039 - Least Privilege | Review Of User Privileges","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1039"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3a7b9de4-a8a2-4672-914d-c5f6752aa7f9","type":"Microsoft.Authorization/policyDefinitions","name":"3a7b9de4-a8a2-4672-914d-c5f6752aa7f9"},{"properties":{"displayName":"Microsoft - Managed Control 1648 - Collaborative Computing Devices","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1648"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3a9eb14b-495a-4ebb-933c-ce4ef5264e32","type":"Microsoft.Authorization/policyDefinitions","name":"3a9eb14b-495a-4ebb-933c-ce4ef5264e32"},{"properties":{"displayName":"Microsoft - Managed Control 1315 - Identifier Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1315"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3aa87116-f1a1-4edb-bfbf-14e036f8d454","type":"Microsoft.Authorization/policyDefinitions","name":"3aa87116-f1a1-4edb-bfbf-14e036f8d454"},{"properties":{"displayName":"[Preview]: - Pod Security Policies should be defined on Kubernetes Services","policyType":"BuiltIn","mode":"All","description":"Define - Pod Security Policies to reduce the attack vector by removing unnecessary - application privileges. It is recommended to configure Pod Security Policies - to only allow pods to access the resources which they have permissions to - access.","metadata":{"version":"1.0.0-preview","category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"anyOf":[{"field":"Microsoft.ContainerService/managedClusters/enablePodSecurityPolicy","exists":"false"},{"field":"Microsoft.ContainerService/managedClusters/enablePodSecurityPolicy","equals":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3abeb944-26af-43ee-b83d-32aaf060fb94","type":"Microsoft.Authorization/policyDefinitions","name":"3abeb944-26af-43ee-b83d-32aaf060fb94"},{"properties":{"displayName":"Microsoft - Managed Control 1548 - Vulnerability Scanning","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Risk Assessment control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1548"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3afe6c78-6124-4d95-b85c-eb8c0c9539cb","type":"Microsoft.Authorization/policyDefinitions","name":"3afe6c78-6124-4d95-b85c-eb8c0c9539cb"},{"properties":{"displayName":"Microsoft - Managed Control 1266 - Contingency Plan Testing | Alternate Processing Site","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1266"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3b4a3eb2-c25d-40bf-ad41-5094b6f59cee","type":"Microsoft.Authorization/policyDefinitions","name":"3b4a3eb2-c25d-40bf-ad41-5094b6f59cee"},{"properties":{"displayName":"Microsoft - Managed Control 1003 - Account Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1003"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3b68b179-3704-4ff7-b51d-7d65374d165d","type":"Microsoft.Authorization/policyDefinitions","name":"3b68b179-3704-4ff7-b51d-7d65374d165d"},{"properties":{"displayName":"An - activity log alert should exist for specific Security operations","policyType":"BuiltIn","mode":"All","description":"This - policy audits specific Security operations with no activity log alerts configured.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"operationName":{"type":"String","metadata":{"displayName":"Operation - Name","description":"Security Operation name for which activity log alert - should exist"},"allowedValues":["Microsoft.Security/policies/write","Microsoft.Security/securitySolutions/write","Microsoft.Security/securitySolutions/delete"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Resources/subscriptions"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/ActivityLogAlerts","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/ActivityLogAlerts/enabled","equals":"true"},{"count":{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field","equals":"category"},{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals","equals":"Security"}]},{"allOf":[{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field","equals":"operationName"},{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals","equals":"[parameters(''operationName'')]"}]}]}},"equals":2},{"not":{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field","equals":"category"}},{"not":{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field","equals":"operationName"}}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3b980d31-7904-4bb7-8575-5665739a8052","type":"Microsoft.Authorization/policyDefinitions","name":"3b980d31-7904-4bb7-8575-5665739a8052"},{"properties":{"displayName":"Deploy - Dependency agent for Windows virtual machine scale sets","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Dependency agent for Windows virtual machine scale sets if the VM Image (OS) - is in the list defined and the agent is not installed. The list of OS images - will be updated over time as support is updated. Note: if your scale set upgradePolicy - is set to Manual, you need to apply the extension to the all virtual machines - in the set by calling upgrade on them. In CLI this would be az vmss update-instances.","metadata":{"version":"1.1.1","category":"Monitoring"},"parameters":{"listOfImageIdToInclude":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Windows OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"},"defaultValue":[]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/type","equals":"DependencyAgentWindows"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"variables":{"vmExtensionName":"DependencyAgent","vmExtensionPublisher":"Microsoft.Azure.Monitoring.DependencyAgent","vmExtensionType":"DependencyAgentWindows","vmExtensionTypeHandlerVersion":"9.7"},"resources":[{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","apiVersion":"2019-12-01","location":"[parameters(''location'')]","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","typeHandlerVersion":"[variables(''vmExtensionTypeHandlerVersion'')]","autoUpgradeMinorVersion":true,"enableAutomaticUpgrade":true,"settings":{}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for: '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3be22e3b-d919-47aa-805e-8985dbeb0ad9","type":"Microsoft.Authorization/policyDefinitions","name":"3be22e3b-d919-47aa-805e-8985dbeb0ad9"},{"properties":{"displayName":"PostgreSQL - server should use a virtual network service endpoint","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits PostgreSQL servers not configured to use a virtual network service - endpoint. For more details, visit https://aka.ms/postgresqlvnet.","metadata":{"version":"1.0.1","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforPostgreSQL/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforPostgreSQL/servers/virtualNetworkRules","existenceCondition":{"field":"Microsoft.DBforPostgreSQL/servers/virtualNetworkRules/virtualNetworkSubnetId","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3c14b034-bcb6-4905-94e7-5b8e98a47b65","type":"Microsoft.Authorization/policyDefinitions","name":"3c14b034-bcb6-4905-94e7-5b8e98a47b65"},{"properties":{"displayName":"Deploy - Log Analytics agent for Windows virtual machine scale sets","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Log Analytics agent for Windows virtual machine scale sets if the VM Image - (OS) is in the list defined and the agent is not installed. The list of OS - images will be updated over time as support is updated. Note: if your scale - set upgradePolicy is set to Manual, you need to apply the extension to the - all VMs in the set by calling upgrade on them. In CLI this would be az vmss - update-instances.","metadata":{"version":"1.0.1","category":"Monitoring"},"parameters":{"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"listOfImageIdToInclude":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Windows OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"},"defaultValue":[]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293","/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/type","equals":"MicrosoftMonitoringAgent"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"}},"variables":{"vmExtensionName":"MMAExtension","vmExtensionPublisher":"Microsoft.EnterpriseCloud.Monitoring","vmExtensionType":"MicrosoftMonitoringAgent","vmExtensionTypeHandlerVersion":"1.0"},"resources":[{"name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","type":"Microsoft.Compute/virtualMachineScaleSets/extensions","location":"[parameters(''location'')]","apiVersion":"2018-06-01","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","typeHandlerVersion":"[variables(''vmExtensionTypeHandlerVersion'')]","autoUpgradeMinorVersion":true,"settings":{"workspaceId":"[reference(parameters(''logAnalytics''), - ''2015-03-20'').customerId]","stopOnMultipleConnections":"true"},"protectedSettings":{"workspaceKey":"[listKeys(parameters(''logAnalytics''), - ''2015-03-20'').primarySharedKey]"}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for: '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3c1b3629-c8f8-4bf6-862c-037cb9094038","type":"Microsoft.Authorization/policyDefinitions","name":"3c1b3629-c8f8-4bf6-862c-037cb9094038"},{"properties":{"displayName":"Vulnerabilities - in security configuration on your virtual machine scale sets should be remediated","policyType":"BuiltIn","mode":"Indexed","description":"Audit - the OS vulnerabilities on your virtual machine scale sets to protect them - from attacks.","metadata":{"version":"1.0.0","category":"Security Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"OsVulnerabilities","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","type":"Microsoft.Authorization/policyDefinitions","name":"3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4"},{"properties":{"displayName":"Microsoft - Managed Control 1621 - Resource Availability","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1621"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3cb9f731-744a-4691-a481-ca77b0411538","type":"Microsoft.Authorization/policyDefinitions","name":"3cb9f731-744a-4691-a481-ca77b0411538"},{"properties":{"displayName":"Microsoft - Managed Control 1521 - Personnel Termination | Automated Notification","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1521"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3cbddf9c-a3aa-4330-a0f5-4c0c1f1862e5","type":"Microsoft.Authorization/policyDefinitions","name":"3cbddf9c-a3aa-4330-a0f5-4c0c1f1862e5"},{"properties":{"displayName":"Microsoft - Managed Control 1127 - Time Stamps","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1127"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3ce328db-aef3-48ed-9f81-2ab7cf839c66","type":"Microsoft.Authorization/policyDefinitions","name":"3ce328db-aef3-48ed-9f81-2ab7cf839c66"},{"properties":{"displayName":"Deploy - Diagnostic Settings for Search Services to Event Hub","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Search Services to stream to a regional Event - Hub when any Search Services which is missing this diagnostic settings is - created or updated.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"},"defaultValue":"setbypolicy_eventHub"},"eventHubRuleId":{"type":"String","metadata":{"displayName":"Event - Hub Authorization Rule Id","description":"The Event Hub authorization rule - Id for Azure Diagnostics. The authorization rule needs to be at Event Hub - namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}","strongType":"Microsoft.EventHub/Namespaces/AuthorizationRules","assignPermissions":true}},"eventHubLocation":{"type":"String","metadata":{"displayName":"Event - Hub Location","description":"The location the Event Hub resides in. Only Search - Services in this location will be linked to this Event Hub.","strongType":"location"},"defaultValue":""},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Event Hub - - True or False"},"allowedValues":["True","False"],"defaultValue":"False"},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Event Hub - True - or False"},"allowedValues":["True","False"],"defaultValue":"True"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Search/searchServices"},{"anyOf":[{"value":"[parameters(''eventHubLocation'')]","equals":""},{"field":"location","equals":"[parameters(''eventHubLocation'')]"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"eventHubRuleId":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.Search/searchServices/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"eventHubAuthorizationRuleId":"[parameters(''eventHubRuleId'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"OperationLogs","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"eventHubRuleId":{"value":"[parameters(''eventHubRuleId'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3d5da587-71bd-41f5-ac95-dd3330c2d58d","type":"Microsoft.Authorization/policyDefinitions","name":"3d5da587-71bd-41f5-ac95-dd3330c2d58d"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''Security Options - Devices''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Security Options - Devices''. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsDevices","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3d7b154e-2700-4c8c-9e46-cb65ac1578c2","type":"Microsoft.Authorization/policyDefinitions","name":"3d7b154e-2700-4c8c-9e46-cb65ac1578c2"},{"properties":{"displayName":"[Deprecated]: - Deploy default Log Analytics Agent for Ubuntu VMs","policyType":"BuiltIn","mode":"Indexed","description":"This - policy deploys the Log Analytics Agent on Ubuntu VMs, and connects to the - selected Log Analytics workspace","metadata":{"version":"1.0.0-deprecated","category":"Compute","deprecated":true},"parameters":{"logAnalytics":{"type":"String","metadata":{"displayName":"[Deprecated]: - Log Analytics workspace","description":"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant ''Log Analytics Contributor'' permissions (or similar) - to the policy assignment''s principal ID.","strongType":"omsWorkspace"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","in":["18.04-LTS","16.04-LTS","16.04.0-LTS","14.04.2-LTS","12.04.5-LTS"]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"OmsAgentForLinux"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"}},"resources":[{"name":"[concat(parameters(''vmName''),''/omsPolicy'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","apiVersion":"2017-12-01","properties":{"publisher":"Microsoft.EnterpriseCloud.Monitoring","type":"OmsAgentForLinux","typeHandlerVersion":"1.4","autoUpgradeMinorVersion":true,"settings":{"workspaceId":"[reference(parameters(''logAnalytics''), - ''2015-03-20'').customerId]"},"protectedSettings":{"workspaceKey":"[listKeys(parameters(''logAnalytics''), - ''2015-03-20'').primarySharedKey]"}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - monitoring for Linux VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3d8640fc-63f6-4734-8dcb-cfd3d8c78f38","type":"Microsoft.Authorization/policyDefinitions","name":"3d8640fc-63f6-4734-8dcb-cfd3d8c78f38"},{"properties":{"displayName":"Microsoft - Managed Control 1385 - Information Spillage Response","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1385"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3e495e65-8663-49ca-9b38-9f45e800bc58","type":"Microsoft.Authorization/policyDefinitions","name":"3e495e65-8663-49ca-9b38-9f45e800bc58"},{"properties":{"displayName":"Azure - Monitor solution ''Security and Audit'' must be deployed","policyType":"BuiltIn","mode":"All","description":"This - policy ensures that Security and Audit is deployed.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.OperationsManagement/solutions","existenceCondition":{"allOf":[{"field":"Microsoft.OperationsManagement/solutions/provisioningState","equals":"Succeeded"},{"field":"name","like":"Security(*)"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3e596b57-105f-48a6-be97-03e9243bad6e","type":"Microsoft.Authorization/policyDefinitions","name":"3e596b57-105f-48a6-be97-03e9243bad6e"},{"properties":{"displayName":"Microsoft - Managed Control 1160 - Security Authorization","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1160"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3e797ca6-2aa8-4333-b335-7036f1110c05","type":"Microsoft.Authorization/policyDefinitions","name":"3e797ca6-2aa8-4333-b335-7036f1110c05"},{"properties":{"displayName":"Microsoft - Managed Control 1545 - Risk Assessment","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Risk Assessment control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1545"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3f4b171a-a56b-4328-8112-32cf7f947ee1","type":"Microsoft.Authorization/policyDefinitions","name":"3f4b171a-a56b-4328-8112-32cf7f947ee1"},{"properties":{"displayName":"Microsoft - Managed Control 1179 - Baseline Configuration | Reviews And Updates","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1179"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3f9ce557-c8ab-4e6c-bb2c-9b8ed002c46c","type":"Microsoft.Authorization/policyDefinitions","name":"3f9ce557-c8ab-4e6c-bb2c-9b8ed002c46c"},{"properties":{"displayName":"[Deprecated]: - Audit API Applications that are not using latest supported PHP Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported PHP version for the latest security classes. Using older - classes and types can make your application vulnerable.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestPHP","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3fe37002-5d00-4b37-a301-da09e3a0ca66","type":"Microsoft.Authorization/policyDefinitions","name":"3fe37002-5d00-4b37-a301-da09e3a0ca66"},{"properties":{"displayName":"Microsoft - Managed Control 1561 - Allocation Of Resources","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1561"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/40364c3f-c331-4e29-b1e3-2fbe998ba2f5","type":"Microsoft.Authorization/policyDefinitions","name":"40364c3f-c331-4e29-b1e3-2fbe998ba2f5"},{"properties":{"displayName":"Secure - transfer to storage accounts should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit - requirement of Secure transfer in your storage account. Secure transfer is - an option that forces your storage account to accept requests only from secure - connections (HTTPS). Use of HTTPS ensures authentication between the server - and the service and protects data in transit from network layer attacks such - as man-in-the-middle, eavesdropping, and session-hijacking","metadata":{"version":"2.0.0","category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"anyOf":[{"allOf":[{"value":"[requestContext().apiVersion]","less":"2019-04-01"},{"field":"Microsoft.Storage/storageAccounts/supportsHttpsTrafficOnly","exists":"false"}]},{"field":"Microsoft.Storage/storageAccounts/supportsHttpsTrafficOnly","equals":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","type":"Microsoft.Authorization/policyDefinitions","name":"404c3081-a854-4457-ae30-26a93ef643f9"},{"properties":{"displayName":"Microsoft - Managed Control 1100 - Audit And Accountability Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1100"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4057863c-ca7d-47eb-b1e0-503580cba8a4","type":"Microsoft.Authorization/policyDefinitions","name":"4057863c-ca7d-47eb-b1e0-503580cba8a4"},{"properties":{"displayName":"Microsoft - Managed Control 1637 - Boundary Protection | Fail Secure","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1637"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4075bedc-c62a-4635-bede-a01be89807f3","type":"Microsoft.Authorization/policyDefinitions","name":"4075bedc-c62a-4635-bede-a01be89807f3"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''Administrative Templates - - System''","policyType":"BuiltIn","mode":"Indexed","description":"This policy - creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Administrative Templates - - System''. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"AlwaysUseClassicLogon":{"type":"String","metadata":{"displayName":"Always - use classic logon","description":"Specifies whether to force the user to log - on to the computer using the classic logon screen. This setting only works - when the computer is not on a domain."},"defaultValue":"0"},"BootStartDriverInitializationPolicy":{"type":"String","metadata":{"displayName":"Boot-Start - Driver Initialization Policy","description":"Specifies which boot-start drivers - are initialized based on a classification determined by an Early Launch Antimalware - boot-start driver."},"defaultValue":"3"},"EnableWindowsNTPClient":{"type":"String","metadata":{"displayName":"Enable - Windows NTP Client","description":"Specifies whether the Windows NTP Client - is enabled. Enabling the Windows NTP Client allows your computer to synchronize - its computer clock with other NTP servers."},"defaultValue":"1"},"TurnOnConveniencePINSignin":{"type":"String","metadata":{"displayName":"Turn - on convenience PIN sign-in","description":"Specifies whether a domain user - can sign in using a convenience PIN."},"defaultValue":"0"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_AdministrativeTemplatesSystem","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Always - use classic logon;ExpectedValue'', ''='', parameters(''AlwaysUseClassicLogon''), - '','', ''Boot-Start Driver Initialization Policy;ExpectedValue'', ''='', parameters(''BootStartDriverInitializationPolicy''), - '','', ''Enable Windows NTP Client;ExpectedValue'', ''='', parameters(''EnableWindowsNTPClient''), - '','', ''Turn on convenience PIN sign-in;ExpectedValue'', ''='', parameters(''TurnOnConveniencePINSignin'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_AdministrativeTemplatesSystem"},"AlwaysUseClassicLogon":{"value":"[parameters(''AlwaysUseClassicLogon'')]"},"BootStartDriverInitializationPolicy":{"value":"[parameters(''BootStartDriverInitializationPolicy'')]"},"EnableWindowsNTPClient":{"value":"[parameters(''EnableWindowsNTPClient'')]"},"TurnOnConveniencePINSignin":{"value":"[parameters(''TurnOnConveniencePINSignin'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"AlwaysUseClassicLogon":{"type":"string"},"BootStartDriverInitializationPolicy":{"type":"string"},"EnableWindowsNTPClient":{"type":"string"},"TurnOnConveniencePINSignin":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Always - use classic logon;ExpectedValue","value":"[parameters(''AlwaysUseClassicLogon'')]"},{"name":"Boot-Start - Driver Initialization Policy;ExpectedValue","value":"[parameters(''BootStartDriverInitializationPolicy'')]"},{"name":"Enable - Windows NTP Client;ExpectedValue","value":"[parameters(''EnableWindowsNTPClient'')]"},{"name":"Turn - on convenience PIN sign-in;ExpectedValue","value":"[parameters(''TurnOnConveniencePINSignin'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Always - use classic logon;ExpectedValue","value":"[parameters(''AlwaysUseClassicLogon'')]"},{"name":"Boot-Start - Driver Initialization Policy;ExpectedValue","value":"[parameters(''BootStartDriverInitializationPolicy'')]"},{"name":"Enable - Windows NTP Client;ExpectedValue","value":"[parameters(''EnableWindowsNTPClient'')]"},{"name":"Turn - on convenience PIN sign-in;ExpectedValue","value":"[parameters(''TurnOnConveniencePINSignin'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/40917425-69db-4018-8dae-2a0556cef899","type":"Microsoft.Authorization/policyDefinitions","name":"40917425-69db-4018-8dae-2a0556cef899"},{"properties":{"displayName":"Microsoft - Managed Control 1202 - Access Restrictions For Change","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1202"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/40a2a83b-74f2-4c02-ae65-f460a5d2792a","type":"Microsoft.Authorization/policyDefinitions","name":"40a2a83b-74f2-4c02-ae65-f460a5d2792a"},{"properties":{"displayName":"Inherit - a tag from the subscription if missing","policyType":"BuiltIn","mode":"Indexed","description":"Adds - the specified tag with its value from the containing subscription when any - resource missing this tag is created or updated. Existing resources can be - remediated by triggering a remediation task. If the tag exists with a different - value it will not be changed.","metadata":{"category":"Tags","version":"1.0.0"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}}},"policyRule":{"if":{"allOf":[{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"value":"[subscription().tags[parameters(''tagName'')]]","notEquals":""}]},"then":{"effect":"modify","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"add","field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[subscription().tags[parameters(''tagName'')]]"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/40df99da-1232-49b1-a39a-6da8d878f469","type":"Microsoft.Authorization/policyDefinitions","name":"40df99da-1232-49b1-a39a-6da8d878f469"},{"properties":{"displayName":"Microsoft - Managed Control 1438 - Media Sanitization","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Media Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1438"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/40fcc635-52a2-4dbc-9523-80a1f4aa1de6","type":"Microsoft.Authorization/policyDefinitions","name":"40fcc635-52a2-4dbc-9523-80a1f4aa1de6"},{"properties":{"displayName":"Microsoft - Managed Control 1365 - Incident Handling | Continuity Of Operations","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1365"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4116891d-72f7-46ee-911c-8056cc8dcbd5","type":"Microsoft.Authorization/policyDefinitions","name":"4116891d-72f7-46ee-911c-8056cc8dcbd5"},{"properties":{"displayName":"Microsoft - Managed Control 1022 - Account Management | Shared / Group Account Credential - Termination","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1022"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/411f7e2d-9a0b-4627-a0b9-1700432db47d","type":"Microsoft.Authorization/policyDefinitions","name":"411f7e2d-9a0b-4627-a0b9-1700432db47d"},{"properties":{"displayName":"Microsoft - Managed Control 1464 - Monitoring Physical Access | Intrusion Alarms / Surveillance - Equipment","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1464"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/41256567-1795-4684-b00b-a1308ce43cac","type":"Microsoft.Authorization/policyDefinitions","name":"41256567-1795-4684-b00b-a1308ce43cac"},{"properties":{"displayName":"Azure - Monitor should collect activity logs from all regions","policyType":"BuiltIn","mode":"All","description":"This - policy audits the Azure Monitor log profile which does not export activities - from all Azure supported regions including global.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/logProfiles","existenceCondition":{"allOf":[{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"australiacentral"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"australiacentral2"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"australiaeast"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"australiasoutheast"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"brazilsouth"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"canadacentral"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"canadaeast"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"centralindia"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"centralus"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"eastasia"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"eastus"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"eastus2"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"francecentral"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"francesouth"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"japaneast"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"japanwest"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"koreacentral"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"koreasouth"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"northcentralus"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"northeurope"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"southafricanorth"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"southafricawest"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"southcentralus"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"southindia"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"southeastasia"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"uaecentral"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"uaenorth"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"uksouth"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"ukwest"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"westcentralus"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"westeurope"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"westindia"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"westus"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"westus2"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"global"}}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/41388f1c-2db0-4c25-95b2-35d7f5ccbfa9","type":"Microsoft.Authorization/policyDefinitions","name":"41388f1c-2db0-4c25-95b2-35d7f5ccbfa9"},{"properties":{"displayName":"Microsoft - Managed Control 1263 - Contingency Plan Testing","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1263"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/41472613-3b05-49f6-8fe8-525af113ce17","type":"Microsoft.Authorization/policyDefinitions","name":"41472613-3b05-49f6-8fe8-525af113ce17"},{"properties":{"displayName":"Microsoft - Managed Control 1096 - Role-Based Security Training | Practical Exercises","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Awareness and Training control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1096"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/420c1477-aa43-49d0-bd7e-c4abdd9addff","type":"Microsoft.Authorization/policyDefinitions","name":"420c1477-aa43-49d0-bd7e-c4abdd9addff"},{"properties":{"displayName":"Microsoft - Managed Control 1260 - Contingency Training | Simulated Events","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1260"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/42254fc4-2738-4128-9613-72aaa4f0d9c3","type":"Microsoft.Authorization/policyDefinitions","name":"42254fc4-2738-4128-9613-72aaa4f0d9c3"},{"properties":{"displayName":"Microsoft - Managed Control 1694 - Information System Monitoring | Analyze Communications - Traffic Anomalies","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1694"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/426c4ac9-ff17-49d0-acd7-a13c157081c0","type":"Microsoft.Authorization/policyDefinitions","name":"426c4ac9-ff17-49d0-acd7-a13c157081c0"},{"properties":{"displayName":"Diagnostic - logs in Batch accounts should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of diagnostic logs. This enables you to recreate activity trails - to use for investigation purposes; when a security incident occurs or when - your network is compromised","metadata":{"version":"3.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Batch/batchAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","type":"Microsoft.Authorization/policyDefinitions","name":"428256e6-1fac-4f48-a757-df34c2b3336d"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''System Audit Policies - - Detailed Tracking''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''System Audit Policies - - Detailed Tracking''. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"AuditProcessTermination":{"type":"String","metadata":{"displayName":"Audit - Process Termination","description":"Specifies whether audit events are generated - when a process has exited. Recommended for monitoring termination of critical - processes."},"allowedValues":["No Auditing","Success","Failure","Success and - Failure"],"defaultValue":"No Auditing"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesDetailedTracking","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Audit - Process Termination;ExpectedValue'', ''='', parameters(''AuditProcessTermination'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SystemAuditPoliciesDetailedTracking"},"AuditProcessTermination":{"value":"[parameters(''AuditProcessTermination'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"AuditProcessTermination":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit - Process Termination;ExpectedValue","value":"[parameters(''AuditProcessTermination'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit - Process Termination;ExpectedValue","value":"[parameters(''AuditProcessTermination'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/42a07bbf-ffcf-459a-b4b1-30ecd118a505","type":"Microsoft.Authorization/policyDefinitions","name":"42a07bbf-ffcf-459a-b4b1-30ecd118a505"},{"properties":{"displayName":"Microsoft - Managed Control 1174 - Configuration Management Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1174"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/42a9a714-8fbb-43ac-b115-ea12d2bd652f","type":"Microsoft.Authorization/policyDefinitions","name":"42a9a714-8fbb-43ac-b115-ea12d2bd652f"},{"properties":{"displayName":"Microsoft - Managed Control 1137 - Audit Generation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1137"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4344df62-88ab-4637-b97b-bcaf2ec97e7c","type":"Microsoft.Authorization/policyDefinitions","name":"4344df62-88ab-4637-b97b-bcaf2ec97e7c"},{"properties":{"displayName":"Microsoft - Managed Control 1367 - Incident Handling | Insider Threats - Specific Capabilities","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1367"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/435b2547-6374-4f87-b42d-6e8dbe6ae62a","type":"Microsoft.Authorization/policyDefinitions","name":"435b2547-6374-4f87-b42d-6e8dbe6ae62a"},{"properties":{"displayName":"Microsoft - Managed Control 1552 - Vulnerability Scanning | Update By Frequency / Prior - To New Scan / When Identified","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Risk Assessment control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1552"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/43684572-e4f1-4642-af35-6b933bc506da","type":"Microsoft.Authorization/policyDefinitions","name":"43684572-e4f1-4642-af35-6b933bc506da"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''Security Options - - System settings''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - System settings''. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies":{"type":"String","metadata":{"displayName":"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies","description":"Specifies whether digital certificates are processed - when software restriction policies are enabled and a user or process attempts - to run software with an .exe file name extension. It enables or disables certificate - rules (a type of software restriction policies rule). For certificate rules - to take effect in software restriction policies, you must enable this policy - setting."},"defaultValue":"1"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsSystemsettings","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue'', ''='', parameters(''SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsSystemsettings"},"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies":{"value":"[parameters(''SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue","value":"[parameters(''SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue","value":"[parameters(''SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/437a1f8f-8552-47a8-8b12-a2fee3269dd5","type":"Microsoft.Authorization/policyDefinitions","name":"437a1f8f-8552-47a8-8b12-a2fee3269dd5"},{"properties":{"displayName":"Microsoft - Managed Control 1544 - Risk Assessment","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Risk Assessment control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1544"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/43ced7c9-cd53-456b-b0da-2522649a4271","type":"Microsoft.Authorization/policyDefinitions","name":"43ced7c9-cd53-456b-b0da-2522649a4271"},{"properties":{"displayName":"Microsoft - Managed Control 1398 - Controlled Maintenance","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1398"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/443e8f3d-b51a-45d8-95a7-18b0e42f4dc4","type":"Microsoft.Authorization/policyDefinitions","name":"443e8f3d-b51a-45d8-95a7-18b0e42f4dc4"},{"properties":{"displayName":"[Deprecated]: - Monitor permissive network access in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Network - Security Groups with too permissive rules will be monitored by Azure Security - Center as recommendations","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"permissiveNetworkAccess","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/44452482-524f-4bf4-b852-0bff7cc4a3ed","type":"Microsoft.Authorization/policyDefinitions","name":"44452482-524f-4bf4-b852-0bff7cc4a3ed"},{"properties":{"displayName":"Microsoft - Managed Control 1066 - Remote Access | Disconnect / Disable Access","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1066"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4455c2e8-c65d-4acf-895e-304916f90b36","type":"Microsoft.Authorization/policyDefinitions","name":"4455c2e8-c65d-4acf-895e-304916f90b36"},{"properties":{"displayName":"Microsoft - Managed Control 1720 - Spam Protection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1720"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/44b9a7cd-f36a-491a-a48b-6d04ae7c4221","type":"Microsoft.Authorization/policyDefinitions","name":"44b9a7cd-f36a-491a-a48b-6d04ae7c4221"},{"properties":{"displayName":"Microsoft - Managed Control 1334 - Authenticator Management | Pki-Based Authentication","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1334"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/44bfdadc-8c2e-4c30-9c99-f005986fabcd","type":"Microsoft.Authorization/policyDefinitions","name":"44bfdadc-8c2e-4c30-9c99-f005986fabcd"},{"properties":{"displayName":"Microsoft - Managed Control 1604 - Developer Security Testing And Evaluation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1604"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/44dbba23-0b61-478e-89c7-b3084667782f","type":"Microsoft.Authorization/policyDefinitions","name":"44dbba23-0b61-478e-89c7-b3084667782f"},{"properties":{"displayName":"Microsoft - Managed Control 1712 - Software, Firmware, And Information Integrity","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1712"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/44e543aa-41db-42aa-98eb-8a5eb1db53f0","type":"Microsoft.Authorization/policyDefinitions","name":"44e543aa-41db-42aa-98eb-8a5eb1db53f0"},{"properties":{"displayName":"Microsoft - Managed Control 1310 - Device Identification And Authentication","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1310"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/450d7ede-823d-4931-a99d-57f6a38807dc","type":"Microsoft.Authorization/policyDefinitions","name":"450d7ede-823d-4931-a99d-57f6a38807dc"},{"properties":{"displayName":"Microsoft - Managed Control 1559 - System And Services Acquisition Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1559"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/45692294-f074-42bd-ac54-16f1a3c07554","type":"Microsoft.Authorization/policyDefinitions","name":"45692294-f074-42bd-ac54-16f1a3c07554"},{"properties":{"displayName":"Microsoft - Managed Control 1578 - Acquisition Process | Functions / Ports / Protocols - / Services In Use","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1578"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/45b7b644-5f91-498e-9d89-7402532d3645","type":"Microsoft.Authorization/policyDefinitions","name":"45b7b644-5f91-498e-9d89-7402532d3645"},{"properties":{"displayName":"Microsoft - Managed Control 1565 - System Development Life Cycle","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1565"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/45ce2396-5c76-4654-9737-f8792ab3d26b","type":"Microsoft.Authorization/policyDefinitions","name":"45ce2396-5c76-4654-9737-f8792ab3d26b"},{"properties":{"displayName":"Microsoft - Managed Control 1337 - Authenticator Management | In-Person Or Trusted Third-Party - Registration","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1337"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/463e5220-3f79-4e24-a63f-343e4096cd22","type":"Microsoft.Authorization/policyDefinitions","name":"463e5220-3f79-4e24-a63f-343e4096cd22"},{"properties":{"displayName":"[Deprecated]: - Require SQL Server version 12.0","policyType":"BuiltIn","mode":"Indexed","description":"This - policy ensures all SQL servers use version 12.0. This policy is deprecated - because it is no longer possible to create an Azure SQL server with any version - other than 12.0.","metadata":{"version":"1.0.0-deprecated","category":"SQL","deprecated":true},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers"},{"not":{"field":"Microsoft.Sql/servers/version","equals":"12.0"}}]},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/464dbb85-3d5f-4a1d-bb09-95a9b5dd19cf","type":"Microsoft.Authorization/policyDefinitions","name":"464dbb85-3d5f-4a1d-bb09-95a9b5dd19cf"},{"properties":{"displayName":"Microsoft - Managed Control 1346 - Identification And Authentication (Non-Organizational - Users)","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1346"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/464dc8ce-2200-4720-87a5-dc5952924cc6","type":"Microsoft.Authorization/policyDefinitions","name":"464dc8ce-2200-4720-87a5-dc5952924cc6"},{"properties":{"displayName":"[Deprecated]: - Audit Web Applications that are not using latest supported Python Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported Python version for the latest security classes. Using - older classes and types can make your application vulnerable.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestPython","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/46544d7b-1f0d-46f5-81da-5c1351de1b06","type":"Microsoft.Authorization/policyDefinitions","name":"46544d7b-1f0d-46f5-81da-5c1351de1b06"},{"properties":{"displayName":"Require - automatic OS image patching on Virtual Machine Scale Sets","policyType":"BuiltIn","mode":"All","description":"This - policy enforces enabling automatic OS image patching on Virtual Machine Scale - Sets to always keep Virtual Machines secure by safely applying latest security - patches every month.","metadata":{"version":"1.0.0","category":"Compute"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"field":"Microsoft.Compute/VirtualMachineScaleSets/upgradePolicy.automaticOSUpgradePolicy.enableAutomaticOSUpgrade","notEquals":"True"},{"field":"Microsoft.Compute/VirtualMachineScaleSets/upgradePolicy.automaticOSUpgrade","notEquals":"True"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/465f0161-0087-490a-9ad9-ad6217f4f43a","type":"Microsoft.Authorization/policyDefinitions","name":"465f0161-0087-490a-9ad9-ad6217f4f43a"},{"properties":{"displayName":"Microsoft - Managed Control 1368 - Incident Handling | Correlation With External Organizations","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1368"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/465f32da-0ace-4603-8d1b-7be5a3a702de","type":"Microsoft.Authorization/policyDefinitions","name":"465f32da-0ace-4603-8d1b-7be5a3a702de"},{"properties":{"displayName":"Cognitive - Services accounts should use customer owned storage","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Cognitive Services account not using customer owned storage.","metadata":{"version":"1.0.0","category":"Cognitive - Services"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.CognitiveServices/accounts"},{"count":{"field":"Microsoft.CognitiveServices/accounts/userOwnedStorage[*]"},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/46aa9b05-0e60-4eae-a88b-1e9d374fa515","type":"Microsoft.Authorization/policyDefinitions","name":"46aa9b05-0e60-4eae-a88b-1e9d374fa515"},{"properties":{"displayName":"Microsoft - Managed Control 1062 - Remote Access | Protection Of Confidentiality / Integrity - Using Encryption","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1062"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4708723f-e099-4af1-bbf9-b6df7642e444","type":"Microsoft.Authorization/policyDefinitions","name":"4708723f-e099-4af1-bbf9-b6df7642e444"},{"properties":{"displayName":"Azure - Cosmos DB key based metadata write access should be disabled","policyType":"BuiltIn","mode":"Indexed","description":"This - policy enables you to ensure all Azure Cosmos DB accounts disable key based - metadata write access.","metadata":{"version":"1.0.0","category":"Cosmos DB"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableKeyBasedMetadataWriteAccess","notEquals":true}]},"then":{"effect":"append","details":[{"field":"Microsoft.DocumentDB/databaseAccounts/disableKeyBasedMetadataWriteAccess","value":true}]}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4750c32b-89c0-46af-bfcb-2e4541a818d5","type":"Microsoft.Authorization/policyDefinitions","name":"4750c32b-89c0-46af-bfcb-2e4541a818d5"},{"properties":{"displayName":"Automatic - provisioning of the Log Analytics monitoring agent should be enabled on your - subscription","policyType":"BuiltIn","mode":"All","description":"Enable automatic - provisioning of the Log Analytics monitoring agent in order to collect security - data","metadata":{"version":"1.0.0","category":"Security Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/autoProvisioningSettings","existenceCondition":{"field":"Microsoft.Security/autoProvisioningSettings/autoProvision","equals":"On"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","type":"Microsoft.Authorization/policyDefinitions","name":"475aae12-b88a-4572-8b36-9b712b2b3a17"},{"properties":{"displayName":"Adaptive - application controls for whitelisting safe applications should be enabled - on your machines","policyType":"BuiltIn","mode":"All","description":"Enable - application controls to define the list of known-safe applications running - on your machines, and alert you when other applications run. This helps harden - your machines against malware. To simplify the process of configuring and - maintaining your rules, Security Center uses machine learning to analyze the - applications running on each machine and suggest the list of known-safe applications.","metadata":{"version":"1.0.2","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"applicationWhitelisting","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","type":"Microsoft.Authorization/policyDefinitions","name":"47a6b606-51aa-4496-8bb7-64b11cf66adc"},{"properties":{"displayName":"Microsoft - Managed Control 1359 - Incident Response Testing | Coordination With Related - Plans","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1359"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/47bc7ea0-7d13-4f7c-a154-b903f7194253","type":"Microsoft.Authorization/policyDefinitions","name":"47bc7ea0-7d13-4f7c-a154-b903f7194253"},{"properties":{"displayName":"Microsoft - Managed Control 1165 - Continuous Monitoring","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1165"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/47e10916-6c9e-446b-b0bd-ff5fd439d79d","type":"Microsoft.Authorization/policyDefinitions","name":"47e10916-6c9e-446b-b0bd-ff5fd439d79d"},{"properties":{"displayName":"Microsoft - Managed Control 1048 - System Use Notification","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1048"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/483e7ca9-82b3-45a2-be97-b93163a0deb7","type":"Microsoft.Authorization/policyDefinitions","name":"483e7ca9-82b3-45a2-be97-b93163a0deb7"},{"properties":{"displayName":"Microsoft - Managed Control 1033 - Separation Of Duties","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1033"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/48540f01-fc11-411a-b160-42807c68896e","type":"Microsoft.Authorization/policyDefinitions","name":"48540f01-fc11-411a-b160-42807c68896e"},{"properties":{"displayName":"Microsoft - Managed Control 1477 - Fire Protection | Detection Devices / Systems","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1477"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4862a63c-6c74-4a9d-a221-89af3c374503","type":"Microsoft.Authorization/policyDefinitions","name":"4862a63c-6c74-4a9d-a221-89af3c374503"},{"properties":{"displayName":"Microsoft - Managed Control 1484 - Water Damage Protection | Automation Support","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1484"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/486b006a-3653-45e8-b41c-a052d3e05456","type":"Microsoft.Authorization/policyDefinitions","name":"486b006a-3653-45e8-b41c-a052d3e05456"},{"properties":{"displayName":"[Deprecated]: - Audit IP restrictions configuration for an API App","policyType":"BuiltIn","mode":"All","description":"IP - Restrictions allow you to define a list of IP addresses that are allowed to - access your app. Use of IP Restrictions protects an API app from common attacks.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"ConfigureIPRestrictions","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/48893b84-a2c8-4d9a-badf-835d5d1b7d53","type":"Microsoft.Authorization/policyDefinitions","name":"48893b84-a2c8-4d9a-badf-835d5d1b7d53"},{"properties":{"displayName":"Geo-redundant - backup should be enabled for Azure Database for PostgreSQL","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Azure Database for PostgreSQL with geo-redundant backup - not enabled.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DBforPostgreSQL/servers"},{"field":"Microsoft.DBforPostgreSQL/servers/storageProfile.geoRedundantBackup","notEquals":"Enabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","type":"Microsoft.Authorization/policyDefinitions","name":"48af4db5-9b8b-401c-8e74-076be876a430"},{"properties":{"displayName":"Microsoft - Managed Control 1669 - Flaw Remediation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1669"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/48f2f62b-5743-4415-a143-288adc0e078d","type":"Microsoft.Authorization/policyDefinitions","name":"48f2f62b-5743-4415-a143-288adc0e078d"},{"properties":{"displayName":"Microsoft - Managed Control 1376 - Incident Response Assistance | Coordination With External - Providers","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1376"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/493a95f3-f2e3-47d0-af02-65e6d6decc2f","type":"Microsoft.Authorization/policyDefinitions","name":"493a95f3-f2e3-47d0-af02-65e6d6decc2f"},{"properties":{"displayName":"Ensure - that ''Java version'' is the latest, if used as a part of the Web app","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for Java software either due to security flaws - or to include additional functionality. Using the latest Java version for - web apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"JavaLatestVersion":{"type":"String","metadata":{"displayName":"Latest - Java version","description":"Latest supported Java version for App Services"},"defaultValue":"11"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","notContains":"JAVA"},{"field":"Microsoft.Web/sites/config/web.javaVersion","equals":""}]},{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","like":"[concat(''*'', - parameters(''JavaLatestVersion''))]"},{"field":"Microsoft.Web/sites/config/web.javaVersion","equals":""}]},{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","equals":""},{"field":"Microsoft.Web/sites/config/web.javaVersion","like":"[concat(parameters(''JavaLatestVersion''), - ''*'')]"}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","type":"Microsoft.Authorization/policyDefinitions","name":"496223c3-ad65-4ecd-878a-bae78737e9ed"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''Security Options - - Audit''","policyType":"BuiltIn","mode":"Indexed","description":"This policy - creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - Audit''. It also creates a system-assigned managed identity and deploys the - VM extension for Guest Configuration. This policy should only be used along - with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits":{"type":"String","metadata":{"displayName":"Audit: - Shut down system immediately if unable to log security audits","description":"Audits - if the system will shut down when unable to log Security events."},"defaultValue":"0"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsAudit","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Audit: - Shut down system immediately if unable to log security audits;ExpectedValue'', - ''='', parameters(''AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsAudit"},"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits":{"value":"[parameters(''AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit: - Shut down system immediately if unable to log security audits;ExpectedValue","value":"[parameters(''AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit: - Shut down system immediately if unable to log security audits;ExpectedValue","value":"[parameters(''AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/498b810c-59cd-4222-9338-352ba146ccf3","type":"Microsoft.Authorization/policyDefinitions","name":"498b810c-59cd-4222-9338-352ba146ccf3"},{"properties":{"displayName":"Microsoft - Managed Control 1329 - Authenticator Management | Password-Based Authentication","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1329"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/498f6234-3e20-4b6a-a880-cbd646d973bd","type":"Microsoft.Authorization/policyDefinitions","name":"498f6234-3e20-4b6a-a880-cbd646d973bd"},{"properties":{"displayName":"Microsoft - Managed Control 1638 - Boundary Protection | Dynamic Isolation / Segregation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1638"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/49b99653-32cd-405d-a135-e7d60a9aae1f","type":"Microsoft.Authorization/policyDefinitions","name":"49b99653-32cd-405d-a135-e7d60a9aae1f"},{"properties":{"displayName":"Append - a tag and its value to resource groups","policyType":"BuiltIn","mode":"All","description":"Appends - the specified tag and value when any resource group which is missing this - tag is created or updated. Does not modify the tags of resource groups created - before this policy was applied until those resource groups are changed. New - ''modify'' effect policies are available that support remediation of tags - on existing resources (see https://aka.ms/modifydoc).","metadata":{"version":"1.0.0","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Resources/subscriptions/resourceGroups"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"}]},"then":{"effect":"append","details":[{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[parameters(''tagValue'')]"}]}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","type":"Microsoft.Authorization/policyDefinitions","name":"49c88fc8-6fd1-46fd-a676-f12d1d3a4c71"},{"properties":{"displayName":"Microsoft - Managed Control 1294 - Information System Backup | Transfer To Alternate Storage - Site","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1294"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/49dbe627-2c1e-438c-979e-dd7a39bbf81d","type":"Microsoft.Authorization/policyDefinitions","name":"49dbe627-2c1e-438c-979e-dd7a39bbf81d"},{"properties":{"displayName":"Microsoft - Managed Control 1218 - Least Functionality | Prevent Program Execution","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1218"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4a1d0394-b9f5-493e-9e83-563fd0ac4df8","type":"Microsoft.Authorization/policyDefinitions","name":"4a1d0394-b9f5-493e-9e83-563fd0ac4df8"},{"properties":{"displayName":"Microsoft - Managed Control 1677 - Malicious Code Protection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1677"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4a248e1e-040f-43e5-bff2-afc3a57a3923","type":"Microsoft.Authorization/policyDefinitions","name":"4a248e1e-040f-43e5-bff2-afc3a57a3923"},{"properties":{"displayName":"Microsoft - Managed Control 1094 - Role-Based Security Training","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Awareness and Training control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1094"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4b1853e0-8973-446b-b567-09d901d31a09","type":"Microsoft.Authorization/policyDefinitions","name":"4b1853e0-8973-446b-b567-09d901d31a09"},{"properties":{"displayName":"Azure - Event Grid topics should use private links","policyType":"BuiltIn","mode":"Indexed","description":"Audit - Azure Event Grid topics that do not have at least one approved private endpoint - connection. Clients in a virtual network can securely access resources that - have private endpoint connections via private links. For more information, - visit https://aka.ms/privateendpoints.","metadata":{"version":"1.0.0","category":"Event - Grid"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventGrid/topics"},{"count":{"field":"Microsoft.EventGrid/topics/privateEndpointConnections[*]","where":{"field":"Microsoft.EventGrid/topics/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","type":"Microsoft.Authorization/policyDefinitions","name":"4b90e17e-8448-49db-875e-bd83fb6f804f"},{"properties":{"displayName":"Microsoft - Managed Control 1114 - Response To Audit Processing Failures | Real-Time Alerts","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1114"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4c090801-59bc-4454-bb33-e0455133486a","type":"Microsoft.Authorization/policyDefinitions","name":"4c090801-59bc-4454-bb33-e0455133486a"},{"properties":{"displayName":"Microsoft - Managed Control 1364 - Incident Handling | Dynamic Reconfiguration","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1364"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4c615c2a-dc83-4dda-8220-abce7b50c9bc","type":"Microsoft.Authorization/policyDefinitions","name":"4c615c2a-dc83-4dda-8220-abce7b50c9bc"},{"properties":{"displayName":"Microsoft - Managed Control 1661 - Session Authenticity | Invalidate Session Identifiers - At Logout","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1661"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4c643c9a-1be7-4016-a5e7-e4bada052920","type":"Microsoft.Authorization/policyDefinitions","name":"4c643c9a-1be7-4016-a5e7-e4bada052920"},{"properties":{"displayName":"Microsoft - Managed Control 1373 - Incident Reporting | Automated Reporting","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1373"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4cca950f-c3b7-492a-8e8f-ea39663c14f9","type":"Microsoft.Authorization/policyDefinitions","name":"4cca950f-c3b7-492a-8e8f-ea39663c14f9"},{"properties":{"displayName":"Microsoft - Managed Control 1632 - Boundary Protection | Prevent Split Tunneling For Remote - Devices","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1632"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4ce9073a-77fa-48f0-96b1-87aa8e6091c2","type":"Microsoft.Authorization/policyDefinitions","name":"4ce9073a-77fa-48f0-96b1-87aa8e6091c2"},{"properties":{"displayName":"Deploy - prerequisites to audit Linux VMs that do not have the specified applications - installed","policyType":"BuiltIn","mode":"Indexed","description":"This policy - creates a Guest Configuration assignment to audit Linux virtual machines that - do not have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"3.0.0","category":"Guest Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"ApplicationName":{"type":"String","metadata":{"displayName":"Application - names","description":"A semicolon-separated list of the names of the applications - that should be installed. e.g. ''python; powershell''"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"installed_application_linux","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent'', - ''='', concat(''packages: ['', replace(parameters(''ApplicationName''), '';'', - '',''), '']'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"installed_application_linux"},"ApplicationName":{"value":"[parameters(''ApplicationName'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"ApplicationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent","value":"[concat(''packages: - ['', replace(parameters(''ApplicationName''), '';'', '',''), '']'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent","value":"[concat(''packages: - ['', replace(parameters(''ApplicationName''), '';'', '',''), '']'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforLinux'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforLinux","typeHandlerVersion":"1.0","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4d1c04de-2172-403f-901b-90608c35c721","type":"Microsoft.Authorization/policyDefinitions","name":"4d1c04de-2172-403f-901b-90608c35c721"},{"properties":{"displayName":"FTPS - should be required in your Web App","policyType":"BuiltIn","mode":"Indexed","description":"Enable - FTPS enforcement for enhanced security","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/ftpsState","equals":"FtpsOnly"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","type":"Microsoft.Authorization/policyDefinitions","name":"4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b"},{"properties":{"displayName":"Microsoft - Managed Control 1155 - System Interconnections | Restrictions On External - System Connections","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1155"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4d33f9f1-12d0-46ad-9fbd-8f8046694977","type":"Microsoft.Authorization/policyDefinitions","name":"4d33f9f1-12d0-46ad-9fbd-8f8046694977"},{"properties":{"displayName":"Microsoft - Managed Control 1156 - Plan Of Action And Milestones","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1156"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4d52e864-9a3b-41ee-8f03-520815fe5378","type":"Microsoft.Authorization/policyDefinitions","name":"4d52e864-9a3b-41ee-8f03-520815fe5378"},{"properties":{"displayName":"Microsoft - Managed Control 1312 - Identifier Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1312"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4d6a5968-9eef-4c18-8534-376790ab7274","type":"Microsoft.Authorization/policyDefinitions","name":"4d6a5968-9eef-4c18-8534-376790ab7274"},{"properties":{"displayName":"Deploy - Dependency agent for Linux virtual machines","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Dependency agent for Linux virtual machines if the VM Image (OS) is in the - list defined and the agent is not installed.","metadata":{"version":"1.1.1","category":"Monitoring"},"parameters":{"listOfImageIdToInclude":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Linux OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"},"defaultValue":[]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["14.04.0-LTS","14.04.1-LTS","14.04.5-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["16.04-LTS","16.04.0-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["18.04-LTS"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["12-SP2","12-SP3","12-SP4"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"DependencyAgentLinux"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"variables":{"vmExtensionName":"DependencyAgent","vmExtensionPublisher":"Microsoft.Azure.Monitoring.DependencyAgent","vmExtensionType":"DependencyAgentLinux","vmExtensionTypeHandlerVersion":"9.6"},"resources":[{"type":"Microsoft.Compute/virtualMachines/extensions","name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","apiVersion":"2019-12-01","location":"[parameters(''location'')]","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","typeHandlerVersion":"[variables(''vmExtensionTypeHandlerVersion'')]","autoUpgradeMinorVersion":true,"enableAutomaticUpgrade":true,"settings":{}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4da21710-ce6f-4e06-8cdb-5cc4c93ffbee","type":"Microsoft.Authorization/policyDefinitions","name":"4da21710-ce6f-4e06-8cdb-5cc4c93ffbee"},{"properties":{"displayName":"Advanced - threat protection should be enabled on Virtual Machines","policyType":"BuiltIn","mode":"All","description":"Advanced - threat protection standard tier should be enabled on Virtual Machines. This - provides real-time threat protection for virtual machine workloads and generates - hardening recommendations as well as alerts about suspicious activities.","metadata":{"version":"1.0.1","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/pricings","name":"VirtualMachines","existenceScope":"subscription","existenceCondition":{"field":"Microsoft.Security/pricings/pricingTier","equals":"Standard"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","type":"Microsoft.Authorization/policyDefinitions","name":"4da35fc9-c9e7-4960-aec9-797fe7d9051d"},{"properties":{"displayName":"Deploy - Diagnostic Settings for Data Lake Analytics to Event Hub","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Data Lake Analytics to stream to a regional Event - Hub when any Data Lake Analytics which is missing this diagnostic settings - is created or updated.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"},"defaultValue":"setbypolicy_eventHub"},"eventHubRuleId":{"type":"String","metadata":{"displayName":"Event - Hub Authorization Rule Id","description":"The Event Hub authorization rule - Id for Azure Diagnostics. The authorization rule needs to be at Event Hub - namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}","strongType":"Microsoft.EventHub/Namespaces/AuthorizationRules","assignPermissions":true}},"eventHubLocation":{"type":"String","metadata":{"displayName":"Event - Hub Location","description":"The location the Event Hub resides in. Only Data - Lake Analytics in this location will be linked to this Event Hub.","strongType":"location"},"defaultValue":""},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Event Hub - - True or False"},"allowedValues":["True","False"],"defaultValue":"False"},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Event Hub - True - or False"},"allowedValues":["True","False"],"defaultValue":"True"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DataLakeAnalytics/accounts"},{"anyOf":[{"value":"[parameters(''eventHubLocation'')]","equals":""},{"field":"location","equals":"[parameters(''eventHubLocation'')]"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"eventHubRuleId":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.DataLakeAnalytics/accounts/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"eventHubAuthorizationRuleId":"[parameters(''eventHubRuleId'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"Audit","enabled":"[parameters(''logsEnabled'')]"},{"category":"Requests","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"eventHubRuleId":{"value":"[parameters(''eventHubRuleId'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4daddf25-4823-43d4-88eb-2419eb6dcc08","type":"Microsoft.Authorization/policyDefinitions","name":"4daddf25-4823-43d4-88eb-2419eb6dcc08"},{"properties":{"displayName":"Microsoft - Managed Control 1394 - System Maintenance Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1394"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4db56f68-3f50-45ab-88f3-ca46f5379a94","type":"Microsoft.Authorization/policyDefinitions","name":"4db56f68-3f50-45ab-88f3-ca46f5379a94"},{"properties":{"displayName":"Microsoft - Managed Control 1702 - Information System Monitoring | Indicators Of Compromise","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1702"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4dfc0855-92c4-4641-b155-a55ddd962362","type":"Microsoft.Authorization/policyDefinitions","name":"4dfc0855-92c4-4641-b155-a55ddd962362"},{"properties":{"displayName":"Microsoft - Managed Control 1001 - Access Control Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1001"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4e26f8c3-4bf3-4191-b8fc-d888805101b7","type":"Microsoft.Authorization/policyDefinitions","name":"4e26f8c3-4bf3-4191-b8fc-d888805101b7"},{"properties":{"displayName":"Microsoft - Managed Control 1083 - Publicly Accessible Content","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1083"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4e319cb6-2ca3-4a58-ad75-e67f484e50ec","type":"Microsoft.Authorization/policyDefinitions","name":"4e319cb6-2ca3-4a58-ad75-e67f484e50ec"},{"properties":{"displayName":"Microsoft - Managed Control 1579 - Acquisition Process | Use Of Approved Piv Products","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1579"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4e54c7ef-7457-430b-9a3e-ef8881d4a8e0","type":"Microsoft.Authorization/policyDefinitions","name":"4e54c7ef-7457-430b-9a3e-ef8881d4a8e0"},{"properties":{"displayName":"Microsoft - Managed Control 1247 - Contingency Plan","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1247"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4e666db5-b2ef-4b06-aac6-09bfce49151b","type":"Microsoft.Authorization/policyDefinitions","name":"4e666db5-b2ef-4b06-aac6-09bfce49151b"},{"properties":{"displayName":"Microsoft - Managed Control 1196 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1196"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4e7f4ea4-dd62-44f6-8886-ac6137cf52b0","type":"Microsoft.Authorization/policyDefinitions","name":"4e7f4ea4-dd62-44f6-8886-ac6137cf52b0"},{"properties":{"displayName":"Microsoft - Managed Control 1134 - Protection Of Audit Information | Access By Subset - Of Privileged Users","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1134"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4e95f70e-181c-4422-9da2-43079710c789","type":"Microsoft.Authorization/policyDefinitions","name":"4e95f70e-181c-4422-9da2-43079710c789"},{"properties":{"displayName":"Microsoft - Managed Control 1267 - Alternate Storage Site","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1267"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4e97ba1d-be5d-4953-8da4-0cccf28f4805","type":"Microsoft.Authorization/policyDefinitions","name":"4e97ba1d-be5d-4953-8da4-0cccf28f4805"},{"properties":{"displayName":"Microsoft - Managed Control 1192 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1192"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4ebd97f7-b105-4f50-8daf-c51465991240","type":"Microsoft.Authorization/policyDefinitions","name":"4ebd97f7-b105-4f50-8daf-c51465991240"},{"properties":{"displayName":"Microsoft - Managed Control 1139 - Audit Generation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1139"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4ed62522-de00-4dda-9810-5205733d2f34","type":"Microsoft.Authorization/policyDefinitions","name":"4ed62522-de00-4dda-9810-5205733d2f34"},{"properties":{"displayName":"A - maximum of 3 owners should be designated for your subscription","policyType":"BuiltIn","mode":"All","description":"It - is recommended to designate up to 3 subscription owners in order to reduce - the potential for breach by a compromised owner.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"DesignateLessThanXOwners","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","type":"Microsoft.Authorization/policyDefinitions","name":"4f11b553-d42e-4e3a-89be-32ca364cad4c"},{"properties":{"displayName":"Microsoft - Managed Control 1442 - Media Sanitization | Nondestructive Techniques","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Media Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1442"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4f26049b-2c5a-4841-9ff3-d48a26aae475","type":"Microsoft.Authorization/policyDefinitions","name":"4f26049b-2c5a-4841-9ff3-d48a26aae475"},{"properties":{"displayName":"Microsoft - Managed Control 1182 - Baseline Configuration | Configure Systems, Components, - Or Devices For High-Risk Areas","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1182"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4f34f554-da4b-4786-8d66-7915c90893da","type":"Microsoft.Authorization/policyDefinitions","name":"4f34f554-da4b-4786-8d66-7915c90893da"},{"properties":{"displayName":"A - security contact email address should be provided for your subscription","policyType":"BuiltIn","mode":"All","description":"Enter - an email address to receive notifications when Azure Security Center detects - compromised resources","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/securityContacts","existenceCondition":{"field":"Microsoft.Security/securityContacts/email","notEquals":""}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","type":"Microsoft.Authorization/policyDefinitions","name":"4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7"},{"properties":{"displayName":"Add - a tag to resources","policyType":"BuiltIn","mode":"Indexed","description":"Adds - the specified tag and value when any resource missing this tag is created - or updated. Existing resources can be remediated by triggering a remediation - task. If the tag exists with a different value it will not be changed. Does - not modify tags on resource groups.","metadata":{"version":"1.0.0","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},"then":{"effect":"modify","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"add","field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[parameters(''tagValue'')]"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4f9dc7db-30c1-420c-b61a-e1d640128d26","type":"Microsoft.Authorization/policyDefinitions","name":"4f9dc7db-30c1-420c-b61a-e1d640128d26"},{"properties":{"displayName":"[Preview] - Vulnerability Assessment should be enabled on Virtual Machines","policyType":"BuiltIn","mode":"All","description":"Monitors - vulnerabilities detected by Azure Security Center Vulnerability Assessment - on Virtual Machines","metadata":{"version":"1.0.1","category":"Security Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"serverVulnerabilityAssessment","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","type":"Microsoft.Authorization/policyDefinitions","name":"501541f7-f7e7-4cd6-868c-4190fdad3ac9"},{"properties":{"displayName":"Microsoft - Managed Control 1485 - Delivery And Removal","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1485"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/50301354-95d0-4a11-8af5-8039ecf6d38b","type":"Microsoft.Authorization/policyDefinitions","name":"50301354-95d0-4a11-8af5-8039ecf6d38b"},{"properties":{"displayName":"Microsoft - Managed Control 1646 - Cryptographic Key Establishment And Management | Asymmetric - Keys","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1646"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/506814fa-b930-4b10-894e-a45b98c40e1a","type":"Microsoft.Authorization/policyDefinitions","name":"506814fa-b930-4b10-894e-a45b98c40e1a"},{"properties":{"displayName":"Microsoft - Managed Control 1566 - System Development Life Cycle","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1566"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/50ad3724-e2ac-4716-afcc-d8eabd97adb9","type":"Microsoft.Authorization/policyDefinitions","name":"50ad3724-e2ac-4716-afcc-d8eabd97adb9"},{"properties":{"displayName":"A - custom IPsec/IKE policy must be applied to all Azure virtual network gateway - connections","policyType":"BuiltIn","mode":"All","description":"This policy - ensures that all Azure virtual network gateway connections use a custom Internet - Protocol Security(Ipsec)/Internet Key Exchange(IKE) policy. Supported algorithms - and key strengths - https://aka.ms/AA62kb0","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"},"IPsecEncryption":{"type":"Array","metadata":{"displayName":"IPsec - Encryption","description":"IPsec Encryption"}},"IPsecIntegrity":{"type":"Array","metadata":{"displayName":"IPsec - Integrity","description":"IPsec Integrity"}},"IKEEncryption":{"type":"Array","metadata":{"displayName":"IKE - Encryption","description":"IKE Encryption"}},"IKEIntegrity":{"type":"Array","metadata":{"displayName":"IKE - Integrity","description":"IKE Integrity"}},"DHGroup":{"type":"Array","metadata":{"displayName":"DH - Group","description":"DH Group"}},"PFSGroup":{"type":"Array","metadata":{"displayName":"PFS - Group","description":"PFS Group"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/connections"},{"anyOf":[{"field":"Microsoft.Network/connections/ipsecPolicies[*].ipsecEncryption","notIn":"[parameters(''IPsecEncryption'')]"},{"field":"Microsoft.Network/connections/ipsecPolicies[*].ipsecIntegrity","notIn":"[parameters(''IPsecIntegrity'')]"},{"field":"Microsoft.Network/connections/ipsecPolicies[*].ikeEncryption","notIn":"[parameters(''IKEEncryption'')]"},{"field":"Microsoft.Network/connections/ipsecPolicies[*].ikeIntegrity","notIn":"[parameters(''IKEIntegrity'')]"},{"field":"Microsoft.Network/connections/ipsecPolicies[*].dhGroup","notIn":"[parameters(''DHGroup'')]"},{"field":"Microsoft.Network/connections/ipsecPolicies[*].pfsGroup","notIn":"[parameters(''PFSGroup'')]"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/50b83b09-03da-41c1-b656-c293c914862b","type":"Microsoft.Authorization/policyDefinitions","name":"50b83b09-03da-41c1-b656-c293c914862b"},{"properties":{"displayName":"Microsoft - Managed Control 1248 - Contingency Plan","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1248"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/50fc602d-d8e0-444b-a039-ad138ee5deb0","type":"Microsoft.Authorization/policyDefinitions","name":"50fc602d-d8e0-444b-a039-ad138ee5deb0"},{"properties":{"displayName":"Microsoft - Managed Control 1386 - Information Spillage Response","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1386"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5120193e-91fd-4f9d-bc6d-194f94734065","type":"Microsoft.Authorization/policyDefinitions","name":"5120193e-91fd-4f9d-bc6d-194f94734065"},{"properties":{"displayName":"Microsoft - Managed Control 1352 - Incident Response Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1352"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/518cb545-bfa8-43f8-a108-3b7d5037469a","type":"Microsoft.Authorization/policyDefinitions","name":"518cb545-bfa8-43f8-a108-3b7d5037469a"},{"properties":{"displayName":"Advanced - threat protection should be enabled on Azure Kubernetes Service","policyType":"BuiltIn","mode":"All","description":"Advanced - threat protection standard tier should be enabled on Azure Kubernetes Service. - This provides real-time threat protection for containerized environments and - generates alerts for suspicious activities.","metadata":{"version":"1.0.1","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/pricings","name":"KubernetesService","existenceScope":"subscription","existenceCondition":{"field":"Microsoft.Security/pricings/pricingTier","equals":"Standard"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","type":"Microsoft.Authorization/policyDefinitions","name":"523b5cd1-3e23-492f-a539-13118b6d1e3a"},{"properties":{"displayName":"Microsoft - Managed Control 1642 - Network Disconnect","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1642"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/53397227-5ee3-4b23-9e5e-c8a767ce6928","type":"Microsoft.Authorization/policyDefinitions","name":"53397227-5ee3-4b23-9e5e-c8a767ce6928"},{"properties":{"displayName":"Connection - throttling should be enabled for PostgreSQL database servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy helps audit any PostgreSQL databases in your environment without Connection - throttling enabled. This setting enables temporary connection throttling per - IP for too many invalid password login failures.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforPostgreSQL/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforPostgreSQL/servers/configurations","name":"connection_throttling","existenceCondition":{"field":"Microsoft.DBforPostgreSQL/servers/configurations/value","equals":"ON"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5345bb39-67dc-4960-a1bf-427e16b9a0bd","type":"Microsoft.Authorization/policyDefinitions","name":"5345bb39-67dc-4960-a1bf-427e16b9a0bd"},{"properties":{"displayName":"Azure - SignalR Service should use private links","policyType":"BuiltIn","mode":"Indexed","description":"Audit - Azure SignalR Service resources that do not have at least one approved private - endpoint connection. Clients in a virtual network can securely access resources - that have private endpoint connections through private links. For more information, - visit: https://aka.ms/asrs/privatelink.","metadata":{"version":"1.0.0","category":"SignalR"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.SignalRService/SignalR"},{"count":{"field":"Microsoft.SignalRService/SignalR/privateEndpointConnections[*]","where":{"field":"Microsoft.SignalRService/SignalR/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","type":"Microsoft.Authorization/policyDefinitions","name":"53503636-bcc9-4748-9663-5348217f160f"},{"properties":{"displayName":"Microsoft - Managed Control 1467 - Visitor Access Records","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1467"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5350cbf9-8bdd-4904-b22a-e88be84ca49d","type":"Microsoft.Authorization/policyDefinitions","name":"5350cbf9-8bdd-4904-b22a-e88be84ca49d"},{"properties":{"displayName":"Microsoft - Managed Control 1183 - Baseline Configuration | Configure Systems, Components, - Or Devices For High-Risk Areas","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1183"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5352e3e0-e63a-452e-9e5f-9c1d181cff9c","type":"Microsoft.Authorization/policyDefinitions","name":"5352e3e0-e63a-452e-9e5f-9c1d181cff9c"},{"properties":{"displayName":"Microsoft - Managed Control 1029 - Information Flow Enforcement | Security Policy Filters","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1029"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/53ac8f8e-c2b5-4d44-8a2d-058e9ced9b69","type":"Microsoft.Authorization/policyDefinitions","name":"53ac8f8e-c2b5-4d44-8a2d-058e9ced9b69"},{"properties":{"displayName":"Microsoft - Managed Control 1270 - Alternate Storage Site | Recovery Time / Point Objectives","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1270"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/53c76a39-2097-408a-b237-b279f7b4614d","type":"Microsoft.Authorization/policyDefinitions","name":"53c76a39-2097-408a-b237-b279f7b4614d"},{"properties":{"displayName":"Microsoft - Managed Control 1040 - Least Privilege | Review Of User Privileges","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1040"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/54205576-cec9-463f-ba44-b4b3f5d0a84c","type":"Microsoft.Authorization/policyDefinitions","name":"54205576-cec9-463f-ba44-b4b3f5d0a84c"},{"properties":{"displayName":"Microsoft - Managed Control 1015 - Account Management | Disable Inactive Accounts","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1015"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/544a208a-9c3f-40bc-b1d1-d7e144495c14","type":"Microsoft.Authorization/policyDefinitions","name":"544a208a-9c3f-40bc-b1d1-d7e144495c14"},{"properties":{"displayName":"Microsoft - Managed Control 1026 - Account Management | Disable Accounts For High-Risk - Individuals","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1026"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/55419419-c597-4cd4-b51e-009fd2266783","type":"Microsoft.Authorization/policyDefinitions","name":"55419419-c597-4cd4-b51e-009fd2266783"},{"properties":{"displayName":"Microsoft - Managed Control 1045 - Unsuccessful Logon Attempts","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1045"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/554d2dd6-f3a8-4ad5-b66f-5ce23bd18892","type":"Microsoft.Authorization/policyDefinitions","name":"554d2dd6-f3a8-4ad5-b66f-5ce23bd18892"},{"properties":{"displayName":"Microsoft - Managed Control 1523 - Personnel Transfer","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1523"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5577a310-2551-49c8-803b-36e0d5e55601","type":"Microsoft.Authorization/policyDefinitions","name":"5577a310-2551-49c8-803b-36e0d5e55601"},{"properties":{"displayName":"Microsoft - Managed Control 1113 - Response To Audit Processing Failures | Audit Storage - Capacity","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1113"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/562afd61-56be-4313-8fe4-b9564aa4ba7d","type":"Microsoft.Authorization/policyDefinitions","name":"562afd61-56be-4313-8fe4-b9564aa4ba7d"},{"properties":{"displayName":"Microsoft - Managed Control 1212 - Configuration Settings | Automated Central Management - / Application / Verification","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1212"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/56d970ee-4efc-49c8-8a4e-5916940d784c","type":"Microsoft.Authorization/policyDefinitions","name":"56d970ee-4efc-49c8-8a4e-5916940d784c"},{"properties":{"displayName":"Microsoft - Managed Control 1403 - Controlled Maintenance | Automated Maintenance Activities","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1403"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/57149289-d52b-4f40-9fe6-5233c1ef80f7","type":"Microsoft.Authorization/policyDefinitions","name":"57149289-d52b-4f40-9fe6-5233c1ef80f7"},{"properties":{"displayName":"CORS - should not allow every resource to access your Web Applications","policyType":"BuiltIn","mode":"Indexed","description":"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your web application. - Allow only required domains to interact with your web app.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","existenceCondition":{"field":"Microsoft.Web/sites/config/web.cors.allowedOrigins[*]","notEquals":"*"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","type":"Microsoft.Authorization/policyDefinitions","name":"5744710e-cc2f-4ee8-8809-3b11e89f4bc9"},{"properties":{"displayName":"Microsoft - Managed Control 1162 - Continuous Monitoring","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1162"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5770f3d6-8c2b-4f6f-bf0e-c8c8fc36d592","type":"Microsoft.Authorization/policyDefinitions","name":"5770f3d6-8c2b-4f6f-bf0e-c8c8fc36d592"},{"properties":{"displayName":"Microsoft - Managed Control 1054 - Session Termination","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1054"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5807e1b4-ba5e-4718-8689-a0ca05a191b2","type":"Microsoft.Authorization/policyDefinitions","name":"5807e1b4-ba5e-4718-8689-a0ca05a191b2"},{"properties":{"displayName":"Microsoft - Managed Control 1584 - Information System Documentation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1584"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5864522b-ff1d-4979-a9f8-58bee1fb174c","type":"Microsoft.Authorization/policyDefinitions","name":"5864522b-ff1d-4979-a9f8-58bee1fb174c"},{"properties":{"displayName":"Microsoft - Managed Control 1547 - Vulnerability Scanning","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Risk Assessment control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1547"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58abf9b8-c6d4-4b4b-bfb9-fe98fe295f52","type":"Microsoft.Authorization/policyDefinitions","name":"58abf9b8-c6d4-4b4b-bfb9-fe98fe295f52"},{"properties":{"displayName":"Microsoft - Managed Control 1573 - Acquisition Process","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1573"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58c93053-7b98-4cf0-b99f-1beb985416c2","type":"Microsoft.Authorization/policyDefinitions","name":"58c93053-7b98-4cf0-b99f-1beb985416c2"},{"properties":{"displayName":"[Deprecated]: - Ensure Function app is using the latest version of TLS encryption","policyType":"BuiltIn","mode":"Indexed","description":"Please - use /providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193 - instead. The TLS(Transport Layer Security) protocol secures transmission of - data over the internet using standard encryption technology. Encryption should - be set with the latest version of TLS. App service allows TLS 1.2 by default, - which is the recommended TLS level by industry standards, such as PCI DSS","metadata":{"version":"1.0.0-deprecated","category":"App - Service","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/web.minTlsVersion","equals":"1.2"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58d94fc1-a072-47c2-bd37-9cdb38e77453","type":"Microsoft.Authorization/policyDefinitions","name":"58d94fc1-a072-47c2-bd37-9cdb38e77453"},{"properties":{"displayName":"Microsoft - Managed Control 1063 - Remote Access | Managed Access Control Points","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1063"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/593ce201-54b2-4dd0-b34f-c308005d7780","type":"Microsoft.Authorization/policyDefinitions","name":"593ce201-54b2-4dd0-b34f-c308005d7780"},{"properties":{"displayName":"Microsoft - Managed Control 1463 - Monitoring Physical Access","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1463"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/59721f87-ae25-4db0-a2a4-77cc5b25d495","type":"Microsoft.Authorization/policyDefinitions","name":"59721f87-ae25-4db0-a2a4-77cc5b25d495"},{"properties":{"displayName":"Microsoft - Managed Control 1425 - Timely Maintenance","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1425"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5983d99c-f39b-4c32-a3dc-170f19f6941b","type":"Microsoft.Authorization/policyDefinitions","name":"5983d99c-f39b-4c32-a3dc-170f19f6941b"},{"properties":{"displayName":"Microsoft - Managed Control 1512 - Personnel Screening","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1512"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5a8324ad-f599-429b-aaed-f9c6e8c987a8","type":"Microsoft.Authorization/policyDefinitions","name":"5a8324ad-f599-429b-aaed-f9c6e8c987a8"},{"properties":{"displayName":"Show - audit results from Windows VMs that do not have a minimum password age of - 1 day","policyType":"BuiltIn","mode":"All","description":"This policy should - only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines that do not have a minimum password age of 1 day. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"MinimumPasswordAge","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5aa11bbc-5c76-4302-80e5-aba46a4282e7","type":"Microsoft.Authorization/policyDefinitions","name":"5aa11bbc-5c76-4302-80e5-aba46a4282e7"},{"properties":{"displayName":"Microsoft - Managed Control 1032 - Separation Of Duties","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1032"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5aa85661-d618-46b8-a20f-ca40a86f0751","type":"Microsoft.Authorization/policyDefinitions","name":"5aa85661-d618-46b8-a20f-ca40a86f0751"},{"properties":{"displayName":"Show - audit results from Windows VMs that do not restrict the minimum password length - to 14 characters","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not restrict the minimum password - length to 14 characters. For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"MinimumPasswordLength","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5aebc8d1-020d-4037-89a0-02043a7524ec","type":"Microsoft.Authorization/policyDefinitions","name":"5aebc8d1-020d-4037-89a0-02043a7524ec"},{"properties":{"displayName":"Microsoft - Managed Control 1555 - Vulnerability Scanning | Privileged Access","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Risk Assessment control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1555"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5afa8cab-1ed7-4e40-884c-64e0ac2059cc","type":"Microsoft.Authorization/policyDefinitions","name":"5afa8cab-1ed7-4e40-884c-64e0ac2059cc"},{"properties":{"displayName":"Microsoft - Managed Control 1205 - Access Restrictions For Change | Signed Components","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1205"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5b070cab-0fb8-4e48-ad29-fc90b4c2797c","type":"Microsoft.Authorization/policyDefinitions","name":"5b070cab-0fb8-4e48-ad29-fc90b4c2797c"},{"properties":{"displayName":"Microsoft - Managed Control 1005 - Account Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1005"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5b626abc-26d4-4e22-9de8-3831818526b1","type":"Microsoft.Authorization/policyDefinitions","name":"5b626abc-26d4-4e22-9de8-3831818526b1"},{"properties":{"displayName":"Microsoft - Managed Control 1105 - Audit Events","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1105"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5b73f57b-587d-4470-a344-0b0ae805f459","type":"Microsoft.Authorization/policyDefinitions","name":"5b73f57b-587d-4470-a344-0b0ae805f459"},{"properties":{"displayName":"Show - audit results from Linux VMs that have the specified applications installed","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that have the specified applications installed. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"3.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"not_installed_application_linux","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5b842acb-0fe7-41b0-9f40-880ec4ad84d8","type":"Microsoft.Authorization/policyDefinitions","name":"5b842acb-0fe7-41b0-9f40-880ec4ad84d8"},{"properties":{"displayName":"Microsoft - Managed Control 1433 - Media Transport","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Media Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1433"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5b879b41-2728-41c5-ad24-9ee2c37cbe65","type":"Microsoft.Authorization/policyDefinitions","name":"5b879b41-2728-41c5-ad24-9ee2c37cbe65"},{"properties":{"displayName":"Container - Registries should be encrypted with a Customer-Managed Key (CMK)","policyType":"BuiltIn","mode":"Indexed","description":"Audit - Container Registries that do not have encryption enabled with Customer-Managed - Keys (CMK). For more information on CMK encryption, please visit: https://aka.ms/acr/CMK.","metadata":{"version":"1.0.0","category":"Container - Registry"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerRegistry/registries"},{"not":{"field":"Microsoft.ContainerRegistry/registries/encryption.status","equals":"enabled"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","type":"Microsoft.Authorization/policyDefinitions","name":"5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580"},{"properties":{"displayName":"Ensure - WEB app has ''Client Certificates (Incoming client certificates)'' set to - ''On''","policyType":"BuiltIn","mode":"Indexed","description":"Client certificates - allow for the app to request a certificate for incoming requests. Only clients - that have a valid certificate will be able to reach the app.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"},{"field":"Microsoft.Web/sites/clientCertEnabled","equals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","type":"Microsoft.Authorization/policyDefinitions","name":"5bb220d9-2698-4ee4-8404-b9c30c9df609"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs on which the remote host connection status - does not match the specified one","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which the remote host connection status does not match the specified one. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"host":{"type":"String","metadata":{"displayName":"Remote - Host Name","description":"Specifies the Domain Name System (DNS) name or IP - address of the remote host machine."}},"port":{"type":"String","metadata":{"displayName":"Port","description":"The - TCP port number on the remote host name."}},"shouldConnect":{"type":"String","metadata":{"displayName":"Should - connect to remote host","description":"Must be ''True'' or ''False''. ''True'' - indicates that the virtual machine should be able to establish a connection - with the remote host specified, so the machine will be non-compliant if it - cannot establish a connection. ''False'' indicates that the virtual machine - should not be able to establish a connection with the remote host specified, - so the machine will be non-compliant if it can establish a connection."},"allowedValues":["True","False"],"defaultValue":"False"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsRemoteConnection","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[WindowsRemoteConnection]WindowsRemoteConnection1;host'', - ''='', parameters(''host''), '','', ''[WindowsRemoteConnection]WindowsRemoteConnection1;port'', - ''='', parameters(''port''), '','', ''[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect'', - ''='', parameters(''shouldConnect'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WindowsRemoteConnection"},"host":{"value":"[parameters(''host'')]"},"port":{"value":"[parameters(''port'')]"},"shouldConnect":{"value":"[parameters(''shouldConnect'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"host":{"type":"string"},"port":{"type":"string"},"shouldConnect":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[WindowsRemoteConnection]WindowsRemoteConnection1;host","value":"[parameters(''host'')]"},{"name":"[WindowsRemoteConnection]WindowsRemoteConnection1;port","value":"[parameters(''port'')]"},{"name":"[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect","value":"[parameters(''shouldConnect'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[WindowsRemoteConnection]WindowsRemoteConnection1;host","value":"[parameters(''host'')]"},{"name":"[WindowsRemoteConnection]WindowsRemoteConnection1;port","value":"[parameters(''port'')]"},{"name":"[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect","value":"[parameters(''shouldConnect'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5bb36dda-8a78-4df9-affd-4f05a8612a8a","type":"Microsoft.Authorization/policyDefinitions","name":"5bb36dda-8a78-4df9-affd-4f05a8612a8a"},{"properties":{"displayName":"Microsoft - Managed Control 1551 - Vulnerability Scanning | Update Tool Capability","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Risk Assessment control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1551"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5bbda922-0172-4095-89e6-5b4a0bf03af7","type":"Microsoft.Authorization/policyDefinitions","name":"5bbda922-0172-4095-89e6-5b4a0bf03af7"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''Security Options - Network - Security''","policyType":"BuiltIn","mode":"All","description":"This policy - should only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines with non-compliant settings in Group Policy category: ''Security - Options - Network Security''. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsNetworkSecurity","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c028d2a-1889-45f6-b821-31f42711ced8","type":"Microsoft.Authorization/policyDefinitions","name":"5c028d2a-1889-45f6-b821-31f42711ced8"},{"properties":{"displayName":"Audit - Log Analytics agent deployment in virtual machine scale sets - VM Image (OS) - unlisted","policyType":"BuiltIn","mode":"Indexed","description":"Reports virtual - machine scale sets as non-compliant if the VM Image (OS) is not in the list - defined and the agent is not installed. The list of OS images will be updated - over time as support is updated.","metadata":{"version":"1.0.1","category":"Monitoring"},"parameters":{"listOfImageIdToInclude_windows":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Windows OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"},"defaultValue":[]},"listOfImageIdToInclude_linux":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Linux OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"},"defaultValue":[]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"not":{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude_windows'')]"},{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude_linux'')]"},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"12*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"14.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"16.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"18.04*LTS"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7.*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","existenceCondition":{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138","type":"Microsoft.Authorization/policyDefinitions","name":"5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138"},{"properties":{"displayName":"Microsoft - Managed Control 1671 - Flaw Remediation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1671"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c5bbef7-a316-415b-9b38-29753ce8e698","type":"Microsoft.Authorization/policyDefinitions","name":"5c5bbef7-a316-415b-9b38-29753ce8e698"},{"properties":{"displayName":"Microsoft - Managed Control 1067 - Wireless Access","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1067"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c5e54f6-0127-44d0-8b61-f31dc8dd6190","type":"Microsoft.Authorization/policyDefinitions","name":"5c5e54f6-0127-44d0-8b61-f31dc8dd6190"},{"properties":{"displayName":"External - accounts with write permissions should be removed from your subscription","policyType":"BuiltIn","mode":"All","description":"External - accounts with write privileges should be removed from your subscription in - order to prevent unmonitored access.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"RemoveExternalAccountsWithWritePermissions","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","type":"Microsoft.Authorization/policyDefinitions","name":"5c607a2e-c700-4744-8254-d77e7c9eb5e4"},{"properties":{"displayName":"Microsoft - Managed Control 1483 - Water Damage Protection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1483"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5cb81060-3c8a-4968-bcdc-395a1801f6c1","type":"Microsoft.Authorization/policyDefinitions","name":"5cb81060-3c8a-4968-bcdc-395a1801f6c1"},{"properties":{"displayName":"Microsoft - Managed Control 1362 - Incident Handling","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1362"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5d169442-d6ef-439b-8dca-46c2c3248214","type":"Microsoft.Authorization/policyDefinitions","name":"5d169442-d6ef-439b-8dca-46c2c3248214"},{"properties":{"displayName":"Microsoft - Managed Control 1014 - Account Management | Removal Of Temporary / Emergency - Accounts","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1014"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5dee936c-8037-4df1-ab35-6635733da48c","type":"Microsoft.Authorization/policyDefinitions","name":"5dee936c-8037-4df1-ab35-6635733da48c"},{"properties":{"displayName":"Microsoft - Managed Control 1665 - Process Isolation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1665"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5df3a55c-8456-44d4-941e-175f79332512","type":"Microsoft.Authorization/policyDefinitions","name":"5df3a55c-8456-44d4-941e-175f79332512"},{"properties":{"displayName":"[Deprecated]: - Function App should only be accessible over HTTPS","policyType":"BuiltIn","mode":"All","description":"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"functionapp"},{"field":"kind","equals":"functionapp,linux"},{"field":"kind","equals":"functionapp,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"OnlyHttpsForFunctionApp","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5df82f4f-773a-4a2d-97a2-422a806f1a55","type":"Microsoft.Authorization/policyDefinitions","name":"5df82f4f-773a-4a2d-97a2-422a806f1a55"},{"properties":{"displayName":"Microsoft - Managed Control 1251 - Contingency Plan | Coordinate With Related Plans","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1251"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5e2b3730-8c14-4081-8893-19dbb5de7348","type":"Microsoft.Authorization/policyDefinitions","name":"5e2b3730-8c14-4081-8893-19dbb5de7348"},{"properties":{"displayName":"[Deprecated]: - Audit Web Applications that are not using latest supported .NET Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported .NET Framework version for the latest security classes. - Using older classes and types can make your application vulnerable.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"},{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestDotNet","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5e3315e0-a414-4efb-a4d2-c7bd2b0443d2","type":"Microsoft.Authorization/policyDefinitions","name":"5e3315e0-a414-4efb-a4d2-c7bd2b0443d2"},{"properties":{"displayName":"Show - audit results from Windows VMs that do not have the specified applications - installed","policyType":"BuiltIn","mode":"All","description":"This policy - should only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines that do not have the specified applications installed. For - more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WhitelistedApplication","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5e393799-e3ca-4e43-a9a5-0ec4648a57d9","type":"Microsoft.Authorization/policyDefinitions","name":"5e393799-e3ca-4e43-a9a5-0ec4648a57d9"},{"properties":{"displayName":"Microsoft - Managed Control 1116 - Audit Review, Analysis, And Reporting","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1116"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5e47bc51-35d1-44b8-92af-e2f2d8b67635","type":"Microsoft.Authorization/policyDefinitions","name":"5e47bc51-35d1-44b8-92af-e2f2d8b67635"},{"properties":{"displayName":"Microsoft - Managed Control 1208 - Configuration Settings","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1208"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5ea87673-d06b-456f-a324-8abcee5c159f","type":"Microsoft.Authorization/policyDefinitions","name":"5ea87673-d06b-456f-a324-8abcee5c159f"},{"properties":{"displayName":"[Deprecated]: - Allow resource creation only in India data centers","policyType":"BuiltIn","mode":"Indexed","description":"Allows - resource creation in the following locations only: West India, South India, - Central India","metadata":{"version":"1.0.0-deprecated","category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"location","in":["westindia","southindia","centralindia"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5ee85ce5-e7eb-44d6-b4a2-32a24be1ca54","type":"Microsoft.Authorization/policyDefinitions","name":"5ee85ce5-e7eb-44d6-b4a2-32a24be1ca54"},{"properties":{"displayName":"Deploy - Log Analytics agent for Linux virtual machine scale sets","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Log Analytics agent for Linux virtual machine scale sets if the VM Image (OS) - is in the list defined and the agent is not installed. Note: if your scale - set upgradePolicy is set to Manual, you need to apply the extension to the - all VMs in the set by calling upgrade on them. In CLI this would be az vmss - update-instances.","metadata":{"version":"1.0.1","category":"Monitoring"},"parameters":{"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"listOfImageIdToInclude":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Linux OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"},"defaultValue":[]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"12*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"14.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"16.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"18.04*LTS"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7.*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293","/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/type","equals":"OmsAgentForLinux"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"}},"variables":{"vmExtensionName":"MMAExtension","vmExtensionPublisher":"Microsoft.EnterpriseCloud.Monitoring","vmExtensionType":"OmsAgentForLinux","vmExtensionTypeHandlerVersion":"1.7"},"resources":[{"name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","type":"Microsoft.Compute/virtualMachineScaleSets/extensions","location":"[parameters(''location'')]","apiVersion":"2018-06-01","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","typeHandlerVersion":"[variables(''vmExtensionTypeHandlerVersion'')]","autoUpgradeMinorVersion":true,"settings":{"workspaceId":"[reference(parameters(''logAnalytics''), - ''2015-03-20'').customerId]","stopOnMultipleConnections":"true"},"protectedSettings":{"workspaceKey":"[listKeys(parameters(''logAnalytics''), - ''2015-03-20'').primarySharedKey]"}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for: '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5ee9e9ed-0b42-41b7-8c9c-3cfb2fbe2069","type":"Microsoft.Authorization/policyDefinitions","name":"5ee9e9ed-0b42-41b7-8c9c-3cfb2fbe2069"},{"properties":{"displayName":"Microsoft - Managed Control 1576 - Acquisition Process | Design / Implementation Information - For Security Controls","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1576"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f18c885-ade3-48c5-80b1-8f9216019c18","type":"Microsoft.Authorization/policyDefinitions","name":"5f18c885-ade3-48c5-80b1-8f9216019c18"},{"properties":{"displayName":"External - accounts with read permissions should be removed from your subscription","policyType":"BuiltIn","mode":"All","description":"External - accounts with read privileges should be removed from your subscription in - order to prevent unmonitored access.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"RemoveExternalAccountsWithReadPermissions","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","type":"Microsoft.Authorization/policyDefinitions","name":"5f76cf89-fbf2-47fd-a3f4-b891fa780b60"},{"properties":{"displayName":"Audit - Windows virtual machines on which the Windows Guest Configuration extension - is not enabled","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits Windows virtual machines hosted in Azure that are supported - by Guest Configuration but do not have the Guest Configuration extension enabled. - For more information on Guest Configuration, visit https://aka.ms/gcpol.","metadata":{"version":"2.0.0","category":"Guest - Configuration"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachines/extensions","name":"AzurePolicyforWindows","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.GuestConfiguration"},{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"ConfigurationforWindows"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5fc23db3-dd4d-4c56-bcc7-43626243e601","type":"Microsoft.Authorization/policyDefinitions","name":"5fc23db3-dd4d-4c56-bcc7-43626243e601"},{"properties":{"displayName":"Add - or replace a tag on resources","policyType":"BuiltIn","mode":"Indexed","description":"Adds - or replaces the specified tag and value when any resource is created or updated. - Existing resources can be remediated by triggering a remediation task. Does - not modify tags on resource groups.","metadata":{"version":"1.0.0","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","notEquals":"[parameters(''tagValue'')]"},"then":{"effect":"modify","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[parameters(''tagValue'')]"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5ffd78d9-436d-4b41-a421-5baa819e3008","type":"Microsoft.Authorization/policyDefinitions","name":"5ffd78d9-436d-4b41-a421-5baa819e3008"},{"properties":{"displayName":"Microsoft - Managed Control 1663 - Protection Of Information At Rest","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1663"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/60171210-6dde-40af-a144-bf2670518bfa","type":"Microsoft.Authorization/policyDefinitions","name":"60171210-6dde-40af-a144-bf2670518bfa"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''System Audit Policies - - Object Access''","policyType":"BuiltIn","mode":"All","description":"This policy - should only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines with non-compliant settings in Group Policy category: ''System - Audit Policies - Object Access''. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesObjectAccess","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/60aeaf73-a074-417a-905f-7ce9df0ff77b","type":"Microsoft.Authorization/policyDefinitions","name":"60aeaf73-a074-417a-905f-7ce9df0ff77b"},{"properties":{"displayName":"Storage - Accounts should use a virtual network service endpoint","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Storage Account not configured to use a virtual network - service endpoint.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"anyOf":[{"field":"Microsoft.Storage/storageAccounts/networkAcls.defaultAction","notEquals":"Deny"},{"field":"Microsoft.Storage/storageAccounts/networkAcls.virtualNetworkRules[*].id","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/60d21c4f-21a3-4d94-85f4-b924e6aeeda4","type":"Microsoft.Authorization/policyDefinitions","name":"60d21c4f-21a3-4d94-85f4-b924e6aeeda4"},{"properties":{"displayName":"Show - audit results from Windows web servers that are not using secure communication - protocols","policyType":"BuiltIn","mode":"All","description":"This policy - should only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - web servers that are not using secure communication protocols (TLS 1.1 or - TLS 1.2). For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AuditSecureProtocol","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/60ffe3e2-4604-4460-8f22-0f1da058266c","type":"Microsoft.Authorization/policyDefinitions","name":"60ffe3e2-4604-4460-8f22-0f1da058266c"},{"properties":{"displayName":"Deploy - Advanced Data Security on SQL servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy enables Advanced Data Security on SQL Servers. This includes turning - on Threat Detection and Vulnerability Assessment. It will automatically create - a storage account in the same region and resource group as the SQL server - to store scan results, with a ''sqlva'' prefix.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"DeployIfNotExists","details":{"type":"Microsoft.Sql/servers/securityAlertPolicies","name":"Default","existenceCondition":{"field":"Microsoft.Sql/securityAlertPolicies.state","equals":"Enabled"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3","/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serverName":{"type":"string"},"location":{"type":"string"}},"variables":{"serverResourceGroupName":"[resourceGroup().name]","subscriptionId":"[subscription().subscriptionId]","uniqueStorage":"[uniqueString(variables(''subscriptionId''), - variables(''serverResourceGroupName''), parameters(''location''))]","storageName":"[tolower(concat(''sqlva'', - variables(''uniqueStorage'')))]"},"resources":[{"type":"Microsoft.Storage/storageAccounts","name":"[variables(''storageName'')]","apiVersion":"2019-04-01","location":"[parameters(''location'')]","sku":{"name":"Standard_LRS"},"kind":"StorageV2","properties":{}},{"name":"[concat(parameters(''serverName''), - ''/Default'')]","type":"Microsoft.Sql/servers/securityAlertPolicies","apiVersion":"2017-03-01-preview","properties":{"state":"Enabled","emailAccountAdmins":true}},{"name":"[concat(parameters(''serverName''), - ''/Default'')]","type":"Microsoft.Sql/servers/vulnerabilityAssessments","apiVersion":"2018-06-01-preview","properties":{"storageContainerPath":"[concat(reference(resourceId(''Microsoft.Storage/storageAccounts'', - variables(''storageName''))).primaryEndpoints.blob, ''vulnerability-assessment'')]","storageAccountAccessKey":"[listKeys(resourceId(''Microsoft.Storage/storageAccounts'', - variables(''storageName'')), ''2018-02-01'').keys[0].value]","recurringScans":{"isEnabled":true,"emailSubscriptionAdmins":true,"emails":[]}},"dependsOn":["[concat(''Microsoft.Storage/storageAccounts/'', - variables(''storageName''))]","[concat(''Microsoft.Sql/servers/'', parameters(''serverName''), - ''/securityAlertPolicies/Default'')]"]}]},"parameters":{"serverName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6134c3db-786f-471e-87bc-8f479dc890f6","type":"Microsoft.Authorization/policyDefinitions","name":"6134c3db-786f-471e-87bc-8f479dc890f6"},{"properties":{"displayName":"[Preview]: - Configure time zone on Windows machines.","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to set specified time zone - on Windows virtual machines.","metadata":{"version":"1.1.0-preview","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"preview":true},"parameters":{"TimeZone":{"type":"String","metadata":{"displayName":"[Preview]: - Time zone","description":"The expected time zone"},"allowedValues":["(UTC-12:00) - International Date Line West","(UTC-11:00) Coordinated Universal Time-11","(UTC-10:00) - Aleutian Islands","(UTC-10:00) Hawaii","(UTC-09:30) Marquesas Islands","(UTC-09:00) - Alaska","(UTC-09:00) Coordinated Universal Time-09","(UTC-08:00) Baja California","(UTC-08:00) - Coordinated Universal Time-08","(UTC-08:00) Pacific Time (US & Canada)","(UTC-07:00) - Arizona","(UTC-07:00) Chihuahua, La Paz, Mazatlan","(UTC-07:00) Mountain Time - (US & Canada)","(UTC-06:00) Central America","(UTC-06:00) Central Time (US - & Canada)","(UTC-06:00) Easter Island","(UTC-06:00) Guadalajara, Mexico City, - Monterrey","(UTC-06:00) Saskatchewan","(UTC-05:00) Bogota, Lima, Quito, Rio - Branco","(UTC-05:00) Chetumal","(UTC-05:00) Eastern Time (US & Canada)","(UTC-05:00) - Haiti","(UTC-05:00) Havana","(UTC-05:00) Indiana (East)","(UTC-05:00) Turks - and Caicos","(UTC-04:00) Asuncion","(UTC-04:00) Atlantic Time (Canada)","(UTC-04:00) - Caracas","(UTC-04:00) Cuiaba","(UTC-04:00) Georgetown, La Paz, Manaus, San - Juan","(UTC-04:00) Santiago","(UTC-03:30) Newfoundland","(UTC-03:00) Araguaina","(UTC-03:00) - Brasilia","(UTC-03:00) Cayenne, Fortaleza","(UTC-03:00) City of Buenos Aires","(UTC-03:00) - Greenland","(UTC-03:00) Montevideo","(UTC-03:00) Punta Arenas","(UTC-03:00) - Saint Pierre and Miquelon","(UTC-03:00) Salvador","(UTC-02:00) Coordinated - Universal Time-02","(UTC-02:00) Mid-Atlantic - Old","(UTC-01:00) Azores","(UTC-01:00) - Cabo Verde Is.","(UTC) Coordinated Universal Time","(UTC+00:00) Dublin, Edinburgh, - Lisbon, London","(UTC+00:00) Monrovia, Reykjavik","(UTC+00:00) Sao Tome","(UTC+01:00) - Casablanca","(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna","(UTC+01:00) - Belgrade, Bratislava, Budapest, Ljubljana, Prague","(UTC+01:00) Brussels, - Copenhagen, Madrid, Paris","(UTC+01:00) Sarajevo, Skopje, Warsaw, Zagreb","(UTC+01:00) - West Central Africa","(UTC+02:00) Amman","(UTC+02:00) Athens, Bucharest","(UTC+02:00) - Beirut","(UTC+02:00) Cairo","(UTC+02:00) Chisinau","(UTC+02:00) Damascus","(UTC+02:00) - Gaza, Hebron","(UTC+02:00) Harare, Pretoria","(UTC+02:00) Helsinki, Kyiv, - Riga, Sofia, Tallinn, Vilnius","(UTC+02:00) Jerusalem","(UTC+02:00) Kaliningrad","(UTC+02:00) - Khartoum","(UTC+02:00) Tripoli","(UTC+02:00) Windhoek","(UTC+03:00) Baghdad","(UTC+03:00) - Istanbul","(UTC+03:00) Kuwait, Riyadh","(UTC+03:00) Minsk","(UTC+03:00) Moscow, - St. Petersburg","(UTC+03:00) Nairobi","(UTC+03:30) Tehran","(UTC+04:00) Abu - Dhabi, Muscat","(UTC+04:00) Astrakhan, Ulyanovsk","(UTC+04:00) Baku","(UTC+04:00) - Izhevsk, Samara","(UTC+04:00) Port Louis","(UTC+04:00) Saratov","(UTC+04:00) - Tbilisi","(UTC+04:00) Volgograd","(UTC+04:00) Yerevan","(UTC+04:30) Kabul","(UTC+05:00) - Ashgabat, Tashkent","(UTC+05:00) Ekaterinburg","(UTC+05:00) Islamabad, Karachi","(UTC+05:00) - Qyzylorda","(UTC+05:30) Chennai, Kolkata, Mumbai, New Delhi","(UTC+05:30) - Sri Jayawardenepura","(UTC+05:45) Kathmandu","(UTC+06:00) Astana","(UTC+06:00) - Dhaka","(UTC+06:00) Omsk","(UTC+06:30) Yangon (Rangoon)","(UTC+07:00) Bangkok, - Hanoi, Jakarta","(UTC+07:00) Barnaul, Gorno-Altaysk","(UTC+07:00) Hovd","(UTC+07:00) - Krasnoyarsk","(UTC+07:00) Novosibirsk","(UTC+07:00) Tomsk","(UTC+08:00) Beijing, - Chongqing, Hong Kong, Urumqi","(UTC+08:00) Irkutsk","(UTC+08:00) Kuala Lumpur, - Singapore","(UTC+08:00) Perth","(UTC+08:00) Taipei","(UTC+08:00) Ulaanbaatar","(UTC+08:45) - Eucla","(UTC+09:00) Chita","(UTC+09:00) Osaka, Sapporo, Tokyo","(UTC+09:00) - Pyongyang","(UTC+09:00) Seoul","(UTC+09:00) Yakutsk","(UTC+09:30) Adelaide","(UTC+09:30) - Darwin","(UTC+10:00) Brisbane","(UTC+10:00) Canberra, Melbourne, Sydney","(UTC+10:00) - Guam, Port Moresby","(UTC+10:00) Hobart","(UTC+10:00) Vladivostok","(UTC+10:30) - Lord Howe Island","(UTC+11:00) Bougainville Island","(UTC+11:00) Chokurdakh","(UTC+11:00) - Magadan","(UTC+11:00) Norfolk Island","(UTC+11:00) Sakhalin","(UTC+11:00) - Solomon Is., New Caledonia","(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky","(UTC+12:00) - Auckland, Wellington","(UTC+12:00) Coordinated Universal Time+12","(UTC+12:00) - Fiji","(UTC+12:00) Petropavlovsk-Kamchatsky - Old","(UTC+12:45) Chatham Islands","(UTC+13:00) - Coordinated Universal Time+13","(UTC+13:00) Nuku''alofa","(UTC+13:00) Samoa","(UTC+14:00) - Kiritimati Island"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"SetWindowsTimeZone","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[WindowsTimeZone]WindowsTimeZone1;TimeZone'', - ''='', parameters(''TimeZone'')))]"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}]},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"SetWindowsTimeZone"},"TimeZone":{"value":"[parameters(''TimeZone'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"TimeZone":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","assignmentType":"DeployAndAutoCorrect","configurationParameter":[{"name":"[WindowsTimeZone]WindowsTimeZone1;TimeZone","value":"[parameters(''TimeZone'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","assignmentType":"DeployAndAutoCorrect","configurationParameter":[{"name":"[WindowsTimeZone]WindowsTimeZone1;TimeZone","value":"[parameters(''TimeZone'')]"}]}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6141c932-9384-44c6-a395-59e4c057d7c9","type":"Microsoft.Authorization/policyDefinitions","name":"6141c932-9384-44c6-a395-59e4c057d7c9"},{"properties":{"displayName":"Service - Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign","policyType":"BuiltIn","mode":"Indexed","description":"Service - Fabric provides three levels of protection (None, Sign and EncryptAndSign) - for node-to-node communication using a primary cluster certificate. Set the - protection level to ensure that all node-to-node messages are encrypted and - digitally signed","metadata":{"version":"1.1.0","category":"Service Fabric"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ServiceFabric/clusters"},{"anyOf":[{"field":"Microsoft.ServiceFabric/clusters/fabricSettings[*].name","notEquals":"Security"},{"field":"Microsoft.ServiceFabric/clusters/fabricSettings[*].parameters[*].name","notEquals":"ClusterProtectionLevel"},{"field":"Microsoft.ServiceFabric/clusters/fabricSettings[*].parameters[*].value","notEquals":"EncryptAndSign"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","type":"Microsoft.Authorization/policyDefinitions","name":"617c02be-7f02-4efd-8836-3180d47b6c68"},{"properties":{"displayName":"Microsoft - Managed Control 1110 - Audit Storage Capacity","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1110"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6182bfa7-0f2a-43f5-834a-a2ddf31c13c7","type":"Microsoft.Authorization/policyDefinitions","name":"6182bfa7-0f2a-43f5-834a-a2ddf31c13c7"},{"properties":{"displayName":"Microsoft - Managed Control 1415 - Nonlocal Maintenance","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1415"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/61a1dd98-b259-4840-abd5-fbba7ee0da83","type":"Microsoft.Authorization/policyDefinitions","name":"61a1dd98-b259-4840-abd5-fbba7ee0da83"},{"properties":{"displayName":"Microsoft - Managed Control 1153 - System Interconnections","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1153"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/61cf3125-142c-4754-8a16-41ab4d529635","type":"Microsoft.Authorization/policyDefinitions","name":"61cf3125-142c-4754-8a16-41ab4d529635"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''Security Options - System - objects''","policyType":"BuiltIn","mode":"All","description":"This policy - should only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines with non-compliant settings in Group Policy category: ''Security - Options - System objects''. For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsSystemobjects","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/620e58b5-ac75-49b4-993f-a9d4f0459636","type":"Microsoft.Authorization/policyDefinitions","name":"620e58b5-ac75-49b4-993f-a9d4f0459636"},{"properties":{"displayName":"Microsoft - Managed Control 1682 - Malicious Code Protection | Nonsignature-Based Detection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1682"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/62b638c5-29d7-404b-8d93-f21e4b1ce198","type":"Microsoft.Authorization/policyDefinitions","name":"62b638c5-29d7-404b-8d93-f21e4b1ce198"},{"properties":{"displayName":"Microsoft - Managed Control 1660 - Session Authenticity","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1660"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/63096613-ce83-43e5-96f4-e588e8813554","type":"Microsoft.Authorization/policyDefinitions","name":"63096613-ce83-43e5-96f4-e588e8813554"},{"properties":{"displayName":"[Preview]: - Audit Linux virtual machines on which the use of passwords for SSH is allowed","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits Linux virtual machines that use passwords for authenticating - through SSH. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol","metadata":{"category":"Guest - Configuration","version":"1.0.0-preview","preview":true,"requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"LinuxNoPasswordForSSH","version":"1.*"}},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"LinuxNoPasswordForSSH","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","type":"Microsoft.Authorization/policyDefinitions","name":"630c64f9-8b6b-4c64-b511-6544ceff6fd6"},{"properties":{"displayName":"Microsoft - Managed Control 1002 - Account Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1002"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/632024c2-8079-439d-a7f6-90af1d78cc65","type":"Microsoft.Authorization/policyDefinitions","name":"632024c2-8079-439d-a7f6-90af1d78cc65"},{"properties":{"displayName":"Microsoft - Managed Control 1498 - Rules Of Behavior","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1498"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/633988b9-cf2f-4323-8394-f0d2af9cd6e1","type":"Microsoft.Authorization/policyDefinitions","name":"633988b9-cf2f-4323-8394-f0d2af9cd6e1"},{"properties":{"displayName":"Microsoft - Managed Control 1177 - Baseline Configuration | Reviews And Updates","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1177"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/63dbc7a8-e20b-4d38-b857-a7f6c0cd94bc","type":"Microsoft.Authorization/policyDefinitions","name":"63dbc7a8-e20b-4d38-b857-a7f6c0cd94bc"},{"properties":{"displayName":"Microsoft - Managed Control 1185 - Configuration Change Control","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1185"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6420cd73-b939-43b7-9d99-e8688fea053c","type":"Microsoft.Authorization/policyDefinitions","name":"6420cd73-b939-43b7-9d99-e8688fea053c"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''Security Options - - Devices''","policyType":"BuiltIn","mode":"Indexed","description":"This policy - creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - Devices''. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"DevicesAllowedToFormatAndEjectRemovableMedia":{"type":"String","metadata":{"displayName":"Devices: - Allowed to format and eject removable media","description":"Specifies who - is allowed to format and eject removable NTFS media. You can use this policy - setting to prevent unauthorized users from removing data on one computer to - access it on another computer on which they have local administrator privileges."},"defaultValue":"0"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsDevices","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Devices: - Allowed to format and eject removable media;ExpectedValue'', ''='', parameters(''DevicesAllowedToFormatAndEjectRemovableMedia'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsDevices"},"DevicesAllowedToFormatAndEjectRemovableMedia":{"value":"[parameters(''DevicesAllowedToFormatAndEjectRemovableMedia'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"DevicesAllowedToFormatAndEjectRemovableMedia":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Devices: - Allowed to format and eject removable media;ExpectedValue","value":"[parameters(''DevicesAllowedToFormatAndEjectRemovableMedia'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Devices: - Allowed to format and eject removable media;ExpectedValue","value":"[parameters(''DevicesAllowedToFormatAndEjectRemovableMedia'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6481cc21-ed6e-4480-99dd-ea7c5222e897","type":"Microsoft.Authorization/policyDefinitions","name":"6481cc21-ed6e-4480-99dd-ea7c5222e897"},{"properties":{"displayName":"Microsoft - Managed Control 1441 - Media Sanitization | Equipment Testing","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Media Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1441"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6519d7f3-e8a2-4ff3-a935-9a9497152ad7","type":"Microsoft.Authorization/policyDefinitions","name":"6519d7f3-e8a2-4ff3-a935-9a9497152ad7"},{"properties":{"displayName":"Microsoft - Managed Control 1558 - Vulnerability Scanning | Correlate Scanning Information","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Risk Assessment control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1558"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/65592b16-4367-42c5-a26e-d371be450e17","type":"Microsoft.Authorization/policyDefinitions","name":"65592b16-4367-42c5-a26e-d371be450e17"},{"properties":{"displayName":"[Deprecated]: - Audit missing blob encryption for storage accounts","policyType":"BuiltIn","mode":"All","description":"This - policy is no longer necessary because storage blob encryption is enabled by - default and cannot be turned off.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"not":{"field":"Microsoft.Storage/storageAccounts/enableBlobEncryption","equals":"True"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/655cb504-bcee-4362-bd4c-402e6aa38759","type":"Microsoft.Authorization/policyDefinitions","name":"655cb504-bcee-4362-bd4c-402e6aa38759"},{"properties":{"displayName":"Advanced - data security should be enabled on SQL Server on Virtual Machines","policyType":"BuiltIn","mode":"All","description":"Advanced - data security standard tier should be enabled on SQL Server on Virtual Machines. - This provides functionality for surfacing and mitigating potential database - vulnerabilities, detecting anomalous activities that could indicate a threat - to SQL database and discovering and classifying sensitive data.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/pricings","name":"SqlServerVirtualMachines","existenceScope":"subscription","existenceCondition":{"field":"Microsoft.Security/pricings/pricingTier","equals":"Standard"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","type":"Microsoft.Authorization/policyDefinitions","name":"6581d072-105e-4418-827f-bd446d56421b"},{"properties":{"displayName":"Microsoft - Managed Control 1261 - Contingency Plan Testing","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1261"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/65aeceb5-a59c-4cb1-8d82-9c474be5d431","type":"Microsoft.Authorization/policyDefinitions","name":"65aeceb5-a59c-4cb1-8d82-9c474be5d431"},{"properties":{"displayName":"[Deprecated]: - Audit IP restrictions configuration for a Function App","policyType":"BuiltIn","mode":"All","description":"IP - Restrictions allow you to define a list of IP addresses that are allowed to - access your app. Use of IP Restrictions protects a Function app from common - attacks.","metadata":{"version":"1.0.0-deprecated","category":"Security Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"functionapp"},{"field":"kind","equals":"functionapp,linux"},{"field":"kind","equals":"functionapp,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"ConfigureIPRestrictions","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/664346d9-be92-43fb-a219-d595eeb76a90","type":"Microsoft.Authorization/policyDefinitions","name":"664346d9-be92-43fb-a219-d595eeb76a90"},{"properties":{"displayName":"Microsoft - Managed Control 1444 - Media Use | Prohibit Use Without Owner","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Media Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1444"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/666143df-f5e0-45bd-b554-135f0f93e44e","type":"Microsoft.Authorization/policyDefinitions","name":"666143df-f5e0-45bd-b554-135f0f93e44e"},{"properties":{"displayName":"Microsoft - Managed Control 1319 - Authenticator Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1319"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/66f7ae57-5560-4fc5-85c9-659f204e7a42","type":"Microsoft.Authorization/policyDefinitions","name":"66f7ae57-5560-4fc5-85c9-659f204e7a42"},{"properties":{"displayName":"Cognitive - Services accounts should enable data encryption with customer managed key","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Cognitive Services account not using data encryption with - customer managed key.","metadata":{"version":"1.0.0","category":"Cognitive - Services"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.CognitiveServices/accounts"},{"field":"Microsoft.CognitiveServices/accounts/encryption.keySource","notEquals":"Microsoft.KeyVault"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","type":"Microsoft.Authorization/policyDefinitions","name":"67121cc7-ff39-4ab8-b7e3-95b84dab487d"},{"properties":{"displayName":"Microsoft - Managed Control 1628 - Boundary Protection | External Telecommunications Services","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1628"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/67de62b4-a737-4781-8861-3baed3c35069","type":"Microsoft.Authorization/policyDefinitions","name":"67de62b4-a737-4781-8861-3baed3c35069"},{"properties":{"displayName":"Microsoft - Managed Control 1377 - Incident Response Assistance | Coordination With External - Providers","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1377"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/68434bd1-e14b-4031-9edb-a4adf5f84a67","type":"Microsoft.Authorization/policyDefinitions","name":"68434bd1-e14b-4031-9edb-a4adf5f84a67"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs on which the Log Analytics agent is not - connected as expected","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which the Log Analytics agent is not connected to the specified workspaces. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"WorkspaceId":{"type":"String","metadata":{"displayName":"Connected - workspace IDs","description":"A semicolon-separated list of the workspace - IDs that the Log Analytics agent should be connected to"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsLogAnalyticsAgentConnection","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId'', - ''='', parameters(''WorkspaceId'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WindowsLogAnalyticsAgentConnection"},"WorkspaceId":{"value":"[parameters(''WorkspaceId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"WorkspaceId":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId","value":"[parameters(''WorkspaceId'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId","value":"[parameters(''WorkspaceId'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/68511db2-bd02-41c4-ae6b-1900a012968a","type":"Microsoft.Authorization/policyDefinitions","name":"68511db2-bd02-41c4-ae6b-1900a012968a"},{"properties":{"displayName":"Microsoft - Managed Control 1597 - Developer Configuration Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1597"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/68b250ec-2e4f-4eee-898a-117a9fda7016","type":"Microsoft.Authorization/policyDefinitions","name":"68b250ec-2e4f-4eee-898a-117a9fda7016"},{"properties":{"displayName":"Microsoft - Managed Control 1588 - External Information System Services","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1588"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/68ebae26-e0e0-4ecb-8379-aabf633b51e9","type":"Microsoft.Authorization/policyDefinitions","name":"68ebae26-e0e0-4ecb-8379-aabf633b51e9"},{"properties":{"displayName":"Microsoft - Managed Control 1070 - Wireless Access | Disable Wireless Networking","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1070"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/68f837d0-8942-4b1e-9b31-be78b247bda8","type":"Microsoft.Authorization/policyDefinitions","name":"68f837d0-8942-4b1e-9b31-be78b247bda8"},{"properties":{"displayName":"Microsoft - Managed Control 1727 - Memory Protection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1727"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/697175a7-9715-4e89-b98b-c6f605888fa3","type":"Microsoft.Authorization/policyDefinitions","name":"697175a7-9715-4e89-b98b-c6f605888fa3"},{"properties":{"displayName":"Microsoft - Managed Control 1652 - Mobile Code","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1652"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6998e84a-2d29-4e10-8962-76754d4f772d","type":"Microsoft.Authorization/policyDefinitions","name":"6998e84a-2d29-4e10-8962-76754d4f772d"},{"properties":{"displayName":"[Preview]: - Deploy Log Analytics agent to Windows Azure Arc machines","policyType":"BuiltIn","mode":"Indexed","description":"This - policy deploys the Log Analytics agent to Windows Azure Arc machines if the - agent isn''t installed.","metadata":{"version":"1.0.1-preview","category":"Monitoring","preview":true},"parameters":{"logAnalytics":{"type":"String","metadata":{"displayName":"[Preview]: - Log Analytics workspace","description":"Specify the Log Analytics workspace - the agent should be connected to. If this workspace is outside of the scope - of the assignment you must manually grant ''Log Analytics Contributor'' permissions - (or similar) to the policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.HybridCompute/machines/extensions","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"existenceCondition":{"allOf":[{"field":"Microsoft.HybridCompute/machines/extensions/type","equals":"MicrosoftMonitoringAgent"},{"field":"Microsoft.HybridCompute/machines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"},{"field":"Microsoft.HybridCompute/machines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"}},"variables":{"vmExtensionName":"MMAExtension","vmExtensionPublisher":"Microsoft.EnterpriseCloud.Monitoring","vmExtensionType":"MicrosoftMonitoringAgent"},"resources":[{"name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","type":"Microsoft.HybridCompute/machines/extensions","location":"[parameters(''location'')]","apiVersion":"2019-12-12","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","settings":{"workspaceId":"[reference(parameters(''logAnalytics''), - ''2015-03-20'').customerId]","stopOnMultipleConnections":"true"},"protectedSettings":{"workspaceKey":"[listKeys(parameters(''logAnalytics''), - ''2015-03-20'').primarySharedKey]"}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/69af7d4a-7b18-4044-93a9-2651498ef203","type":"Microsoft.Authorization/policyDefinitions","name":"69af7d4a-7b18-4044-93a9-2651498ef203"},{"properties":{"displayName":"Microsoft - Managed Control 1699 - Information System Monitoring | Privileged Users","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1699"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/69c7bee8-bc19-4129-a51e-65a7b39d3e7c","type":"Microsoft.Authorization/policyDefinitions","name":"69c7bee8-bc19-4129-a51e-65a7b39d3e7c"},{"properties":{"displayName":"Microsoft - Managed Control 1696 - Information System Monitoring | Correlate Monitoring - Information","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1696"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/69d2a238-20ab-4206-a6dc-f302bf88b1b8","type":"Microsoft.Authorization/policyDefinitions","name":"69d2a238-20ab-4206-a6dc-f302bf88b1b8"},{"properties":{"displayName":"Microsoft - Managed Control 1244 - Contingency Plan","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1244"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6a13a8f8-c163-4b1b-8554-d63569dab937","type":"Microsoft.Authorization/policyDefinitions","name":"6a13a8f8-c163-4b1b-8554-d63569dab937"},{"properties":{"displayName":"Microsoft - Managed Control 1019 - Account Management | Role-Based Schemes","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1019"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6a3ee9b2-3977-459c-b8ce-2db583abd9f7","type":"Microsoft.Authorization/policyDefinitions","name":"6a3ee9b2-3977-459c-b8ce-2db583abd9f7"},{"properties":{"displayName":"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which Windows Defender Exploit - Guard is not enabled","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which Windows Defender Exploit Guard is not enabled. It also creates a - system-assigned managed identity and deploys the VM extension for Guest Configuration. - This policy should only be used along with its corresponding audit policy - in an initiative. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol","metadata":{"version":"1.1.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"NotAvailableMachineState":{"type":"String","metadata":{"displayName":"[Deprecated]: - State in which to show VMs on which Windows Defender Exploit Guard is not - available","description":"Windows Defender Exploit Guard is only available - starting with Windows 10/Windows Server with update 1709. Setting this value - to ''Non-Compliant'' will make machines with older versions on which Windows - Defender Exploit Guard is not available (such as Windows Server 2012 R2) non-compliant. - Setting this value to ''Compliant'' will make these machines compliant."},"allowedValues":["Compliant","Non-Compliant"],"defaultValue":"Non-Compliant"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsDefenderExploitGuard","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState'', - ''='', parameters(''NotAvailableMachineState'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WindowsDefenderExploitGuard"},"NotAvailableMachineState":{"value":"[parameters(''NotAvailableMachineState'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"NotAvailableMachineState":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState","value":"[parameters(''NotAvailableMachineState'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState","value":"[parameters(''NotAvailableMachineState'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2015-05-01-preview","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6a7a2bcf-f9be-4e35-9734-4f9657a70f1d","type":"Microsoft.Authorization/policyDefinitions","name":"6a7a2bcf-f9be-4e35-9734-4f9657a70f1d"},{"properties":{"displayName":"[Deprecated]: - Audit IP restrictions configuration for a Web Application","policyType":"BuiltIn","mode":"All","description":"IP - Restrictions allow you to define a list of IP addresses that are allowed to - access your app. Use of IP Restrictions protects a web application from common - attacks.","metadata":{"version":"1.0.0-deprecated","category":"Security Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"},{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"ConfigureIPRestrictions","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6a8450e2-6c61-43b4-be65-62e3a197bffe","type":"Microsoft.Authorization/policyDefinitions","name":"6a8450e2-6c61-43b4-be65-62e3a197bffe"},{"properties":{"displayName":"Microsoft - Managed Control 1211 - Configuration Settings","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1211"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6a8b9dc8-6b00-4701-aa96-bba3277ebf50","type":"Microsoft.Authorization/policyDefinitions","name":"6a8b9dc8-6b00-4701-aa96-bba3277ebf50"},{"properties":{"displayName":"[Deprecated]: - Ensure WEB app is using the latest version of TLS encryption ","policyType":"BuiltIn","mode":"Indexed","description":"Please - use /providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b - instead. The TLS(Transport Layer Security) protocol secures transmission of - data over the internet using standard encryption technology. Encryption should - be set with the latest version of TLS. App service allows TLS 1.2 by default, - which is the recommended TLS level by industry standards, such as PCI DSS.","metadata":{"version":"1.0.0-deprecated","category":"App - Service","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/web.minTlsVersion","equals":"1.2"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6ad61431-88ce-4357-a0e1-6da43f292bd7","type":"Microsoft.Authorization/policyDefinitions","name":"6ad61431-88ce-4357-a0e1-6da43f292bd7"},{"properties":{"displayName":"Microsoft - Managed Control 1653 - Mobile Code","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1653"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6b1c00a7-7fd0-42b0-8c5b-c45f6fa1f71b","type":"Microsoft.Authorization/policyDefinitions","name":"6b1c00a7-7fd0-42b0-8c5b-c45f6fa1f71b"},{"properties":{"displayName":"Deprecated - accounts should be removed from your subscription","policyType":"BuiltIn","mode":"All","description":"Deprecated - accounts should be removed from your subscriptions. Deprecated accounts are - accounts that have been blocked from signing in.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"RemoveDeprecatedAccounts","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","type":"Microsoft.Authorization/policyDefinitions","name":"6b1cbf55-e8b6-442f-ba4c-7246b6381474"},{"properties":{"displayName":"Deploy - Diagnostic Settings for Service Bus to Event Hub","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Service Bus to stream to a regional Event Hub - when any Service Bus which is missing this diagnostic settings is created - or updated.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"},"defaultValue":"setbypolicy_eventHub"},"eventHubRuleId":{"type":"String","metadata":{"displayName":"Event - Hub Authorization Rule Id","description":"The Event Hub authorization rule - Id for Azure Diagnostics. The authorization rule needs to be at Event Hub - namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}","strongType":"Microsoft.EventHub/Namespaces/AuthorizationRules","assignPermissions":true}},"eventHubLocation":{"type":"String","metadata":{"displayName":"Event - Hub Location","description":"The location the Event Hub resides in. Only Service - Bus in this location will be linked to this Event Hub.","strongType":"location"},"defaultValue":""},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Event Hub - - True or False"},"allowedValues":["True","False"],"defaultValue":"False"},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Event Hub - True - or False"},"allowedValues":["True","False"],"defaultValue":"True"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ServiceBus/namespaces"},{"anyOf":[{"value":"[parameters(''eventHubLocation'')]","equals":""},{"field":"location","equals":"[parameters(''eventHubLocation'')]"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"eventHubRuleId":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.ServiceBus/namespaces/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"eventHubAuthorizationRuleId":"[parameters(''eventHubRuleId'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"OperationalLogs","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"eventHubRuleId":{"value":"[parameters(''eventHubRuleId'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6b51af03-9277-49a9-a3f8-1c69c9ff7403","type":"Microsoft.Authorization/policyDefinitions","name":"6b51af03-9277-49a9-a3f8-1c69c9ff7403"},{"properties":{"displayName":"Microsoft - Managed Control 1031 - Separation Of Duties","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1031"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6b93a801-fe25-4574-a60d-cb22acffae00","type":"Microsoft.Authorization/policyDefinitions","name":"6b93a801-fe25-4574-a60d-cb22acffae00"},{"properties":{"displayName":"Not - allowed resource types","policyType":"BuiltIn","mode":"All","description":"This - policy enables you to specify the resource types that your organization cannot - deploy.","metadata":{"version":"1.0.0","category":"General"},"parameters":{"listOfResourceTypesNotAllowed":{"type":"Array","metadata":{"description":"The - list of resource types that cannot be deployed.","displayName":"Not allowed - resource types","strongType":"resourceTypes"}}},"policyRule":{"if":{"field":"type","in":"[parameters(''listOfResourceTypesNotAllowed'')]"},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6c112d4e-5bc7-47ae-a041-ea2d9dccd749","type":"Microsoft.Authorization/policyDefinitions","name":"6c112d4e-5bc7-47ae-a041-ea2d9dccd749"},{"properties":{"displayName":"Microsoft - Managed Control 1338 - Authenticator Management | Automated Support For Password - Strength Determination","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1338"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6c59a207-6aed-41dc-83a2-e1ff66e4a4db","type":"Microsoft.Authorization/policyDefinitions","name":"6c59a207-6aed-41dc-83a2-e1ff66e4a4db"},{"properties":{"displayName":"Microsoft - Managed Control 1304 - Identification And Authentication (Org. Users) | Local - Access To Non-Privileged Accounts","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1304"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6ca71be3-16cb-4d39-8b50-7f8fd5e2f11b","type":"Microsoft.Authorization/policyDefinitions","name":"6ca71be3-16cb-4d39-8b50-7f8fd5e2f11b"},{"properties":{"displayName":"Microsoft - Managed Control 1437 - Media Transport | Cryptographic Protection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Media Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1437"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6d1eb6ed-bf13-4046-b993-b9e2aef0f76c","type":"Microsoft.Authorization/policyDefinitions","name":"6d1eb6ed-bf13-4046-b993-b9e2aef0f76c"},{"properties":{"displayName":"Microsoft - Managed Control 1171 - Penetration Testing | Independent Penetration Agent - Or Team","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1171"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6d4820bc-8b61-4982-9501-2123cb776c00","type":"Microsoft.Authorization/policyDefinitions","name":"6d4820bc-8b61-4982-9501-2123cb776c00"},{"properties":{"displayName":"Function - App should only be accessible over HTTPS","policyType":"BuiltIn","mode":"Indexed","description":"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"},{"field":"Microsoft.Web/sites/httpsOnly","equals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","type":"Microsoft.Authorization/policyDefinitions","name":"6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab"},{"properties":{"displayName":"Microsoft - Managed Control 1643 - Cryptographic Key Establishment And Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1643"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6d8d492c-dd7a-46f7-a723-fa66a425b87c","type":"Microsoft.Authorization/policyDefinitions","name":"6d8d492c-dd7a-46f7-a723-fa66a425b87c"},{"properties":{"displayName":"Microsoft - Managed Control 1291 - Information System Backup | Testing For Reliability - / Integrity","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1291"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6d8fd073-9c85-4ee2-a9d0-2e4ec9eb8912","type":"Microsoft.Authorization/policyDefinitions","name":"6d8fd073-9c85-4ee2-a9d0-2e4ec9eb8912"},{"properties":{"displayName":"Microsoft - Managed Control 1175 - Configuration Management Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1175"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6dab4254-c30d-4bb7-ae99-1d21586c063c","type":"Microsoft.Authorization/policyDefinitions","name":"6dab4254-c30d-4bb7-ae99-1d21586c063c"},{"properties":{"displayName":"Microsoft - Managed Control 1651 - Mobile Code","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1651"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6db63528-c9ba-491c-8a80-83e1e6977a50","type":"Microsoft.Authorization/policyDefinitions","name":"6db63528-c9ba-491c-8a80-83e1e6977a50"},{"properties":{"displayName":"Enable - Security Center''s auto provisioning of the Log Analytics agent on your subscriptions - with default workspace.","policyType":"BuiltIn","mode":"All","description":"Allow - Security Center to auto provision the Log Analytics agent on your subscriptions - to monitor and collect security data using ASC default workspace.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/autoProvisioningSettings","deploymentScope":"Subscription","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"existenceCondition":{"field":"Microsoft.Security/autoProvisioningSettings/autoProvision","equals":"On"},"deployment":{"location":"westus","properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{},"variables":{},"resources":[{"type":"Microsoft.Security/autoProvisioningSettings","name":"default","apiVersion":"2017-08-01-preview","properties":{"autoProvision":"On"}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6df2fee6-a9ed-4fef-bced-e13be1b25f1c","type":"Microsoft.Authorization/policyDefinitions","name":"6df2fee6-a9ed-4fef-bced-e13be1b25f1c"},{"properties":{"displayName":"Email - notification for high severity alerts should be enabled","policyType":"BuiltIn","mode":"All","description":"Enable - emailing security alerts to the security contact, in order to have them receive - security alert emails from Microsoft. This ensures that the right people are - aware of any potential security issues and are able to mitigate the risks","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/securityContacts","existenceCondition":{"field":"Microsoft.Security/securityContacts/alertNotifications","notEquals":"Off"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","type":"Microsoft.Authorization/policyDefinitions","name":"6e2593d9-add6-4083-9c9b-4b7d2188c899"},{"properties":{"displayName":"Microsoft - Managed Control 1586 - External Information System Services","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1586"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6e3b2fbd-8f37-4766-a64d-3f37703dcb51","type":"Microsoft.Authorization/policyDefinitions","name":"6e3b2fbd-8f37-4766-a64d-3f37703dcb51"},{"properties":{"displayName":"Microsoft - Managed Control 1536 - Risk Assessment Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Risk Assessment control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1536"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6e40d9de-2ad4-4cb5-8945-23143326a502","type":"Microsoft.Authorization/policyDefinitions","name":"6e40d9de-2ad4-4cb5-8945-23143326a502"},{"properties":{"displayName":"Microsoft - Managed Control 1530 - Third-Party Personnel Security","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1530"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6e8f9566-29f1-49cd-b61f-f8628a3cf993","type":"Microsoft.Authorization/policyDefinitions","name":"6e8f9566-29f1-49cd-b61f-f8628a3cf993"},{"properties":{"displayName":"Microsoft - Managed Control 1460 - Access Control For Output Devices","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1460"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6f3ce1bb-4f77-4695-8355-70b08d54fdda","type":"Microsoft.Authorization/policyDefinitions","name":"6f3ce1bb-4f77-4695-8355-70b08d54fdda"},{"properties":{"displayName":"Microsoft - Managed Control 1320 - Authenticator Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1320"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6f54c732-71d4-4f93-a696-4e373eca3a77","type":"Microsoft.Authorization/policyDefinitions","name":"6f54c732-71d4-4f93-a696-4e373eca3a77"},{"properties":{"displayName":"[Deprecated]: - Allow resource creation only in Japan data centers","policyType":"BuiltIn","mode":"Indexed","description":"Allows - resource creation in the following locations only: Japan East, Japan West","metadata":{"version":"1.0.0-deprecated","category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"location","in":["japaneast","japanwest"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6fdb9205-3462-4cfc-87d8-16c7860b53f4","type":"Microsoft.Authorization/policyDefinitions","name":"6fdb9205-3462-4cfc-87d8-16c7860b53f4"},{"properties":{"displayName":"Microsoft - Managed Control 1141 - Audit Generation | Changes By Authorized Individuals","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1141"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6fdefbf4-93e7-4513-bc95-c1858b7093e0","type":"Microsoft.Authorization/policyDefinitions","name":"6fdefbf4-93e7-4513-bc95-c1858b7093e0"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''Security Options - Microsoft - Network Server''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Security Options - Microsoft Network Server''. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsMicrosoftNetworkServer","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6fe4ef56-7576-4dc4-8e9c-26bad4b087ce","type":"Microsoft.Authorization/policyDefinitions","name":"6fe4ef56-7576-4dc4-8e9c-26bad4b087ce"},{"properties":{"displayName":"Ensure - that ''Python version'' is the latest, if used as a part of the Web app","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for Python software either due to security flaws - or to include additional functionality. Using the latest Python version for - web apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"WindowsPythonLatestVersion":{"type":"String","metadata":{"displayName":"Windows - Latest Python version","description":"Latest supported Python version for - App Services"},"defaultValue":"3.6"},"LinuxPythonLatestVersion":{"type":"String","metadata":{"displayName":"Linux - Latest Python version","description":"Latest supported Python version for - App Services"},"defaultValue":"3.8"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","notContains":"PYTHON"},{"field":"Microsoft.Web/sites/config/web.pythonVersion","equals":""}]},{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","equals":"[concat(''PYTHON|'', - parameters(''LinuxPythonLatestVersion''))]"},{"field":"Microsoft.Web/sites/config/web.pythonVersion","equals":""}]},{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","equals":""},{"field":"Microsoft.Web/sites/config/web.pythonVersion","equals":"[parameters(''WindowsPythonLatestVersion'')]"}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","type":"Microsoft.Authorization/policyDefinitions","name":"7008174a-fd10-4ef0-817e-fc820a951d73"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''Windows Components''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Windows Components''. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"SendFileSamplesWhenFurtherAnalysisIsRequired":{"type":"String","metadata":{"displayName":"Send - file samples when further analysis is required","description":"Specifies whether - and how Windows Defender will submit samples of suspected malware to Microsoft - for further analysis when opt-in for MAPS telemetry is set."},"defaultValue":"1"},"AllowIndexingOfEncryptedFiles":{"type":"String","metadata":{"displayName":"Allow - indexing of encrypted files","description":"Specifies whether encrypted items - are allowed to be indexed."},"defaultValue":"0"},"AllowTelemetry":{"type":"String","metadata":{"displayName":"Allow - Telemetry","description":"Specifies configuration of the amount of diagnostic - and usage data reported to Microsoft. The data is transmitted securely and - sensitive data is not sent."},"defaultValue":"2"},"AllowUnencryptedTraffic":{"type":"String","metadata":{"displayName":"Allow - unencrypted traffic","description":"Specifies whether the Windows Remote Management - (WinRM) service sends and receives unencrypted messages over the network."},"defaultValue":"0"},"AlwaysInstallWithElevatedPrivileges":{"type":"String","metadata":{"displayName":"Always - install with elevated privileges","description":"Specifies whether Windows - Installer should use system permissions when it installs any program on the - system."},"defaultValue":"0"},"AlwaysPromptForPasswordUponConnection":{"type":"String","metadata":{"displayName":"Always - prompt for password upon connection","description":"Specifies whether Terminal - Services/Remote Desktop Connection always prompts the client computer for - a password upon connection."},"defaultValue":"1"},"ApplicationSpecifyTheMaximumLogFileSizeKB":{"type":"String","metadata":{"displayName":"Application: - Specify the maximum log file size (KB)","description":"Specifies the maximum - size for the Application event log in kilobytes."},"defaultValue":"32768"},"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports":{"type":"String","metadata":{"displayName":"Automatically - send memory dumps for OS-generated error reports","description":"Specifies - if memory dumps in support of OS-generated error reports can be sent to Microsoft - automatically."},"defaultValue":"1"},"ConfigureDefaultConsent":{"type":"String","metadata":{"displayName":"Configure - Default consent","description":"Specifies setting of the default consent handling - for error reports sent to Microsoft."},"defaultValue":"4"},"ConfigureWindowsSmartScreen":{"type":"String","metadata":{"displayName":"Configure - Windows SmartScreen","description":"Specifies how to manage the behavior of - Windows SmartScreen. Windows SmartScreen helps keep PCs safer by warning users - before running unrecognized programs downloaded from the Internet. Some information - is sent to Microsoft about files and programs run on PCs with this feature - enabled."},"defaultValue":"1"},"DisallowDigestAuthentication":{"type":"String","metadata":{"displayName":"Disallow - Digest authentication","description":"Specifies whether the Windows Remote - Management (WinRM) client will not use Digest authentication."},"defaultValue":"0"},"DisallowWinRMFromStoringRunAsCredentials":{"type":"String","metadata":{"displayName":"Disallow - WinRM from storing RunAs credentials","description":"Specifies whether the - Windows Remote Management (WinRM) service will not allow RunAs credentials - to be stored for any plug-ins."},"defaultValue":"1"},"DoNotAllowPasswordsToBeSaved":{"type":"String","metadata":{"displayName":"Do - not allow passwords to be saved","description":"Specifies whether to prevent - Remote Desktop Services - Terminal Services clients from saving passwords - on a computer."},"defaultValue":"1"},"SecuritySpecifyTheMaximumLogFileSizeKB":{"type":"String","metadata":{"displayName":"Security: - Specify the maximum log file size (KB)","description":"Specifies the maximum - size for the Security event log in kilobytes."},"defaultValue":"196608"},"SetClientConnectionEncryptionLevel":{"type":"String","metadata":{"displayName":"Set - client connection encryption level","description":"Specifies whether to require - the use of a specific encryption level to secure communications between client - computers and RD Session Host servers during Remote Desktop Protocol (RDP) - connections. This policy only applies when you are using native RDP encryption."},"defaultValue":"3"},"SetTheDefaultBehaviorForAutoRun":{"type":"String","metadata":{"displayName":"Set - the default behavior for AutoRun","description":"Specifies the default behavior - for Autorun commands. Autorun commands are generally stored in autorun.inf - files. They often launch the installation program or other routines."},"defaultValue":"1"},"SetupSpecifyTheMaximumLogFileSizeKB":{"type":"String","metadata":{"displayName":"Setup: - Specify the maximum log file size (KB)","description":"Specifies the maximum - size for the Setup event log in kilobytes."},"defaultValue":"32768"},"SystemSpecifyTheMaximumLogFileSizeKB":{"type":"String","metadata":{"displayName":"System: - Specify the maximum log file size (KB)","description":"Specifies the maximum - size for the System event log in kilobytes."},"defaultValue":"32768"},"TurnOffDataExecutionPreventionForExplorer":{"type":"String","metadata":{"displayName":"Turn - off Data Execution Prevention for Explorer","description":"Specifies whether - to turn off Data Execution Prevention for Windows File Explorer. Disabling - data execution prevention can allow certain legacy plug-in applications to - function without terminating Explorer."},"defaultValue":"0"},"SpecifyTheIntervalToCheckForDefinitionUpdates":{"type":"String","metadata":{"displayName":"Specify - the interval to check for definition updates","description":"Specifies an - interval at which to check for Windows Defender definition updates. The time - value is represented as the number of hours between update checks."},"defaultValue":"8"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_WindowsComponents","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Send - file samples when further analysis is required;ExpectedValue'', ''='', parameters(''SendFileSamplesWhenFurtherAnalysisIsRequired''), - '','', ''Allow indexing of encrypted files;ExpectedValue'', ''='', parameters(''AllowIndexingOfEncryptedFiles''), - '','', ''Allow Telemetry;ExpectedValue'', ''='', parameters(''AllowTelemetry''), - '','', ''Allow unencrypted traffic;ExpectedValue'', ''='', parameters(''AllowUnencryptedTraffic''), - '','', ''Always install with elevated privileges;ExpectedValue'', ''='', parameters(''AlwaysInstallWithElevatedPrivileges''), - '','', ''Always prompt for password upon connection;ExpectedValue'', ''='', - parameters(''AlwaysPromptForPasswordUponConnection''), '','', ''Application: - Specify the maximum log file size (KB);ExpectedValue'', ''='', parameters(''ApplicationSpecifyTheMaximumLogFileSizeKB''), - '','', ''Automatically send memory dumps for OS-generated error reports;ExpectedValue'', - ''='', parameters(''AutomaticallySendMemoryDumpsForOSgeneratedErrorReports''), - '','', ''Configure Default consent;ExpectedValue'', ''='', parameters(''ConfigureDefaultConsent''), - '','', ''Configure Windows SmartScreen;ExpectedValue'', ''='', parameters(''ConfigureWindowsSmartScreen''), - '','', ''Disallow Digest authentication;ExpectedValue'', ''='', parameters(''DisallowDigestAuthentication''), - '','', ''Disallow WinRM from storing RunAs credentials;ExpectedValue'', ''='', - parameters(''DisallowWinRMFromStoringRunAsCredentials''), '','', ''Do not - allow passwords to be saved;ExpectedValue'', ''='', parameters(''DoNotAllowPasswordsToBeSaved''), - '','', ''Security: Specify the maximum log file size (KB);ExpectedValue'', - ''='', parameters(''SecuritySpecifyTheMaximumLogFileSizeKB''), '','', ''Set - client connection encryption level;ExpectedValue'', ''='', parameters(''SetClientConnectionEncryptionLevel''), - '','', ''Set the default behavior for AutoRun;ExpectedValue'', ''='', parameters(''SetTheDefaultBehaviorForAutoRun''), - '','', ''Setup: Specify the maximum log file size (KB);ExpectedValue'', ''='', - parameters(''SetupSpecifyTheMaximumLogFileSizeKB''), '','', ''System: Specify - the maximum log file size (KB);ExpectedValue'', ''='', parameters(''SystemSpecifyTheMaximumLogFileSizeKB''), - '','', ''Turn off Data Execution Prevention for Explorer;ExpectedValue'', - ''='', parameters(''TurnOffDataExecutionPreventionForExplorer''), '','', ''Specify - the interval to check for definition updates;ExpectedValue'', ''='', parameters(''SpecifyTheIntervalToCheckForDefinitionUpdates'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_WindowsComponents"},"SendFileSamplesWhenFurtherAnalysisIsRequired":{"value":"[parameters(''SendFileSamplesWhenFurtherAnalysisIsRequired'')]"},"AllowIndexingOfEncryptedFiles":{"value":"[parameters(''AllowIndexingOfEncryptedFiles'')]"},"AllowTelemetry":{"value":"[parameters(''AllowTelemetry'')]"},"AllowUnencryptedTraffic":{"value":"[parameters(''AllowUnencryptedTraffic'')]"},"AlwaysInstallWithElevatedPrivileges":{"value":"[parameters(''AlwaysInstallWithElevatedPrivileges'')]"},"AlwaysPromptForPasswordUponConnection":{"value":"[parameters(''AlwaysPromptForPasswordUponConnection'')]"},"ApplicationSpecifyTheMaximumLogFileSizeKB":{"value":"[parameters(''ApplicationSpecifyTheMaximumLogFileSizeKB'')]"},"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports":{"value":"[parameters(''AutomaticallySendMemoryDumpsForOSgeneratedErrorReports'')]"},"ConfigureDefaultConsent":{"value":"[parameters(''ConfigureDefaultConsent'')]"},"ConfigureWindowsSmartScreen":{"value":"[parameters(''ConfigureWindowsSmartScreen'')]"},"DisallowDigestAuthentication":{"value":"[parameters(''DisallowDigestAuthentication'')]"},"DisallowWinRMFromStoringRunAsCredentials":{"value":"[parameters(''DisallowWinRMFromStoringRunAsCredentials'')]"},"DoNotAllowPasswordsToBeSaved":{"value":"[parameters(''DoNotAllowPasswordsToBeSaved'')]"},"SecuritySpecifyTheMaximumLogFileSizeKB":{"value":"[parameters(''SecuritySpecifyTheMaximumLogFileSizeKB'')]"},"SetClientConnectionEncryptionLevel":{"value":"[parameters(''SetClientConnectionEncryptionLevel'')]"},"SetTheDefaultBehaviorForAutoRun":{"value":"[parameters(''SetTheDefaultBehaviorForAutoRun'')]"},"SetupSpecifyTheMaximumLogFileSizeKB":{"value":"[parameters(''SetupSpecifyTheMaximumLogFileSizeKB'')]"},"SystemSpecifyTheMaximumLogFileSizeKB":{"value":"[parameters(''SystemSpecifyTheMaximumLogFileSizeKB'')]"},"TurnOffDataExecutionPreventionForExplorer":{"value":"[parameters(''TurnOffDataExecutionPreventionForExplorer'')]"},"SpecifyTheIntervalToCheckForDefinitionUpdates":{"value":"[parameters(''SpecifyTheIntervalToCheckForDefinitionUpdates'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"SendFileSamplesWhenFurtherAnalysisIsRequired":{"type":"string"},"AllowIndexingOfEncryptedFiles":{"type":"string"},"AllowTelemetry":{"type":"string"},"AllowUnencryptedTraffic":{"type":"string"},"AlwaysInstallWithElevatedPrivileges":{"type":"string"},"AlwaysPromptForPasswordUponConnection":{"type":"string"},"ApplicationSpecifyTheMaximumLogFileSizeKB":{"type":"string"},"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports":{"type":"string"},"ConfigureDefaultConsent":{"type":"string"},"ConfigureWindowsSmartScreen":{"type":"string"},"DisallowDigestAuthentication":{"type":"string"},"DisallowWinRMFromStoringRunAsCredentials":{"type":"string"},"DoNotAllowPasswordsToBeSaved":{"type":"string"},"SecuritySpecifyTheMaximumLogFileSizeKB":{"type":"string"},"SetClientConnectionEncryptionLevel":{"type":"string"},"SetTheDefaultBehaviorForAutoRun":{"type":"string"},"SetupSpecifyTheMaximumLogFileSizeKB":{"type":"string"},"SystemSpecifyTheMaximumLogFileSizeKB":{"type":"string"},"TurnOffDataExecutionPreventionForExplorer":{"type":"string"},"SpecifyTheIntervalToCheckForDefinitionUpdates":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Send - file samples when further analysis is required;ExpectedValue","value":"[parameters(''SendFileSamplesWhenFurtherAnalysisIsRequired'')]"},{"name":"Allow - indexing of encrypted files;ExpectedValue","value":"[parameters(''AllowIndexingOfEncryptedFiles'')]"},{"name":"Allow - Telemetry;ExpectedValue","value":"[parameters(''AllowTelemetry'')]"},{"name":"Allow - unencrypted traffic;ExpectedValue","value":"[parameters(''AllowUnencryptedTraffic'')]"},{"name":"Always - install with elevated privileges;ExpectedValue","value":"[parameters(''AlwaysInstallWithElevatedPrivileges'')]"},{"name":"Always - prompt for password upon connection;ExpectedValue","value":"[parameters(''AlwaysPromptForPasswordUponConnection'')]"},{"name":"Application: - Specify the maximum log file size (KB);ExpectedValue","value":"[parameters(''ApplicationSpecifyTheMaximumLogFileSizeKB'')]"},{"name":"Automatically - send memory dumps for OS-generated error reports;ExpectedValue","value":"[parameters(''AutomaticallySendMemoryDumpsForOSgeneratedErrorReports'')]"},{"name":"Configure - Default consent;ExpectedValue","value":"[parameters(''ConfigureDefaultConsent'')]"},{"name":"Configure - Windows SmartScreen;ExpectedValue","value":"[parameters(''ConfigureWindowsSmartScreen'')]"},{"name":"Disallow - Digest authentication;ExpectedValue","value":"[parameters(''DisallowDigestAuthentication'')]"},{"name":"Disallow - WinRM from storing RunAs credentials;ExpectedValue","value":"[parameters(''DisallowWinRMFromStoringRunAsCredentials'')]"},{"name":"Do - not allow passwords to be saved;ExpectedValue","value":"[parameters(''DoNotAllowPasswordsToBeSaved'')]"},{"name":"Security: - Specify the maximum log file size (KB);ExpectedValue","value":"[parameters(''SecuritySpecifyTheMaximumLogFileSizeKB'')]"},{"name":"Set - client connection encryption level;ExpectedValue","value":"[parameters(''SetClientConnectionEncryptionLevel'')]"},{"name":"Set - the default behavior for AutoRun;ExpectedValue","value":"[parameters(''SetTheDefaultBehaviorForAutoRun'')]"},{"name":"Setup: - Specify the maximum log file size (KB);ExpectedValue","value":"[parameters(''SetupSpecifyTheMaximumLogFileSizeKB'')]"},{"name":"System: - Specify the maximum log file size (KB);ExpectedValue","value":"[parameters(''SystemSpecifyTheMaximumLogFileSizeKB'')]"},{"name":"Turn - off Data Execution Prevention for Explorer;ExpectedValue","value":"[parameters(''TurnOffDataExecutionPreventionForExplorer'')]"},{"name":"Specify - the interval to check for definition updates;ExpectedValue","value":"[parameters(''SpecifyTheIntervalToCheckForDefinitionUpdates'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Send - file samples when further analysis is required;ExpectedValue","value":"[parameters(''SendFileSamplesWhenFurtherAnalysisIsRequired'')]"},{"name":"Allow - indexing of encrypted files;ExpectedValue","value":"[parameters(''AllowIndexingOfEncryptedFiles'')]"},{"name":"Allow - Telemetry;ExpectedValue","value":"[parameters(''AllowTelemetry'')]"},{"name":"Allow - unencrypted traffic;ExpectedValue","value":"[parameters(''AllowUnencryptedTraffic'')]"},{"name":"Always - install with elevated privileges;ExpectedValue","value":"[parameters(''AlwaysInstallWithElevatedPrivileges'')]"},{"name":"Always - prompt for password upon connection;ExpectedValue","value":"[parameters(''AlwaysPromptForPasswordUponConnection'')]"},{"name":"Application: - Specify the maximum log file size (KB);ExpectedValue","value":"[parameters(''ApplicationSpecifyTheMaximumLogFileSizeKB'')]"},{"name":"Automatically - send memory dumps for OS-generated error reports;ExpectedValue","value":"[parameters(''AutomaticallySendMemoryDumpsForOSgeneratedErrorReports'')]"},{"name":"Configure - Default consent;ExpectedValue","value":"[parameters(''ConfigureDefaultConsent'')]"},{"name":"Configure - Windows SmartScreen;ExpectedValue","value":"[parameters(''ConfigureWindowsSmartScreen'')]"},{"name":"Disallow - Digest authentication;ExpectedValue","value":"[parameters(''DisallowDigestAuthentication'')]"},{"name":"Disallow - WinRM from storing RunAs credentials;ExpectedValue","value":"[parameters(''DisallowWinRMFromStoringRunAsCredentials'')]"},{"name":"Do - not allow passwords to be saved;ExpectedValue","value":"[parameters(''DoNotAllowPasswordsToBeSaved'')]"},{"name":"Security: - Specify the maximum log file size (KB);ExpectedValue","value":"[parameters(''SecuritySpecifyTheMaximumLogFileSizeKB'')]"},{"name":"Set - client connection encryption level;ExpectedValue","value":"[parameters(''SetClientConnectionEncryptionLevel'')]"},{"name":"Set - the default behavior for AutoRun;ExpectedValue","value":"[parameters(''SetTheDefaultBehaviorForAutoRun'')]"},{"name":"Setup: - Specify the maximum log file size (KB);ExpectedValue","value":"[parameters(''SetupSpecifyTheMaximumLogFileSizeKB'')]"},{"name":"System: - Specify the maximum log file size (KB);ExpectedValue","value":"[parameters(''SystemSpecifyTheMaximumLogFileSizeKB'')]"},{"name":"Turn - off Data Execution Prevention for Explorer;ExpectedValue","value":"[parameters(''TurnOffDataExecutionPreventionForExplorer'')]"},{"name":"Specify - the interval to check for definition updates;ExpectedValue","value":"[parameters(''SpecifyTheIntervalToCheckForDefinitionUpdates'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7040a231-fb65-4412-8c0a-b365f4866c24","type":"Microsoft.Authorization/policyDefinitions","name":"7040a231-fb65-4412-8c0a-b365f4866c24"},{"properties":{"displayName":"Microsoft - Managed Control 1254 - Contingency Plan | Resume All Missions / Business Functions","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1254"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/704e136a-4fe0-427c-b829-cd69957f5d2b","type":"Microsoft.Authorization/policyDefinitions","name":"704e136a-4fe0-427c-b829-cd69957f5d2b"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''System Audit Policies - - System''","policyType":"BuiltIn","mode":"All","description":"This policy should - only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines with non-compliant settings in Group Policy category: ''System - Audit Policies - System''. For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesSystem","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7066131b-61a6-4917-a7e4-72e8983f0aa6","type":"Microsoft.Authorization/policyDefinitions","name":"7066131b-61a6-4917-a7e4-72e8983f0aa6"},{"properties":{"displayName":"Microsoft - Managed Control 1509 - Position Risk Designation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1509"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/70792197-9bfc-4813-905a-bd33993e327f","type":"Microsoft.Authorization/policyDefinitions","name":"70792197-9bfc-4813-905a-bd33993e327f"},{"properties":{"displayName":"Microsoft - Managed Control 1541 - Risk Assessment","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Risk Assessment control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1541"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/70f6af82-7be6-44aa-9b15-8b9231b2e434","type":"Microsoft.Authorization/policyDefinitions","name":"70f6af82-7be6-44aa-9b15-8b9231b2e434"},{"properties":{"displayName":"Microsoft - Managed Control 1691 - Information System Monitoring | Automated Tools For - Real-Time Analysis","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1691"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/71475fb4-49bd-450b-a1a5-f63894c24725","type":"Microsoft.Authorization/policyDefinitions","name":"71475fb4-49bd-450b-a1a5-f63894c24725"},{"properties":{"displayName":"Microsoft - Managed Control 1481 - Temperature And Humidity Controls","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1481"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/717a1c78-a267-4f56-ac58-ee6c54dc4339","type":"Microsoft.Authorization/policyDefinitions","name":"717a1c78-a267-4f56-ac58-ee6c54dc4339"},{"properties":{"displayName":"Microsoft - Managed Control 1129 - Time Stamps | Synchronization With Authoritative Time - Source","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1129"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/71bb965d-4047-4623-afd4-b8189a58df5d","type":"Microsoft.Authorization/policyDefinitions","name":"71bb965d-4047-4623-afd4-b8189a58df5d"},{"properties":{"displayName":"Microsoft - Managed Control 1395 - System Maintenance Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1395"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7207a023-a517-41c5-9df2-09d4c6845a05","type":"Microsoft.Authorization/policyDefinitions","name":"7207a023-a517-41c5-9df2-09d4c6845a05"},{"properties":{"displayName":"Show - audit results from Windows VMs on which the DSC configuration is not compliant","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows VMs on which the Desired State Configuration (DSC) configuration - is not compliant. This policy is only applicable to machines with WMF 4 and - above. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsDscConfiguration","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7227ebe5-9ff7-47ab-b823-171cd02fb90f","type":"Microsoft.Authorization/policyDefinitions","name":"7227ebe5-9ff7-47ab-b823-171cd02fb90f"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''Administrative Templates - - Network''","policyType":"BuiltIn","mode":"All","description":"This policy - should only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines with non-compliant settings in Group Policy category: ''Administrative - Templates - Network''. For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_AdministrativeTemplatesNetwork","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7229bd6a-693d-478a-87f0-1dc1af06f3b8","type":"Microsoft.Authorization/policyDefinitions","name":"7229bd6a-693d-478a-87f0-1dc1af06f3b8"},{"properties":{"displayName":"Ensure - that ''Python version'' is the latest, if used as a part of the Function app","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for Python software either due to security flaws - or to include additional functionality. Using the latest Python version for - Function apps is recommended in order to take advantage of security fixes, - if any, and/or new functionalities of the latest version.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"WindowsPythonLatestVersion":{"type":"String","metadata":{"displayName":"Windows - Latest Python version","description":"Latest supported Python version for - App Services"},"defaultValue":"3.6"},"LinuxPythonLatestVersion":{"type":"String","metadata":{"displayName":"Linux - Latest Python version","description":"Latest supported Python version for - App Services"},"defaultValue":"3.8"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","notContains":"PYTHON"},{"field":"Microsoft.Web/sites/config/web.pythonVersion","equals":""}]},{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","equals":"[concat(''PYTHON|'', - parameters(''LinuxPythonLatestVersion''))]"},{"field":"Microsoft.Web/sites/config/web.pythonVersion","equals":""}]},{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","equals":""},{"field":"Microsoft.Web/sites/config/web.pythonVersion","equals":"[parameters(''WindowsPythonLatestVersion'')]"}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","type":"Microsoft.Authorization/policyDefinitions","name":"7238174a-fd10-4ef0-817e-fc820a951d73"},{"properties":{"displayName":"Ensure - that ''PHP version'' is the latest, if used as a part of the WEB app","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for PHP software either due to security flaws - or to include additional functionality. Using the latest PHP version for web - apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"PHPLatestVersion":{"type":"String","metadata":{"displayName":"Latest - PHP version","description":"Latest supported PHP version for App Services"},"defaultValue":"7.3"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","notContains":"PHP"},{"field":"Microsoft.Web/sites/config/web.phpVersion","equals":""}]},{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","equals":"[concat(''PHP|'', - parameters(''PHPLatestVersion''))]"},{"field":"Microsoft.Web/sites/config/web.phpVersion","equals":""}]},{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","equals":""},{"field":"Microsoft.Web/sites/config/web.phpVersion","equals":"[parameters(''PHPLatestVersion'')]"}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","type":"Microsoft.Authorization/policyDefinitions","name":"7261b898-8a84-4db8-9e04-18527132abb3"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs that allow re-use of the previous 24 passwords","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that allow re-use of the previous 24 passwords. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"EnforcePasswordHistory","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"EnforcePasswordHistory"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/726671ac-c4de-4908-8c7d-6043ae62e3b6","type":"Microsoft.Authorization/policyDefinitions","name":"726671ac-c4de-4908-8c7d-6043ae62e3b6"},{"properties":{"displayName":"Add - a tag to resource groups","policyType":"BuiltIn","mode":"All","description":"Adds - the specified tag and value when any resource group missing this tag is created - or updated. Existing resource groups can be remediated by triggering a remediation - task. If the tag exists with a different value it will not be changed.","metadata":{"version":"1.0.0","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Resources/subscriptions/resourceGroups"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"}]},"then":{"effect":"modify","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"add","field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[parameters(''tagValue'')]"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/726aca4c-86e9-4b04-b0c5-073027359532","type":"Microsoft.Authorization/policyDefinitions","name":"726aca4c-86e9-4b04-b0c5-073027359532"},{"properties":{"displayName":"Microsoft - Managed Control 1524 - Personnel Transfer","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1524"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72f1cb4e-2439-4fe8-88ea-b8671ce3c268","type":"Microsoft.Authorization/policyDefinitions","name":"72f1cb4e-2439-4fe8-88ea-b8671ce3c268"},{"properties":{"displayName":"Microsoft - Managed Control 1393 - Information Spillage Response | Exposure To Unauthorized - Personnel","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1393"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/731856d8-1598-4b75-92de-7d46235747c0","type":"Microsoft.Authorization/policyDefinitions","name":"731856d8-1598-4b75-92de-7d46235747c0"},{"properties":{"displayName":"Microsoft - Managed Control 1101 - Audit And Accountability Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1101"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7327b708-f0e0-457d-9d2a-527fcc9c9a65","type":"Microsoft.Authorization/policyDefinitions","name":"7327b708-f0e0-457d-9d2a-527fcc9c9a65"},{"properties":{"displayName":"Microsoft - Managed Control 1456 - Physical Access Control","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1456"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/733ba9e3-9e7c-440a-a7aa-6196a90a2870","type":"Microsoft.Authorization/policyDefinitions","name":"733ba9e3-9e7c-440a-a7aa-6196a90a2870"},{"properties":{"displayName":"Deploy - Workflow Automation for Azure Security Center recommendations","policyType":"BuiltIn","mode":"All","description":"Enable - automation of Azure Security Center recommendations. This policy deploys a - workflow automation with your conditions and triggers on the assigned scope. - To deploy this policy on newly created subscriptions, open the Compliance - tab, select the relevant non-compliant assignment and create a remediation - task.","metadata":{"version":"1.0.0","category":"Security Center"},"parameters":{"automationName":{"type":"String","metadata":{"displayName":"Automation - name","description":"This is the automation name."}},"resourceGroupName":{"type":"String","metadata":{"displayName":"Resource - group name","description":"The resource group name where the workflow automation - is created. If you enter a name for a resource group that doesn''t exist, - it''ll be created in the subscription."}},"resourceGroupLocation":{"type":"String","metadata":{"displayName":"Resource - group location","description":"The location where the resource group and the - workflow automation are created.","strongType":"location"}},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation - IDs","description":"For all recommendations, leave empty. For specific recommendations, - enter a list of recommendation IDs separated by semicolons ('';''). Recommendation - IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments), - or Azure Resource Graph Explorer (https://portal.azure.com/#blade/HubsExtension/ArgQueryBlade), - choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation - severities","description":"Determines recommendation severities. Example: - High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"recommendationStates":{"type":"Array","metadata":{"displayName":"Recommendation - states","description":"Determines recommendation states. Recommendations with - unhealthy state require your attention to resolve. When a recommendation state - is healthy, it no longer applies to the resource as Security Center detects - it as healthy. A recommendation is not-applicable if, for example, it was - disabled in the Security Policy. Example: Healthy;Unhealthy;Not Applicable;"},"allowedValues":["Healthy","Unhealthy","Not - Applicable"],"defaultValue":["Healthy","Unhealthy","Not Applicable"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic - App","description":"The Logic App that is triggered. If you do not already - have a logic app, visit Logic Apps to create one (https://portal.azure.com/#blade/HubsExtension/BrowseResourceBlade/resourceType/Microsoft.Logic%2Fworkflows).","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic - app trigger","description":"The trigger connector of the logic app that is - triggered. Possible values: ''Manual (Incoming HTTP request)'', ''When an - Azure Security Center Recommendation is created or triggered''."},"allowedValues":["Manual - (Incoming HTTP request)","When an Azure Security Center Recommendation is - created or triggered"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Security/automations","name":"[parameters(''automationName'')]","existenceScope":"resourcegroup","ResourceGroupName":"[parameters(''resourceGroupName'')]","deploymentScope":"subscription","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"automationName":{"type":"string"},"resourceGroupName":{"type":"string"},"resourceGroupLocation":{"type":"string"},"recommendationNames":{"type":"array"},"recommendationSeverities":{"type":"array"},"recommendationStates":{"type":"array"},"logicAppResourceId":{"type":"string"},"logicAppTrigger":{"type":"string"},"guidValue":{"type":"string","defaultValue":"[newGuid()]"}},"variables":{"scopeDescription":"scope - for subscription {0}","recommendationNamesLength":"[length(parameters(''recommendationNames''))]","recommendationSeveritiesLength":"[length(parameters(''recommendationSeverities''))]","recommendationStatesLength":"[length(parameters(''recommendationStates''))]","recommendationNamesLengthIfEmpty":"[if(equals(variables(''recommendationNamesLength''), - 0), 1, variables(''recommendationNamesLength''))]","recommendationSeveritiesLengthIfEmpty":"[if(equals(variables(''recommendationSeveritiesLength''), - 0), 1, variables(''recommendationSeveritiesLength''))]","recommendationStatesLengthIfEmpty":"[if(equals(variables(''recommendationStatesLength''), - 0), 1, variables(''recommendationStatesLength''))]","totalRuleCombinationsForOneRecommendationName":"[mul(variables(''recommendationSeveritiesLengthIfEmpty''),variables(''recommendationStatesLengthIfEmpty''))]","totalRuleCombinationsForOneRecommendationSeverity":"[variables(''recommendationStatesLengthIfEmpty'')]","totalRuleCombinationsForOneRecommendationState":1,"stateMap":{"Healthy":"healthy","Unhealthy":"unhealthy","Not - Applicable":"notapplicable"},"triggerMap":{"Manual (Incoming HTTP request)":"manual","When - an Azure Security Center Recommendation is created or triggered":"When_an_Azure_Security_Center_Recommendation_is_created_or_triggered"}},"resources":[{"name":"[parameters(''resourceGroupName'')]","type":"Microsoft.Resources/resourceGroups","apiVersion":"2019-10-01","location":"[parameters(''resourceGroupLocation'')]","tags":{},"properties":{}},{"type":"Microsoft.Resources/deployments","apiVersion":"2019-10-01","name":"[concat(''nestedAutomationDeployment'', - ''_'', parameters(''guidValue''))]","resourceGroup":"[parameters(''resourceGroupName'')]","dependsOn":["[resourceId(''Microsoft.Resources/resourceGroups/'', - parameters(''resourceGroupName''))]"],"properties":{"mode":"Incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{},"variables":{},"resources":[{"tags":{},"apiVersion":"2019-01-01-preview","location":"[parameters(''resourceGroupLocation'')]","name":"[parameters(''automationName'')]","type":"Microsoft.Security/automations","dependsOn":[],"properties":{"description":"Workflow - Automation for Azure Security Center recommendations via policy","isEnabled":true,"scopes":[{"description":"[replace(variables(''scopeDescription''),''{0}'', - subscription().subscriptionId)]","scopePath":"[subscription().id]"}],"sources":[{"eventSource":"Assessments","copy":[{"name":"ruleSets","count":"[mul(variables(''recommendationNamesLengthIfEmpty''), - mul(variables(''recommendationSeveritiesLengthIfEmpty''),variables(''recommendationStatesLengthIfEmpty'')))]","input":{"rules":[{"propertyJPath":"[if(equals(variables(''recommendationNamesLength''), - 0), ''type'', ''name'')]","propertyType":"string","expectedValue":"[if(equals(variables(''recommendationNamesLength''), - 0), ''Microsoft.Security/assessments'', parameters(''recommendationNames'')[mod(div(copyIndex(''ruleSets''), - variables(''totalRuleCombinationsForOneRecommendationName'')), variables(''recommendationNamesLength''))])]","operator":"Contains"},{"propertyJPath":"properties.metadata.severity","propertyType":"string","expectedValue":"[parameters(''recommendationSeverities'')[mod(div(copyIndex(''ruleSets''), - variables(''totalRuleCombinationsForOneRecommendationSeverity'')), variables(''recommendationSeveritiesLength''))]]","operator":"Equals"},{"propertyJPath":"properties.status.code","propertyType":"string","expectedValue":"[variables(''stateMap'')[parameters(''recommendationStates'')[mod(div(copyIndex(''ruleSets''), - variables(''totalRuleCombinationsForOneRecommendationState'')), variables(''recommendationStatesLength''))]]]","operator":"Contains"}]}}]}],"actions":[{"actionType":"LogicApp","logicAppResourceId":"[parameters(''logicAppResourceId'')]","uri":"[listCallbackUrl(concat(parameters(''logicAppResourceId''), - ''/triggers/'', variables(''triggerMap'')[parameters(''logicAppTrigger'')]),''2016-06-01'').value]"}]}}]}}}]},"parameters":{"automationName":{"value":"[parameters(''automationName'')]"},"resourceGroupName":{"value":"[parameters(''resourceGroupName'')]"},"resourceGroupLocation":{"value":"[parameters(''resourceGroupLocation'')]"},"recommendationNames":{"value":"[parameters(''recommendationNames'')]"},"recommendationSeverities":{"value":"[parameters(''recommendationSeverities'')]"},"recommendationStates":{"value":"[parameters(''recommendationStates'')]"},"logicAppResourceId":{"value":"[parameters(''logicAppResourceId'')]"},"logicAppTrigger":{"value":"[parameters(''logicAppTrigger'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/73d6ab6c-2475-4850-afd6-43795f3492ef","type":"Microsoft.Authorization/policyDefinitions","name":"73d6ab6c-2475-4850-afd6-43795f3492ef"},{"properties":{"displayName":"Microsoft - Managed Control 1581 - Information System Documentation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1581"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/742b549b-7a25-465f-b83c-ea1ffb4f4e0e","type":"Microsoft.Authorization/policyDefinitions","name":"742b549b-7a25-465f-b83c-ea1ffb4f4e0e"},{"properties":{"displayName":"Allowed - storage account SKUs","policyType":"BuiltIn","mode":"Indexed","description":"This - policy enables you to specify a set of storage account SKUs that your organization - can deploy.","metadata":{"version":"1.0.0","category":"Storage"},"parameters":{"listOfAllowedSKUs":{"type":"Array","metadata":{"description":"The - list of SKUs that can be specified for storage accounts.","displayName":"Allowed - SKUs","strongType":"StorageSKUs"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"not":{"field":"Microsoft.Storage/storageAccounts/sku.name","in":"[parameters(''listOfAllowedSKUs'')]"}}]},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7433c107-6db4-4ad1-b57a-a76dce0154a1","type":"Microsoft.Authorization/policyDefinitions","name":"7433c107-6db4-4ad1-b57a-a76dce0154a1"},{"properties":{"displayName":"Microsoft - Managed Control 1631 - Boundary Protection | Deny By Default / Allow By Exception","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1631"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/74ae9b8e-e7bb-4c9c-992f-c535282f7a2c","type":"Microsoft.Authorization/policyDefinitions","name":"74ae9b8e-e7bb-4c9c-992f-c535282f7a2c"},{"properties":{"displayName":"Ensure - that ''Python version'' is the latest, if used as a part of the Api app","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for Python software either due to security flaws - or to include additional functionality. Using the latest Python version for - Api apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"WindowsPythonLatestVersion":{"type":"String","metadata":{"displayName":"Windows - Latest Python version","description":"Latest supported Python version for - App Services"},"defaultValue":"3.6"},"LinuxPythonLatestVersion":{"type":"String","metadata":{"displayName":"Linux - Latest Python version","description":"Latest supported Python version for - App Services"},"defaultValue":"3.8"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","notContains":"PYTHON"},{"field":"Microsoft.Web/sites/config/web.pythonVersion","equals":""}]},{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","equals":"[concat(''PYTHON|'', - parameters(''LinuxPythonLatestVersion''))]"},{"field":"Microsoft.Web/sites/config/web.pythonVersion","equals":""}]},{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","equals":""},{"field":"Microsoft.Web/sites/config/web.pythonVersion","equals":"[parameters(''WindowsPythonLatestVersion'')]"}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","type":"Microsoft.Authorization/policyDefinitions","name":"74c3584d-afae-46f7-a20a-6f8adba71a16"},{"properties":{"displayName":"Microsoft - Managed Control 1417 - Nonlocal Maintenance | Comparable Security / Sanitization","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1417"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7522ed84-70d5-4181-afc0-21e50b1b6d0e","type":"Microsoft.Authorization/policyDefinitions","name":"7522ed84-70d5-4181-afc0-21e50b1b6d0e"},{"properties":{"displayName":"[Deprecated]: - Audit enabling of diagnostic logs in App Services","policyType":"BuiltIn","mode":"All","description":"Audit - enabling of diagnostic logs on the app. This enables you to recreate activity - trails for investigation purposes if a security incident occurs or your network - is compromised","metadata":{"version":"1.0.0-deprecated","category":"App Service","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites/config"},{"field":"name","equals":"web"},{"anyOf":[{"field":"Microsoft.Web/sites/config/detailedErrorLoggingEnabled","notEquals":"true"},{"field":"Microsoft.Web/sites/config/httpLoggingEnabled","notEquals":"true"},{"field":"Microsoft.Web/sites/config/requestTracingEnabled","notEquals":"true"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/752c6934-9bcc-4749-b004-655e676ae2ac","type":"Microsoft.Authorization/policyDefinitions","name":"752c6934-9bcc-4749-b004-655e676ae2ac"},{"properties":{"displayName":"Microsoft - Managed Control 1468 - Visitor Access Records | Automated Records Maintenance - / Review","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1468"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/75603f96-80a1-4757-991d-5a1221765ddd","type":"Microsoft.Authorization/policyDefinitions","name":"75603f96-80a1-4757-991d-5a1221765ddd"},{"properties":{"displayName":"Microsoft - Managed Control 1053 - Session Lock | Pattern-Hiding Displays","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1053"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7582b19c-9dba-438e-aed8-ede59ac35ba3","type":"Microsoft.Authorization/policyDefinitions","name":"7582b19c-9dba-438e-aed8-ede59ac35ba3"},{"properties":{"displayName":"Private - endpoint should be enabled for MySQL servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits MySQL servers not configured to use a private endpoint. For - more details, visit https://aka.ms/mysqlprivatelink.","metadata":{"version":"1.0.1","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforMySQL/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforMySQL/servers/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DBforMySQL/servers/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","type":"Microsoft.Authorization/policyDefinitions","name":"7595c971-233d-4bcf-bd18-596129188c49"},{"properties":{"displayName":"Microsoft - Managed Control 1459 - Access Control For Transmission Medium","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1459"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/75cc73c7-5cdb-479d-a06f-7b4d0dbb1da0","type":"Microsoft.Authorization/policyDefinitions","name":"75cc73c7-5cdb-479d-a06f-7b4d0dbb1da0"},{"properties":{"displayName":"Vulnerabilities - should be remediated by a Vulnerability Assessment solution","policyType":"BuiltIn","mode":"All","description":"Monitors - vulnerabilities detected by Vulnerability Assessment solution and VMs without - a Vulnerability Assessment solution in Azure Security Center as recommendations.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"vulnerabilityAssessment","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/760a85ff-6162-42b3-8d70-698e268f648c","type":"Microsoft.Authorization/policyDefinitions","name":"760a85ff-6162-42b3-8d70-698e268f648c"},{"properties":{"displayName":"Deploy - Dependency agent for Linux virtual machine scale sets","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Dependency agent for Linux virtual machine scale sets if the VM Image (OS) - is in the list defined and the agent is not installed. Note: if your scale - set upgradePolicy is set to Manual, you need to apply the extension to the - all virtual machines in the set by calling upgrade on them. In CLI this would - be az vmss update-instances.","metadata":{"version":"1.1.1","category":"Monitoring"},"parameters":{"listOfImageIdToInclude":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Linux OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"},"defaultValue":[]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["14.04.0-LTS","14.04.1-LTS","14.04.5-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["16.04-LTS","16.04.0-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["18.04-LTS"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["12-SP2","12-SP3","12-SP4"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/type","equals":"DependencyAgentLinux"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"variables":{"vmExtensionName":"DependencyAgent","vmExtensionPublisher":"Microsoft.Azure.Monitoring.DependencyAgent","vmExtensionType":"DependencyAgentLinux","vmExtensionTypeHandlerVersion":"9.7"},"resources":[{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","apiVersion":"2019-12-01","location":"[parameters(''location'')]","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","typeHandlerVersion":"[variables(''vmExtensionTypeHandlerVersion'')]","autoUpgradeMinorVersion":true,"enableAutomaticUpgrade":true,"settings":{}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for: '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/765266ab-e40e-4c61-bcb2-5a5275d0b7c0","type":"Microsoft.Authorization/policyDefinitions","name":"765266ab-e40e-4c61-bcb2-5a5275d0b7c0"},{"properties":{"displayName":"Azure - SQL Databases should have private endpoint connections","policyType":"BuiltIn","mode":"Indexed","description":"Customers - enable private endpoint connections to enable private connectivity to Azure - SQL Database. This policy audits that private endpoint connections are in - use.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers"},{"count":{"field":"Microsoft.Sql/servers/privateEndpointConnections[*]","where":{"field":"Microsoft.Sql/servers/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","type":"Microsoft.Authorization/policyDefinitions","name":"7698e800-9299-47a6-b3b6-5a0fee576eed"},{"properties":{"displayName":"Microsoft - Managed Control 1055 - Session Termination| User-Initiated Logouts / Message - Displays","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1055"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/769efd9b-3587-4e22-90ce-65ddcd5bd969","type":"Microsoft.Authorization/policyDefinitions","name":"769efd9b-3587-4e22-90ce-65ddcd5bd969"},{"properties":{"displayName":"Audit - delegation of scopes to a managing tenant","policyType":"BuiltIn","mode":"All","description":"Audit - delegation of scopes to a managing tenant via Azure Lighthouse.","metadata":{"version":"1.0.0","category":"Lighthouse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ManagedServices/registrationAssignments"},{"value":"true","equals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/76bed37b-484f-430f-a009-fd7592dff818","type":"Microsoft.Authorization/policyDefinitions","name":"76bed37b-484f-430f-a009-fd7592dff818"},{"properties":{"displayName":"Microsoft - Managed Control 1058 - Permitted Actions Without Identification Or Authentication","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1058"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/76e85d08-8fbb-4112-a1c1-93521e6a9254","type":"Microsoft.Authorization/policyDefinitions","name":"76e85d08-8fbb-4112-a1c1-93521e6a9254"},{"properties":{"displayName":"Microsoft - Managed Control 1508 - Position Risk Designation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1508"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/76f500cc-4bca-4583-bda1-6d084dc21086","type":"Microsoft.Authorization/policyDefinitions","name":"76f500cc-4bca-4583-bda1-6d084dc21086"},{"properties":{"displayName":"Microsoft - Managed Control 1423 - Maintenance Personnel | Individuals Without Appropriate - Access","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1423"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7741669e-d4f6-485a-83cb-e70ce7cbbc20","type":"Microsoft.Authorization/policyDefinitions","name":"7741669e-d4f6-485a-83cb-e70ce7cbbc20"},{"properties":{"displayName":"Azure - subscriptions should have a log profile for Activity Log","policyType":"BuiltIn","mode":"All","description":"This - policy ensures if a log profile is enabled for exporting activity logs. It - audits if there is no log profile created to export the logs either to a storage - account or to an event hub.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/logProfiles","existenceCondition":{"field":"Microsoft.Insights/logProfiles/categories","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7796937f-307b-4598-941c-67d3a05ebfe7","type":"Microsoft.Authorization/policyDefinitions","name":"7796937f-307b-4598-941c-67d3a05ebfe7"},{"properties":{"displayName":"Microsoft - Managed Control 1336 - Authenticator Management | Pki-Based Authentication","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1336"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/77f56280-e367-432a-a3b9-8ca2aa636a26","type":"Microsoft.Authorization/policyDefinitions","name":"77f56280-e367-432a-a3b9-8ca2aa636a26"},{"properties":{"displayName":"Microsoft - Managed Control 1258 - Contingency Training","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1258"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7814506c-382c-4d33-a142-249dd4a0dbff","type":"Microsoft.Authorization/policyDefinitions","name":"7814506c-382c-4d33-a142-249dd4a0dbff"},{"properties":{"displayName":"Microsoft - Managed Control 1178 - Baseline Configuration | Reviews And Updates","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1178"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7818b8f4-47c6-441a-90ae-12ce04e99893","type":"Microsoft.Authorization/policyDefinitions","name":"7818b8f4-47c6-441a-90ae-12ce04e99893"},{"properties":{"displayName":"Microsoft - Managed Control 1057 - Permitted Actions Without Identification Or Authentication","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1057"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/78255758-6d45-4bf0-a005-7016bc03b13c","type":"Microsoft.Authorization/policyDefinitions","name":"78255758-6d45-4bf0-a005-7016bc03b13c"},{"properties":{"displayName":"Microsoft - Managed Control 1700 - Information System Monitoring | Unauthorized Network - Services","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1700"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7831b4ba-c3f4-4cb1-8c11-ef8d59438cd5","type":"Microsoft.Authorization/policyDefinitions","name":"7831b4ba-c3f4-4cb1-8c11-ef8d59438cd5"},{"properties":{"displayName":"Microsoft - Managed Control 1010 - Account Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1010"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/784663a8-1eb0-418a-a98c-24d19bc1bb62","type":"Microsoft.Authorization/policyDefinitions","name":"784663a8-1eb0-418a-a98c-24d19bc1bb62"},{"properties":{"displayName":"Microsoft - Managed Control 1216 - Least Functionality | Periodic Review","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1216"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7894fe6a-f5cb-44c8-ba90-c3f254ff9484","type":"Microsoft.Authorization/policyDefinitions","name":"7894fe6a-f5cb-44c8-ba90-c3f254ff9484"},{"properties":{"displayName":"Microsoft - Managed Control 1639 - Boundary Protection | Isolation Of Information System - Components","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1639"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/78e8e649-50f6-4fe3-99ac-fedc2e63b03f","type":"Microsoft.Authorization/policyDefinitions","name":"78e8e649-50f6-4fe3-99ac-fedc2e63b03f"},{"properties":{"displayName":"Microsoft - Managed Control 1647 - Cryptographic Protection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1647"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/791cfc15-6974-42a0-9f4c-2d4b82f4a78c","type":"Microsoft.Authorization/policyDefinitions","name":"791cfc15-6974-42a0-9f4c-2d4b82f4a78c"},{"properties":{"displayName":"Microsoft - Managed Control 1510 - Position Risk Designation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1510"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/79da5b09-0e7e-499e-adda-141b069c7998","type":"Microsoft.Authorization/policyDefinitions","name":"79da5b09-0e7e-499e-adda-141b069c7998"},{"properties":{"displayName":"Microsoft - Managed Control 1384 - Information Spillage Response","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1384"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/79fbc228-461c-4a45-9004-a865ca0728a7","type":"Microsoft.Authorization/policyDefinitions","name":"79fbc228-461c-4a45-9004-a865ca0728a7"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows Server VMs on which Windows Serial Console - is not enabled","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows Server virtual - machines on which Windows Serial Console is not enabled. It also creates a - system-assigned managed identity and deploys the VM extension for Guest Configuration. - This policy should only be used along with its corresponding audit policy - in an initiative. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"EMSPortNumber":{"type":"String","metadata":{"displayName":"EMS - Port Number","description":"An integer indicating the COM port to be used - for the Emergency Management Services (EMS) console redirection. For more - information on EMS settings, please visit https://aka.ms/gcpolwsc"},"allowedValues":["1","2","3","4"],"defaultValue":"1"},"EMSBaudRate":{"type":"String","metadata":{"displayName":"EMS - Baud Rate","description":"An integer indicating the baud rate to be used for - the Emergency Management Services (EMS) console redirection. For more information - on EMS settings, please visit https://aka.ms/gcpolwsc"},"allowedValues":["9600","19200","38400","57600","115200"],"defaultValue":"115200"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsSerialConsole","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber'', - ''='', parameters(''EMSPortNumber''), '','', ''[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate'', - ''='', parameters(''EMSBaudRate'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WindowsSerialConsole"},"EMSPortNumber":{"value":"[parameters(''EMSPortNumber'')]"},"EMSBaudRate":{"value":"[parameters(''EMSBaudRate'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"EMSPortNumber":{"type":"string"},"EMSBaudRate":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber","value":"[parameters(''EMSPortNumber'')]"},{"name":"[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate","value":"[parameters(''EMSBaudRate'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber","value":"[parameters(''EMSPortNumber'')]"},{"name":"[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate","value":"[parameters(''EMSBaudRate'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7a031c68-d6ab-406e-a506-697a19c634b0","type":"Microsoft.Authorization/policyDefinitions","name":"7a031c68-d6ab-406e-a506-697a19c634b0"},{"properties":{"displayName":"Microsoft - Managed Control 1093 - Role-Based Security Training","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Awareness and Training control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1093"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7a0bdeeb-15f4-47e8-a1da-9f769f845fdf","type":"Microsoft.Authorization/policyDefinitions","name":"7a0bdeeb-15f4-47e8-a1da-9f769f845fdf"},{"properties":{"displayName":"Microsoft - Managed Control 1708 - Security Function Verification","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1708"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7a1e2c88-13de-4959-8ee7-47e3d74f1f48","type":"Microsoft.Authorization/policyDefinitions","name":"7a1e2c88-13de-4959-8ee7-47e3d74f1f48"},{"properties":{"displayName":"Microsoft - Managed Control 1289 - Information System Backup","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1289"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7a724864-956a-496c-b778-637cb1d762cf","type":"Microsoft.Authorization/policyDefinitions","name":"7a724864-956a-496c-b778-637cb1d762cf"},{"properties":{"displayName":"Microsoft - Managed Control 1687 - Information System Monitoring","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1687"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7a87fc7f-301e-49f3-ba2a-4d74f424fa97","type":"Microsoft.Authorization/policyDefinitions","name":"7a87fc7f-301e-49f3-ba2a-4d74f424fa97"},{"properties":{"displayName":"Microsoft - Managed Control 1061 - Remote Access | Automated Monitoring / Control","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1061"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7ac22808-a2e8-41c4-9d46-429b50738914","type":"Microsoft.Authorization/policyDefinitions","name":"7ac22808-a2e8-41c4-9d46-429b50738914"},{"properties":{"displayName":"Microsoft - Managed Control 1492 - System Security Plan","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1492"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7ad5f307-e045-46f7-8214-5bdb7e973737","type":"Microsoft.Authorization/policyDefinitions","name":"7ad5f307-e045-46f7-8214-5bdb7e973737"},{"properties":{"displayName":"Microsoft - Managed Control 1636 - Boundary Protection | Isolation Of Security Tools / - Mechanisms / Support Components","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1636"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7b694eed-7081-43c6-867c-41c76c961043","type":"Microsoft.Authorization/policyDefinitions","name":"7b694eed-7081-43c6-867c-41c76c961043"},{"properties":{"displayName":"Diagnostic - logs in Virtual Machine Scale Sets should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"It - is recommended to enable Logs so that activity trail can be recreated when - investigations are required in the event of an incident or a compromise.","metadata":{"version":"1.0.0","category":"Compute"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/type","equals":"IaaSDiagnostics"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.Azure.Diagnostics"}]},{"allOf":[{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/type","equals":"LinuxDiagnostic"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","in":["Microsoft.OSTCExtensions","Microsoft.Azure.Diagnostics"]}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","type":"Microsoft.Authorization/policyDefinitions","name":"7c1b1214-f927-48bf-8882-84f0af6588b1"},{"properties":{"displayName":"[Deprecated]: - Require blob encryption for storage accounts","policyType":"BuiltIn","mode":"Indexed","description":"This - policy ensures blob encryption for storage accounts is turned on. It only - applies to Microsoft.Storage resource types, not other storage providers. - This policy is deprecated because storage blob encryption is now enabled by - default, and can no longer be disabled.","metadata":{"version":"1.0.0-deprecated","category":"Storage","deprecated":true},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"field":"Microsoft.Storage/storageAccounts/enableBlobEncryption","equals":"false"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f","type":"Microsoft.Authorization/policyDefinitions","name":"7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f"},{"properties":{"displayName":"Microsoft - Managed Control 1143 - Security Assessment And Authorization Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1143"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7c6de11b-5f51-4f7c-8d83-d2467c8a816e","type":"Microsoft.Authorization/policyDefinitions","name":"7c6de11b-5f51-4f7c-8d83-d2467c8a816e"},{"properties":{"displayName":"Microsoft - Managed Control 1051 - Session Lock","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1051"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7cac6ee9-b58b-40c8-a5ce-f0efc3d9b339","type":"Microsoft.Authorization/policyDefinitions","name":"7cac6ee9-b58b-40c8-a5ce-f0efc3d9b339"},{"properties":{"displayName":"Microsoft - Managed Control 1279 - Telecommunications Services","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1279"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7d00bcd6-963d-4c02-ad8e-b45fa50bf3b0","type":"Microsoft.Authorization/policyDefinitions","name":"7d00bcd6-963d-4c02-ad8e-b45fa50bf3b0"},{"properties":{"displayName":"Azure - Cache for Redis should reside within a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits whether the Azure Cache for Redis resource has a non-public - endpoint by being deployed into a virtual network.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match."},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Cache/redis"},{"field":"Microsoft.Cache/Redis/subnetId","exists":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","type":"Microsoft.Authorization/policyDefinitions","name":"7d092e0a-7acd-40d2-a975-dca21cae48c4"},{"properties":{"displayName":"Microsoft - Managed Control 1109 - Content Of Audit Records | Centralized Management Of - Planned Audit Record Content","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1109"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7d9ffa23-ad92-4d0d-b1f4-7db274cc2aec","type":"Microsoft.Authorization/policyDefinitions","name":"7d9ffa23-ad92-4d0d-b1f4-7db274cc2aec"},{"properties":{"displayName":"Microsoft - Managed Control 1201 - Security Impact Analysis | Separate Test Environments","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1201"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7daef997-fdd3-461b-8807-a608a6dd70f1","type":"Microsoft.Authorization/policyDefinitions","name":"7daef997-fdd3-461b-8807-a608a6dd70f1"},{"properties":{"displayName":"Microsoft - Managed Control 1471 - Emergency Shutoff","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1471"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7dd0e9ce-1772-41fb-a50a-99977071f916","type":"Microsoft.Authorization/policyDefinitions","name":"7dd0e9ce-1772-41fb-a50a-99977071f916"},{"properties":{"displayName":"Show - audit results from Windows VMs that have the specified applications installed","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that have the specified applications installed. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"NotInstalledApplication","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7e56b49b-5990-4159-a734-511ea19b731c","type":"Microsoft.Authorization/policyDefinitions","name":"7e56b49b-5990-4159-a734-511ea19b731c"},{"properties":{"displayName":"Microsoft - Managed Control 1011 - Account Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1011"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7e6a54f3-883f-43d5-87c4-172dfd64a1f5","type":"Microsoft.Authorization/policyDefinitions","name":"7e6a54f3-883f-43d5-87c4-172dfd64a1f5"},{"properties":{"displayName":"Show - audit results from Windows VMs that have not restarted within the specified - number of days","policyType":"BuiltIn","mode":"All","description":"This policy - should only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines that have not restarted within the specified number of days. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"MachineLastBootUpTime","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7e84ba44-6d03-46fd-950e-5efa5a1112fa","type":"Microsoft.Authorization/policyDefinitions","name":"7e84ba44-6d03-46fd-950e-5efa5a1112fa"},{"properties":{"displayName":"Microsoft - Managed Control 1692 - Information System Monitoring | Inbound And Outbound - Communications Traffic","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1692"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7ecda928-9df4-4dd7-8f44-641a91e470e8","type":"Microsoft.Authorization/policyDefinitions","name":"7ecda928-9df4-4dd7-8f44-641a91e470e8"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs that do not have the password complexity - setting enabled","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have the password complexity setting enabled. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordMustMeetComplexityRequirements","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"PasswordMustMeetComplexityRequirements"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7ed40801-8a0f-4ceb-85c0-9fd25c1d61a8","type":"Microsoft.Authorization/policyDefinitions","name":"7ed40801-8a0f-4ceb-85c0-9fd25c1d61a8"},{"properties":{"displayName":"Microsoft - Managed Control 1191 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1191"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7f26a61b-a74d-467c-99cf-63644db144f7","type":"Microsoft.Authorization/policyDefinitions","name":"7f26a61b-a74d-467c-99cf-63644db144f7"},{"properties":{"displayName":"Microsoft - Managed Control 1520 - Personnel Termination","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1520"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7f2c513b-eb16-463b-b469-c10e5fa94f0a","type":"Microsoft.Authorization/policyDefinitions","name":"7f2c513b-eb16-463b-b469-c10e5fa94f0a"},{"properties":{"displayName":"Microsoft - Managed Control 1126 - Audit Reduction And Report Generation | Automatic Processing","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1126"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7f37f71b-420f-49bf-9477-9c0196974ecf","type":"Microsoft.Authorization/policyDefinitions","name":"7f37f71b-420f-49bf-9477-9c0196974ecf"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''System Audit Policies - - Privilege Use''","policyType":"BuiltIn","mode":"All","description":"This policy - should only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines with non-compliant settings in Group Policy category: ''System - Audit Policies - Privilege Use''. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesPrivilegeUse","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7f4e96d1-e4f3-4dbb-b767-33ca4df8df7c","type":"Microsoft.Authorization/policyDefinitions","name":"7f4e96d1-e4f3-4dbb-b767-33ca4df8df7c"},{"properties":{"displayName":"Audit - diagnostic setting","policyType":"BuiltIn","mode":"All","description":"Audit - diagnostic setting for selected resource types","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"listOfResourceTypes":{"type":"Array","metadata":{"displayName":"Resource - Types","strongType":"resourceTypes"}}},"policyRule":{"if":{"field":"type","in":"[parameters(''listOfResourceTypes'')]"},"then":{"effect":"AuditIfNotExists","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7f89b1eb-583c-429a-8828-af049802c1d9","type":"Microsoft.Authorization/policyDefinitions","name":"7f89b1eb-583c-429a-8828-af049802c1d9"},{"properties":{"displayName":"Microsoft - Managed Control 1117 - Audit Review, Analysis, And Reporting | Process Integration","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1117"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7fbfe680-6dbb-4037-963c-a621c5635902","type":"Microsoft.Authorization/policyDefinitions","name":"7fbfe680-6dbb-4037-963c-a621c5635902"},{"properties":{"displayName":"Advanced - data security should be enabled on Azure SQL Database servers","policyType":"BuiltIn","mode":"All","description":"Advanced - data security standard tier should be enabled on Azure SQL Database servers. - This provides functionality for surfacing and mitigating potential database - vulnerabilities, detecting anomalous activities that could indicate a threat - on SQL database and discovering and classifying sensitive data.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/pricings","name":"SqlServers","existenceScope":"subscription","existenceCondition":{"field":"Microsoft.Security/pricings/pricingTier","equals":"Standard"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","type":"Microsoft.Authorization/policyDefinitions","name":"7fe3b40f-802b-4cdd-8bd4-fd799c948cc2"},{"properties":{"displayName":"SQL - Auditing settings should have Action-Groups configured to capture critical - activities","policyType":"BuiltIn","mode":"Indexed","description":"The AuditActionsAndGroups - property should contain at least SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP, - FAILED_DATABASE_AUTHENTICATION_GROUP, BATCH_COMPLETED_GROUP to ensure a thorough - audit logging","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/auditingSettings","name":"default","existenceCondition":{"allOf":[{"not":{"field":"Microsoft.Sql/servers/auditingSettings/auditActionsAndGroups[*]","notEquals":"SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP"}},{"not":{"field":"Microsoft.Sql/servers/auditingSettings/auditActionsAndGroups[*]","notEquals":"FAILED_DATABASE_AUTHENTICATION_GROUP"}},{"not":{"field":"Microsoft.Sql/servers/auditingSettings/auditActionsAndGroups[*]","notEquals":"BATCH_COMPLETED_GROUP"}}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7ff426e2-515f-405a-91c8-4f2333442eb5","type":"Microsoft.Authorization/policyDefinitions","name":"7ff426e2-515f-405a-91c8-4f2333442eb5"},{"properties":{"displayName":"Microsoft - Managed Control 1703 - Security Alerts, Advisories, And Directives","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1703"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/804faf7d-b687-40f7-9f74-79e28adf4205","type":"Microsoft.Authorization/policyDefinitions","name":"804faf7d-b687-40f7-9f74-79e28adf4205"},{"properties":{"displayName":"Microsoft - Managed Control 1303 - Identification And Authentication (Org. Users) | Local - Access To Privileged Accounts","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1303"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/80ca0a27-918a-4604-af9e-723a27ee51e8","type":"Microsoft.Authorization/policyDefinitions","name":"80ca0a27-918a-4604-af9e-723a27ee51e8"},{"properties":{"displayName":"Microsoft - Managed Control 1505 - Information Security Architecture","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1505"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/813a10a7-3943-4fe3-8678-00dc52db5490","type":"Microsoft.Authorization/policyDefinitions","name":"813a10a7-3943-4fe3-8678-00dc52db5490"},{"properties":{"displayName":"Microsoft - Managed Control 1614 - Developer Security Architecture And Design","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1614"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8154e3b3-cc52-40be-9407-7756581d71f6","type":"Microsoft.Authorization/policyDefinitions","name":"8154e3b3-cc52-40be-9407-7756581d71f6"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''User Rights Assignment''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''User Rights Assignment''. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork":{"type":"String","metadata":{"displayName":"Users - or groups that may access this computer from the network","description":"Specifies - which remote users on the network are permitted to connect to the computer. - This does not include Remote Desktop Connection."},"defaultValue":"Administrators, - Authenticated Users"},"UsersOrGroupsThatMayLogOnLocally":{"type":"String","metadata":{"displayName":"Users - or groups that may log on locally","description":"Specifies which users or - groups can interactively log on to the computer. Users who attempt to log - on via Remote Desktop Connection or IIS also require this user right."},"defaultValue":"Administrators"},"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices":{"type":"String","metadata":{"displayName":"Users - or groups that may log on through Remote Desktop Services","description":"Specifies - which users or groups are permitted to log on as a Terminal Services client, - Remote Desktop, or for Remote Assistance."},"defaultValue":"Administrators, - Remote Desktop Users"},"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork":{"type":"String","metadata":{"displayName":"Users - and groups that are denied access to this computer from the network","description":"Specifies - which users or groups are explicitly prohibited from connecting to the computer - across the network."},"defaultValue":"Guests"},"UsersOrGroupsThatMayManageAuditingAndSecurityLog":{"type":"String","metadata":{"displayName":"Users - or groups that may manage auditing and security log","description":"Specifies - users and groups permitted to change the auditing options for files and directories - and clear the Security log."},"defaultValue":"Administrators"},"UsersOrGroupsThatMayBackUpFilesAndDirectories":{"type":"String","metadata":{"displayName":"Users - or groups that may back up files and directories","description":"Specifies - users and groups allowed to circumvent file and directory permissions to back - up the system."},"defaultValue":"Administrators, Backup Operators"},"UsersOrGroupsThatMayChangeTheSystemTime":{"type":"String","metadata":{"displayName":"Users - or groups that may change the system time","description":"Specifies which - users and groups are permitted to change the time and date on the internal - clock of the computer."},"defaultValue":"Administrators, LOCAL SERVICE"},"UsersOrGroupsThatMayChangeTheTimeZone":{"type":"String","metadata":{"displayName":"Users - or groups that may change the time zone","description":"Specifies which users - and groups are permitted to change the time zone of the computer."},"defaultValue":"Administrators, - LOCAL SERVICE"},"UsersOrGroupsThatMayCreateATokenObject":{"type":"String","metadata":{"displayName":"Users - or groups that may create a token object","description":"Specifies which users - and groups are permitted to create an access token, which may provide elevated - rights to access sensitive data."},"defaultValue":"No One"},"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob":{"type":"String","metadata":{"displayName":"Users - and groups that are denied logging on as a batch job","description":"Specifies - which users and groups are explicitly not permitted to log on to the computer - as a batch job (i.e. scheduled task)."},"defaultValue":"Guests"},"UsersAndGroupsThatAreDeniedLoggingOnAsAService":{"type":"String","metadata":{"displayName":"Users - and groups that are denied logging on as a service","description":"Specifies - which service accounts are explicitly not permitted to register a process - as a service."},"defaultValue":"Guests"},"UsersAndGroupsThatAreDeniedLocalLogon":{"type":"String","metadata":{"displayName":"Users - and groups that are denied local logon","description":"Specifies which users - and groups are explicitly not permitted to log on to the computer."},"defaultValue":"Guests"},"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices":{"type":"String","metadata":{"displayName":"Users - and groups that are denied log on through Remote Desktop Services","description":"Specifies - which users and groups are explicitly not permitted to log on to the computer - via Terminal Services/Remote Desktop Client."},"defaultValue":"Guests"},"UserAndGroupsThatMayForceShutdownFromARemoteSystem":{"type":"String","metadata":{"displayName":"User - and groups that may force shutdown from a remote system","description":"Specifies - which users and groups are permitted to shut down the computer from a remote - location on the network."},"defaultValue":"Administrators"},"UsersAndGroupsThatMayRestoreFilesAndDirectories":{"type":"String","metadata":{"displayName":"Users - and groups that may restore files and directories","description":"Specifies - which users and groups are permitted to bypass file, directory, registry, - and other persistent object permissions when restoring backed up files and - directories."},"defaultValue":"Administrators, Backup Operators"},"UsersAndGroupsThatMayShutDownTheSystem":{"type":"String","metadata":{"displayName":"Users - and groups that may shut down the system","description":"Specifies which users - and groups who are logged on locally to the computers in your environment - are permitted to shut down the operating system with the Shut Down command."},"defaultValue":"Administrators"},"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects":{"type":"String","metadata":{"displayName":"Users - or groups that may take ownership of files or other objects","description":"Specifies - which users and groups are permitted to take ownership of files, folders, - registry keys, processes, or threads. This user right bypasses any permissions - that are in place to protect objects to give ownership to the specified user."},"defaultValue":"Administrators"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_UserRightsAssignment","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Access - this computer from the network;ExpectedValue'', ''='', parameters(''UsersOrGroupsThatMayAccessThisComputerFromTheNetwork''), - '','', ''Allow log on locally;ExpectedValue'', ''='', parameters(''UsersOrGroupsThatMayLogOnLocally''), - '','', ''Allow log on through Remote Desktop Services;ExpectedValue'', ''='', - parameters(''UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices''), '','', - ''Deny access to this computer from the network;ExpectedValue'', ''='', parameters(''UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork''), - '','', ''Manage auditing and security log;ExpectedValue'', ''='', parameters(''UsersOrGroupsThatMayManageAuditingAndSecurityLog''), - '','', ''Back up files and directories;ExpectedValue'', ''='', parameters(''UsersOrGroupsThatMayBackUpFilesAndDirectories''), - '','', ''Change the system time;ExpectedValue'', ''='', parameters(''UsersOrGroupsThatMayChangeTheSystemTime''), - '','', ''Change the time zone;ExpectedValue'', ''='', parameters(''UsersOrGroupsThatMayChangeTheTimeZone''), - '','', ''Create a token object;ExpectedValue'', ''='', parameters(''UsersOrGroupsThatMayCreateATokenObject''), - '','', ''Deny log on as a batch job;ExpectedValue'', ''='', parameters(''UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob''), - '','', ''Deny log on as a service;ExpectedValue'', ''='', parameters(''UsersAndGroupsThatAreDeniedLoggingOnAsAService''), - '','', ''Deny log on locally;ExpectedValue'', ''='', parameters(''UsersAndGroupsThatAreDeniedLocalLogon''), - '','', ''Deny log on through Remote Desktop Services;ExpectedValue'', ''='', - parameters(''UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices''), - '','', ''Force shutdown from a remote system;ExpectedValue'', ''='', parameters(''UserAndGroupsThatMayForceShutdownFromARemoteSystem''), - '','', ''Restore files and directories;ExpectedValue'', ''='', parameters(''UsersAndGroupsThatMayRestoreFilesAndDirectories''), - '','', ''Shut down the system;ExpectedValue'', ''='', parameters(''UsersAndGroupsThatMayShutDownTheSystem''), - '','', ''Take ownership of files or other objects;ExpectedValue'', ''='', - parameters(''UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_UserRightsAssignment"},"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork":{"value":"[parameters(''UsersOrGroupsThatMayAccessThisComputerFromTheNetwork'')]"},"UsersOrGroupsThatMayLogOnLocally":{"value":"[parameters(''UsersOrGroupsThatMayLogOnLocally'')]"},"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices":{"value":"[parameters(''UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices'')]"},"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork":{"value":"[parameters(''UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork'')]"},"UsersOrGroupsThatMayManageAuditingAndSecurityLog":{"value":"[parameters(''UsersOrGroupsThatMayManageAuditingAndSecurityLog'')]"},"UsersOrGroupsThatMayBackUpFilesAndDirectories":{"value":"[parameters(''UsersOrGroupsThatMayBackUpFilesAndDirectories'')]"},"UsersOrGroupsThatMayChangeTheSystemTime":{"value":"[parameters(''UsersOrGroupsThatMayChangeTheSystemTime'')]"},"UsersOrGroupsThatMayChangeTheTimeZone":{"value":"[parameters(''UsersOrGroupsThatMayChangeTheTimeZone'')]"},"UsersOrGroupsThatMayCreateATokenObject":{"value":"[parameters(''UsersOrGroupsThatMayCreateATokenObject'')]"},"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob":{"value":"[parameters(''UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob'')]"},"UsersAndGroupsThatAreDeniedLoggingOnAsAService":{"value":"[parameters(''UsersAndGroupsThatAreDeniedLoggingOnAsAService'')]"},"UsersAndGroupsThatAreDeniedLocalLogon":{"value":"[parameters(''UsersAndGroupsThatAreDeniedLocalLogon'')]"},"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices":{"value":"[parameters(''UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices'')]"},"UserAndGroupsThatMayForceShutdownFromARemoteSystem":{"value":"[parameters(''UserAndGroupsThatMayForceShutdownFromARemoteSystem'')]"},"UsersAndGroupsThatMayRestoreFilesAndDirectories":{"value":"[parameters(''UsersAndGroupsThatMayRestoreFilesAndDirectories'')]"},"UsersAndGroupsThatMayShutDownTheSystem":{"value":"[parameters(''UsersAndGroupsThatMayShutDownTheSystem'')]"},"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects":{"value":"[parameters(''UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork":{"type":"string"},"UsersOrGroupsThatMayLogOnLocally":{"type":"string"},"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices":{"type":"string"},"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork":{"type":"string"},"UsersOrGroupsThatMayManageAuditingAndSecurityLog":{"type":"string"},"UsersOrGroupsThatMayBackUpFilesAndDirectories":{"type":"string"},"UsersOrGroupsThatMayChangeTheSystemTime":{"type":"string"},"UsersOrGroupsThatMayChangeTheTimeZone":{"type":"string"},"UsersOrGroupsThatMayCreateATokenObject":{"type":"string"},"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob":{"type":"string"},"UsersAndGroupsThatAreDeniedLoggingOnAsAService":{"type":"string"},"UsersAndGroupsThatAreDeniedLocalLogon":{"type":"string"},"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices":{"type":"string"},"UserAndGroupsThatMayForceShutdownFromARemoteSystem":{"type":"string"},"UsersAndGroupsThatMayRestoreFilesAndDirectories":{"type":"string"},"UsersAndGroupsThatMayShutDownTheSystem":{"type":"string"},"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Access - this computer from the network;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayAccessThisComputerFromTheNetwork'')]"},{"name":"Allow - log on locally;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayLogOnLocally'')]"},{"name":"Allow - log on through Remote Desktop Services;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices'')]"},{"name":"Deny - access to this computer from the network;ExpectedValue","value":"[parameters(''UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork'')]"},{"name":"Manage - auditing and security log;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayManageAuditingAndSecurityLog'')]"},{"name":"Back - up files and directories;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayBackUpFilesAndDirectories'')]"},{"name":"Change - the system time;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayChangeTheSystemTime'')]"},{"name":"Change - the time zone;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayChangeTheTimeZone'')]"},{"name":"Create - a token object;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayCreateATokenObject'')]"},{"name":"Deny - log on as a batch job;ExpectedValue","value":"[parameters(''UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob'')]"},{"name":"Deny - log on as a service;ExpectedValue","value":"[parameters(''UsersAndGroupsThatAreDeniedLoggingOnAsAService'')]"},{"name":"Deny - log on locally;ExpectedValue","value":"[parameters(''UsersAndGroupsThatAreDeniedLocalLogon'')]"},{"name":"Deny - log on through Remote Desktop Services;ExpectedValue","value":"[parameters(''UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices'')]"},{"name":"Force - shutdown from a remote system;ExpectedValue","value":"[parameters(''UserAndGroupsThatMayForceShutdownFromARemoteSystem'')]"},{"name":"Restore - files and directories;ExpectedValue","value":"[parameters(''UsersAndGroupsThatMayRestoreFilesAndDirectories'')]"},{"name":"Shut - down the system;ExpectedValue","value":"[parameters(''UsersAndGroupsThatMayShutDownTheSystem'')]"},{"name":"Take - ownership of files or other objects;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Access - this computer from the network;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayAccessThisComputerFromTheNetwork'')]"},{"name":"Allow - log on locally;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayLogOnLocally'')]"},{"name":"Allow - log on through Remote Desktop Services;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices'')]"},{"name":"Deny - access to this computer from the network;ExpectedValue","value":"[parameters(''UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork'')]"},{"name":"Manage - auditing and security log;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayManageAuditingAndSecurityLog'')]"},{"name":"Back - up files and directories;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayBackUpFilesAndDirectories'')]"},{"name":"Change - the system time;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayChangeTheSystemTime'')]"},{"name":"Change - the time zone;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayChangeTheTimeZone'')]"},{"name":"Create - a token object;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayCreateATokenObject'')]"},{"name":"Deny - log on as a batch job;ExpectedValue","value":"[parameters(''UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob'')]"},{"name":"Deny - log on as a service;ExpectedValue","value":"[parameters(''UsersAndGroupsThatAreDeniedLoggingOnAsAService'')]"},{"name":"Deny - log on locally;ExpectedValue","value":"[parameters(''UsersAndGroupsThatAreDeniedLocalLogon'')]"},{"name":"Deny - log on through Remote Desktop Services;ExpectedValue","value":"[parameters(''UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices'')]"},{"name":"Force - shutdown from a remote system;ExpectedValue","value":"[parameters(''UserAndGroupsThatMayForceShutdownFromARemoteSystem'')]"},{"name":"Restore - files and directories;ExpectedValue","value":"[parameters(''UsersAndGroupsThatMayRestoreFilesAndDirectories'')]"},{"name":"Shut - down the system;ExpectedValue","value":"[parameters(''UsersAndGroupsThatMayShutDownTheSystem'')]"},{"name":"Take - ownership of files or other objects;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/815dcc9f-6662-43f2-9a03-1b83e9876f24","type":"Microsoft.Authorization/policyDefinitions","name":"815dcc9f-6662-43f2-9a03-1b83e9876f24"},{"properties":{"displayName":"Microsoft - Managed Control 1308 - Identification And Authentication (Org. Users) | Remote - Access - Separate Device","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1308"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/81817e1c-5347-48dd-965a-40159d008229","type":"Microsoft.Authorization/policyDefinitions","name":"81817e1c-5347-48dd-965a-40159d008229"},{"properties":{"displayName":"Microsoft - Managed Control 1287 - Information System Backup","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1287"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/819dc6da-289d-476e-8500-7e341ef8677d","type":"Microsoft.Authorization/policyDefinitions","name":"819dc6da-289d-476e-8500-7e341ef8677d"},{"properties":{"displayName":"Microsoft - Managed Control 1213 - Configuration Settings | Respond To Unauthorized Changes","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1213"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/81f11e32-a293-4a58-82cd-134af52e2318","type":"Microsoft.Authorization/policyDefinitions","name":"81f11e32-a293-4a58-82cd-134af52e2318"},{"properties":{"displayName":"Geo-redundant - backup should be enabled for Azure Database for MySQL","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Azure Database for MySQL with geo-redundant backup not enabled.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DBforMySQL/servers"},{"field":"Microsoft.DBforMySQL/servers/storageProfile.geoRedundantBackup","notEquals":"Enabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","type":"Microsoft.Authorization/policyDefinitions","name":"82339799-d096-41ae-8538-b108becf0970"},{"properties":{"displayName":"Microsoft - Managed Control 1168 - Continuous Monitoring | Independent Assessment","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1168"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/82409f9e-1f32-4775-bf07-b99d53a91b06","type":"Microsoft.Authorization/policyDefinitions","name":"82409f9e-1f32-4775-bf07-b99d53a91b06"},{"properties":{"displayName":"Microsoft - Managed Control 1448 - Physical Access Authorizations","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1448"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/825d6494-e583-42f2-a3f2-6458e6f0004f","type":"Microsoft.Authorization/policyDefinitions","name":"825d6494-e583-42f2-a3f2-6458e6f0004f"},{"properties":{"displayName":"Microsoft - Managed Control 1452 - Physical Access Control","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1452"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/82c76455-4d3f-4e09-a654-22e592107e74","type":"Microsoft.Authorization/policyDefinitions","name":"82c76455-4d3f-4e09-a654-22e592107e74"},{"properties":{"displayName":"Microsoft - Managed Control 1262 - Contingency Plan Testing","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1262"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/831e510e-db41-4c72-888e-a0621ab62265","type":"Microsoft.Authorization/policyDefinitions","name":"831e510e-db41-4c72-888e-a0621ab62265"},{"properties":{"displayName":"Microsoft - Managed Control 1008 - Account Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1008"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8356cfc6-507a-4d20-b818-08038011cd07","type":"Microsoft.Authorization/policyDefinitions","name":"8356cfc6-507a-4d20-b818-08038011cd07"},{"properties":{"displayName":"Diagnostic - logs in Event Hub should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of diagnostic logs. This enables you to recreate activity trails - to use for investigation purposes; when a security incident occurs or when - your network is compromised","metadata":{"version":"3.0.0","category":"Event - Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.EventHub/namespaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","type":"Microsoft.Authorization/policyDefinitions","name":"83a214f7-d01a-484b-91a9-ed54470c9a6a"},{"properties":{"displayName":"Network - interfaces should not have public IPs","policyType":"BuiltIn","mode":"Indexed","description":"This - policy denies the network interfaces which are configured with any public - IP. Public IP addresses allow internet resources to communicate inbound to - Azure resources, and Azure resources to communicate outbound to the internet. - This should be reviewed by the network security team.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkInterfaces"},{"not":{"field":"Microsoft.Network/networkInterfaces/ipconfigurations[*].publicIpAddress.id","notLike":"*"}}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/83a86a26-fd1f-447c-b59d-e51f44264114","type":"Microsoft.Authorization/policyDefinitions","name":"83a86a26-fd1f-447c-b59d-e51f44264114"},{"properties":{"displayName":"Bring - your own key data protection should be enabled for MySQL servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits MySQL servers in your environment without bring your own key - data protection enabled. For more details, visit https://aka.ms/mysqlbyok.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforMySQL/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforMySQL/servers/keys","existenceCondition":{"allOf":[{"field":"Microsoft.DBforMySQL/servers/keys/serverKeyType","equals":"AzureKeyVault"},{"field":"Microsoft.DBforMySQL/servers/keys/uri","notEquals":""},{"field":"Microsoft.DBforMySQL/servers/keys/uri","exists":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","type":"Microsoft.Authorization/policyDefinitions","name":"83cef61d-dbd1-4b20-a4fc-5fbc7da10833"},{"properties":{"displayName":"Microsoft - Managed Control 1382 - Incident Response Plan","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1382"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/841392b3-40da-4473-b328-4cde49db67b3","type":"Microsoft.Authorization/policyDefinitions","name":"841392b3-40da-4473-b328-4cde49db67b3"},{"properties":{"displayName":"[Preview]: - Log Analytics agent should be installed on your Linux Azure Arc machines","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits Linux Azure Arc machines if the Log Analytics agent is not installed.","metadata":{"version":"1.0.0-preview","category":"Monitoring","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.HybridCompute/machines/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.HybridCompute/machines/extensions/type","equals":"OmsAgentForLinux"},{"field":"Microsoft.HybridCompute/machines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"},{"field":"Microsoft.HybridCompute/machines/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","type":"Microsoft.Authorization/policyDefinitions","name":"842c54e8-c2f9-4d79-ae8d-38d8b8019373"},{"properties":{"displayName":"Microsoft - Managed Control 1098 - Security Training Records","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Awareness and Training control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1098"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/84363adb-dde3-411a-9fc1-36b56737f822","type":"Microsoft.Authorization/policyDefinitions","name":"84363adb-dde3-411a-9fc1-36b56737f822"},{"properties":{"displayName":"Ensure - that ''.NET Framework'' version is the latest, if used as a part of the Web - app","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for .NET Framework software either due to security - flaws or to include additional functionality. Using the latest .NET framework - version for web apps is recommended in order to take advantage of security - fixes, if any, and/or new functionalities of the latest version.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","existenceCondition":{"field":"Microsoft.Web/sites/config/web.netFrameworkVersion","in":["v3.0","v4.0"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/843664e0-7563-41ee-a9cb-7522c382d2c4","type":"Microsoft.Authorization/policyDefinitions","name":"843664e0-7563-41ee-a9cb-7522c382d2c4"},{"properties":{"displayName":"Microsoft - Managed Control 1119 - Audit Review, Analysis, And Reporting | Central Review - And Analysis","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1119"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/845f6359-b764-4b40-b579-657aefe23c44","type":"Microsoft.Authorization/policyDefinitions","name":"845f6359-b764-4b40-b579-657aefe23c44"},{"properties":{"displayName":"Microsoft - Managed Control 1024 - Account Management | Account Monitoring / Atypical - Usage","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1024"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/84914fb4-12da-4c53-a341-a9fd463bed10","type":"Microsoft.Authorization/policyDefinitions","name":"84914fb4-12da-4c53-a341-a9fd463bed10"},{"properties":{"displayName":"Microsoft - Managed Control 1307 - Identification And Authentication (Org. Users) | Net. - Access To Non-Priv. Accts. - Replay","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1307"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/84e622c8-4bed-417c-84c6-b2fb0dd73682","type":"Microsoft.Authorization/policyDefinitions","name":"84e622c8-4bed-417c-84c6-b2fb0dd73682"},{"properties":{"displayName":"Microsoft - Managed Control 1080 - Use Of External Information Systems | Portable Storage - Devices","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1080"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/852981b4-a380-4704-aa1e-2e52d63445e5","type":"Microsoft.Authorization/policyDefinitions","name":"852981b4-a380-4704-aa1e-2e52d63445e5"},{"properties":{"displayName":"Microsoft - Managed Control 1580 - Information System Documentation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1580"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/854db8ac-6adf-42a0-bef3-b73f764f40b9","type":"Microsoft.Authorization/policyDefinitions","name":"854db8ac-6adf-42a0-bef3-b73f764f40b9"},{"properties":{"displayName":"Microsoft - Managed Control 1348 - Identification And Authentication (Non-Org. Users) - | Acceptance Of Third-Party Credentials","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1348"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/855ced56-417b-4d74-9d5f-dd1bc81e22d6","type":"Microsoft.Authorization/policyDefinitions","name":"855ced56-417b-4d74-9d5f-dd1bc81e22d6"},{"properties":{"displayName":"Microsoft - Managed Control 1079 - Use Of External Information Systems | Limits On Authorized - Use","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1079"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/85c32733-7d23-4948-88da-058e2c56b60f","type":"Microsoft.Authorization/policyDefinitions","name":"85c32733-7d23-4948-88da-058e2c56b60f"},{"properties":{"displayName":"Microsoft - Managed Control 1326 - Authenticator Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1326"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8605fc00-1bf5-4fb3-984e-c95cec4f231d","type":"Microsoft.Authorization/policyDefinitions","name":"8605fc00-1bf5-4fb3-984e-c95cec4f231d"},{"properties":{"displayName":"Azure - Cosmos DB accounts should have firewall rules","policyType":"BuiltIn","mode":"All","description":"Audit - or deny resources that do not have any IP rules configured and allow all networks - by default. Accounts that have at least one IP rule defined with the virtual - network filter enabled are deemed compliant. Accounts disabling public access - are also deemed compliant.","metadata":{"version":"1.0.0","category":"Cosmos - DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Policy - Effect","description":"The desired effect of the policy."},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Deny"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"anyOf":[{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","exists":"false"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","equals":"Enabled"}]},{"anyOf":[{"field":"Microsoft.DocumentDB/databaseAccounts/isVirtualNetworkFilterEnabled","exists":"false"},{"field":"Microsoft.DocumentDB/databaseAccounts/isVirtualNetworkFilterEnabled","equals":"false"},{"allOf":[{"anyOf":[{"field":"Microsoft.DocumentDB/databaseAccounts/ipRules","exists":"false"},{"count":{"field":"Microsoft.DocumentDB/databaseAccounts/ipRules[*]"},"equals":0}]},{"anyOf":[{"field":"Microsoft.DocumentDB/databaseAccounts/ipRangeFilter","exists":"false"},{"field":"Microsoft.DocumentDB/databaseAccounts/ipRangeFilter","equals":""}]}]}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","type":"Microsoft.Authorization/policyDefinitions","name":"862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''Security Options - - Microsoft Network Server''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - Microsoft Network Server''. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsMicrosoftNetworkServer","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsMicrosoftNetworkServer"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/86880e5c-df35-43c5-95ad-7e120635775e","type":"Microsoft.Authorization/policyDefinitions","name":"86880e5c-df35-43c5-95ad-7e120635775e"},{"properties":{"displayName":"Deploy - SQL DB transparent data encryption","policyType":"BuiltIn","mode":"Indexed","description":"Enables - transparent data encryption on SQL databases","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers/databases"},{"field":"name","notEquals":"master"}]},"then":{"effect":"DeployIfNotExists","details":{"type":"Microsoft.Sql/servers/databases/transparentDataEncryption","name":"current","existenceCondition":{"field":"Microsoft.Sql/transparentDataEncryption.status","equals":"Enabled"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/9b7fa17d-e63e-47b0-bb0a-15c516ac86ec"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullDbName":{"type":"string"}},"resources":[{"name":"[concat(parameters(''fullDbName''), - ''/current'')]","type":"Microsoft.Sql/servers/databases/transparentDataEncryption","apiVersion":"2014-04-01","properties":{"status":"Enabled"}}]},"parameters":{"fullDbName":{"value":"[field(''fullName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/86a912f6-9a06-4e26-b447-11b16ba8659f","type":"Microsoft.Authorization/policyDefinitions","name":"86a912f6-9a06-4e26-b447-11b16ba8659f"},{"properties":{"displayName":"System - updates should be installed on your machines","policyType":"BuiltIn","mode":"All","description":"Missing - security system updates on your servers will be monitored by Azure Security - Center as recommendations","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"systemUpdates","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","type":"Microsoft.Authorization/policyDefinitions","name":"86b3d65f-7626-441e-b690-81a8b71cff60"},{"properties":{"displayName":"Microsoft - Managed Control 1507 - Personnel Security Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1507"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/86ccd1bf-e7ad-4851-93ce-6ec817469c1e","type":"Microsoft.Authorization/policyDefinitions","name":"86ccd1bf-e7ad-4851-93ce-6ec817469c1e"},{"properties":{"displayName":"Ensure - that Register with Azure Active Directory is enabled on API app","policyType":"BuiltIn","mode":"Indexed","description":"Managed - service identity in App Service makes the app more secure by eliminating secrets - from the app, such as credentials in the connection strings. When registering - with Azure Active Directory in the app service, the app will connect to other - Azure services securely without the need of username and passwords","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/web.managedServiceIdentityId","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/86d97760-d216-4d81-a3ad-163087b2b6c3","type":"Microsoft.Authorization/policyDefinitions","name":"86d97760-d216-4d81-a3ad-163087b2b6c3"},{"properties":{"displayName":"Microsoft - Managed Control 1392 - Information Spillage Response | Post-Spill Operations","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1392"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/86dc819f-15e1-43f9-a271-41ae58d4cecc","type":"Microsoft.Authorization/policyDefinitions","name":"86dc819f-15e1-43f9-a271-41ae58d4cecc"},{"properties":{"displayName":"Microsoft - Managed Control 1589 - External Information System Services | Risk Assessments - / Organizational Approvals","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1589"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/86ec7f9b-9478-40ff-8cfd-6a0d510081a8","type":"Microsoft.Authorization/policyDefinitions","name":"86ec7f9b-9478-40ff-8cfd-6a0d510081a8"},{"properties":{"displayName":"Microsoft - Managed Control 1207 - Access Restrictions For Change | Limit Production / - Operational Privileges","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1207"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8713a0ed-0d1e-4d10-be82-83dffb39830e","type":"Microsoft.Authorization/policyDefinitions","name":"8713a0ed-0d1e-4d10-be82-83dffb39830e"},{"properties":{"displayName":"Require - a tag on resources","policyType":"BuiltIn","mode":"Indexed","description":"Enforces - existence of a tag. Does not apply to resource groups.","metadata":{"version":"1.0.1","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}}},"policyRule":{"if":{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/871b6d14-10aa-478d-b590-94f262ecfa99","type":"Microsoft.Authorization/policyDefinitions","name":"871b6d14-10aa-478d-b590-94f262ecfa99"},{"properties":{"displayName":"Microsoft - Managed Control 1180 - Baseline Configuration | Automation Support For Accuracy - / Currency","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1180"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/874e7880-a067-42a7-bcbe-1a340f54c8cc","type":"Microsoft.Authorization/policyDefinitions","name":"874e7880-a067-42a7-bcbe-1a340f54c8cc"},{"properties":{"displayName":"Microsoft - Managed Control 1635 - Boundary Protection | Host-Based Protection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1635"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/87551b5d-1deb-4d0f-86cc-9dc14cb4bf7e","type":"Microsoft.Authorization/policyDefinitions","name":"87551b5d-1deb-4d0f-86cc-9dc14cb4bf7e"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''Administrative Templates - - Control Panel''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Administrative Templates - Control Panel''. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_AdministrativeTemplatesControlPanel","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/87b590fe-4a1d-4697-ae74-d4fe72ab786c","type":"Microsoft.Authorization/policyDefinitions","name":"87b590fe-4a1d-4697-ae74-d4fe72ab786c"},{"properties":{"displayName":"Microsoft - Managed Control 1293 - Information System Backup | Separate Storage For Critical - Information","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1293"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/87f7cd82-2e45-4d0f-9e2f-586b0962d142","type":"Microsoft.Authorization/policyDefinitions","name":"87f7cd82-2e45-4d0f-9e2f-586b0962d142"},{"properties":{"displayName":"Microsoft - Managed Control 1440 - Media Sanitization | Review / Approve / Track / Document - / Verify","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Media Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1440"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/881299bf-2a5b-4686-a1b2-321d33679953","type":"Microsoft.Authorization/policyDefinitions","name":"881299bf-2a5b-4686-a1b2-321d33679953"},{"properties":{"displayName":"Microsoft - Managed Control 1356 - Incident Response Training | Simulated Events","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1356"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8829f8f5-e8be-441e-85c9-85b72a5d0ef3","type":"Microsoft.Authorization/policyDefinitions","name":"8829f8f5-e8be-441e-85c9-85b72a5d0ef3"},{"properties":{"displayName":"Deploy - prerequisites to audit Linux VMs that have the specified applications installed","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"3.0.0","category":"Guest Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"ApplicationName":{"type":"String","metadata":{"displayName":"Application - names","description":"A semicolon-separated list of the names of the applications - that should not be installed. e.g. ''python; powershell''"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"not_installed_application_linux","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent'', - ''='', concat(''packages: ['', replace(parameters(''ApplicationName''), '';'', - '',''), '']'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"not_installed_application_linux"},"ApplicationName":{"value":"[parameters(''ApplicationName'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"ApplicationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent","value":"[concat(''packages: - ['', replace(parameters(''ApplicationName''), '';'', '',''), '']'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent","value":"[concat(''packages: - ['', replace(parameters(''ApplicationName''), '';'', '',''), '']'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforLinux'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforLinux","typeHandlerVersion":"1.0","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/884b209a-963b-4520-8006-d20cb3c213e0","type":"Microsoft.Authorization/policyDefinitions","name":"884b209a-963b-4520-8006-d20cb3c213e0"},{"properties":{"displayName":"Microsoft - Managed Control 1317 - Authenticator Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1317"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8877f519-c166-47b7-81b7-8a8eb4ff3775","type":"Microsoft.Authorization/policyDefinitions","name":"8877f519-c166-47b7-81b7-8a8eb4ff3775"},{"properties":{"displayName":"Microsoft - Managed Control 1501 - Rules Of Behavior","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1501"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/88817b58-8472-4f6c-81fa-58ce42b67f51","type":"Microsoft.Authorization/policyDefinitions","name":"88817b58-8472-4f6c-81fa-58ce42b67f51"},{"properties":{"displayName":"Ensure - that ''Java version'' is the latest, if used as a part of the Api app","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for Java either due to security flaws or to include - additional functionality. Using the latest Python version for Api apps is - recommended in order to take advantage of security fixes, if any, and/or new - functionalities of the latest version.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"JavaLatestVersion":{"type":"String","metadata":{"displayName":"Latest - Java version","description":"Latest supported Java version for App Services"},"defaultValue":"11"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","notContains":"JAVA"},{"field":"Microsoft.Web/sites/config/web.javaVersion","equals":""}]},{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","like":"[concat(''*'', - parameters(''JavaLatestVersion''))]"},{"field":"Microsoft.Web/sites/config/web.javaVersion","equals":""}]},{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","equals":""},{"field":"Microsoft.Web/sites/config/web.javaVersion","like":"[concat(parameters(''JavaLatestVersion''), - ''*'')]"}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","type":"Microsoft.Authorization/policyDefinitions","name":"88999f4c-376a-45c8-bcb3-4058f713cf39"},{"properties":{"displayName":"Network - interfaces should disable IP forwarding","policyType":"BuiltIn","mode":"Indexed","description":"This - policy denies the network interfaces which enabled IP forwarding. The setting - of IP forwarding disables Azure''s check of the source and destination for - a network interface. This should be reviewed by the network security team.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkInterfaces"},{"field":"Microsoft.Network/networkInterfaces/enableIpForwarding","equals":"true"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/88c0b9da-ce96-4b03-9635-f29a937e2900","type":"Microsoft.Authorization/policyDefinitions","name":"88c0b9da-ce96-4b03-9635-f29a937e2900"},{"properties":{"displayName":"Microsoft - Managed Control 1215 - Least Functionality","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1215"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/88fc93e8-4745-4785-b5a5-b44bb92c44ff","type":"Microsoft.Authorization/policyDefinitions","name":"88fc93e8-4745-4785-b5a5-b44bb92c44ff"},{"properties":{"displayName":"SQL - servers should be configured with auditing retention days greater than 90 - days.","policyType":"BuiltIn","mode":"Indexed","description":"Audit SQL servers - configured with an auditing retention period of less than 90 days.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/auditingSettings","name":"default","existenceCondition":{"field":"Microsoft.Sql/servers/auditingSettings/retentionDays","greater":90}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","type":"Microsoft.Authorization/policyDefinitions","name":"89099bee-89e0-4b26-a5f4-165451757743"},{"properties":{"displayName":"Microsoft - Managed Control 1411 - Nonlocal Maintenance","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1411"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/898d4fe8-f743-4333-86b7-0c9245d93e7d","type":"Microsoft.Authorization/policyDefinitions","name":"898d4fe8-f743-4333-86b7-0c9245d93e7d"},{"properties":{"displayName":"Microsoft - Managed Control 1092 - Security Awareness Training | Insider Threat","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Awareness and Training control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1092"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8a29d47b-8604-4667-84ef-90d203fcb305","type":"Microsoft.Authorization/policyDefinitions","name":"8a29d47b-8604-4667-84ef-90d203fcb305"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''Security Options - System - settings''","policyType":"BuiltIn","mode":"All","description":"This policy - should only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines with non-compliant settings in Group Policy category: ''Security - Options - System settings''. For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsSystemsettings","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8a39d1f1-5513-4628-b261-f469a5a3341b","type":"Microsoft.Authorization/policyDefinitions","name":"8a39d1f1-5513-4628-b261-f469a5a3341b"},{"properties":{"displayName":"Show - audit results from Windows VMs with a pending reboot","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with a pending reboot. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsPendingReboot","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b0de57a-f511-4d45-a277-17cb79cb163b","type":"Microsoft.Authorization/policyDefinitions","name":"8b0de57a-f511-4d45-a277-17cb79cb163b"},{"properties":{"displayName":"Microsoft - Managed Control 1534 - Personnel Sanctions","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1534"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b2b263e-cd05-4488-bcbf-4debec7a17d9","type":"Microsoft.Authorization/policyDefinitions","name":"8b2b263e-cd05-4488-bcbf-4debec7a17d9"},{"properties":{"displayName":"Microsoft - Managed Control 1170 - Penetration Testing","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1170"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b78b9b3-ee3c-48e0-a243-ed6dba5b7a12","type":"Microsoft.Authorization/policyDefinitions","name":"8b78b9b3-ee3c-48e0-a243-ed6dba5b7a12"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''Windows Firewall Properties''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Windows Firewall Properties''. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_WindowsFirewallProperties","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8bbd627e-4d25-4906-9a6e-3789780af3ec","type":"Microsoft.Authorization/policyDefinitions","name":"8bbd627e-4d25-4906-9a6e-3789780af3ec"},{"properties":{"displayName":"Ensure - that ''HTTP Version'' is the latest, if used to run the Web app","policyType":"BuiltIn","mode":"Indexed","description":"Managed - service identity in App Service makes the app more secure by eliminating secrets - from the app, such as credentials in the connection strings. When registering - with Azure Active Directory in the app service, the app will connect to other - Azure services securely without the need of username and passwords","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/web.http20Enabled","Equals":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8c122334-9d20-4eb8-89ea-ac9a705b74ae","type":"Microsoft.Authorization/policyDefinitions","name":"8c122334-9d20-4eb8-89ea-ac9a705b74ae"},{"properties":{"displayName":"Microsoft - Managed Control 1458 - Physical Access Control | Information System Access","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1458"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8c19ceb7-56e9-4488-8ddb-b1eb3aa6d203","type":"Microsoft.Authorization/policyDefinitions","name":"8c19ceb7-56e9-4488-8ddb-b1eb3aa6d203"},{"properties":{"displayName":"Microsoft - Managed Control 1683 - Information System Monitoring","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1683"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8c79fee4-88dd-44ce-bbd4-4de88948c4f8","type":"Microsoft.Authorization/policyDefinitions","name":"8c79fee4-88dd-44ce-bbd4-4de88948c4f8"},{"properties":{"displayName":"Latest - TLS version should be used in your API App","policyType":"BuiltIn","mode":"Indexed","description":"Upgrade - to the latest TLS version","metadata":{"version":"1.0.0","category":"App Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/minTlsVersion","equals":"1.2"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","type":"Microsoft.Authorization/policyDefinitions","name":"8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e"},{"properties":{"displayName":"Microsoft - Managed Control 1316 - Identifier Management | Identify User Status","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1316"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8ce14753-66e5-465d-9841-26ef55c09c0d","type":"Microsoft.Authorization/policyDefinitions","name":"8ce14753-66e5-465d-9841-26ef55c09c0d"},{"properties":{"displayName":"Require - a tag and its value on resource groups","policyType":"BuiltIn","mode":"All","description":"Enforces - a required tag and its value on resource groups.","metadata":{"version":"1.0.0","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Resources/subscriptions/resourceGroups"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","notEquals":"[parameters(''tagValue'')]"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8ce3da23-7156-49e4-b145-24f95f9dcb46","type":"Microsoft.Authorization/policyDefinitions","name":"8ce3da23-7156-49e4-b145-24f95f9dcb46"},{"properties":{"displayName":"Microsoft - Managed Control 1324 - Authenticator Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1324"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8cfea2b3-7f77-497e-ac20-0752f2ff6eee","type":"Microsoft.Authorization/policyDefinitions","name":"8cfea2b3-7f77-497e-ac20-0752f2ff6eee"},{"properties":{"displayName":"Microsoft - Managed Control 1225 - Information System Component Inventory | Automated - Maintenance","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1225"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8d096fe0-f510-4486-8b4d-d17dc230980b","type":"Microsoft.Authorization/policyDefinitions","name":"8d096fe0-f510-4486-8b4d-d17dc230980b"},{"properties":{"displayName":"Microsoft - Managed Control 1288 - Information System Backup","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1288"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8d854c3b-a3e6-4ec9-9f0c-c7274dbaeb2f","type":"Microsoft.Authorization/policyDefinitions","name":"8d854c3b-a3e6-4ec9-9f0c-c7274dbaeb2f"},{"properties":{"displayName":"Microsoft - Managed Control 1281 - Telecommunications Services | Priority Of Service Provisions","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1281"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8dc459b3-0e77-45af-8d71-cfd8c9654fe2","type":"Microsoft.Authorization/policyDefinitions","name":"8dc459b3-0e77-45af-8d71-cfd8c9654fe2"},{"properties":{"displayName":"Microsoft - Managed Control 1250 - Contingency Plan","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1250"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8de614d8-a8b7-4f70-a62a-6d37089a002c","type":"Microsoft.Authorization/policyDefinitions","name":"8de614d8-a8b7-4f70-a62a-6d37089a002c"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''System Audit Policies - - Object Access''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''System Audit Policies - - Object Access''. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"AuditDetailedFileShare":{"type":"String","metadata":{"displayName":"Audit - Detailed File Share","description":"If this policy setting is enabled, access - to all shared files and folders on the system is audited. Auditing for Success - can lead to very high volumes of events."},"allowedValues":["No Auditing","Success","Failure","Success - and Failure"],"defaultValue":"No Auditing"},"AuditFileShare":{"type":"String","metadata":{"displayName":"Audit - File Share","description":"Specifies whether to audit events related to file - shares: creation, deletion, modification, and access attempts. Also, it shows - failed SMB SPN checks. Event volumes can be high on DCs and File Servers."},"allowedValues":["No - Auditing","Success","Failure","Success and Failure"],"defaultValue":"No Auditing"},"AuditFileSystem":{"type":"String","metadata":{"displayName":"Audit - File System","description":"Specifies whether audit events are generated when - users attempt to access file system objects. Audit events are generated only - for objects that have configured system access control lists (SACLs)."},"allowedValues":["No - Auditing","Success","Failure","Success and Failure"],"defaultValue":"No Auditing"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesObjectAccess","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Audit - Detailed File Share;ExpectedValue'', ''='', parameters(''AuditDetailedFileShare''), - '','', ''Audit File Share;ExpectedValue'', ''='', parameters(''AuditFileShare''), - '','', ''Audit File System;ExpectedValue'', ''='', parameters(''AuditFileSystem'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SystemAuditPoliciesObjectAccess"},"AuditDetailedFileShare":{"value":"[parameters(''AuditDetailedFileShare'')]"},"AuditFileShare":{"value":"[parameters(''AuditFileShare'')]"},"AuditFileSystem":{"value":"[parameters(''AuditFileSystem'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"AuditDetailedFileShare":{"type":"string"},"AuditFileShare":{"type":"string"},"AuditFileSystem":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit - Detailed File Share;ExpectedValue","value":"[parameters(''AuditDetailedFileShare'')]"},{"name":"Audit - File Share;ExpectedValue","value":"[parameters(''AuditFileShare'')]"},{"name":"Audit - File System;ExpectedValue","value":"[parameters(''AuditFileSystem'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit - Detailed File Share;ExpectedValue","value":"[parameters(''AuditDetailedFileShare'')]"},{"name":"Audit - File Share;ExpectedValue","value":"[parameters(''AuditFileShare'')]"},{"name":"Audit - File System;ExpectedValue","value":"[parameters(''AuditFileSystem'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8e170edb-e0f5-497a-bb36-48b3280cec6a","type":"Microsoft.Authorization/policyDefinitions","name":"8e170edb-e0f5-497a-bb36-48b3280cec6a"},{"properties":{"displayName":"Microsoft - Managed Control 1278 - Alternate Processing Site | Preparation For Use","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1278"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8e5ef485-9e16-4c53-a475-fbb8107eac59","type":"Microsoft.Authorization/policyDefinitions","name":"8e5ef485-9e16-4c53-a475-fbb8107eac59"},{"properties":{"displayName":"Enable - Security Center''s auto provisioning of the Log Analytics agent on your subscriptions - with custom workspace.","policyType":"BuiltIn","mode":"All","description":"Allow - Security Center to auto provision the Log Analytics agent on your subscriptions - to monitor and collect security data using a custom workspace.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Auto provision the Log Analytics agent - on your subscriptions to monitor and collect security data using a custom - workspace.","strongType":"omsWorkspace"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/autoProvisioningSettings","deploymentScope":"Subscription","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"existenceCondition":{"field":"Microsoft.Security/autoProvisioningSettings/autoProvision","equals":"On"},"deployment":{"location":"westus","properties":{"mode":"incremental","parameters":{"logAnalytics":{"value":"[parameters(''logAnalytics'')]"}},"template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"logAnalytics":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.Security/autoProvisioningSettings","name":"default","apiVersion":"2017-08-01-preview","properties":{"autoProvision":"On"}},{"type":"Microsoft.Security/workspaceSettings","apiVersion":"2017-08-01-preview","name":"default","properties":{"workspaceId":"[parameters(''logAnalytics'')]","scope":"[subscription().id]"}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8e7da0a5-0a0e-4bbc-bfc0-7773c018b616","type":"Microsoft.Authorization/policyDefinitions","name":"8e7da0a5-0a0e-4bbc-bfc0-7773c018b616"},{"properties":{"displayName":"Microsoft - Managed Control 1517 - Personnel Termination","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1517"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8f5ad423-50d6-4617-b058-69908f5586c9","type":"Microsoft.Authorization/policyDefinitions","name":"8f5ad423-50d6-4617-b058-69908f5586c9"},{"properties":{"displayName":"Microsoft - Managed Control 1668 - Flaw Remediation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1668"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8fb0966e-be1d-42c3-baca-60df5c0bcc61","type":"Microsoft.Authorization/policyDefinitions","name":"8fb0966e-be1d-42c3-baca-60df5c0bcc61"},{"properties":{"displayName":"Microsoft - Managed Control 1013 - Account Management | Automated System Account Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1013"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8fd7b917-d83b-4379-af60-51e14e316c61","type":"Microsoft.Authorization/policyDefinitions","name":"8fd7b917-d83b-4379-af60-51e14e316c61"},{"properties":{"displayName":"Microsoft - Managed Control 1147 - Security Assessments","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1147"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8fef824a-29a8-4a4c-88fc-420a39c0d541","type":"Microsoft.Authorization/policyDefinitions","name":"8fef824a-29a8-4a4c-88fc-420a39c0d541"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs that do not store passwords using reversible - encryption","policyType":"BuiltIn","mode":"Indexed","description":"This policy - creates a Guest Configuration assignment to audit Windows virtual machines - that do not store passwords using reversible encryption. It also creates a - system-assigned managed identity and deploys the VM extension for Guest Configuration. - This policy should only be used along with its corresponding audit policy - in an initiative. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"StorePasswordsUsingReversibleEncryption","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"StorePasswordsUsingReversibleEncryption"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8ff0b18b-262e-4512-857a-48ad0aeb9a78","type":"Microsoft.Authorization/policyDefinitions","name":"8ff0b18b-262e-4512-857a-48ad0aeb9a78"},{"properties":{"displayName":"Microsoft - Managed Control 1550 - Vulnerability Scanning","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Risk Assessment control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1550"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/902908fb-25a8-4225-a3a5-5603c80066c9","type":"Microsoft.Authorization/policyDefinitions","name":"902908fb-25a8-4225-a3a5-5603c80066c9"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''Windows Firewall Properties''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Windows Firewall Properties''. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"WindowsFirewallDomainUseProfileSettings":{"type":"String","metadata":{"displayName":"Windows - Firewall (Domain): Use profile settings","description":"Specifies whether - Windows Firewall with Advanced Security uses the settings for the Domain profile - to filter network traffic. If you select Off, Windows Firewall with Advanced - Security will not use any of the firewall rules or connection security rules - for this profile."},"defaultValue":"1"},"WindowsFirewallDomainBehaviorForOutboundConnections":{"type":"String","metadata":{"displayName":"Windows - Firewall (Domain): Behavior for outbound connections","description":"Specifies - the behavior for outbound connections for the Domain profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections."},"defaultValue":"0"},"WindowsFirewallDomainApplyLocalConnectionSecurityRules":{"type":"String","metadata":{"displayName":"Windows - Firewall (Domain): Apply local connection security rules","description":"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Domain profile."},"defaultValue":"1"},"WindowsFirewallDomainApplyLocalFirewallRules":{"type":"String","metadata":{"displayName":"Windows - Firewall (Domain): Apply local firewall rules","description":"Specifies whether - local administrators are allowed to create local firewall rules that apply - together with firewall rules configured by Group Policy for the Domain profile."},"defaultValue":"1"},"WindowsFirewallDomainDisplayNotifications":{"type":"String","metadata":{"displayName":"Windows - Firewall (Domain): Display notifications","description":"Specifies whether - Windows Firewall with Advanced Security displays notifications to the user - when a program is blocked from receiving inbound connections, for the Domain - profile."},"defaultValue":"1"},"WindowsFirewallPrivateUseProfileSettings":{"type":"String","metadata":{"displayName":"Windows - Firewall (Private): Use profile settings","description":"Specifies whether - Windows Firewall with Advanced Security uses the settings for the Private - profile to filter network traffic. If you select Off, Windows Firewall with - Advanced Security will not use any of the firewall rules or connection security - rules for this profile."},"defaultValue":"1"},"WindowsFirewallPrivateBehaviorForOutboundConnections":{"type":"String","metadata":{"displayName":"Windows - Firewall (Private): Behavior for outbound connections","description":"Specifies - the behavior for outbound connections for the Private profile that do not - match an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections."},"defaultValue":"0"},"WindowsFirewallPrivateApplyLocalConnectionSecurityRules":{"type":"String","metadata":{"displayName":"Windows - Firewall (Private): Apply local connection security rules","description":"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Private profile."},"defaultValue":"1"},"WindowsFirewallPrivateApplyLocalFirewallRules":{"type":"String","metadata":{"displayName":"Windows - Firewall (Private): Apply local firewall rules","description":"Specifies whether - local administrators are allowed to create local firewall rules that apply - together with firewall rules configured by Group Policy for the Private profile."},"defaultValue":"1"},"WindowsFirewallPrivateDisplayNotifications":{"type":"String","metadata":{"displayName":"Windows - Firewall (Private): Display notifications","description":"Specifies whether - Windows Firewall with Advanced Security displays notifications to the user - when a program is blocked from receiving inbound connections, for the Private - profile."},"defaultValue":"1"},"WindowsFirewallPublicUseProfileSettings":{"type":"String","metadata":{"displayName":"Windows - Firewall (Public): Use profile settings","description":"Specifies whether - Windows Firewall with Advanced Security uses the settings for the Public profile - to filter network traffic. If you select Off, Windows Firewall with Advanced - Security will not use any of the firewall rules or connection security rules - for this profile."},"defaultValue":"1"},"WindowsFirewallPublicBehaviorForOutboundConnections":{"type":"String","metadata":{"displayName":"Windows - Firewall (Public): Behavior for outbound connections","description":"Specifies - the behavior for outbound connections for the Public profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections."},"defaultValue":"0"},"WindowsFirewallPublicApplyLocalConnectionSecurityRules":{"type":"String","metadata":{"displayName":"Windows - Firewall (Public): Apply local connection security rules","description":"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Public profile."},"defaultValue":"1"},"WindowsFirewallPublicApplyLocalFirewallRules":{"type":"String","metadata":{"displayName":"Windows - Firewall (Public): Apply local firewall rules","description":"Specifies whether - local administrators are allowed to create local firewall rules that apply - together with firewall rules configured by Group Policy for the Public profile."},"defaultValue":"1"},"WindowsFirewallPublicDisplayNotifications":{"type":"String","metadata":{"displayName":"Windows - Firewall (Public): Display notifications","description":"Specifies whether - Windows Firewall with Advanced Security displays notifications to the user - when a program is blocked from receiving inbound connections, for the Public - profile."},"defaultValue":"1"},"WindowsFirewallDomainAllowUnicastResponse":{"type":"String","metadata":{"displayName":"Windows - Firewall: Domain: Allow unicast response","description":"Specifies whether - Windows Firewall with Advanced Security permits the local computer to receive - unicast responses to its outgoing multicast or broadcast messages; for the - Domain profile."},"defaultValue":"0"},"WindowsFirewallPrivateAllowUnicastResponse":{"type":"String","metadata":{"displayName":"Windows - Firewall: Private: Allow unicast response","description":"Specifies whether - Windows Firewall with Advanced Security permits the local computer to receive - unicast responses to its outgoing multicast or broadcast messages; for the - Private profile."},"defaultValue":"0"},"WindowsFirewallPublicAllowUnicastResponse":{"type":"String","metadata":{"displayName":"Windows - Firewall: Public: Allow unicast response","description":"Specifies whether - Windows Firewall with Advanced Security permits the local computer to receive - unicast responses to its outgoing multicast or broadcast messages; for the - Public profile."},"defaultValue":"1"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_WindowsFirewallProperties","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Windows - Firewall: Domain: Firewall state;ExpectedValue'', ''='', parameters(''WindowsFirewallDomainUseProfileSettings''), - '','', ''Windows Firewall: Domain: Outbound connections;ExpectedValue'', ''='', - parameters(''WindowsFirewallDomainBehaviorForOutboundConnections''), '','', - ''Windows Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue'', - ''='', parameters(''WindowsFirewallDomainApplyLocalConnectionSecurityRules''), - '','', ''Windows Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue'', - ''='', parameters(''WindowsFirewallDomainApplyLocalFirewallRules''), '','', - ''Windows Firewall: Domain: Settings: Display a notification;ExpectedValue'', - ''='', parameters(''WindowsFirewallDomainDisplayNotifications''), '','', ''Windows - Firewall: Private: Firewall state;ExpectedValue'', ''='', parameters(''WindowsFirewallPrivateUseProfileSettings''), - '','', ''Windows Firewall: Private: Outbound connections;ExpectedValue'', - ''='', parameters(''WindowsFirewallPrivateBehaviorForOutboundConnections''), - '','', ''Windows Firewall: Private: Settings: Apply local connection security - rules;ExpectedValue'', ''='', parameters(''WindowsFirewallPrivateApplyLocalConnectionSecurityRules''), - '','', ''Windows Firewall: Private: Settings: Apply local firewall rules;ExpectedValue'', - ''='', parameters(''WindowsFirewallPrivateApplyLocalFirewallRules''), '','', - ''Windows Firewall: Private: Settings: Display a notification;ExpectedValue'', - ''='', parameters(''WindowsFirewallPrivateDisplayNotifications''), '','', - ''Windows Firewall: Public: Firewall state;ExpectedValue'', ''='', parameters(''WindowsFirewallPublicUseProfileSettings''), - '','', ''Windows Firewall: Public: Outbound connections;ExpectedValue'', ''='', - parameters(''WindowsFirewallPublicBehaviorForOutboundConnections''), '','', - ''Windows Firewall: Public: Settings: Apply local connection security rules;ExpectedValue'', - ''='', parameters(''WindowsFirewallPublicApplyLocalConnectionSecurityRules''), - '','', ''Windows Firewall: Public: Settings: Apply local firewall rules;ExpectedValue'', - ''='', parameters(''WindowsFirewallPublicApplyLocalFirewallRules''), '','', - ''Windows Firewall: Public: Settings: Display a notification;ExpectedValue'', - ''='', parameters(''WindowsFirewallPublicDisplayNotifications''), '','', ''Windows - Firewall: Domain: Allow unicast response;ExpectedValue'', ''='', parameters(''WindowsFirewallDomainAllowUnicastResponse''), - '','', ''Windows Firewall: Private: Allow unicast response;ExpectedValue'', - ''='', parameters(''WindowsFirewallPrivateAllowUnicastResponse''), '','', - ''Windows Firewall: Public: Allow unicast response;ExpectedValue'', ''='', - parameters(''WindowsFirewallPublicAllowUnicastResponse'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_WindowsFirewallProperties"},"WindowsFirewallDomainUseProfileSettings":{"value":"[parameters(''WindowsFirewallDomainUseProfileSettings'')]"},"WindowsFirewallDomainBehaviorForOutboundConnections":{"value":"[parameters(''WindowsFirewallDomainBehaviorForOutboundConnections'')]"},"WindowsFirewallDomainApplyLocalConnectionSecurityRules":{"value":"[parameters(''WindowsFirewallDomainApplyLocalConnectionSecurityRules'')]"},"WindowsFirewallDomainApplyLocalFirewallRules":{"value":"[parameters(''WindowsFirewallDomainApplyLocalFirewallRules'')]"},"WindowsFirewallDomainDisplayNotifications":{"value":"[parameters(''WindowsFirewallDomainDisplayNotifications'')]"},"WindowsFirewallPrivateUseProfileSettings":{"value":"[parameters(''WindowsFirewallPrivateUseProfileSettings'')]"},"WindowsFirewallPrivateBehaviorForOutboundConnections":{"value":"[parameters(''WindowsFirewallPrivateBehaviorForOutboundConnections'')]"},"WindowsFirewallPrivateApplyLocalConnectionSecurityRules":{"value":"[parameters(''WindowsFirewallPrivateApplyLocalConnectionSecurityRules'')]"},"WindowsFirewallPrivateApplyLocalFirewallRules":{"value":"[parameters(''WindowsFirewallPrivateApplyLocalFirewallRules'')]"},"WindowsFirewallPrivateDisplayNotifications":{"value":"[parameters(''WindowsFirewallPrivateDisplayNotifications'')]"},"WindowsFirewallPublicUseProfileSettings":{"value":"[parameters(''WindowsFirewallPublicUseProfileSettings'')]"},"WindowsFirewallPublicBehaviorForOutboundConnections":{"value":"[parameters(''WindowsFirewallPublicBehaviorForOutboundConnections'')]"},"WindowsFirewallPublicApplyLocalConnectionSecurityRules":{"value":"[parameters(''WindowsFirewallPublicApplyLocalConnectionSecurityRules'')]"},"WindowsFirewallPublicApplyLocalFirewallRules":{"value":"[parameters(''WindowsFirewallPublicApplyLocalFirewallRules'')]"},"WindowsFirewallPublicDisplayNotifications":{"value":"[parameters(''WindowsFirewallPublicDisplayNotifications'')]"},"WindowsFirewallDomainAllowUnicastResponse":{"value":"[parameters(''WindowsFirewallDomainAllowUnicastResponse'')]"},"WindowsFirewallPrivateAllowUnicastResponse":{"value":"[parameters(''WindowsFirewallPrivateAllowUnicastResponse'')]"},"WindowsFirewallPublicAllowUnicastResponse":{"value":"[parameters(''WindowsFirewallPublicAllowUnicastResponse'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"WindowsFirewallDomainUseProfileSettings":{"type":"string"},"WindowsFirewallDomainBehaviorForOutboundConnections":{"type":"string"},"WindowsFirewallDomainApplyLocalConnectionSecurityRules":{"type":"string"},"WindowsFirewallDomainApplyLocalFirewallRules":{"type":"string"},"WindowsFirewallDomainDisplayNotifications":{"type":"string"},"WindowsFirewallPrivateUseProfileSettings":{"type":"string"},"WindowsFirewallPrivateBehaviorForOutboundConnections":{"type":"string"},"WindowsFirewallPrivateApplyLocalConnectionSecurityRules":{"type":"string"},"WindowsFirewallPrivateApplyLocalFirewallRules":{"type":"string"},"WindowsFirewallPrivateDisplayNotifications":{"type":"string"},"WindowsFirewallPublicUseProfileSettings":{"type":"string"},"WindowsFirewallPublicBehaviorForOutboundConnections":{"type":"string"},"WindowsFirewallPublicApplyLocalConnectionSecurityRules":{"type":"string"},"WindowsFirewallPublicApplyLocalFirewallRules":{"type":"string"},"WindowsFirewallPublicDisplayNotifications":{"type":"string"},"WindowsFirewallDomainAllowUnicastResponse":{"type":"string"},"WindowsFirewallPrivateAllowUnicastResponse":{"type":"string"},"WindowsFirewallPublicAllowUnicastResponse":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Windows - Firewall: Domain: Firewall state;ExpectedValue","value":"[parameters(''WindowsFirewallDomainUseProfileSettings'')]"},{"name":"Windows - Firewall: Domain: Outbound connections;ExpectedValue","value":"[parameters(''WindowsFirewallDomainBehaviorForOutboundConnections'')]"},{"name":"Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue","value":"[parameters(''WindowsFirewallDomainApplyLocalConnectionSecurityRules'')]"},{"name":"Windows - Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue","value":"[parameters(''WindowsFirewallDomainApplyLocalFirewallRules'')]"},{"name":"Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue","value":"[parameters(''WindowsFirewallDomainDisplayNotifications'')]"},{"name":"Windows - Firewall: Private: Firewall state;ExpectedValue","value":"[parameters(''WindowsFirewallPrivateUseProfileSettings'')]"},{"name":"Windows - Firewall: Private: Outbound connections;ExpectedValue","value":"[parameters(''WindowsFirewallPrivateBehaviorForOutboundConnections'')]"},{"name":"Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue","value":"[parameters(''WindowsFirewallPrivateApplyLocalConnectionSecurityRules'')]"},{"name":"Windows - Firewall: Private: Settings: Apply local firewall rules;ExpectedValue","value":"[parameters(''WindowsFirewallPrivateApplyLocalFirewallRules'')]"},{"name":"Windows - Firewall: Private: Settings: Display a notification;ExpectedValue","value":"[parameters(''WindowsFirewallPrivateDisplayNotifications'')]"},{"name":"Windows - Firewall: Public: Firewall state;ExpectedValue","value":"[parameters(''WindowsFirewallPublicUseProfileSettings'')]"},{"name":"Windows - Firewall: Public: Outbound connections;ExpectedValue","value":"[parameters(''WindowsFirewallPublicBehaviorForOutboundConnections'')]"},{"name":"Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue","value":"[parameters(''WindowsFirewallPublicApplyLocalConnectionSecurityRules'')]"},{"name":"Windows - Firewall: Public: Settings: Apply local firewall rules;ExpectedValue","value":"[parameters(''WindowsFirewallPublicApplyLocalFirewallRules'')]"},{"name":"Windows - Firewall: Public: Settings: Display a notification;ExpectedValue","value":"[parameters(''WindowsFirewallPublicDisplayNotifications'')]"},{"name":"Windows - Firewall: Domain: Allow unicast response;ExpectedValue","value":"[parameters(''WindowsFirewallDomainAllowUnicastResponse'')]"},{"name":"Windows - Firewall: Private: Allow unicast response;ExpectedValue","value":"[parameters(''WindowsFirewallPrivateAllowUnicastResponse'')]"},{"name":"Windows - Firewall: Public: Allow unicast response;ExpectedValue","value":"[parameters(''WindowsFirewallPublicAllowUnicastResponse'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Windows - Firewall: Domain: Firewall state;ExpectedValue","value":"[parameters(''WindowsFirewallDomainUseProfileSettings'')]"},{"name":"Windows - Firewall: Domain: Outbound connections;ExpectedValue","value":"[parameters(''WindowsFirewallDomainBehaviorForOutboundConnections'')]"},{"name":"Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue","value":"[parameters(''WindowsFirewallDomainApplyLocalConnectionSecurityRules'')]"},{"name":"Windows - Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue","value":"[parameters(''WindowsFirewallDomainApplyLocalFirewallRules'')]"},{"name":"Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue","value":"[parameters(''WindowsFirewallDomainDisplayNotifications'')]"},{"name":"Windows - Firewall: Private: Firewall state;ExpectedValue","value":"[parameters(''WindowsFirewallPrivateUseProfileSettings'')]"},{"name":"Windows - Firewall: Private: Outbound connections;ExpectedValue","value":"[parameters(''WindowsFirewallPrivateBehaviorForOutboundConnections'')]"},{"name":"Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue","value":"[parameters(''WindowsFirewallPrivateApplyLocalConnectionSecurityRules'')]"},{"name":"Windows - Firewall: Private: Settings: Apply local firewall rules;ExpectedValue","value":"[parameters(''WindowsFirewallPrivateApplyLocalFirewallRules'')]"},{"name":"Windows - Firewall: Private: Settings: Display a notification;ExpectedValue","value":"[parameters(''WindowsFirewallPrivateDisplayNotifications'')]"},{"name":"Windows - Firewall: Public: Firewall state;ExpectedValue","value":"[parameters(''WindowsFirewallPublicUseProfileSettings'')]"},{"name":"Windows - Firewall: Public: Outbound connections;ExpectedValue","value":"[parameters(''WindowsFirewallPublicBehaviorForOutboundConnections'')]"},{"name":"Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue","value":"[parameters(''WindowsFirewallPublicApplyLocalConnectionSecurityRules'')]"},{"name":"Windows - Firewall: Public: Settings: Apply local firewall rules;ExpectedValue","value":"[parameters(''WindowsFirewallPublicApplyLocalFirewallRules'')]"},{"name":"Windows - Firewall: Public: Settings: Display a notification;ExpectedValue","value":"[parameters(''WindowsFirewallPublicDisplayNotifications'')]"},{"name":"Windows - Firewall: Domain: Allow unicast response;ExpectedValue","value":"[parameters(''WindowsFirewallDomainAllowUnicastResponse'')]"},{"name":"Windows - Firewall: Private: Allow unicast response;ExpectedValue","value":"[parameters(''WindowsFirewallPrivateAllowUnicastResponse'')]"},{"name":"Windows - Firewall: Public: Allow unicast response;ExpectedValue","value":"[parameters(''WindowsFirewallPublicAllowUnicastResponse'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/909c958d-1b99-4c74-b88f-46a5c5bc34f9","type":"Microsoft.Authorization/policyDefinitions","name":"909c958d-1b99-4c74-b88f-46a5c5bc34f9"},{"properties":{"displayName":"Microsoft - Managed Control 1133 - Protection Of Audit Information | Cryptographic Protection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1133"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/90b60a09-133d-45bc-86ef-b206a6134bbe","type":"Microsoft.Authorization/policyDefinitions","name":"90b60a09-133d-45bc-86ef-b206a6134bbe"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs that do not have the specified Windows - PowerShell modules installed","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have the specified Windows PowerShell modules installed. It also - creates a system-assigned managed identity and deploys the VM extension for - Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"Modules":{"type":"String","metadata":{"displayName":"PowerShell - Modules","description":"A semicolon-separated list of the names of the PowerShell - modules that should be installed. You may also specify a specific version - of a module that should be installed by including a comma after the module - name, followed by the desired version. e.g. PSDscResources; SqlServerDsc, - 12.0.0.0; ComputerManagementDsc, 6.1.0.0"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsPowerShellModules","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[PowerShellModules]PowerShellModules1;Modules'', - ''='', parameters(''Modules'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WindowsPowerShellModules"},"Modules":{"value":"[parameters(''Modules'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"Modules":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[PowerShellModules]PowerShellModules1;Modules","value":"[parameters(''Modules'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[PowerShellModules]PowerShellModules1;Modules","value":"[parameters(''Modules'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/90ba2ee7-4ca8-4673-84d1-c851c50d3baf","type":"Microsoft.Authorization/policyDefinitions","name":"90ba2ee7-4ca8-4673-84d1-c851c50d3baf"},{"properties":{"displayName":"Microsoft - Managed Control 1140 - Audit Generation | System-Wide / Time-Correlated Audit - Trail","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1140"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/90d8b8ad-8ee3-4db7-913f-2a53fcff5316","type":"Microsoft.Authorization/policyDefinitions","name":"90d8b8ad-8ee3-4db7-913f-2a53fcff5316"},{"properties":{"displayName":"Microsoft - Managed Control 1355 - Incident Response Training","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1355"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/90e01f69-3074-4de8-ade7-0fef3e7d83e0","type":"Microsoft.Authorization/policyDefinitions","name":"90e01f69-3074-4de8-ade7-0fef3e7d83e0"},{"properties":{"displayName":"Microsoft - Managed Control 1657 - Secure Name / Address Resolution Service (Authoritative - Source)","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1657"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/90f01329-a100-43c2-af31-098996135d2b","type":"Microsoft.Authorization/policyDefinitions","name":"90f01329-a100-43c2-af31-098996135d2b"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''Windows Components''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Windows Components''. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_WindowsComponents","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9178b430-2295-406e-bb28-f6a7a2a2f897","type":"Microsoft.Authorization/policyDefinitions","name":"9178b430-2295-406e-bb28-f6a7a2a2f897"},{"properties":{"displayName":"Microsoft - Managed Control 1069 - Wireless Access | Authentication And Encryption","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1069"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/91c97b44-791e-46e9-bad7-ab7c4949edbb","type":"Microsoft.Authorization/policyDefinitions","name":"91c97b44-791e-46e9-bad7-ab7c4949edbb"},{"properties":{"displayName":"[Preview]: - Deploy Dependency agent to Windows Azure Arc machines","policyType":"BuiltIn","mode":"Indexed","description":"This - policy deploys the Dependency agent to Windows Azure Arc machines if the agent - isn''t installed.","metadata":{"version":"1.0.1-preview","category":"Monitoring","preview":true},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.HybridCompute/machines/extensions","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"existenceCondition":{"allOf":[{"field":"Microsoft.HybridCompute/machines/extensions/type","equals":"DependencyAgentWindows"},{"field":"Microsoft.HybridCompute/machines/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"},{"field":"Microsoft.HybridCompute/machines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"variables":{"DaExtensionName":"DependencyAgent","DaExtensionType":"DependencyAgentWindows"},"resources":[{"type":"Microsoft.HybridCompute/machines","apiVersion":"2020-03-11-preview","name":"[parameters(''vmName'')]","location":"[parameters(''location'')]","resources":[{"type":"extensions","apiVersion":"2020-03-11-preview","name":"[variables(''DaExtensionName'')]","location":"[parameters(''location'')]","dependsOn":["[concat(''Microsoft.HybridCompute/machines/'', - parameters(''vmName''))]"],"properties":{"publisher":"Microsoft.Azure.Monitoring.DependencyAgent","type":"[variables(''DaExtensionType'')]","autoUpgradeMinorVersion":true,"settings":{}}}]}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - DA extension for VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/91cb9edd-cd92-4d2f-b2f2-bdd8d065a3d4","type":"Microsoft.Authorization/policyDefinitions","name":"91cb9edd-cd92-4d2f-b2f2-bdd8d065a3d4"},{"properties":{"displayName":"Microsoft - Managed Control 1370 - Incident Monitoring | Automated Tracking / Data Collection - / Analysis","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1370"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/924e1b2d-c502-478f-bfdb-a7e09a0d5c01","type":"Microsoft.Authorization/policyDefinitions","name":"924e1b2d-c502-478f-bfdb-a7e09a0d5c01"},{"properties":{"displayName":"MFA - should be enabled accounts with write permissions on your subscription","policyType":"BuiltIn","mode":"All","description":"Multi-Factor - Authentication (MFA) should be enabled for all subscription accounts with - write privileges to prevent a breach of accounts or resources.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"EnableMFAForWritePermissions","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","type":"Microsoft.Authorization/policyDefinitions","name":"9297c21d-2ed6-4474-b48f-163f75654ce3"},{"properties":{"displayName":"Microsoft - Managed Control 1290 - Information System Backup","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1290"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/92f85ce9-17b7-49ea-85ee-ea7271ea6b82","type":"Microsoft.Authorization/policyDefinitions","name":"92f85ce9-17b7-49ea-85ee-ea7271ea6b82"},{"properties":{"displayName":"Show - audit results from Windows VMs that contain certificates expiring within the - specified number of days","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that contain certificates expiring within - the specified number of days. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"CertificateExpiration","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9328f27e-611e-44a7-a244-39109d7d35ab","type":"Microsoft.Authorization/policyDefinitions","name":"9328f27e-611e-44a7-a244-39109d7d35ab"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs in which the Administrators group does - not contain all of the specified members","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - in which the Administrators group does not contain all of the specified members. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"MembersToInclude":{"type":"String","metadata":{"displayName":"Members - to include","description":"A semicolon-separated list of members that should - be included in the Administrators local group. Ex: Administrator; myUser1; - myUser2"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AdministratorsGroupMembersToInclude","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[LocalGroup]AdministratorsGroup;MembersToInclude'', - ''='', parameters(''MembersToInclude'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AdministratorsGroupMembersToInclude"},"MembersToInclude":{"value":"[parameters(''MembersToInclude'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"MembersToInclude":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[LocalGroup]AdministratorsGroup;MembersToInclude","value":"[parameters(''MembersToInclude'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[LocalGroup]AdministratorsGroup;MembersToInclude","value":"[parameters(''MembersToInclude'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/93507a81-10a4-4af0-9ee2-34cf25a96e98","type":"Microsoft.Authorization/policyDefinitions","name":"93507a81-10a4-4af0-9ee2-34cf25a96e98"},{"properties":{"displayName":"Microsoft - Managed Control 1575 - Acquisition Process | Functional Properties Of Security - Controls","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1575"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/93e1bb73-1b08-4dbe-9c62-8e2e92e7ec41","type":"Microsoft.Authorization/policyDefinitions","name":"93e1bb73-1b08-4dbe-9c62-8e2e92e7ec41"},{"properties":{"displayName":"Microsoft - Managed Control 1674 - Flaw Remediation | Time To Remediate Flaws / Benchmarks - For Corrective Actions","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1674"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/93e9e233-dd0a-4bde-aea5-1371bce0e002","type":"Microsoft.Authorization/policyDefinitions","name":"93e9e233-dd0a-4bde-aea5-1371bce0e002"},{"properties":{"displayName":"Microsoft - Managed Control 1297 - Information System Recovery And Reconstitution | Restore - Within Time Period","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1297"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/93fd8af1-c161-4bae-9ba9-f62731f76439","type":"Microsoft.Authorization/policyDefinitions","name":"93fd8af1-c161-4bae-9ba9-f62731f76439"},{"properties":{"displayName":"Microsoft - Managed Control 1284 - Telecommunications Services | Provider Contingency - Plan","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1284"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/942b3e97-6ae3-410e-a794-c9c999b97c0b","type":"Microsoft.Authorization/policyDefinitions","name":"942b3e97-6ae3-410e-a794-c9c999b97c0b"},{"properties":{"displayName":"Microsoft - Managed Control 1379 - Incident Response Plan","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1379"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9442dd2c-a07f-46cd-b55a-553b66ba47ca","type":"Microsoft.Authorization/policyDefinitions","name":"9442dd2c-a07f-46cd-b55a-553b66ba47ca"},{"properties":{"displayName":"Microsoft - Managed Control 1371 - Incident Reporting","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1371"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9447f354-2c85-4700-93b3-ecdc6cb6a417","type":"Microsoft.Authorization/policyDefinitions","name":"9447f354-2c85-4700-93b3-ecdc6cb6a417"},{"properties":{"displayName":"[Deprecated]: - Allow resource creation only in European data centers","policyType":"BuiltIn","mode":"Indexed","description":"Allows - resource creation in the following locations only: North Europe, West Europe","metadata":{"version":"1.0.0-deprecated","category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"location","in":["northeurope","westeurope"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94c19f19-8192-48cd-a11b-e37099d3e36b","type":"Microsoft.Authorization/policyDefinitions","name":"94c19f19-8192-48cd-a11b-e37099d3e36b"},{"properties":{"displayName":"Microsoft - Managed Control 1526 - Access Agreements","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1526"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/953e6261-a05a-44fd-8246-000e1a3edbb9","type":"Microsoft.Authorization/policyDefinitions","name":"953e6261-a05a-44fd-8246-000e1a3edbb9"},{"properties":{"displayName":"Authentication - should be enabled on your web app","policyType":"BuiltIn","mode":"Indexed","description":"Azure - App Service Authentication is a feature that can prevent anonymous HTTP requests - from reaching the web app, or authenticate those that have tokens before they - reach the web app","metadata":{"version":"1.0.0","category":"App Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/siteAuthEnabled","equals":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/95bccee9-a7f8-4bec-9ee9-62c3473701fc","type":"Microsoft.Authorization/policyDefinitions","name":"95bccee9-a7f8-4bec-9ee9-62c3473701fc"},{"properties":{"displayName":"Microsoft - Managed Control 1163 - Continuous Monitoring","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1163"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/961663a1-8a91-4e59-b6f5-1eee57c0f49c","type":"Microsoft.Authorization/policyDefinitions","name":"961663a1-8a91-4e59-b6f5-1eee57c0f49c"},{"properties":{"displayName":"Require - a tag on resource groups","policyType":"BuiltIn","mode":"All","description":"Enforces - existence of a tag on resource groups.","metadata":{"version":"1.0.0","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Resources/subscriptions/resourceGroups"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/96670d01-0a4d-4649-9c89-2d3abc0a5025","type":"Microsoft.Authorization/policyDefinitions","name":"96670d01-0a4d-4649-9c89-2d3abc0a5025"},{"properties":{"displayName":"Microsoft - Managed Control 1717 - Software, Firmware, And Information Integrity | Binary - Or Machine Executable Code","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1717"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/967773fc-d9ab-4a4e-8ff6-f5e9e3f5dbef","type":"Microsoft.Authorization/policyDefinitions","name":"967773fc-d9ab-4a4e-8ff6-f5e9e3f5dbef"},{"properties":{"displayName":"[Deprecated]: - Advanced data security settings for SQL server should contain an email address - to receive security alerts","policyType":"BuiltIn","mode":"Indexed","description":"Ensure - that an email address is provided for the ''Send alerts to'' field in the - Advanced Data Security server settings. This email address receives alert - notifications when anomalous activities are detected on SQL servers.","metadata":{"version":"1.0.0-deprecated","category":"SQL","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"Disabled"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/securityAlertPolicies","name":"default","existenceCondition":{"field":"Microsoft.Sql/servers/securityAlertPolicies/emailAddresses[*]","notEquals":""}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9677b740-f641-4f3c-b9c5-466005c85278","type":"Microsoft.Authorization/policyDefinitions","name":"9677b740-f641-4f3c-b9c5-466005c85278"},{"properties":{"displayName":"App - Configuration should use a customer managed key","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any App Configuration instance that does not use a customer - managed key.","metadata":{"version":"1.0.0","category":"App Configuration"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.AppConfiguration/configurationStores"},{"field":"Microsoft.AppConfiguration/configurationStores/encryption.keyVaultProperties.keyIdentifier","exists":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/967a4b4b-2da9-43c1-b7d0-f98d0d74d0b1","type":"Microsoft.Authorization/policyDefinitions","name":"967a4b4b-2da9-43c1-b7d0-f98d0d74d0b1"},{"properties":{"displayName":"Microsoft - Managed Control 1453 - Physical Access Control","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1453"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9693b564-3008-42bc-9d5d-9c7fe198c011","type":"Microsoft.Authorization/policyDefinitions","name":"9693b564-3008-42bc-9d5d-9c7fe198c011"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''Administrative Templates - - MSS (Legacy)''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Administrative Templates - MSS (Legacy)''. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.1","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_AdminstrativeTemplatesMSSLegacy","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/97646672-5efa-4622-9b54-740270ad60bf","type":"Microsoft.Authorization/policyDefinitions","name":"97646672-5efa-4622-9b54-740270ad60bf"},{"properties":{"displayName":"Microsoft - Managed Control 1607 - Developer Security Testing And Evaluation | Dynamic - Code Analysis","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1607"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/976a74cf-b192-4d35-8cab-2068f272addb","type":"Microsoft.Authorization/policyDefinitions","name":"976a74cf-b192-4d35-8cab-2068f272addb"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''System Audit Policies - - Policy Change''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''System Audit Policies - - Policy Change''. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"AuditAuthenticationPolicyChange":{"type":"String","metadata":{"displayName":"Audit - Authentication Policy Change","description":"Specifies whether audit events - are generated when changes are made to authentication policy. This setting - is useful for tracking changes in domain-level and forest-level trust and - privileges that are granted to user accounts or groups."},"allowedValues":["No - Auditing","Success","Failure","Success and Failure"],"defaultValue":"Success"},"AuditAuthorizationPolicyChange":{"type":"String","metadata":{"displayName":"Audit - Authorization Policy Change","description":"Specifies whether audit events - are generated for assignment and removal of user rights in user right policies, - changes in security token object permission, resource attributes changes and - Central Access Policy changes for file system objects."},"allowedValues":["No - Auditing","Success","Failure","Success and Failure"],"defaultValue":"No Auditing"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesPolicyChange","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Audit - Authentication Policy Change;ExpectedValue'', ''='', parameters(''AuditAuthenticationPolicyChange''), - '','', ''Audit Authorization Policy Change;ExpectedValue'', ''='', parameters(''AuditAuthorizationPolicyChange'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SystemAuditPoliciesPolicyChange"},"AuditAuthenticationPolicyChange":{"value":"[parameters(''AuditAuthenticationPolicyChange'')]"},"AuditAuthorizationPolicyChange":{"value":"[parameters(''AuditAuthorizationPolicyChange'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"AuditAuthenticationPolicyChange":{"type":"string"},"AuditAuthorizationPolicyChange":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit - Authentication Policy Change;ExpectedValue","value":"[parameters(''AuditAuthenticationPolicyChange'')]"},{"name":"Audit - Authorization Policy Change;ExpectedValue","value":"[parameters(''AuditAuthorizationPolicyChange'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit - Authentication Policy Change;ExpectedValue","value":"[parameters(''AuditAuthenticationPolicyChange'')]"},{"name":"Audit - Authorization Policy Change;ExpectedValue","value":"[parameters(''AuditAuthorizationPolicyChange'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/97b595c8-fd10-400e-8543-28e2b9138b13","type":"Microsoft.Authorization/policyDefinitions","name":"97b595c8-fd10-400e-8543-28e2b9138b13"},{"properties":{"displayName":"Microsoft - Managed Control 1136 - Audit Record Retention","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1136"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/97ed5bac-a92f-4f6d-a8ed-dc094723597c","type":"Microsoft.Authorization/policyDefinitions","name":"97ed5bac-a92f-4f6d-a8ed-dc094723597c"},{"properties":{"displayName":"Microsoft - Managed Control 1378 - Incident Response Plan","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1378"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/97fceb70-6983-42d0-9331-18ad8253184d","type":"Microsoft.Authorization/policyDefinitions","name":"97fceb70-6983-42d0-9331-18ad8253184d"},{"properties":{"displayName":"Azure - Event Grid domains should use private links","policyType":"BuiltIn","mode":"Indexed","description":"Audit - Azure Event Grid domains that do not have at least one approved private endpoint - connection. Clients in a virtual network can securely access resources that - have private endpoint connections via private links. For more information, - visit https://aka.ms/privateendpoints.","metadata":{"version":"1.0.0","category":"Event - Grid"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventGrid/domains"},{"count":{"field":"Microsoft.EventGrid/domains/privateEndpointConnections[*]","where":{"field":"Microsoft.EventGrid/domains/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","type":"Microsoft.Authorization/policyDefinitions","name":"9830b652-8523-49cc-b1b3-e17dce1127ca"},{"properties":{"displayName":"[Deprecated]: - Allow resource creation only in United States data centers","policyType":"BuiltIn","mode":"Indexed","description":"Allows - resource creation in the following locations only: Central US, East US, East - US2, North Central US, South Central US, West US","metadata":{"version":"1.0.0-deprecated","category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"location","in":["centralus","eastus","eastus2","northcentralus","southcentralus","westus"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/983211ba-f348-4758-983b-21fa29294869","type":"Microsoft.Authorization/policyDefinitions","name":"983211ba-f348-4758-983b-21fa29294869"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''Administrative Templates - - Network''","policyType":"BuiltIn","mode":"Indexed","description":"This policy - creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Administrative Templates - - Network''. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.1.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"EnableInsecureGuestLogons":{"type":"String","metadata":{"displayName":"Enable - insecure guest logons","description":"Specifies whether the SMB client will - allow insecure guest logons to an SMB server."},"defaultValue":"0"},"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain":{"type":"String","metadata":{"displayName":"Allow - simultaneous connections to the Internet or a Windows Domain","description":"Specify - whether to prevent computers from connecting to both a domain based network - and a non-domain based network at the same time. A value of 0 allows simultaneous - connections, and a value of 1 blocks them."},"defaultValue":"1"},"TurnOffMulticastNameResolution":{"type":"String","metadata":{"displayName":"Turn - off multicast name resolution","description":"Specifies whether LLMNR, a secondary - name resolution protocol that transmits using multicast over a local subnet - link on a single subnet, is enabled."},"defaultValue":"1"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_AdministrativeTemplatesNetwork","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Enable - insecure guest logons;ExpectedValue'', ''='', parameters(''EnableInsecureGuestLogons''), - '','', ''Minimize the number of simultaneous connections to the Internet or - a Windows Domain;ExpectedValue'', ''='', parameters(''AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain''), - '','', ''Turn off multicast name resolution;ExpectedValue'', ''='', parameters(''TurnOffMulticastNameResolution'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_AdministrativeTemplatesNetwork"},"EnableInsecureGuestLogons":{"value":"[parameters(''EnableInsecureGuestLogons'')]"},"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain":{"value":"[parameters(''AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain'')]"},"TurnOffMulticastNameResolution":{"value":"[parameters(''TurnOffMulticastNameResolution'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"EnableInsecureGuestLogons":{"type":"string"},"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain":{"type":"string"},"TurnOffMulticastNameResolution":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Enable - insecure guest logons;ExpectedValue","value":"[parameters(''EnableInsecureGuestLogons'')]"},{"name":"Minimize - the number of simultaneous connections to the Internet or a Windows Domain;ExpectedValue","value":"[parameters(''AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain'')]"},{"name":"Turn - off multicast name resolution;ExpectedValue","value":"[parameters(''TurnOffMulticastNameResolution'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Enable - insecure guest logons;ExpectedValue","value":"[parameters(''EnableInsecureGuestLogons'')]"},{"name":"Minimize - the number of simultaneous connections to the Internet or a Windows Domain;ExpectedValue","value":"[parameters(''AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain'')]"},{"name":"Turn - off multicast name resolution;ExpectedValue","value":"[parameters(''TurnOffMulticastNameResolution'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/985285b7-b97a-419c-8d48-c88cc934c8d8","type":"Microsoft.Authorization/policyDefinitions","name":"985285b7-b97a-419c-8d48-c88cc934c8d8"},{"properties":{"displayName":"Microsoft - Managed Control 1076 - Use Of External Information Systems","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1076"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/98a4bd5f-6436-46d4-ad00-930b5b1dfed4","type":"Microsoft.Authorization/policyDefinitions","name":"98a4bd5f-6436-46d4-ad00-930b5b1dfed4"},{"properties":{"displayName":"Ensure - that ''HTTP Version'' is the latest, if used to run the Api app","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for HTTP either due to security flaws or to include - additional functionality. Using the latest HTTP version for web apps to take - advantage of security fixes, if any, and/or new functionalities of the newer - version.","metadata":{"version":"1.0.0","category":"App Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/web.http20Enabled","equals":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/991310cd-e9f3-47bc-b7b6-f57b557d07db","type":"Microsoft.Authorization/policyDefinitions","name":"991310cd-e9f3-47bc-b7b6-f57b557d07db"},{"properties":{"displayName":"Microsoft - Managed Control 1102 - Audit Events","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1102"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9943c16a-c54c-4b4a-ad28-bfd938cdbf57","type":"Microsoft.Authorization/policyDefinitions","name":"9943c16a-c54c-4b4a-ad28-bfd938cdbf57"},{"properties":{"displayName":"Microsoft - Managed Control 1300 - Identification And Authentication (Organizational Users)","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1300"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/99deec7d-5526-472e-b07c-3645a792026a","type":"Microsoft.Authorization/policyDefinitions","name":"99deec7d-5526-472e-b07c-3645a792026a"},{"properties":{"displayName":"Microsoft - Managed Control 1036 - Least Privilege | Non-Privileged Access For Nonsecurity - Functions","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1036"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9a16d673-8cf0-4dcf-b1d5-9b3e114fef71","type":"Microsoft.Authorization/policyDefinitions","name":"9a16d673-8cf0-4dcf-b1d5-9b3e114fef71"},{"properties":{"displayName":"FTPS - only should be required in your API App","policyType":"BuiltIn","mode":"Indexed","description":"Enable - FTPS enforcement for enhanced security","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/ftpsState","equals":"FtpsOnly"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","type":"Microsoft.Authorization/policyDefinitions","name":"9a1b8c48-453a-4044-86c3-d8bfd823e4f5"},{"properties":{"displayName":"Microsoft - Managed Control 1021 - Account Management | Restrictions On Use Of Shared - / Group Accounts","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1021"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9a3eb0a3-428d-4669-baff-20a14eb4b551","type":"Microsoft.Authorization/policyDefinitions","name":"9a3eb0a3-428d-4669-baff-20a14eb4b551"},{"properties":{"displayName":"Deploy - Diagnostic Settings for Azure SQL Database to Event Hub","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Azure SQL Database to stream to a regional Event - Hub on any Azure SQL Database which is missing this diagnostic settings is - created or updated.","metadata":{"version":"1.1.0","category":"SQL"},"parameters":{"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"},"defaultValue":"setbypolicy"},"eventHubRuleId":{"type":"String","metadata":{"displayName":"Event - Hub Authorization Rule Id","description":"The Event Hub authorization rule - Id for Azure Diagnostics. The authorization rule needs to be at Event Hub - namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}","strongType":"Microsoft.EventHub/Namespaces/AuthorizationRules","assignPermissions":true}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Event Hub - - True or False"},"allowedValues":["True","False"],"defaultValue":"False"},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Event Hub - True - or False"},"allowedValues":["True","False"],"defaultValue":"True"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers/databases"},"then":{"effect":"DeployIfNotExists","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"location":{"type":"string"},"eventHubRuleId":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"resources":[{"type":"Microsoft.Sql/servers/databases/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''fullName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"eventHubAuthorizationRuleId":"[parameters(''eventHubRuleId'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"QueryStoreRuntimeStatistics","enabled":"[parameters(''logsEnabled'')]"},{"category":"QueryStoreWaitStatistics","enabled":"[parameters(''logsEnabled'')]"},{"category":"Errors","enabled":"[parameters(''logsEnabled'')]"},{"category":"DatabaseWaitStatistics","enabled":"[parameters(''logsEnabled'')]"},{"category":"Blocks","enabled":"[parameters(''logsEnabled'')]"},{"category":"SQLInsights","enabled":"[parameters(''logsEnabled'')]"},{"category":"SQLSecurityAuditEvents","enabled":"[parameters(''logsEnabled'')]"},{"category":"Timeouts","enabled":"[parameters(''logsEnabled'')]"},{"category":"AutomaticTuning","enabled":"[parameters(''logsEnabled'')]"},{"category":"Deadlocks","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - diagnostic settings for '', parameters(''fullName''))]"}}},"parameters":{"location":{"value":"[field(''location'')]"},"fullName":{"value":"[field(''fullName'')]"},"eventHubRuleId":{"value":"[parameters(''eventHubRuleId'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9a7c7a7d-49e5-4213-bea8-6a502b6272e0","type":"Microsoft.Authorization/policyDefinitions","name":"9a7c7a7d-49e5-4213-bea8-6a502b6272e0"},{"properties":{"displayName":"Microsoft - Managed Control 1049 - System Use Notification","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1049"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9adf7ba7-900a-4f35-8d57-9f34aafc405c","type":"Microsoft.Authorization/policyDefinitions","name":"9adf7ba7-900a-4f35-8d57-9f34aafc405c"},{"properties":{"displayName":"Microsoft - Managed Control 1563 - Allocation Of Resources","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1563"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9afe2edf-232c-4fdf-8e6a-e867a5c525fd","type":"Microsoft.Authorization/policyDefinitions","name":"9afe2edf-232c-4fdf-8e6a-e867a5c525fd"},{"properties":{"displayName":"Microsoft - Managed Control 1462 - Monitoring Physical Access","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1462"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9b1f3a9a-13a1-4b40-8420-36bca6fd8c02","type":"Microsoft.Authorization/policyDefinitions","name":"9b1f3a9a-13a1-4b40-8420-36bca6fd8c02"},{"properties":{"displayName":"Microsoft - IaaSAntimalware extension should be deployed on Windows servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Windows server VM without Microsoft IaaSAntimalware extension - deployed.","metadata":{"version":"1.0.0","category":"Compute"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk"]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"IaaSAntimalware"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Security"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9b597639-28e4-48eb-b506-56b05d366257","type":"Microsoft.Authorization/policyDefinitions","name":"9b597639-28e4-48eb-b506-56b05d366257"},{"properties":{"displayName":"Microsoft - Managed Control 1236 - Software Usage Restrictions","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1236"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9ba3ed84-c768-4e18-b87c-34ef1aff1b57","type":"Microsoft.Authorization/policyDefinitions","name":"9ba3ed84-c768-4e18-b87c-34ef1aff1b57"},{"properties":{"displayName":"Microsoft - Managed Control 1525 - Personnel Transfer","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1525"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9be2f688-7a61-45e3-8230-e1ec93893f66","type":"Microsoft.Authorization/policyDefinitions","name":"9be2f688-7a61-45e3-8230-e1ec93893f66"},{"properties":{"displayName":"[Deprecated]: - Audit API Applications that are not using latest supported Java Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported Java version for the latest security classes. Using older - classes and types can make your application vulnerable.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestJava","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9bfe3727-0a17-471f-a2fe-eddd6b668745","type":"Microsoft.Authorization/policyDefinitions","name":"9bfe3727-0a17-471f-a2fe-eddd6b668745"},{"properties":{"displayName":"Microsoft - Managed Control 1138 - Audit Generation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1138"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9c284fc0-268a-4f29-af44-3c126674edb4","type":"Microsoft.Authorization/policyDefinitions","name":"9c284fc0-268a-4f29-af44-3c126674edb4"},{"properties":{"displayName":"Microsoft - Managed Control 1135 - Non-Repudiation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1135"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9c308b6b-2429-4b97-86cf-081b8e737b04","type":"Microsoft.Authorization/policyDefinitions","name":"9c308b6b-2429-4b97-86cf-081b8e737b04"},{"properties":{"displayName":"Microsoft - Managed Control 1489 - Location Of Information System Components","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1489"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9d0a794f-1444-4c96-9534-e35fc8c39c91","type":"Microsoft.Authorization/policyDefinitions","name":"9d0a794f-1444-4c96-9534-e35fc8c39c91"},{"properties":{"displayName":"Ensure - that ''Java version'' is the latest, if used as a part of the Function app","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for Java software either due to security flaws - or to include additional functionality. Using the latest Java version for - Function apps is recommended in order to take advantage of security fixes, - if any, and/or new functionalities of the latest version.","metadata":{"version":"1.0.1","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"JavaLatestVersion":{"type":"String","metadata":{"displayName":"Latest - Java version","description":"Latest supported Java version for App Services"},"defaultValue":"11"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","notContains":"JAVA"},{"field":"Microsoft.Web/sites/config/web.javaVersion","equals":""}]},{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","like":"[concat(''*'', - parameters(''JavaLatestVersion''))]"},{"field":"Microsoft.Web/sites/config/web.javaVersion","equals":""}]},{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","equals":""},{"field":"Microsoft.Web/sites/config/web.javaVersion","like":"[concat(parameters(''JavaLatestVersion''), - ''*'')]"}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","type":"Microsoft.Authorization/policyDefinitions","name":"9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc"},{"properties":{"displayName":"Microsoft - Managed Control 1322 - Authenticator Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1322"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9d1d971e-467e-4278-9633-c74c3d4fecc4","type":"Microsoft.Authorization/policyDefinitions","name":"9d1d971e-467e-4278-9633-c74c3d4fecc4"},{"properties":{"displayName":"[Preview]: - Deploy Log Analytics agent to Linux Azure Arc machines","policyType":"BuiltIn","mode":"Indexed","description":"This - policy deploys the Log Analytics agent to Linux Azure Arc machines if the - agent isn''t installed.","metadata":{"version":"1.0.0-preview","category":"Monitoring","preview":true},"parameters":{"logAnalytics":{"type":"String","metadata":{"displayName":"[Preview]: - Log Analytics workspace","description":"Specify the Log Analytics workspace - the agent should be connected to. If this workspace is outside of the scope - of the assignment you must manually grant ''Log Analytics Contributor'' permissions - (or similar) to the policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.HybridCompute/machines/extensions","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"existenceCondition":{"allOf":[{"field":"Microsoft.HybridCompute/machines/extensions/type","equals":"OmsAgentForLinux"},{"field":"Microsoft.HybridCompute/machines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"},{"field":"Microsoft.HybridCompute/machines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"}},"variables":{"vmExtensionName":"MMAExtension","vmExtensionPublisher":"Microsoft.EnterpriseCloud.Monitoring","vmExtensionType":"OmsAgentForLinux"},"resources":[{"name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","type":"Microsoft.HybridCompute/machines/extensions","location":"[parameters(''location'')]","apiVersion":"2019-12-12","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","settings":{"workspaceId":"[reference(parameters(''logAnalytics''), - ''2015-03-20'').customerId]","stopOnMultipleConnections":"true"},"protectedSettings":{"workspaceKey":"[listKeys(parameters(''logAnalytics''), - ''2015-03-20'').primarySharedKey]"}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9d2b61b4-1d14-4a63-be30-d4498e7ad2cf","type":"Microsoft.Authorization/policyDefinitions","name":"9d2b61b4-1d14-4a63-be30-d4498e7ad2cf"},{"properties":{"displayName":"Microsoft - Managed Control 1233 - Configuration Management Plan","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1233"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9d79001f-95fe-45d0-8736-f217e78c1f57","type":"Microsoft.Authorization/policyDefinitions","name":"9d79001f-95fe-45d0-8736-f217e78c1f57"},{"properties":{"displayName":"Microsoft - Managed Control 1305 - Identification And Authentication (Org. Users) | Group - Authentication","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1305"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9d9166a8-1722-4b8f-847c-2cf3f2618b3d","type":"Microsoft.Authorization/policyDefinitions","name":"9d9166a8-1722-4b8f-847c-2cf3f2618b3d"},{"properties":{"displayName":"Microsoft - Managed Control 1259 - Contingency Training","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1259"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9d9e18f7-bad9-4d30-8806-a0c9d5e26208","type":"Microsoft.Authorization/policyDefinitions","name":"9d9e18f7-bad9-4d30-8806-a0c9d5e26208"},{"properties":{"displayName":"Access - through Internet facing endpoint should be restricted","policyType":"BuiltIn","mode":"All","description":"Azure - Security center has identified some of your Network Security Groups'' inbound - rules to be too permissive. Inbound rules should not allow access from ''Any'' - or ''Internet'' ranges. This can potentially enable attackers to easily target - your resources.","metadata":{"version":"1.0.0","category":"Security Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"unprotectedNetworkEndpoint","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","type":"Microsoft.Authorization/policyDefinitions","name":"9daedab3-fb2d-461e-b861-71790eead4f6"},{"properties":{"displayName":"Microsoft - Managed Control 1500 - Rules Of Behavior","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1500"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9dd5b241-03cb-47d3-a5cd-4b89f9c53c92","type":"Microsoft.Authorization/policyDefinitions","name":"9dd5b241-03cb-47d3-a5cd-4b89f9c53c92"},{"properties":{"displayName":"Microsoft - Managed Control 1482 - Temperature And Humidity Controls | Monitoring With - Alarms / Notifications","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1482"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9df4277e-8c88-4d5c-9b1a-541d53d15d7b","type":"Microsoft.Authorization/policyDefinitions","name":"9df4277e-8c88-4d5c-9b1a-541d53d15d7b"},{"properties":{"displayName":"Microsoft - Managed Control 1553 - Vulnerability Scanning | Breadth / Depth Of Coverage","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Risk Assessment control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1553"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9e5225fe-cdfb-4fce-9aec-0fe20dd53b62","type":"Microsoft.Authorization/policyDefinitions","name":"9e5225fe-cdfb-4fce-9aec-0fe20dd53b62"},{"properties":{"displayName":"Microsoft - Managed Control 1490 - Security Planning Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1490"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9e61da80-0957-4892-b70c-609d5eaafb6b","type":"Microsoft.Authorization/policyDefinitions","name":"9e61da80-0957-4892-b70c-609d5eaafb6b"},{"properties":{"displayName":"Microsoft - Managed Control 1504 - Information Security Architecture","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1504"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9e7c35d0-12d4-4e0c-80a2-8a352537aefd","type":"Microsoft.Authorization/policyDefinitions","name":"9e7c35d0-12d4-4e0c-80a2-8a352537aefd"},{"properties":{"displayName":"Microsoft - Managed Control 1609 - Development Process, Standards, And Tools","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1609"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9e93fa71-42ac-41a7-b177-efbfdc53c69f","type":"Microsoft.Authorization/policyDefinitions","name":"9e93fa71-42ac-41a7-b177-efbfdc53c69f"},{"properties":{"displayName":"Append - a tag and its value from the resource group","policyType":"BuiltIn","mode":"Indexed","description":"Appends - the specified tag with its value from the resource group when any resource - which is missing this tag is created or updated. Does not modify the tags - of resources created before this policy was applied until those resources - are changed. New ''modify'' effect policies are available that support remediation - of tags on existing resources (see https://aka.ms/modifydoc).","metadata":{"version":"1.0.0","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}}},"policyRule":{"if":{"allOf":[{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''tagName'')]]","notEquals":""}]},"then":{"effect":"append","details":[{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[resourceGroup().tags[parameters(''tagName'')]]"}]}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9ea02ca2-71db-412d-8b00-7c7ca9fcd32d","type":"Microsoft.Authorization/policyDefinitions","name":"9ea02ca2-71db-412d-8b00-7c7ca9fcd32d"},{"properties":{"displayName":"Microsoft - Managed Control 1494 - System Security Plan","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1494"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9ed09d84-3311-4853-8b67-2b55dfa33d09","type":"Microsoft.Authorization/policyDefinitions","name":"9ed09d84-3311-4853-8b67-2b55dfa33d09"},{"properties":{"displayName":"Microsoft - Managed Control 1514 - Personnel Screening | Information With Special Protection - Measures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1514"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9ed5ca00-0e43-434e-a018-7aab91461ba7","type":"Microsoft.Authorization/policyDefinitions","name":"9ed5ca00-0e43-434e-a018-7aab91461ba7"},{"properties":{"displayName":"Microsoft - Managed Control 1187 - Configuration Change Control","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1187"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9f2b2f9e-4ba6-46c3-907f-66db138b6f85","type":"Microsoft.Authorization/policyDefinitions","name":"9f2b2f9e-4ba6-46c3-907f-66db138b6f85"},{"properties":{"displayName":"Show - audit results from Windows VMs that are not set to the specified time zone","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that are not set to the specified time zone. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsTimeZone","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9f658460-46b7-43af-8565-94fc0662be38","type":"Microsoft.Authorization/policyDefinitions","name":"9f658460-46b7-43af-8565-94fc0662be38"},{"properties":{"displayName":"Microsoft - Managed Control 1354 - Incident Response Training","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1354"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9fd92c17-163a-4511-bb96-bbb476449796","type":"Microsoft.Authorization/policyDefinitions","name":"9fd92c17-163a-4511-bb96-bbb476449796"},{"properties":{"displayName":"Show - audit results from Windows VMs on which the Log Analytics agent is not connected - as expected","policyType":"BuiltIn","mode":"All","description":"This policy - should only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines on which the Log Analytics agent is not connected to the - specified workspaces. For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsLogAnalyticsAgentConnection","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a030a57e-4639-4e8f-ade9-a92f33afe7ee","type":"Microsoft.Authorization/policyDefinitions","name":"a030a57e-4639-4e8f-ade9-a92f33afe7ee"},{"properties":{"displayName":"Microsoft - Managed Control 1145 - Security Assessments","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1145"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a0724970-9c75-4a64-a225-a28002953f28","type":"Microsoft.Authorization/policyDefinitions","name":"a0724970-9c75-4a64-a225-a28002953f28"},{"properties":{"displayName":"Allowed - resource types","policyType":"BuiltIn","mode":"Indexed","description":"This - policy enables you to specify the resource types that your organization can - deploy. Only resource types that support ''tags'' and ''location'' will be - affected by this policy. To restrict all resources please duplicate this policy - and change the ''mode'' to ''All''.","metadata":{"version":"1.0.0","category":"General"},"parameters":{"listOfResourceTypesAllowed":{"type":"Array","metadata":{"description":"The - list of resource types that can be deployed.","displayName":"Allowed resource - types","strongType":"resourceTypes"}}},"policyRule":{"if":{"not":{"field":"type","in":"[parameters(''listOfResourceTypesAllowed'')]"}},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c","type":"Microsoft.Authorization/policyDefinitions","name":"a08ec900-254a-4555-9bf5-e42af04b5c5c"},{"properties":{"displayName":"Microsoft - Managed Control 1245 - Contingency Plan","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1245"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a0e45314-57b8-4623-80cd-bbb561f59516","type":"Microsoft.Authorization/policyDefinitions","name":"a0e45314-57b8-4623-80cd-bbb561f59516"},{"properties":{"displayName":"Microsoft - Managed Control 1406 - Maintenance Tools | Inspect Media","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1406"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a0f5339c-9292-43aa-a0bc-d27c6b8e30aa","type":"Microsoft.Authorization/policyDefinitions","name":"a0f5339c-9292-43aa-a0bc-d27c6b8e30aa"},{"properties":{"displayName":"Security - Center standard pricing tier should be selected","policyType":"BuiltIn","mode":"All","description":"The - standard pricing tier enables threat detection for networks and virtual machines, - providing threat intelligence, anomaly detection, and behavior analytics in - Azure Security Center","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Security/pricings"},{"field":"Microsoft.Security/pricings/pricingTier","exists":"true"},{"field":"Microsoft.Security/pricings/pricingTier","notEquals":"Standard"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1181c5f-672a-477a-979a-7d58aa086233","type":"Microsoft.Authorization/policyDefinitions","name":"a1181c5f-672a-477a-979a-7d58aa086233"},{"properties":{"displayName":"All - authorization rules except RootManageSharedAccessKey should be removed from - Service Bus namespace","policyType":"BuiltIn","mode":"All","description":"Service - Bus clients should not use a namespace level access policy that provides access - to all queues and topics in a namespace. To align with the least privilege - security model, you should create access policies at the entity level for - queues and topics to provide access to only the specific entity","metadata":{"version":"1.0.1","category":"Service - Bus"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ServiceBus/namespaces/authorizationRules"},{"field":"name","notEquals":"RootManageSharedAccessKey"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1817ec0-a368-432a-8057-8371e17ac6ee","type":"Microsoft.Authorization/policyDefinitions","name":"a1817ec0-a368-432a-8057-8371e17ac6ee"},{"properties":{"displayName":"Microsoft - Managed Control 1265 - Contingency Plan Testing | Alternate Processing Site","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1265"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a18adb5b-1db6-4a5b-901a-7d3797d12972","type":"Microsoft.Authorization/policyDefinitions","name":"a18adb5b-1db6-4a5b-901a-7d3797d12972"},{"properties":{"displayName":"Deploy - Diagnostic Settings for Logic Apps to Event Hub","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Logic Apps to stream to a regional Event Hub when - any Logic Apps which is missing this diagnostic settings is created or updated.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"},"defaultValue":"setbypolicy_eventHub"},"eventHubRuleId":{"type":"String","metadata":{"displayName":"Event - Hub Authorization Rule Id","description":"The Event Hub authorization rule - Id for Azure Diagnostics. The authorization rule needs to be at Event Hub - namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}","strongType":"Microsoft.EventHub/Namespaces/AuthorizationRules","assignPermissions":true}},"eventHubLocation":{"type":"String","metadata":{"displayName":"Event - Hub Location","description":"The location the Event Hub resides in. Only Logic - Apps in this location will be linked to this Event Hub.","strongType":"location"},"defaultValue":""},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Event Hub - - True or False"},"allowedValues":["True","False"],"defaultValue":"False"},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Event Hub - True - or False"},"allowedValues":["True","False"],"defaultValue":"True"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Logic/workflows"},{"anyOf":[{"value":"[parameters(''eventHubLocation'')]","equals":""},{"field":"location","equals":"[parameters(''eventHubLocation'')]"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"eventHubRuleId":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.Logic/workflows/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"eventHubAuthorizationRuleId":"[parameters(''eventHubRuleId'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"WorkflowRuntime","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"eventHubRuleId":{"value":"[parameters(''eventHubRuleId'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1dae6c7-13f3-48ea-a149-ff8442661f60","type":"Microsoft.Authorization/policyDefinitions","name":"a1dae6c7-13f3-48ea-a149-ff8442661f60"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''Administrative Templates - - System''","policyType":"BuiltIn","mode":"All","description":"This policy - should only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines with non-compliant settings in Group Policy category: ''Administrative - Templates - System''. For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_AdministrativeTemplatesSystem","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1e8dda3-9fd2-4835-aec3-0e55531fde33","type":"Microsoft.Authorization/policyDefinitions","name":"a1e8dda3-9fd2-4835-aec3-0e55531fde33"},{"properties":{"displayName":"Microsoft - Managed Control 1612 - Developer Security Architecture And Design","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1612"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2037b3d-8b04-4171-8610-e6d4f1d08db5","type":"Microsoft.Authorization/policyDefinitions","name":"a2037b3d-8b04-4171-8610-e6d4f1d08db5"},{"properties":{"displayName":"Microsoft - Managed Control 1197 - Configuration Change Control | Test / Validate / Document - Changes","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1197"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a20d2eaa-88e2-4907-96a2-8f3a05797e5c","type":"Microsoft.Authorization/policyDefinitions","name":"a20d2eaa-88e2-4907-96a2-8f3a05797e5c"},{"properties":{"displayName":"Microsoft - Managed Control 1275 - Alternate Processing Site | Separation From Primary - Site","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1275"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a23d9d53-ad2e-45ef-afd5-e6d10900a737","type":"Microsoft.Authorization/policyDefinitions","name":"a23d9d53-ad2e-45ef-afd5-e6d10900a737"},{"properties":{"displayName":"Microsoft - Managed Control 1690 - Information System Monitoring | System-Wide Intrusion - Detection System","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1690"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2567a23-d1c3-4783-99f3-d471302a4d6b","type":"Microsoft.Authorization/policyDefinitions","name":"a2567a23-d1c3-4783-99f3-d471302a4d6b"},{"properties":{"displayName":"Microsoft - Managed Control 1410 - Maintenance Tools | Prevent Unauthorized Removal","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1410"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2596a9f-e59f-420d-9625-6e0b536348be","type":"Microsoft.Authorization/policyDefinitions","name":"a2596a9f-e59f-420d-9625-6e0b536348be"},{"properties":{"displayName":"Microsoft - Managed Control 1059 - Remote Access","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1059"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a29b5d9f-4953-4afe-b560-203a6410b6b4","type":"Microsoft.Authorization/policyDefinitions","name":"a29b5d9f-4953-4afe-b560-203a6410b6b4"},{"properties":{"displayName":"Show - audit results from Windows VMs that are not joined to the specified domain","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that are not joined to the specified domain. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsDomainMembership","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a29ee95c-0395-4515-9851-cc04ffe82a91","type":"Microsoft.Authorization/policyDefinitions","name":"a29ee95c-0395-4515-9851-cc04ffe82a91"},{"properties":{"displayName":"Microsoft - Managed Control 1532 - Third-Party Personnel Security","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1532"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2c66299-9017-4d95-8040-8bdbf7901d52","type":"Microsoft.Authorization/policyDefinitions","name":"a2c66299-9017-4d95-8040-8bdbf7901d52"},{"properties":{"displayName":"Microsoft - Managed Control 1664 - Protection Of Information At Rest | Cryptographic Protection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1664"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2cdf6b8-9505-4619-b579-309ba72037ac","type":"Microsoft.Authorization/policyDefinitions","name":"a2cdf6b8-9505-4619-b579-309ba72037ac"},{"properties":{"displayName":"Microsoft - Managed Control 1252 - Contingency Plan | Capacity Planning","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1252"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a328fd72-8ff5-4f96-8c9c-b30ed95db4ab","type":"Microsoft.Authorization/policyDefinitions","name":"a328fd72-8ff5-4f96-8c9c-b30ed95db4ab"},{"properties":{"displayName":"Microsoft - Managed Control 1238 - User-Installed Software","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1238"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a36cedd4-3ffd-4b1f-8b18-aa71d8d87ce1","type":"Microsoft.Authorization/policyDefinitions","name":"a36cedd4-3ffd-4b1f-8b18-aa71d8d87ce1"},{"properties":{"displayName":"Microsoft - Managed Control 1693 - Information System Monitoring | System-Generated Alerts","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1693"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a450eba6-2efc-4a00-846a-5804a93c6b77","type":"Microsoft.Authorization/policyDefinitions","name":"a450eba6-2efc-4a00-846a-5804a93c6b77"},{"properties":{"displayName":"Audit - usage of custom RBAC rules","policyType":"BuiltIn","mode":"All","description":"Audit - built-in roles such as ''Owner, Contributer, Reader'' instead of custom RBAC - roles, which are error prone. Using custom roles is treated as an exception - and requires a rigorous review and threat modeling","metadata":{"version":"1.0.0","category":"General"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Authorization/roleDefinitions"},{"field":"Microsoft.Authorization/roleDefinitions/type","equals":"CustomRole"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","type":"Microsoft.Authorization/policyDefinitions","name":"a451c1ef-c6ca-483d-87ed-f49761e3ffb5"},{"properties":{"displayName":"Web - Application should only be accessible over HTTPS","policyType":"BuiltIn","mode":"Indexed","description":"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"},{"field":"Microsoft.Web/sites/httpsOnly","equals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","type":"Microsoft.Authorization/policyDefinitions","name":"a4af4a39-4135-47fb-b175-47fbdf85311d"},{"properties":{"displayName":"Microsoft - Managed Control 1617 - Application Partitioning","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1617"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a631d8f5-eb81-4f9d-9ee1-74431371e4a3","type":"Microsoft.Authorization/policyDefinitions","name":"a631d8f5-eb81-4f9d-9ee1-74431371e4a3"},{"properties":{"displayName":"Auditing - on SQL server should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Auditing - on your SQL Server should be enabled to track database activities across all - databases on the server and save them in an audit log.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"setting":{"type":"String","metadata":{"displayName":"Desired - Auditing setting"},"allowedValues":["enabled","disabled"],"defaultValue":"enabled"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/auditingSettings","name":"default","existenceCondition":{"field":"Microsoft.Sql/auditingSettings.state","equals":"[parameters(''setting'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","type":"Microsoft.Authorization/policyDefinitions","name":"a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9"},{"properties":{"displayName":"The - Log Analytics agent should be installed on virtual machines","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Windows/Linux virtual machines if the Log Analytics agent - is not installed.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachines"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"},{"field":"Microsoft.Compute/virtualMachines/extensions/type","in":["MicrosoftMonitoringAgent","OmsAgentForLinux"]},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"},{"field":"Microsoft.Compute/virtualMachines/extensions/settings.workspaceId","exists":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a70ca396-0a34-413a-88e1-b956c1e683be","type":"Microsoft.Authorization/policyDefinitions","name":"a70ca396-0a34-413a-88e1-b956c1e683be"},{"properties":{"displayName":"Microsoft - Managed Control 1431 - Media Storage","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Media Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1431"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a7173c52-2b99-4696-a576-63dd5f970ef4","type":"Microsoft.Authorization/policyDefinitions","name":"a7173c52-2b99-4696-a576-63dd5f970ef4"},{"properties":{"displayName":"Microsoft - Managed Control 1644 - Cryptographic Key Establishment And Management | Availability","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1644"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a7211477-c970-446b-b4af-062f37461147","type":"Microsoft.Authorization/policyDefinitions","name":"a7211477-c970-446b-b4af-062f37461147"},{"properties":{"displayName":"Microsoft - Managed Control 1027 - Access Enforcement","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1027"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a76ca9b0-3f4a-4192-9a38-b25e4f8ae48c","type":"Microsoft.Authorization/policyDefinitions","name":"a76ca9b0-3f4a-4192-9a38-b25e4f8ae48c"},{"properties":{"displayName":"Azure - DDoS Protection Standard should be enabled","policyType":"BuiltIn","mode":"All","description":"DDoS - protection standard should be enabled for all virtual networks with a subnet - that is part of an application gateway with a public IP.","metadata":{"version":"1.0.1","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"microsoft.network/virtualNetworks"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"EnableDDoSProtection","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","type":"Microsoft.Authorization/policyDefinitions","name":"a7aca53f-2ed4-4466-a25e-0b45ade68efd"},{"properties":{"displayName":"Microsoft - Managed Control 1570 - Acquisition Process","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1570"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a7fcf38d-bb09-4600-be7d-825046eb162a","type":"Microsoft.Authorization/policyDefinitions","name":"a7fcf38d-bb09-4600-be7d-825046eb162a"},{"properties":{"displayName":"Require - encryption on Data Lake Store accounts","policyType":"BuiltIn","mode":"Indexed","description":"This - policy ensures encryption is enabled on all Data Lake Store accounts","metadata":{"version":"1.0.0","category":"Data - Lake"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DataLakeStore/accounts"},{"field":"Microsoft.DataLakeStore/accounts/encryptionState","equals":"Disabled"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a7ff3161-0087-490a-9ad9-ad6217f4f43a","type":"Microsoft.Authorization/policyDefinitions","name":"a7ff3161-0087-490a-9ad9-ad6217f4f43a"},{"properties":{"displayName":"Microsoft - Managed Control 1295 - Information System Recovery And Reconstitution","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1295"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a895fbdb-204d-4302-9689-0a59dc42b3d9","type":"Microsoft.Authorization/policyDefinitions","name":"a895fbdb-204d-4302-9689-0a59dc42b3d9"},{"properties":{"displayName":"[Deprecated]: - Monitor unencrypted SQL databases in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Unencrypted - SQL databases will be monitored by Azure Security Center as recommendations. - This policy is deprecated and replaced by the following policy: Transparent - Data Encryption on SQL databases should be enabled''","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","in":["Microsoft.SQL/servers/databases"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"encryption","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a8bef009-a5c9-4d0f-90d7-6018734e8a16","type":"Microsoft.Authorization/policyDefinitions","name":"a8bef009-a5c9-4d0f-90d7-6018734e8a16"},{"properties":{"displayName":"Microsoft - Managed Control 1283 - Telecommunications Services | Separation Of Primary - / Alternate Providers","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1283"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a9172e76-7f56-46e9-93bf-75d69bdb5491","type":"Microsoft.Authorization/policyDefinitions","name":"a9172e76-7f56-46e9-93bf-75d69bdb5491"},{"properties":{"displayName":"Microsoft - Managed Control 1400 - Controlled Maintenance","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1400"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a96d5098-a604-4cdf-90b1-ef6449a27424","type":"Microsoft.Authorization/policyDefinitions","name":"a96d5098-a604-4cdf-90b1-ef6449a27424"},{"properties":{"displayName":"Microsoft - Managed Control 1118 - Audit Review, Analysis, And Reporting | Correlate Audit - Repositories","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1118"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a96f743d-a195-420d-983a-08aa06bc441e","type":"Microsoft.Authorization/policyDefinitions","name":"a96f743d-a195-420d-983a-08aa06bc441e"},{"properties":{"displayName":"Microsoft - Managed Control 1199 - Configuration Change Control | Cryptography Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1199"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a9a08d1c-09b1-48f1-90ea-029bbdf7111e","type":"Microsoft.Authorization/policyDefinitions","name":"a9a08d1c-09b1-48f1-90ea-029bbdf7111e"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''System Audit Policies - - Detailed Tracking''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''System Audit Policies - Detailed Tracking''. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesDetailedTracking","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a9a33475-481d-4b81-9116-0bf02ffe67e8","type":"Microsoft.Authorization/policyDefinitions","name":"a9a33475-481d-4b81-9116-0bf02ffe67e8"},{"properties":{"displayName":"Deploy - network watcher when virtual networks are created","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a network watcher resource in regions with virtual networks. - You need to ensure existence of a resource group named networkWatcherRG, which - will be used to deploy network watcher instances.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{},"policyRule":{"if":{"field":"type","equals":"Microsoft.Network/virtualNetworks"},"then":{"effect":"DeployIfNotExists","details":{"type":"Microsoft.Network/networkWatchers","resourceGroupName":"networkWatcherRG","existenceCondition":{"field":"location","equals":"[field(''location'')]"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json","contentVersion":"1.0.0.0","parameters":{"location":{"type":"string"}},"resources":[{"apiVersion":"2016-09-01","type":"Microsoft.Network/networkWatchers","name":"[concat(''networkWatcher_'', - parameters(''location''))]","location":"[parameters(''location'')]"}]},"parameters":{"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a9b99dd8-06c5-4317-8629-9d86a3c6e7d9","type":"Microsoft.Authorization/policyDefinitions","name":"a9b99dd8-06c5-4317-8629-9d86a3c6e7d9"},{"properties":{"displayName":"Microsoft - Managed Control 1511 - Personnel Screening","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1511"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a9eae324-d327-4539-9293-b48e122465f8","type":"Microsoft.Authorization/policyDefinitions","name":"a9eae324-d327-4539-9293-b48e122465f8"},{"properties":{"displayName":"MFA - should be enabled on accounts with owner permissions on your subscription","policyType":"BuiltIn","mode":"All","description":"Multi-Factor - Authentication (MFA) should be enabled for all subscription accounts with - owner permissions to prevent a breach of accounts or resources.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"EnableMFAForOwnerPermissions","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","type":"Microsoft.Authorization/policyDefinitions","name":"aa633080-8b72-40c4-a2d7-d00c03e80bed"},{"properties":{"displayName":"Ensure - that Register with Azure Active Directory is enabled on WEB App","policyType":"BuiltIn","mode":"Indexed","description":"Managed - service identity in App Service makes the app more secure by eliminating secrets - from the app, such as credentials in the connection strings. When registering - with Azure Active Directory in the app service, the app will connect to other - Azure services securely without the need of username and passwords","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/web.managedServiceIdentityId","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/aa81768c-cb87-4ce2-bfaa-00baa10d760c","type":"Microsoft.Authorization/policyDefinitions","name":"aa81768c-cb87-4ce2-bfaa-00baa10d760c"},{"properties":{"displayName":"Microsoft - Managed Control 1539 - Security Categorization","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Risk Assessment control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1539"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/aabb155f-e7a5-4896-a767-e918bfae2ee0","type":"Microsoft.Authorization/policyDefinitions","name":"aabb155f-e7a5-4896-a767-e918bfae2ee0"},{"properties":{"displayName":"Microsoft - Managed Control 1006 - Account Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1006"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/aae8d54c-4bce-4c04-b3aa-5b65b67caac8","type":"Microsoft.Authorization/policyDefinitions","name":"aae8d54c-4bce-4c04-b3aa-5b65b67caac8"},{"properties":{"displayName":"Microsoft - Managed Control 1461 - Monitoring Physical Access","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1461"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/aafef03e-fea8-470b-88fa-54bd1fcd7064","type":"Microsoft.Authorization/policyDefinitions","name":"aafef03e-fea8-470b-88fa-54bd1fcd7064"},{"properties":{"displayName":"Microsoft - Managed Control 1073 - Access Control For Mobile Devices","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1073"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ab55cdb0-c7dd-4bd8-ae22-a7cea7594e9c","type":"Microsoft.Authorization/policyDefinitions","name":"ab55cdb0-c7dd-4bd8-ae22-a7cea7594e9c"},{"properties":{"displayName":"Ensure - that ''PHP version'' is the latest, if used as a part of the Function app","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for PHP software either due to security flaws - or to include additional functionality. Using the latest PHP version for Function - apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"PHPLatestVersion":{"type":"String","metadata":{"displayName":"Latest - PHP version","description":"Latest supported PHP version for App Services"},"defaultValue":"7.3"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","notContains":"PHP"},{"field":"Microsoft.Web/sites/config/web.phpVersion","equals":""}]},{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","equals":"[concat(''PHP|'', - parameters(''PHPLatestVersion''))]"},{"field":"Microsoft.Web/sites/config/web.phpVersion","equals":""}]},{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","equals":""},{"field":"Microsoft.Web/sites/config/web.phpVersion","equals":"[parameters(''PHPLatestVersion'')]"}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ab965db2-d2bf-4b64-8b39-c38ec8179461","type":"Microsoft.Authorization/policyDefinitions","name":"ab965db2-d2bf-4b64-8b39-c38ec8179461"},{"properties":{"displayName":"[Deprecated]: - Automatic provisioning of security monitoring agent","policyType":"BuiltIn","mode":"All","description":"Installs - security agent on VMs for advanced security alerts and preventions in Azure - Security Center. Applies only for subscriptions that use Azure Security Center.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"AuditIfNotExists","details":{"type":"Microsoft.Security/complianceResults","name":"securityAgent","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/abcc6037-1fc4-47f6-aac5-89706589be24","type":"Microsoft.Authorization/policyDefinitions","name":"abcc6037-1fc4-47f6-aac5-89706589be24"},{"properties":{"displayName":"Microsoft - Managed Control 1323 - Authenticator Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1323"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/abe8f70b-680f-470c-9b86-a7edfb664ecc","type":"Microsoft.Authorization/policyDefinitions","name":"abe8f70b-680f-470c-9b86-a7edfb664ecc"},{"properties":{"displayName":"Advanced - data security should be enabled on your SQL servers","policyType":"BuiltIn","mode":"Indexed","description":"Audit - SQL servers without Advanced Data Security","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/securityAlertPolicies","name":"Default","existenceCondition":{"field":"Microsoft.Sql/servers/securityAlertPolicies/state","equals":"Enabled"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","type":"Microsoft.Authorization/policyDefinitions","name":"abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9"},{"properties":{"displayName":"Advanced - data security should be enabled on SQL Managed Instance","policyType":"BuiltIn","mode":"Indexed","description":"Audit - each SQL Managed Instance without advanced data security.","metadata":{"version":"1.0.1","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/managedInstances"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/managedInstances/securityAlertPolicies","name":"Default","existenceCondition":{"field":"Microsoft.Sql/managedInstances/securityAlertPolicies/state","equals":"Enabled"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","type":"Microsoft.Authorization/policyDefinitions","name":"abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9"},{"properties":{"displayName":"Enable - Azure Security Center on your subscription","policyType":"BuiltIn","mode":"All","description":"Identifies - existing subscriptions that are not monitored by Azure Security Center (ASC).\nSubscriptions - not monitored by ASC will be registered to the free pricing tier.\nSubscriptions - already monitored by ASC (free or standard), will be considered compliant.\nTo - register newly created subscriptions, open the compliance tab, select the - relevant non-compliant assignment and create a remediation task.\nRepeat this - step when you have one or more new subscriptions you want to monitor with - Security Center.","metadata":{"version":"1.0.0","category":"Security Center"},"parameters":{},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Security/pricings","name":"VirtualMachines","deploymentScope":"subscription","existenceScope":"subscription","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd"],"existenceCondition":{"anyof":[{"field":"microsoft.security/pricings/pricingTier","equals":"standard"},{"field":"microsoft.security/pricings/pricingTier","equals":"free"}]},"deployment":{"location":"westeurope","properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","variables":{},"resources":[{"type":"Microsoft.Security/pricings","apiVersion":"2018-06-01","name":"VirtualMachines","properties":{"pricingTier":"free"}}],"outputs":{}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ac076320-ddcf-4066-b451-6154267e8ad2","type":"Microsoft.Authorization/policyDefinitions","name":"ac076320-ddcf-4066-b451-6154267e8ad2"},{"properties":{"displayName":"Microsoft - Managed Control 1056 - Session Termination | User-Initiated Logouts / Message - Displays","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1056"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ac43352f-df83-4694-8738-cfce549fd08d","type":"Microsoft.Authorization/policyDefinitions","name":"ac43352f-df83-4694-8738-cfce549fd08d"},{"properties":{"displayName":"[Preview]: - Role-Based Access Control (RBAC) should be used on Kubernetes Services","policyType":"BuiltIn","mode":"All","description":"To - provide granular filtering on the actions that users can perform, use Role-Based - Access Control (RBAC) to manage permissions in Kubernetes Service Clusters - and configure relevant authorization policies.","metadata":{"version":"1.0.1-preview","category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"anyOf":[{"field":"Microsoft.ContainerService/managedClusters/enableRBAC","exists":"false"},{"field":"Microsoft.ContainerService/managedClusters/enableRBAC","equals":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","type":"Microsoft.Authorization/policyDefinitions","name":"ac4a19c2-fa67-49b4-8ae5-0b2e78c49457"},{"properties":{"displayName":"[Deprecated]: - Allow resource creation if ''environment'' tag value in allowed values","policyType":"BuiltIn","mode":"Indexed","description":"Allows - resource creation if the ''environment'' tag is set to one of the following - values: production, dev, test, staging","metadata":{"version":"1.0.0-deprecated","category":"Tags","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"tags[''environment'']","in":["production","dev","test","staging"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ac7e5fc0-c029-4b12-91d4-a8500ce697f9","type":"Microsoft.Authorization/policyDefinitions","name":"ac7e5fc0-c029-4b12-91d4-a8500ce697f9"},{"properties":{"displayName":"Microsoft - Managed Control 1569 - Acquisition Process","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1569"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ad2f8e61-a564-4dfd-8eaa-816f5be8cb34","type":"Microsoft.Authorization/policyDefinitions","name":"ad2f8e61-a564-4dfd-8eaa-816f5be8cb34"},{"properties":{"displayName":"Microsoft - Managed Control 1454 - Physical Access Control","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1454"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ad58985d-ab32-4f99-8bd3-b7e134c90229","type":"Microsoft.Authorization/policyDefinitions","name":"ad58985d-ab32-4f99-8bd3-b7e134c90229"},{"properties":{"displayName":"Microsoft - Managed Control 1025 - Account Management | Account Monitoring / Atypical - Usage","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1025"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/adfe020d-0a97-45f4-a39c-696ef99f3a95","type":"Microsoft.Authorization/policyDefinitions","name":"adfe020d-0a97-45f4-a39c-696ef99f3a95"},{"properties":{"displayName":"Microsoft - Managed Control 1272 - Alternate Processing Site","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1272"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ae46cf7a-e3fd-427b-9b91-44bc78e2d9d8","type":"Microsoft.Authorization/policyDefinitions","name":"ae46cf7a-e3fd-427b-9b91-44bc78e2d9d8"},{"properties":{"displayName":"SQL - Server should use a virtual network service endpoint","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any SQL Server not configured to use a virtual network service - endpoint.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/virtualNetworkRules","existenceCondition":{"field":"Microsoft.Sql/servers/virtualNetworkRules/virtualNetworkSubnetId","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ae5d2f14-d830-42b6-9899-df6cfe9c71a3","type":"Microsoft.Authorization/policyDefinitions","name":"ae5d2f14-d830-42b6-9899-df6cfe9c71a3"},{"properties":{"displayName":"Microsoft - Managed Control 1598 - Developer Configuration Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1598"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ae7e1f5e-2d63-4b38-91ef-bce14151cce3","type":"Microsoft.Authorization/policyDefinitions","name":"ae7e1f5e-2d63-4b38-91ef-bce14151cce3"},{"properties":{"displayName":"[Deprecated]: - Email notifications to admins and subscription owners should be enabled in - SQL Managed Instance advanced data security settings","policyType":"BuiltIn","mode":"Indexed","description":"Audit - that ''email notification to admins and subscription owners'' is enabled in - SQL Managed Instance advanced threat protection settings. This setting ensures - that any detections of anomalous activities on SQL Managed Instance are reported - as soon as possible to the admins.","metadata":{"version":"1.0.1-deprecated","category":"SQL","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"Disabled"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/managedInstances"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/managedInstances/securityAlertPolicies","name":"default","existenceCondition":{"field":"Microsoft.Sql/managedInstances/securityAlertPolicies/emailAccountAdmins","equals":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/aeb23562-188d-47cb-80b8-551f16ef9fff","type":"Microsoft.Authorization/policyDefinitions","name":"aeb23562-188d-47cb-80b8-551f16ef9fff"},{"properties":{"displayName":"Microsoft - Managed Control 1413 - Nonlocal Maintenance","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1413"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/aeedddb6-6bc0-42d5-809b-80048033419d","type":"Microsoft.Authorization/policyDefinitions","name":"aeedddb6-6bc0-42d5-809b-80048033419d"},{"properties":{"displayName":"Microsoft - Managed Control 1710 - Security Function Verification","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1710"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/af2a93c8-e6dd-4c94-acdd-4a2eedfc478e","type":"Microsoft.Authorization/policyDefinitions","name":"af2a93c8-e6dd-4c94-acdd-4a2eedfc478e"},{"properties":{"displayName":"Monitor - missing Endpoint Protection in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Servers - without an installed Endpoint Protection agent will be monitored by Azure - Security Center as recommendations","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"endpointProtection","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","type":"Microsoft.Authorization/policyDefinitions","name":"af6cd1bd-1635-48cb-bde7-5b15693900b9"},{"properties":{"displayName":"[Deprecated]: - Monitor unaudited SQL servers in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"SQL - servers which don''t have SQL auditing turned on will be monitored by Azure - Security Center as recommendations. This policy is deprecated and replaced - by the following policy: ''Auditing should be enabled on advanced data security - settings on SQL Server''","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","in":["Microsoft.SQL/servers"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"auditing","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/af8051bf-258b-44e2-a2bf-165330459f9d","type":"Microsoft.Authorization/policyDefinitions","name":"af8051bf-258b-44e2-a2bf-165330459f9d"},{"properties":{"displayName":"Microsoft - Managed Control 1645 - Cryptographic Key Establishment And Management | Symmetric - Keys","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1645"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/afbd0baf-ff1a-4447-a86f-088a97347c0c","type":"Microsoft.Authorization/policyDefinitions","name":"afbd0baf-ff1a-4447-a86f-088a97347c0c"},{"properties":{"displayName":"Microsoft - Managed Control 1725 - Error Handling","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1725"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/afc234b5-456b-4aa5-b3e2-ce89108124cc","type":"Microsoft.Authorization/policyDefinitions","name":"afc234b5-456b-4aa5-b3e2-ce89108124cc"},{"properties":{"displayName":"Activity - log should be retained for at least one year","policyType":"BuiltIn","mode":"All","description":"This - policy audits the activity log if the retention is not set for 365 days or - forever (retention days set to 0).","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/logProfiles","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/logProfiles/retentionPolicy.enabled","equals":"true"},{"field":"Microsoft.Insights/logProfiles/retentionPolicy.days","equals":"365"}]},{"allOf":[{"field":"Microsoft.Insights/logProfiles/retentionPolicy.enabled","equals":"false"},{"field":"Microsoft.Insights/logProfiles/retentionPolicy.days","equals":"0"}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b02aacc0-b073-424e-8298-42b22829ee0a","type":"Microsoft.Authorization/policyDefinitions","name":"b02aacc0-b073-424e-8298-42b22829ee0a"},{"properties":{"displayName":"Microsoft - Managed Control 1429 - Media Marking","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Media Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1429"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b07c9b24-729e-4e85-95fc-f224d2d08a80","type":"Microsoft.Authorization/policyDefinitions","name":"b07c9b24-729e-4e85-95fc-f224d2d08a80"},{"properties":{"displayName":"Microsoft - Managed Control 1711 - Security Function Verification","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1711"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b083a535-a66a-41ec-ba7f-f9498bf67cde","type":"Microsoft.Authorization/policyDefinitions","name":"b083a535-a66a-41ec-ba7f-f9498bf67cde"},{"properties":{"displayName":"Management - ports of virtual machines should be protected with just-in-time network access - control","policyType":"BuiltIn","mode":"All","description":"Possible network - Just In Time (JIT) access will be monitored by Azure Security Center as recommendations","metadata":{"version":"1.0.1","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachines"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"jitNetworkAccess","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","type":"Microsoft.Authorization/policyDefinitions","name":"b0f33259-77d7-4c9e-aac6-3aabcfae693c"},{"properties":{"displayName":"Microsoft - Managed Control 1571 - Acquisition Process","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1571"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b11c985b-f2cd-4bd7-85f4-b52426edf905","type":"Microsoft.Authorization/policyDefinitions","name":"b11c985b-f2cd-4bd7-85f4-b52426edf905"},{"properties":{"displayName":"Show - audit results from Linux VMs that do not have the passwd file permissions - set to 0644","policyType":"BuiltIn","mode":"All","description":"This policy - should only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Linux - virtual machines that do not have the passwd file permissions set to 0644. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"3.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordPolicy_msid121","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b18175dd-c599-4c64-83ba-bb018a06d35b","type":"Microsoft.Authorization/policyDefinitions","name":"b18175dd-c599-4c64-83ba-bb018a06d35b"},{"properties":{"displayName":"Microsoft - Managed Control 1537 - Risk Assessment Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Risk Assessment control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1537"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b19454ca-0d70-42c0-acf5-ea1c1e5726d1","type":"Microsoft.Authorization/policyDefinitions","name":"b19454ca-0d70-42c0-acf5-ea1c1e5726d1"},{"properties":{"displayName":"Microsoft - Managed Control 1091 - Security Awareness Training","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Awareness and Training control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1091"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b23bd715-5d1c-4e5c-9759-9cbdf79ded9d","type":"Microsoft.Authorization/policyDefinitions","name":"b23bd715-5d1c-4e5c-9759-9cbdf79ded9d"},{"properties":{"displayName":"Microsoft - Managed Control 1078 - Use Of External Information Systems | Limits On Authorized - Use","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1078"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b25faf85-8a16-4f28-8e15-d05c0072d64d","type":"Microsoft.Authorization/policyDefinitions","name":"b25faf85-8a16-4f28-8e15-d05c0072d64d"},{"properties":{"displayName":"Microsoft - Managed Control 1009 - Account Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1009"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b26f8610-e615-47c2-abd6-c00b2b0b503a","type":"Microsoft.Authorization/policyDefinitions","name":"b26f8610-e615-47c2-abd6-c00b2b0b503a"},{"properties":{"displayName":"All - authorization rules except RootManageSharedAccessKey should be removed from - Event Hub namespace","policyType":"BuiltIn","mode":"All","description":"Event - Hub clients should not use a namespace level access policy that provides access - to all queues and topics in a namespace. To align with the least privilege - security model, you should create access policies at the entity level for - queues and topics to provide access to only the specific entity","metadata":{"version":"1.0.1","category":"Event - Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces/authorizationRules"},{"field":"name","notEquals":"RootManageSharedAccessKey"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b278e460-7cfc-4451-8294-cccc40a940d7","type":"Microsoft.Authorization/policyDefinitions","name":"b278e460-7cfc-4451-8294-cccc40a940d7"},{"properties":{"displayName":"Inherit - a tag from the subscription","policyType":"BuiltIn","mode":"Indexed","description":"Adds - or replaces the specified tag and value from the containing subscription when - any resource is created or updated. Existing resources can be remediated by - triggering a remediation task.","metadata":{"category":"Tags","version":"1.0.0"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}}},"policyRule":{"if":{"allOf":[{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","notEquals":"[subscription().tags[parameters(''tagName'')]]"},{"value":"[subscription().tags[parameters(''tagName'')]]","notEquals":""}]},"then":{"effect":"modify","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[subscription().tags[parameters(''tagName'')]]"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b27a0cbd-a167-4dfa-ae64-4337be671140","type":"Microsoft.Authorization/policyDefinitions","name":"b27a0cbd-a167-4dfa-ae64-4337be671140"},{"properties":{"displayName":"Microsoft - Managed Control 1234 - Software Usage Restrictions","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1234"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b293f881-361c-47ed-b997-bc4e2296bc0b","type":"Microsoft.Authorization/policyDefinitions","name":"b293f881-361c-47ed-b997-bc4e2296bc0b"},{"properties":{"displayName":"Microsoft - Managed Control 1107 - Content Of Audit Records","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1107"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b29ed931-8e21-4779-8458-27916122a904","type":"Microsoft.Authorization/policyDefinitions","name":"b29ed931-8e21-4779-8458-27916122a904"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows web servers that are not using secure communication - protocols","policyType":"BuiltIn","mode":"Indexed","description":"This policy - creates a Guest Configuration assignment to audit Windows web servers that - are not using secure communication protocols (TLS 1.1 or TLS 1.2). It also - creates a system-assigned managed identity and deploys the VM extension for - Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"MinimumTLSVersion":{"type":"String","metadata":{"displayName":"Minimum - TLS version","description":"The minimum TLS protocol version that should be - enabled. Windows web servers with lower TLS versions will be marked as non-compliant."},"allowedValues":["1.1","1.2"],"defaultValue":"1.1"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AuditSecureProtocol","existenceCondition":{"anyOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[SecureWebServer]s1;MinimumTLSVersion'', - ''='', parameters(''MinimumTLSVersion'')))]"},{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":""},{"value":"[parameters(''MinimumTLSVersion'')]","equals":"1.1"}]}]},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AuditSecureProtocol"},"MinimumTLSVersion":{"value":"[parameters(''MinimumTLSVersion'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"MinimumTLSVersion":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[SecureWebServer]s1;MinimumTLSVersion","value":"[parameters(''MinimumTLSVersion'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[SecureWebServer]s1;MinimumTLSVersion","value":"[parameters(''MinimumTLSVersion'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b2fc8f91-866d-4434-9089-5ebfe38d6fd8","type":"Microsoft.Authorization/policyDefinitions","name":"b2fc8f91-866d-4434-9089-5ebfe38d6fd8"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''System Audit Policies - - Logon-Logoff''","policyType":"BuiltIn","mode":"All","description":"This policy - should only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines with non-compliant settings in Group Policy category: ''System - Audit Policies - Logon-Logoff''. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesLogonLogoff","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b3802d79-dd88-4bce-b81d-780218e48280","type":"Microsoft.Authorization/policyDefinitions","name":"b3802d79-dd88-4bce-b81d-780218e48280"},{"properties":{"displayName":"Microsoft - Managed Control 1041 - Least Privilege | Privilege Levels For Code Execution","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1041"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b3d8d15b-627a-4219-8c96-4d16f788888b","type":"Microsoft.Authorization/policyDefinitions","name":"b3d8d15b-627a-4219-8c96-4d16f788888b"},{"properties":{"displayName":"Microsoft - Managed Control 1380 - Incident Response Plan","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1380"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b4319b7e-ea8d-42ff-8a67-ccd462972827","type":"Microsoft.Authorization/policyDefinitions","name":"b4319b7e-ea8d-42ff-8a67-ccd462972827"},{"properties":{"displayName":"Diagnostic - logs in Search services should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of diagnostic logs. This enables you to recreate activity trails - to use for investigation purposes; when a security incident occurs or when - your network is compromised","metadata":{"version":"3.0.0","category":"Search"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Search/searchServices"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","type":"Microsoft.Authorization/policyDefinitions","name":"b4330a05-a843-4bc8-bf9a-cacce50c67f4"},{"properties":{"displayName":"Microsoft - Managed Control 1172 - Internal System Connections","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1172"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b43e946e-a4c8-4b92-8201-4a39331db43c","type":"Microsoft.Authorization/policyDefinitions","name":"b43e946e-a4c8-4b92-8201-4a39331db43c"},{"properties":{"displayName":"Microsoft - Managed Control 1672 - Flaw Remediation | Central Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1672"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b45fe972-904e-45a4-ac20-673ba027a301","type":"Microsoft.Authorization/policyDefinitions","name":"b45fe972-904e-45a4-ac20-673ba027a301"},{"properties":{"displayName":"Microsoft - Managed Control 1131 - Protection Of Audit Information","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1131"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b472a17e-c2bc-493f-b50b-42d55a346962","type":"Microsoft.Authorization/policyDefinitions","name":"b472a17e-c2bc-493f-b50b-42d55a346962"},{"properties":{"displayName":"[Deprecated]: - Audit Web Sockets state for an API App","policyType":"BuiltIn","mode":"All","description":"The - Web Sockets protocol is vulnerable to different types of security threats. - Use of Web Sockets within an API app must be carefully reviewed.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"DisableWebSockets","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b48334a4-911b-4084-b1ab-3e6a4e50b951","type":"Microsoft.Authorization/policyDefinitions","name":"b48334a4-911b-4084-b1ab-3e6a4e50b951"},{"properties":{"displayName":"A - security contact phone number should be provided for your subscription","policyType":"BuiltIn","mode":"All","description":"Enter - a phone number to receive notifications when Azure Security Center detects - compromised resources","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/securityContacts","existenceCondition":{"field":"Microsoft.Security/securityContacts/phone","notEquals":""}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b4d66858-c922-44e3-9566-5cdb7a7be744","type":"Microsoft.Authorization/policyDefinitions","name":"b4d66858-c922-44e3-9566-5cdb7a7be744"},{"properties":{"displayName":"Microsoft - Managed Control 1286 - Telecommunications Services | Provider Contingency - Plan","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1286"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b4f9b47a-2116-4e6f-88db-4edbf22753f1","type":"Microsoft.Authorization/policyDefinitions","name":"b4f9b47a-2116-4e6f-88db-4edbf22753f1"},{"properties":{"displayName":"Public - network access should be disabled for PostgreSQL servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits PostgreSQL servers in your environment with public network access - enabled. For more details, visit https://go.microsoft.com/fwlink/?linkid=2120015.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DBforPostgreSQL/servers"},{"field":"Microsoft.DBforPostgreSQL/servers/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","type":"Microsoft.Authorization/policyDefinitions","name":"b52376f7-9612-48a1-81cd-1ffe4b61032c"},{"properties":{"displayName":"Service - Fabric clusters should only use Azure Active Directory for client authentication","policyType":"BuiltIn","mode":"Indexed","description":"Audit - usage of client authentication only via Azure Active Directory in Service - Fabric","metadata":{"version":"1.1.0","category":"Service Fabric"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ServiceFabric/clusters"},{"anyOf":[{"field":"Microsoft.ServiceFabric/clusters/azureActiveDirectory.tenantId","exists":"false"},{"field":"Microsoft.ServiceFabric/clusters/azureActiveDirectory.tenantId","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","type":"Microsoft.Authorization/policyDefinitions","name":"b54ed75b-3e1a-44ac-a333-05ba39b99ff0"},{"properties":{"displayName":"Deploy - Advanced Threat Protection for Cosmos DB Accounts","policyType":"BuiltIn","mode":"Indexed","description":"This - policy enables Advanced Threat Protection across Cosmos DB accounts.","metadata":{"version":"1.0.0","category":"Cosmos - DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/advancedThreatProtectionSettings","name":"current","existenceCondition":{"field":"Microsoft.Security/advancedThreatProtectionSettings/isEnabled","equals":"true"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"cosmosDbAccountName":{"type":"string"}},"resources":[{"apiVersion":"2019-01-01","type":"Microsoft.DocumentDB/databaseAccounts/providers/advancedThreatProtectionSettings","name":"[concat(parameters(''cosmosDbAccountName''), - ''/Microsoft.Security/current'')]","properties":{"isEnabled":true}}]},"parameters":{"cosmosDbAccountName":{"value":"[field(''name'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b5f04e03-92a3-4b09-9410-2cc5e5047656","type":"Microsoft.Authorization/policyDefinitions","name":"b5f04e03-92a3-4b09-9410-2cc5e5047656"},{"properties":{"displayName":"Diagnostic - logs in App Services should be enabled","policyType":"BuiltIn","mode":"All","description":"Audit - enabling of diagnostic logs on the app. This enables you to recreate activity - trails for investigation purposes if a security incident occurs or your network - is compromised","metadata":{"version":"1.0.0","category":"App Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","notContains":"functionapp"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","existenceCondition":{"allOf":[{"field":"Microsoft.Web/sites/config/detailedErrorLoggingEnabled","equals":"true"},{"field":"Microsoft.Web/sites/config/httpLoggingEnabled","equals":"true"},{"field":"Microsoft.Web/sites/config/requestTracingEnabled","equals":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","type":"Microsoft.Authorization/policyDefinitions","name":"b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0"},{"properties":{"displayName":"Microsoft - Managed Control 1419 - Nonlocal Maintenance | Cryptographic Protection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1419"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b6747bf9-2b97-45b8-b162-3c8becb9937d","type":"Microsoft.Authorization/policyDefinitions","name":"b6747bf9-2b97-45b8-b162-3c8becb9937d"},{"properties":{"displayName":"Microsoft - Managed Control 1301 - Identification And Authentication (Org. Users) | Network - Access To Privileged Accounts","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1301"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b6a8e0cc-ac23-468b-abe4-a8a1cc6d7a08","type":"Microsoft.Authorization/policyDefinitions","name":"b6a8e0cc-ac23-468b-abe4-a8a1cc6d7a08"},{"properties":{"displayName":"Microsoft - Managed Control 1568 - Acquisition Process","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1568"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b6a8eae8-9854-495a-ac82-d2cd3eac02a6","type":"Microsoft.Authorization/policyDefinitions","name":"b6a8eae8-9854-495a-ac82-d2cd3eac02a6"},{"properties":{"displayName":"Network - Watcher should be enabled","policyType":"BuiltIn","mode":"All","description":"Network - Watcher is a regional service that enables you to monitor and diagnose conditions - at a network scenario level in, to, and from Azure. Scenario level monitoring - enables you to diagnose problems at an end to end network level view. Network - diagnostic and visualization tools available with Network Watcher help you - understand, diagnose, and gain insights to your network in Azure.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"listOfLocations":{"type":"Array","metadata":{"displayName":"Locations","description":"Audit - if Network Watcher is not enabled for region(s).","strongType":"location"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.Network/networkWatchers","resourceGroupName":"NetworkWatcherRG","existenceCondition":{"field":"location","in":"[parameters(''listOfLocations'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","type":"Microsoft.Authorization/policyDefinitions","name":"b6e2945c-0b7b-40f5-9233-7a5323b5cdc6"},{"properties":{"displayName":"Microsoft - Managed Control 1608 - Supply Chain Protection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1608"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b73b7b3b-677c-4a2a-b949-ad4dc4acd89f","type":"Microsoft.Authorization/policyDefinitions","name":"b73b7b3b-677c-4a2a-b949-ad4dc4acd89f"},{"properties":{"displayName":"Microsoft - Managed Control 1401 - Controlled Maintenance","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1401"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b78ee928-e3c1-4569-ad97-9f8c4b629847","type":"Microsoft.Authorization/policyDefinitions","name":"b78ee928-e3c1-4569-ad97-9f8c4b629847"},{"properties":{"displayName":"API - App should only be accessible over HTTPS","policyType":"BuiltIn","mode":"Indexed","description":"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"},{"field":"Microsoft.Web/sites/httpsOnly","equals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","type":"Microsoft.Authorization/policyDefinitions","name":"b7ddfbdc-1260-477d-91fd-98bd9be789a6"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs in which the Administrators group does - not contain only the specified members","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - in which the Administrators group does not contain only the specified members. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"Members":{"type":"String","metadata":{"displayName":"Members","description":"A - semicolon-separated list of all the expected members of the Administrators - local group. Ex: Administrator; myUser1; myUser2"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AdministratorsGroupMembers","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[LocalGroup]AdministratorsGroup;Members'', - ''='', parameters(''Members'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AdministratorsGroupMembers"},"Members":{"value":"[parameters(''Members'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"Members":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[LocalGroup]AdministratorsGroup;Members","value":"[parameters(''Members'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[LocalGroup]AdministratorsGroup;Members","value":"[parameters(''Members'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b821191b-3a12-44bc-9c38-212138a29ff3","type":"Microsoft.Authorization/policyDefinitions","name":"b821191b-3a12-44bc-9c38-212138a29ff3"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''Security Options - Accounts''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Security Options - Accounts''. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsAccounts","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b872a447-cc6f-43b9-bccf-45703cd81607","type":"Microsoft.Authorization/policyDefinitions","name":"b872a447-cc6f-43b9-bccf-45703cd81607"},{"properties":{"displayName":"Deploy - Diagnostic Settings for Logic Apps to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Logic Apps to stream to a regional Log Analytics - workspace when any Logic Apps which is missing this diagnostic settings is - created or updated.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"},"defaultValue":"setbypolicy_logAnalytics"},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"],"defaultValue":"False"},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Log Analytics workspace - - True or False"},"allowedValues":["True","False"],"defaultValue":"True"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Logic/workflows"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.Logic/workflows/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"WorkflowRuntime","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b889a06c-ec72-4b03-910a-cb169ee18721","type":"Microsoft.Authorization/policyDefinitions","name":"b889a06c-ec72-4b03-910a-cb169ee18721"},{"properties":{"displayName":"An - activity log alert should exist for specific Administrative operations","policyType":"BuiltIn","mode":"All","description":"This - policy audits specific Administrative operations with no activity log alerts - configured.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"operationName":{"type":"String","metadata":{"displayName":"Operation - Name","description":"Administrative Operation name for which activity log - alert should be configured"},"allowedValues":["Microsoft.Sql/servers/firewallRules/write","Microsoft.Sql/servers/firewallRules/delete","Microsoft.Network/networkSecurityGroups/write","Microsoft.Network/networkSecurityGroups/delete","Microsoft.ClassicNetwork/networkSecurityGroups/write","Microsoft.ClassicNetwork/networkSecurityGroups/delete","Microsoft.Network/networkSecurityGroups/securityRules/write","Microsoft.Network/networkSecurityGroups/securityRules/delete","Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write","Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/delete"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Resources/subscriptions"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/ActivityLogAlerts","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/ActivityLogAlerts/enabled","equals":"true"},{"count":{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field","equals":"category"},{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals","equals":"Administrative"}]},{"allOf":[{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field","equals":"operationName"},{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals","equals":"[parameters(''operationName'')]"}]}]}},"equals":2},{"not":{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field","equals":"category"}},{"not":{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field","equals":"operationName"}}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a","type":"Microsoft.Authorization/policyDefinitions","name":"b954148f-4c11-4c38-8221-be76711e194a"},{"properties":{"displayName":"Microsoft - Managed Control 1257 - Contingency Training","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1257"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b958b241-4245-4bd6-bd2d-b8f0779fb543","type":"Microsoft.Authorization/policyDefinitions","name":"b958b241-4245-4bd6-bd2d-b8f0779fb543"},{"properties":{"displayName":"Microsoft - Managed Control 1186 - Configuration Change Control","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1186"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b95ba3bd-4ded-49ea-9d10-c6f4b680813d","type":"Microsoft.Authorization/policyDefinitions","name":"b95ba3bd-4ded-49ea-9d10-c6f4b680813d"},{"properties":{"displayName":"Microsoft - Managed Control 1447 - Physical Access Authorizations","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1447"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b9783a99-98fe-4a95-873f-29613309fe9a","type":"Microsoft.Authorization/policyDefinitions","name":"b9783a99-98fe-4a95-873f-29613309fe9a"},{"properties":{"displayName":"Microsoft - Managed Control 1625 - Boundary Protection | Access Points","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1625"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b9b66a4d-70a1-4b47-8fa1-289cec68c605","type":"Microsoft.Authorization/policyDefinitions","name":"b9b66a4d-70a1-4b47-8fa1-289cec68c605"},{"properties":{"displayName":"Microsoft - Managed Control 1610 - Development Process, Standards, And Tools","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1610"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b9f3fb54-4222-46a1-a308-4874061f8491","type":"Microsoft.Authorization/policyDefinitions","name":"b9f3fb54-4222-46a1-a308-4874061f8491"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''Security Options - Recovery - console''","policyType":"BuiltIn","mode":"All","description":"This policy - should only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines with non-compliant settings in Group Policy category: ''Security - Options - Recovery console''. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsRecoveryconsole","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ba12366f-f9a6-42b8-9d98-157d0b1a837b","type":"Microsoft.Authorization/policyDefinitions","name":"ba12366f-f9a6-42b8-9d98-157d0b1a837b"},{"properties":{"displayName":"Microsoft - Managed Control 1606 - Developer Security Testing And Evaluation | Threat - And Vulnerability Analyses","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1606"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/baa8a9a4-5bbe-4c72-98f6-a3a47ae2b1ca","type":"Microsoft.Authorization/policyDefinitions","name":"baa8a9a4-5bbe-4c72-98f6-a3a47ae2b1ca"},{"properties":{"displayName":"Microsoft - Managed Control 1726 - Information Handling And Retention","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1726"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/baff1279-05e0-4463-9a70-8ba5de4c7aa4","type":"Microsoft.Authorization/policyDefinitions","name":"baff1279-05e0-4463-9a70-8ba5de4c7aa4"},{"properties":{"displayName":"Microsoft - Managed Control 1166 - Continuous Monitoring","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1166"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bb02733d-3cc5-4bb0-a6cd-695ba2c2272e","type":"Microsoft.Authorization/policyDefinitions","name":"bb02733d-3cc5-4bb0-a6cd-695ba2c2272e"},{"properties":{"displayName":"Microsoft - Managed Control 1188 - Configuration Change Control","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1188"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bb20548a-c926-4e4d-855c-bcddc6faf95e","type":"Microsoft.Authorization/policyDefinitions","name":"bb20548a-c926-4e4d-855c-bcddc6faf95e"},{"properties":{"displayName":"Non-internet-facing - virtual machines should be protected with network security groups","policyType":"BuiltIn","mode":"All","description":"Protect - your non-internet-facing virtual machines from potential threats by restricting - access with network security groups (NSG). Learn more about controlling traffic - with NSGs at https://aka.ms/nsg-doc","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"networkSecurityGroupsOnInternalVirtualMachines","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","type":"Microsoft.Authorization/policyDefinitions","name":"bb91dfba-c30d-4263-9add-9c2384e659a6"},{"properties":{"displayName":"Microsoft - Managed Control 1533 - Third-Party Personnel Security","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1533"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bba2a036-fb3b-4261-b1be-a13dfb5fbcaa","type":"Microsoft.Authorization/policyDefinitions","name":"bba2a036-fb3b-4261-b1be-a13dfb5fbcaa"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''Security Options - - Microsoft Network Client''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - Microsoft Network Client''. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"MicrosoftNetworkClientDigitallySignCommunicationsAlways":{"type":"String","metadata":{"displayName":"Microsoft - network client: Digitally sign communications (always)","description":"Specifies - whether packet signing is required by the SMB client component."},"defaultValue":"1"},"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers":{"type":"String","metadata":{"displayName":"Microsoft - network client: Send unencrypted password to third-party SMB servers","description":"Specifies - whether the SMB redirector will send plaintext passwords during authentication - to third-party SMB servers that do not support password encryption. It is - recommended that you disable this policy setting unless there is a strong - business case to enable it."},"defaultValue":"0"},"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession":{"type":"String","metadata":{"displayName":"Microsoft - network server: Amount of idle time required before suspending session","description":"Specifies - the amount of continuous idle time that must pass in an SMB session before - the session is suspended because of inactivity. The format of the value is - two integers separated by a comma, denoting an inclusive range."},"defaultValue":"1,15"},"MicrosoftNetworkServerDigitallySignCommunicationsAlways":{"type":"String","metadata":{"displayName":"Microsoft - network server: Digitally sign communications (always)","description":"Specifies - whether packet signing is required by the SMB server component."},"defaultValue":"1"},"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire":{"type":"String","metadata":{"displayName":"Microsoft - network server: Disconnect clients when logon hours expire","description":"Specifies - whether to disconnect users who are connected to the local computer outside - their user account''s valid logon hours. This setting affects the Server Message - Block (SMB) component. If you enable this policy setting you should also enable - ''Network security: Force logoff when logon hours expire''"},"defaultValue":"1"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsMicrosoftNetworkClient","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Microsoft - network client: Digitally sign communications (always);ExpectedValue'', ''='', - parameters(''MicrosoftNetworkClientDigitallySignCommunicationsAlways''), '','', - ''Microsoft network client: Send unencrypted password to third-party SMB servers;ExpectedValue'', - ''='', parameters(''MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers''), - '','', ''Microsoft network server: Amount of idle time required before suspending - session;ExpectedValue'', ''='', parameters(''MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession''), - '','', ''Microsoft network server: Digitally sign communications (always);ExpectedValue'', - ''='', parameters(''MicrosoftNetworkServerDigitallySignCommunicationsAlways''), - '','', ''Microsoft network server: Disconnect clients when logon hours expire;ExpectedValue'', - ''='', parameters(''MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsMicrosoftNetworkClient"},"MicrosoftNetworkClientDigitallySignCommunicationsAlways":{"value":"[parameters(''MicrosoftNetworkClientDigitallySignCommunicationsAlways'')]"},"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers":{"value":"[parameters(''MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers'')]"},"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession":{"value":"[parameters(''MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession'')]"},"MicrosoftNetworkServerDigitallySignCommunicationsAlways":{"value":"[parameters(''MicrosoftNetworkServerDigitallySignCommunicationsAlways'')]"},"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire":{"value":"[parameters(''MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"MicrosoftNetworkClientDigitallySignCommunicationsAlways":{"type":"string"},"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers":{"type":"string"},"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession":{"type":"string"},"MicrosoftNetworkServerDigitallySignCommunicationsAlways":{"type":"string"},"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Microsoft - network client: Digitally sign communications (always);ExpectedValue","value":"[parameters(''MicrosoftNetworkClientDigitallySignCommunicationsAlways'')]"},{"name":"Microsoft - network client: Send unencrypted password to third-party SMB servers;ExpectedValue","value":"[parameters(''MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers'')]"},{"name":"Microsoft - network server: Amount of idle time required before suspending session;ExpectedValue","value":"[parameters(''MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession'')]"},{"name":"Microsoft - network server: Digitally sign communications (always);ExpectedValue","value":"[parameters(''MicrosoftNetworkServerDigitallySignCommunicationsAlways'')]"},{"name":"Microsoft - network server: Disconnect clients when logon hours expire;ExpectedValue","value":"[parameters(''MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Microsoft - network client: Digitally sign communications (always);ExpectedValue","value":"[parameters(''MicrosoftNetworkClientDigitallySignCommunicationsAlways'')]"},{"name":"Microsoft - network client: Send unencrypted password to third-party SMB servers;ExpectedValue","value":"[parameters(''MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers'')]"},{"name":"Microsoft - network server: Amount of idle time required before suspending session;ExpectedValue","value":"[parameters(''MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession'')]"},{"name":"Microsoft - network server: Digitally sign communications (always);ExpectedValue","value":"[parameters(''MicrosoftNetworkServerDigitallySignCommunicationsAlways'')]"},{"name":"Microsoft - network server: Disconnect clients when logon hours expire;ExpectedValue","value":"[parameters(''MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bbcdd8fa-b600-4ee3-85b8-d184e3339652","type":"Microsoft.Authorization/policyDefinitions","name":"bbcdd8fa-b600-4ee3-85b8-d184e3339652"},{"properties":{"displayName":"[Deprecated]: - Audit API Applications that are not using latest supported Python Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported Python version for the latest security classes. Using - older classes and types can make your application vulnerable.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestPython","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bc0378bb-d7ab-4614-a0f6-5a6e3f02d644","type":"Microsoft.Authorization/policyDefinitions","name":"bc0378bb-d7ab-4614-a0f6-5a6e3f02d644"},{"properties":{"displayName":"Microsoft - Managed Control 1194 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1194"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bc34667f-397e-4a65-9b72-d0358f0b6b09","type":"Microsoft.Authorization/policyDefinitions","name":"bc34667f-397e-4a65-9b72-d0358f0b6b09"},{"properties":{"displayName":"Microsoft - Managed Control 1095 - Role-Based Security Training","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Awareness and Training control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1095"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bc3f6f7a-057b-433e-9834-e8c97b0194f6","type":"Microsoft.Authorization/policyDefinitions","name":"bc3f6f7a-057b-433e-9834-e8c97b0194f6"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''System Audit Policies - - Account Logon''","policyType":"BuiltIn","mode":"All","description":"This policy - should only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines with non-compliant settings in Group Policy category: ''System - Audit Policies - Account Logon''. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesAccountLogon","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bc87d811-4a9b-47cc-ae54-0a41abda7768","type":"Microsoft.Authorization/policyDefinitions","name":"bc87d811-4a9b-47cc-ae54-0a41abda7768"},{"properties":{"displayName":"Microsoft - Managed Control 1427 - Media Protection Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Media Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1427"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bc90e44f-d83f-4bdf-900f-3d5eb4111b31","type":"Microsoft.Authorization/policyDefinitions","name":"bc90e44f-d83f-4bdf-900f-3d5eb4111b31"},{"properties":{"displayName":"Microsoft - Managed Control 1351 - Incident Response Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1351"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bcfb6683-05e5-4ce6-9723-c3fbe9896bdd","type":"Microsoft.Authorization/policyDefinitions","name":"bcfb6683-05e5-4ce6-9723-c3fbe9896bdd"},{"properties":{"displayName":"Microsoft - Managed Control 1050 - Concurrent Session Control","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1050"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bd20184c-b4ec-4ce5-8db6-6e86352d183f","type":"Microsoft.Authorization/policyDefinitions","name":"bd20184c-b4ec-4ce5-8db6-6e86352d183f"},{"properties":{"displayName":"IP - Forwarding on your virtual machine should be disabled","policyType":"BuiltIn","mode":"All","description":"Enabling - IP forwarding on a virtual machine''s NIC allows the machine to receive traffic - addressed to other destinations. IP forwarding is rarely required (e.g., when - using the VM as a network virtual appliance), and therefore, this should be - reviewed by the network security team.","metadata":{"version":"1.0.1","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"disableIPForwarding","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","type":"Microsoft.Authorization/policyDefinitions","name":"bd352bd5-2853-4985-bf0d-73806b4a5744"},{"properties":{"displayName":"[Deprecated]: - Advanced Threat Protection types should be set to ''All'' in SQL Managed Instance - advanced data security settings","policyType":"BuiltIn","mode":"Indexed","description":"It''s - recommended to enable all Advanced Threat Protection types on your SQL Managed - Instance. Enabling all types protects against SQL injection, database vulnerabilities, - and any other anomalous activities.","metadata":{"version":"1.0.1-deprecated","category":"SQL","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"Disabled"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/managedInstances"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/managedInstances/securityAlertPolicies","name":"default","existenceCondition":{"field":"Microsoft.Sql/managedInstances/securityAlertPolicies/disabledAlerts[*]","equals":""}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bda18df3-5e41-4709-add9-2554ce68c966","type":"Microsoft.Authorization/policyDefinitions","name":"bda18df3-5e41-4709-add9-2554ce68c966"},{"properties":{"displayName":"Show - audit results from Windows VMs in which the Administrators group contains - any of the specified members","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines in which the Administrators group contains - any of the specified members. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AdministratorsGroupMembersToExclude","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bde62c94-ccca-4821-a815-92c1d31a76de","type":"Microsoft.Authorization/policyDefinitions","name":"bde62c94-ccca-4821-a815-92c1d31a76de"},{"properties":{"displayName":"[Deprecated]: - Audit Web Applications that are not using latest supported Java Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported Java version for the latest security classes. Using older - classes and types can make your application vulnerable.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"},{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestJava","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/be0a7681-bed4-48dc-9ff3-f0171ee170b6","type":"Microsoft.Authorization/policyDefinitions","name":"be0a7681-bed4-48dc-9ff3-f0171ee170b6"},{"properties":{"displayName":"Microsoft - Managed Control 1360 - Incident Handling","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1360"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/be5b05e7-0b82-4ebc-9eda-25e447b1a41e","type":"Microsoft.Authorization/policyDefinitions","name":"be5b05e7-0b82-4ebc-9eda-25e447b1a41e"},{"properties":{"displayName":"Web - Application Firewall should be enabled for Azure Front Door Service or Application - Gateway","policyType":"BuiltIn","mode":"Indexed","description":"Requires Web - Application Firewall on any Azure Front Door Service or Application Gateway. - A Web Application Firewall provides greater security for your other Azure - resources.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Deny"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Network/frontdoors"},{"field":"Microsoft.Network/frontdoors/frontendEndpoints[*].webApplicationFirewallPolicyLink.id","exists":"false"}]},{"allOf":[{"field":"type","equals":"Microsoft.Network/applicationGateways"},{"field":"Microsoft.Network/applicationGateways/webApplicationFirewallConfiguration","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/be7ed5c8-2660-4136-8216-e6f3412ba909","type":"Microsoft.Authorization/policyDefinitions","name":"be7ed5c8-2660-4136-8216-e6f3412ba909"},{"properties":{"displayName":"[Preview]: - Audit Windows VMs on which Windows Defender Exploit Guard is not enabled","policyType":"BuiltIn","mode":"Indexed","description":"Windows - Defender Exploit Guard helps protect against malware that uses exploits to - infect devices and spread. Exploit Guard protection consists of a number of - mitigations that can be applied to either the operating system or individual - apps. This policy requires the Azure Policy for Windows extension. For details, - visit https://aka.ms/gcpol.","metadata":{"category":"Guest Configuration","version":"1.1.0-preview","preview":true,"requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"WindowsDefenderExploitGuard","version":"1.*","configurationParameter":{"NotAvailableMachineState":"[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState"}}},"parameters":{"NotAvailableMachineState":{"type":"String","metadata":{"displayName":"[Preview]: - Status if Windows Defender is not available on machine","description":"Windows - Defender Exploit Guard is only available starting with Windows 10/Windows - Server with update 1709. Setting this value to ''Non-Compliant'' shows machines - with older versions on which Windows Defender Exploit Guard is not available - (such as Windows Server 2012 R2) as non-compliant. Setting this value to ''Compliant'' - shows these machines as compliant."},"allowedValues":["Compliant","Non-Compliant"],"defaultValue":"Non-Compliant"},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsDefenderExploitGuard","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState'', - ''='', parameters(''NotAvailableMachineState'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","type":"Microsoft.Authorization/policyDefinitions","name":"bed48b13-6647-468e-aa2f-1af1d3f4dd40"},{"properties":{"displayName":"Deploy - Diagnostic Settings for Key Vault to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Key Vault to stream to a regional Log Analytics - workspace when any Key Vault which is missing this diagnostic settings is - created or updated.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"},"defaultValue":"setbypolicy_logAnalytics"},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"],"defaultValue":"False"},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Log Analytics workspace - - True or False"},"allowedValues":["True","False"],"defaultValue":"True"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/vaults"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.KeyVault/vaults/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"AuditEvent","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bef3f64c-5290-43b7-85b0-9b254eef4c47","type":"Microsoft.Authorization/policyDefinitions","name":"bef3f64c-5290-43b7-85b0-9b254eef4c47"},{"properties":{"displayName":"Microsoft - Managed Control 1152 - System Interconnections","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1152"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/beff0acf-7e67-40b2-b1ca-1a0e8205cf1b","type":"Microsoft.Authorization/policyDefinitions","name":"beff0acf-7e67-40b2-b1ca-1a0e8205cf1b"},{"properties":{"displayName":"Geo-redundant - storage should be enabled for Storage Accounts","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Storage Account with geo-redundant storage not enabled.","metadata":{"version":"1.0.0","category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"not":{"field":"Microsoft.Storage/storageAccounts/sku.name","in":["Standard_GRS","Standard_RAGRS","Standard_GZRS","Standard_RAGZRS"]}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bf045164-79ba-4215-8f95-f8048dc1780b","type":"Microsoft.Authorization/policyDefinitions","name":"bf045164-79ba-4215-8f95-f8048dc1780b"},{"properties":{"displayName":"Microsoft - Managed Control 1590 - External Information System Services | Risk Assessments - / Organizational Approvals","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1590"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bf296b8c-f391-4ea4-9198-be3c9d39dd1f","type":"Microsoft.Authorization/policyDefinitions","name":"bf296b8c-f391-4ea4-9198-be3c9d39dd1f"},{"properties":{"displayName":"Microsoft - Managed Control 1446 - Physical And Environmental Protection Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1446"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bf6850fe-abba-468e-9ef4-d09ec7d983cd","type":"Microsoft.Authorization/policyDefinitions","name":"bf6850fe-abba-468e-9ef4-d09ec7d983cd"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''System Audit Policies - - Logon-Logoff''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''System Audit Policies - - Logon-Logoff''. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"AuditGroupMembership":{"type":"String","metadata":{"displayName":"Audit - Group Membership","description":"Specifies whether audit events are generated - when group memberships are enumerated on the client computer."},"allowedValues":["No - Auditing","Success","Failure","Success and Failure"],"defaultValue":"Success"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesLogonLogoff","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Audit - Group Membership;ExpectedValue'', ''='', parameters(''AuditGroupMembership'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SystemAuditPoliciesLogonLogoff"},"AuditGroupMembership":{"value":"[parameters(''AuditGroupMembership'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"AuditGroupMembership":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit - Group Membership;ExpectedValue","value":"[parameters(''AuditGroupMembership'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit - Group Membership;ExpectedValue","value":"[parameters(''AuditGroupMembership'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c04255ee-1b9f-42c1-abaa-bf1553f79930","type":"Microsoft.Authorization/policyDefinitions","name":"c04255ee-1b9f-42c1-abaa-bf1553f79930"},{"properties":{"displayName":"Only - approved VM extensions should be installed","policyType":"BuiltIn","mode":"Indexed","description":"This - policy governs the virtual machine extensions that are not approved.","metadata":{"version":"1.0.0","category":"Compute"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"},"approvedExtensions":{"type":"Array","metadata":{"description":"The - list of approved extension types that can be installed. Example: AzureDiskEncryption","displayName":"Approved - extensions"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines/extensions"},{"field":"Microsoft.Compute/virtualMachines/extensions/type","notIn":"[parameters(''approvedExtensions'')]"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c0e996f8-39cf-4af9-9f45-83fbde810432","type":"Microsoft.Authorization/policyDefinitions","name":"c0e996f8-39cf-4af9-9f45-83fbde810432"},{"properties":{"displayName":"Microsoft - Managed Control 1124 - Audit Reduction And Report Generation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1124"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c10152dd-78f8-4335-ae2d-ad92cc028da4","type":"Microsoft.Authorization/policyDefinitions","name":"c10152dd-78f8-4335-ae2d-ad92cc028da4"},{"properties":{"displayName":"Microsoft - Managed Control 1676 - Malicious Code Protection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1676"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c10fb58b-56a8-489e-9ce3-7ffe24e78e4b","type":"Microsoft.Authorization/policyDefinitions","name":"c10fb58b-56a8-489e-9ce3-7ffe24e78e4b"},{"properties":{"displayName":"Microsoft - Managed Control 1719 - Spam Protection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1719"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c13da9b4-fe14-4fe2-853a-5997c9d4215a","type":"Microsoft.Authorization/policyDefinitions","name":"c13da9b4-fe14-4fe2-853a-5997c9d4215a"},{"properties":{"displayName":"Microsoft - Managed Control 1226 - Information System Component Inventory | Automated - Unauthorized Component Detection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1226"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c158eb1c-ae7e-4081-8057-d527140c4e0c","type":"Microsoft.Authorization/policyDefinitions","name":"c158eb1c-ae7e-4081-8057-d527140c4e0c"},{"properties":{"displayName":"Deploy - associations for a custom provider","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - an association resource that associates selected resource types to the specified - custom provider. This policy deployment does not support nested resource types.","metadata":{"version":"1.0.0","category":"Custom - Provider"},"parameters":{"targetCustomProviderId":{"type":"String","metadata":{"displayName":"Custom - provider ID","description":"Resource ID of the Custom provider to which resources - need to be associated."}},"resourceTypesToAssociate":{"type":"Array","metadata":{"displayName":"Resource - types to associate","description":"The list of resource types to be associated - to the custom provider.","strongType":"resourceTypes"}},"associationNamePrefix":{"type":"String","metadata":{"displayName":"Association - name prefix","description":"Prefix to be added to the name of the association - resource being created."},"defaultValue":"DeployedByPolicy"}},"policyRule":{"if":{"field":"type","in":"[parameters(''resourceTypesToAssociate'')]"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.CustomProviders/Associations","name":"[concat(parameters(''associationNamePrefix''), - ''-'', uniqueString(parameters(''targetCustomProviderId'')))]","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"associatedResourceName":{"type":"string"},"resourceTypesToAssociate":{"type":"string"},"targetCustomProviderId":{"type":"string"},"associationNamePrefix":{"type":"string"}},"variables":{"resourceType":"[concat(parameters(''resourceTypesToAssociate''), - ''/providers/associations'')]","resourceName":"[concat(parameters(''associatedResourceName''), - ''/microsoft.customproviders/'', parameters(''associationNamePrefix''), ''-'', - uniqueString(parameters(''targetCustomProviderId'')))]"},"resources":[{"type":"Microsoft.Resources/deployments","apiVersion":"2017-05-10","name":"[concat(deployment().Name, - ''-2'')]","properties":{"mode":"Incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","resources":[{"type":"[variables(''resourceType'')]","name":"[variables(''resourceName'')]","apiVersion":"2018-09-01-preview","properties":{"targetResourceId":"[parameters(''targetCustomProviderId'')]"}}]}}}]},"parameters":{"resourceTypesToAssociate":{"value":"[field(''type'')]"},"associatedResourceName":{"value":"[field(''name'')]"},"targetCustomProviderId":{"value":"[parameters(''targetCustomProviderId'')]"},"associationNamePrefix":{"value":"[parameters(''associationNamePrefix'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c15c281f-ea5c-44cd-90b8-fc3c14d13f0c","type":"Microsoft.Authorization/policyDefinitions","name":"c15c281f-ea5c-44cd-90b8-fc3c14d13f0c"},{"properties":{"displayName":"Microsoft - Managed Control 1629 - Boundary Protection | External Telecommunications Services","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1629"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c171b095-7756-41de-8644-a062a96043f2","type":"Microsoft.Authorization/policyDefinitions","name":"c171b095-7756-41de-8644-a062a96043f2"},{"properties":{"displayName":"Microsoft - Managed Control 1004 - Account Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1004"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c17822dc-736f-4eb4-a97d-e6be662ff835","type":"Microsoft.Authorization/policyDefinitions","name":"c17822dc-736f-4eb4-a97d-e6be662ff835"},{"properties":{"displayName":"[Deprecated]: - Allow resource creation only in Asia data centers","policyType":"BuiltIn","mode":"Indexed","description":"Allows - resource creation in the following locations only: East Asia, Southeast Asia, - West India, South India, Central India, Japan East, Japan West","metadata":{"version":"1.0.0-deprecated","category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"location","in":["eastasia","southeastasia","westindia","southindia","centralindia","japaneast","japanwest"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c1b9cbed-08e3-427d-b9ce-7c535b1e9b94","type":"Microsoft.Authorization/policyDefinitions","name":"c1b9cbed-08e3-427d-b9ce-7c535b1e9b94"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''System Audit Policies - - Account Logon''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''System Audit Policies - - Account Logon''. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"AuditCredentialValidation":{"type":"String","metadata":{"displayName":"Audit - Credential Validation","description":"Specifies whether audit events are generated - when credentials are submitted for a user account logon request. This setting - is especially useful for monitoring unsuccessful attempts, to find brute-force - attacks, account enumeration, and potential account compromise events on domain - controllers."},"allowedValues":["No Auditing","Success","Failure","Success - and Failure"],"defaultValue":"Success and Failure"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesAccountLogon","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Audit - Credential Validation;ExpectedValue'', ''='', parameters(''AuditCredentialValidation'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SystemAuditPoliciesAccountLogon"},"AuditCredentialValidation":{"value":"[parameters(''AuditCredentialValidation'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"AuditCredentialValidation":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit - Credential Validation;ExpectedValue","value":"[parameters(''AuditCredentialValidation'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit - Credential Validation;ExpectedValue","value":"[parameters(''AuditCredentialValidation'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c1e289c0-ffad-475d-a924-adc058765d65","type":"Microsoft.Authorization/policyDefinitions","name":"c1e289c0-ffad-475d-a924-adc058765d65"},{"properties":{"displayName":"Microsoft - Managed Control 1503 - Information Security Architecture","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1503"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c1fa9c2f-d439-4ab9-8b83-81fb1934f81d","type":"Microsoft.Authorization/policyDefinitions","name":"c1fa9c2f-d439-4ab9-8b83-81fb1934f81d"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs that are not set to the specified time - zone","policyType":"BuiltIn","mode":"Indexed","description":"This policy creates - a Guest Configuration assignment to audit Windows virtual machines that are - not set to the specified time zone. It also creates a system-assigned managed - identity and deploys the VM extension for Guest Configuration. This policy - should only be used along with its corresponding audit policy in an initiative. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"TimeZone":{"type":"String","metadata":{"displayName":"Time - zone","description":"The expected time zone"},"allowedValues":["(UTC-12:00) - International Date Line West","(UTC-11:00) Coordinated Universal Time-11","(UTC-10:00) - Aleutian Islands","(UTC-10:00) Hawaii","(UTC-09:30) Marquesas Islands","(UTC-09:00) - Alaska","(UTC-09:00) Coordinated Universal Time-09","(UTC-08:00) Baja California","(UTC-08:00) - Coordinated Universal Time-08","(UTC-08:00) Pacific Time (US & Canada)","(UTC-07:00) - Arizona","(UTC-07:00) Chihuahua, La Paz, Mazatlan","(UTC-07:00) Mountain Time - (US & Canada)","(UTC-06:00) Central America","(UTC-06:00) Central Time (US - & Canada)","(UTC-06:00) Easter Island","(UTC-06:00) Guadalajara, Mexico City, - Monterrey","(UTC-06:00) Saskatchewan","(UTC-05:00) Bogota, Lima, Quito, Rio - Branco","(UTC-05:00) Chetumal","(UTC-05:00) Eastern Time (US & Canada)","(UTC-05:00) - Haiti","(UTC-05:00) Havana","(UTC-05:00) Indiana (East)","(UTC-05:00) Turks - and Caicos","(UTC-04:00) Asuncion","(UTC-04:00) Atlantic Time (Canada)","(UTC-04:00) - Caracas","(UTC-04:00) Cuiaba","(UTC-04:00) Georgetown, La Paz, Manaus, San - Juan","(UTC-04:00) Santiago","(UTC-03:30) Newfoundland","(UTC-03:00) Araguaina","(UTC-03:00) - Brasilia","(UTC-03:00) Cayenne, Fortaleza","(UTC-03:00) City of Buenos Aires","(UTC-03:00) - Greenland","(UTC-03:00) Montevideo","(UTC-03:00) Punta Arenas","(UTC-03:00) - Saint Pierre and Miquelon","(UTC-03:00) Salvador","(UTC-02:00) Coordinated - Universal Time-02","(UTC-02:00) Mid-Atlantic - Old","(UTC-01:00) Azores","(UTC-01:00) - Cabo Verde Is.","(UTC) Coordinated Universal Time","(UTC+00:00) Dublin, Edinburgh, - Lisbon, London","(UTC+00:00) Monrovia, Reykjavik","(UTC+00:00) Sao Tome","(UTC+01:00) - Casablanca","(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna","(UTC+01:00) - Belgrade, Bratislava, Budapest, Ljubljana, Prague","(UTC+01:00) Brussels, - Copenhagen, Madrid, Paris","(UTC+01:00) Sarajevo, Skopje, Warsaw, Zagreb","(UTC+01:00) - West Central Africa","(UTC+02:00) Amman","(UTC+02:00) Athens, Bucharest","(UTC+02:00) - Beirut","(UTC+02:00) Cairo","(UTC+02:00) Chisinau","(UTC+02:00) Damascus","(UTC+02:00) - Gaza, Hebron","(UTC+02:00) Harare, Pretoria","(UTC+02:00) Helsinki, Kyiv, - Riga, Sofia, Tallinn, Vilnius","(UTC+02:00) Jerusalem","(UTC+02:00) Kaliningrad","(UTC+02:00) - Khartoum","(UTC+02:00) Tripoli","(UTC+02:00) Windhoek","(UTC+03:00) Baghdad","(UTC+03:00) - Istanbul","(UTC+03:00) Kuwait, Riyadh","(UTC+03:00) Minsk","(UTC+03:00) Moscow, - St. Petersburg","(UTC+03:00) Nairobi","(UTC+03:30) Tehran","(UTC+04:00) Abu - Dhabi, Muscat","(UTC+04:00) Astrakhan, Ulyanovsk","(UTC+04:00) Baku","(UTC+04:00) - Izhevsk, Samara","(UTC+04:00) Port Louis","(UTC+04:00) Saratov","(UTC+04:00) - Tbilisi","(UTC+04:00) Volgograd","(UTC+04:00) Yerevan","(UTC+04:30) Kabul","(UTC+05:00) - Ashgabat, Tashkent","(UTC+05:00) Ekaterinburg","(UTC+05:00) Islamabad, Karachi","(UTC+05:00) - Qyzylorda","(UTC+05:30) Chennai, Kolkata, Mumbai, New Delhi","(UTC+05:30) - Sri Jayawardenepura","(UTC+05:45) Kathmandu","(UTC+06:00) Astana","(UTC+06:00) - Dhaka","(UTC+06:00) Omsk","(UTC+06:30) Yangon (Rangoon)","(UTC+07:00) Bangkok, - Hanoi, Jakarta","(UTC+07:00) Barnaul, Gorno-Altaysk","(UTC+07:00) Hovd","(UTC+07:00) - Krasnoyarsk","(UTC+07:00) Novosibirsk","(UTC+07:00) Tomsk","(UTC+08:00) Beijing, - Chongqing, Hong Kong, Urumqi","(UTC+08:00) Irkutsk","(UTC+08:00) Kuala Lumpur, - Singapore","(UTC+08:00) Perth","(UTC+08:00) Taipei","(UTC+08:00) Ulaanbaatar","(UTC+08:45) - Eucla","(UTC+09:00) Chita","(UTC+09:00) Osaka, Sapporo, Tokyo","(UTC+09:00) - Pyongyang","(UTC+09:00) Seoul","(UTC+09:00) Yakutsk","(UTC+09:30) Adelaide","(UTC+09:30) - Darwin","(UTC+10:00) Brisbane","(UTC+10:00) Canberra, Melbourne, Sydney","(UTC+10:00) - Guam, Port Moresby","(UTC+10:00) Hobart","(UTC+10:00) Vladivostok","(UTC+10:30) - Lord Howe Island","(UTC+11:00) Bougainville Island","(UTC+11:00) Chokurdakh","(UTC+11:00) - Magadan","(UTC+11:00) Norfolk Island","(UTC+11:00) Sakhalin","(UTC+11:00) - Solomon Is., New Caledonia","(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky","(UTC+12:00) - Auckland, Wellington","(UTC+12:00) Coordinated Universal Time+12","(UTC+12:00) - Fiji","(UTC+12:00) Petropavlovsk-Kamchatsky - Old","(UTC+12:45) Chatham Islands","(UTC+13:00) - Coordinated Universal Time+13","(UTC+13:00) Nuku''alofa","(UTC+13:00) Samoa","(UTC+14:00) - Kiritimati Island"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsTimeZone","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[WindowsTimeZone]WindowsTimeZone1;TimeZone'', - ''='', parameters(''TimeZone'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WindowsTimeZone"},"TimeZone":{"value":"[parameters(''TimeZone'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"TimeZone":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[WindowsTimeZone]WindowsTimeZone1;TimeZone","value":"[parameters(''TimeZone'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[WindowsTimeZone]WindowsTimeZone1;TimeZone","value":"[parameters(''TimeZone'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c21f7060-c148-41cf-a68b-0ab3e14c764c","type":"Microsoft.Authorization/policyDefinitions","name":"c21f7060-c148-41cf-a68b-0ab3e14c764c"},{"properties":{"displayName":"Advanced - threat protection should be enabled on Azure Container Registry","policyType":"BuiltIn","mode":"All","description":"Advanced - threat protection standard tier should be enabled on Azure Container Registry. - This provides scanning of container registries for security vulnerabilities - on each pushed container image and exposes detailed findings per image.","metadata":{"version":"1.0.1","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/pricings","name":"ContainerRegistry","existenceScope":"subscription","existenceCondition":{"field":"Microsoft.Security/pricings/pricingTier","equals":"Standard"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","type":"Microsoft.Authorization/policyDefinitions","name":"c25d9a16-bc35-4e15-a7e5-9db606bf9ed4"},{"properties":{"displayName":"Show - audit results from Windows VMs on which the specified services are not installed - and ''Running''","policyType":"BuiltIn","mode":"All","description":"This policy - should only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines on which the specified services are not installed and ''Running''. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsServiceStatus","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c2dd2a9a-8a20-4a9c-b8d6-f17ccc26939a","type":"Microsoft.Authorization/policyDefinitions","name":"c2dd2a9a-8a20-4a9c-b8d6-f17ccc26939a"},{"properties":{"displayName":"Ensure - that ''.NET Framework'' version is the latest, if used as a part of the API - app","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for .NET Framework software either due to security - flaws or to include additional functionality. Using the latest .NET framework - version for web apps is recommended in order to take advantage of security - fixes, if any, and/or new functionalities of the latest version.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/web.netFrameworkVersion","in":["v3.0","v4.0"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c2e7ca55-f62c-49b2-89a4-d41eb661d2f0","type":"Microsoft.Authorization/policyDefinitions","name":"c2e7ca55-f62c-49b2-89a4-d41eb661d2f0"},{"properties":{"displayName":"Microsoft - Managed Control 1176 - Baseline Configuration","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1176"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c30690a5-7bf3-467f-b0cd-ef5c7c7449cd","type":"Microsoft.Authorization/policyDefinitions","name":"c30690a5-7bf3-467f-b0cd-ef5c7c7449cd"},{"properties":{"displayName":"Microsoft - Managed Control 1389 - Information Spillage Response","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1389"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c39e6fda-ae70-4891-a739-be7bba6d1062","type":"Microsoft.Authorization/policyDefinitions","name":"c39e6fda-ae70-4891-a739-be7bba6d1062"},{"properties":{"displayName":"Microsoft - Managed Control 1390 - Information Spillage Response | Responsible Personnel","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1390"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c3b65b63-09ec-4cb5-8028-7dd324d10eb0","type":"Microsoft.Authorization/policyDefinitions","name":"c3b65b63-09ec-4cb5-8028-7dd324d10eb0"},{"properties":{"displayName":"System - updates on virtual machine scale sets should be installed","policyType":"BuiltIn","mode":"Indexed","description":"Audit - whether there are any missing system security updates and critical updates - that should be installed to ensure that your Windows and Linux virtual machine - scale sets are secure.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"SystemUpdates","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","type":"Microsoft.Authorization/policyDefinitions","name":"c3f317a7-a95c-4547-b7e7-11017ebdf2fe"},{"properties":{"displayName":"Show - audit results from Linux VMs that have accounts without passwords","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that have accounts without passwords. For - more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"3.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordPolicy_msid232","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c40c9087-1981-4e73-9f53-39743eda9d05","type":"Microsoft.Authorization/policyDefinitions","name":"c40c9087-1981-4e73-9f53-39743eda9d05"},{"properties":{"displayName":"Microsoft - Managed Control 1220 - Least Functionality | Authorized Software / Whitelisting","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1220"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c40f31a7-81e1-4130-99e5-a02ceea2a1d6","type":"Microsoft.Authorization/policyDefinitions","name":"c40f31a7-81e1-4130-99e5-a02ceea2a1d6"},{"properties":{"displayName":"Microsoft - Managed Control 1513 - Personnel Screening | Information With Special Protection - Measures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1513"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c416970d-b12b-49eb-8af4-fb144cd7c290","type":"Microsoft.Authorization/policyDefinitions","name":"c416970d-b12b-49eb-8af4-fb144cd7c290"},{"properties":{"displayName":"Microsoft - Antimalware for Azure should be configured to automatically update protection - signatures","policyType":"BuiltIn","mode":"Indexed","description":"This policy - audits any Windows virtual machine not configured with automatic update of - Microsoft Antimalware protection signatures.","metadata":{"version":"1.0.0","category":"Compute"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","equals":"Windows"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"IaaSAntimalware"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Security"},{"field":"Microsoft.Compute/virtualMachines/extensions/autoUpgradeMinorVersion","equals":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c43e4a30-77cb-48ab-a4dd-93f175c63b57","type":"Microsoft.Authorization/policyDefinitions","name":"c43e4a30-77cb-48ab-a4dd-93f175c63b57"},{"properties":{"displayName":"[Preview]: - Container Registry should use a virtual network service endpoint","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Container Registry not configured to use a virtual network - service endpoint.","metadata":{"version":"1.0.0-preview","category":"Network","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerRegistry/registries"},{"anyOf":[{"field":"Microsoft.ContainerRegistry/registries/networkRuleSet.defaultAction","notEquals":"Deny"},{"field":"Microsoft.ContainerRegistry/registries/networkRuleSet.virtualNetworkRules[*].action","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c4857be7-912a-4c75-87e6-e30292bcdf78","type":"Microsoft.Authorization/policyDefinitions","name":"c4857be7-912a-4c75-87e6-e30292bcdf78"},{"properties":{"displayName":"Microsoft - Managed Control 1235 - Software Usage Restrictions","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1235"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c49c610b-ece4-44b3-988c-2172b70d6e46","type":"Microsoft.Authorization/policyDefinitions","name":"c49c610b-ece4-44b3-988c-2172b70d6e46"},{"properties":{"displayName":"Microsoft - Managed Control 1173 - Internal System Connections","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1173"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c4aff9e7-2e60-46fa-86be-506b79033fc5","type":"Microsoft.Authorization/policyDefinitions","name":"c4aff9e7-2e60-46fa-86be-506b79033fc5"},{"properties":{"displayName":"Managed - identity should be used in your API App","policyType":"BuiltIn","mode":"Indexed","description":"Use - a managed identity for enhanced authentication security","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/managedServiceIdentityId","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","type":"Microsoft.Authorization/policyDefinitions","name":"c4d441f8-f9d9-4a9e-9cef-e82117cb3eef"},{"properties":{"displayName":"Authentication - should be enabled on your API app","policyType":"BuiltIn","mode":"Indexed","description":"Azure - App Service Authentication is a feature that can prevent anonymous HTTP requests - from reaching the API app, or authenticate those that have tokens before they - reach the API app","metadata":{"version":"1.0.0","category":"App Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/siteAuthEnabled","equals":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c4ebc54a-46e1-481a-bee2-d4411e95d828","type":"Microsoft.Authorization/policyDefinitions","name":"c4ebc54a-46e1-481a-bee2-d4411e95d828"},{"properties":{"displayName":"Microsoft - Managed Control 1600 - Developer Security Testing And Evaluation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1600"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c53f3123-d233-44a7-930b-f40d3bfeb7d6","type":"Microsoft.Authorization/policyDefinitions","name":"c53f3123-d233-44a7-930b-f40d3bfeb7d6"},{"properties":{"displayName":"An - activity log alert should exist for specific Policy operations","policyType":"BuiltIn","mode":"All","description":"This - policy audits specific Policy operations with no activity log alerts configured.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"operationName":{"type":"String","metadata":{"displayName":"Operation - Name","description":"Policy Operation name for which activity log alert should - exist"},"allowedValues":["Microsoft.Authorization/policyAssignments/write","Microsoft.Authorization/policyAssignments/delete"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Resources/subscriptions"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/ActivityLogAlerts","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/ActivityLogAlerts/enabled","equals":"true"},{"count":{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field","equals":"category"},{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals","equals":"Policy"}]},{"allOf":[{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field","equals":"operationName"},{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals","equals":"[parameters(''operationName'')]"}]}]}},"equals":2},{"not":{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field","equals":"category"}},{"not":{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field","equals":"operationName"}}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c5447c04-a4d7-4ba8-a263-c9ee321a6858","type":"Microsoft.Authorization/policyDefinitions","name":"c5447c04-a4d7-4ba8-a263-c9ee321a6858"},{"properties":{"displayName":"Microsoft - Managed Control 1408 - Maintenance Tools | Prevent Unauthorized Removal","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1408"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c5f56ac6-4bb2-4086-bc41-ad76344ba2c2","type":"Microsoft.Authorization/policyDefinitions","name":"c5f56ac6-4bb2-4086-bc41-ad76344ba2c2"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs that contain certificates expiring within - the specified number of days","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that contain certificates expiring within the specified number of days. It - also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"CertificateStorePath":{"type":"String","metadata":{"displayName":"Certificate - store path","description":"The path to the certificate store containing the - certificates to check the expiration dates of. Default value is ''Cert:'' - which is the root certificate store path, so all certificates on the machine - will be checked. Other example paths: ''Cert:\\LocalMachine'', ''Cert:\\LocalMachine\\TrustedPublisher'', - ''Cert:\\CurrentUser''"},"defaultValue":"Cert:"},"ExpirationLimitInDays":{"type":"String","metadata":{"displayName":"Expiration - limit in days","description":"An integer indicating the number of days within - which to check for certificates that are expiring. For example, if this value - is 30, any certificate expiring within the next 30 days will cause this policy - to be non-compliant."},"defaultValue":"30"},"CertificateThumbprintsToInclude":{"type":"String","metadata":{"displayName":"Certificate - thumbprints to include","description":"A semicolon-separated list of certificate - thumbprints to check under the specified path. If a value is not specified, - all certificates under the certificate store path will be checked. If a value - is specified, no certificates other than those with the thumbprints specified - will be checked. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3"},"defaultValue":""},"CertificateThumbprintsToExclude":{"type":"String","metadata":{"displayName":"Certificate - thumbprints to exclude","description":"A semicolon-separated list of certificate - thumbprints to ignore. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3"},"defaultValue":""},"IncludeExpiredCertificates":{"type":"String","metadata":{"displayName":"Include - expired certificates","description":"Must be ''true'' or ''false''. True indicates - that any found certificates that have already expired will also make this - policy non-compliant. False indicates that certificates that have expired - will be be ignored."},"allowedValues":["true","false"],"defaultValue":"false"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"CertificateExpiration","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[CertificateStore]CertificateStore1;CertificateStorePath'', - ''='', parameters(''CertificateStorePath''), '','', ''[CertificateStore]CertificateStore1;ExpirationLimitInDays'', - ''='', parameters(''ExpirationLimitInDays''), '','', ''[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude'', - ''='', parameters(''CertificateThumbprintsToInclude''), '','', ''[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude'', - ''='', parameters(''CertificateThumbprintsToExclude''), '','', ''[CertificateStore]CertificateStore1;IncludeExpiredCertificates'', - ''='', parameters(''IncludeExpiredCertificates'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"CertificateExpiration"},"CertificateStorePath":{"value":"[parameters(''CertificateStorePath'')]"},"ExpirationLimitInDays":{"value":"[parameters(''ExpirationLimitInDays'')]"},"CertificateThumbprintsToInclude":{"value":"[parameters(''CertificateThumbprintsToInclude'')]"},"CertificateThumbprintsToExclude":{"value":"[parameters(''CertificateThumbprintsToExclude'')]"},"IncludeExpiredCertificates":{"value":"[parameters(''IncludeExpiredCertificates'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"CertificateStorePath":{"type":"string"},"ExpirationLimitInDays":{"type":"string"},"CertificateThumbprintsToInclude":{"type":"string"},"CertificateThumbprintsToExclude":{"type":"string"},"IncludeExpiredCertificates":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[CertificateStore]CertificateStore1;CertificateStorePath","value":"[parameters(''CertificateStorePath'')]"},{"name":"[CertificateStore]CertificateStore1;ExpirationLimitInDays","value":"[parameters(''ExpirationLimitInDays'')]"},{"name":"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude","value":"[parameters(''CertificateThumbprintsToInclude'')]"},{"name":"[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude","value":"[parameters(''CertificateThumbprintsToExclude'')]"},{"name":"[CertificateStore]CertificateStore1;IncludeExpiredCertificates","value":"[parameters(''IncludeExpiredCertificates'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[CertificateStore]CertificateStore1;CertificateStorePath","value":"[parameters(''CertificateStorePath'')]"},{"name":"[CertificateStore]CertificateStore1;ExpirationLimitInDays","value":"[parameters(''ExpirationLimitInDays'')]"},{"name":"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude","value":"[parameters(''CertificateThumbprintsToInclude'')]"},{"name":"[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude","value":"[parameters(''CertificateThumbprintsToExclude'')]"},{"name":"[CertificateStore]CertificateStore1;IncludeExpiredCertificates","value":"[parameters(''IncludeExpiredCertificates'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c5fbc59e-fb6f-494f-81e2-d99a671bdaa8","type":"Microsoft.Authorization/policyDefinitions","name":"c5fbc59e-fb6f-494f-81e2-d99a671bdaa8"},{"properties":{"displayName":"Microsoft - Managed Control 1670 - Flaw Remediation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1670"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c6108469-57ee-4666-af7e-79ba61c7ae0c","type":"Microsoft.Authorization/policyDefinitions","name":"c6108469-57ee-4666-af7e-79ba61c7ae0c"},{"properties":{"displayName":"Microsoft - Managed Control 1190 - Configuration Change Control","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1190"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c66a3d1e-465b-4f28-9da5-aef701b59892","type":"Microsoft.Authorization/policyDefinitions","name":"c66a3d1e-465b-4f28-9da5-aef701b59892"},{"properties":{"displayName":"Microsoft - Managed Control 1120 - Audit Review, Analysis, And Reporting | Integration - / Scanning And Monitoring Capabilities","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1120"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c69b870e-857b-458b-af02-bb234f7a00d3","type":"Microsoft.Authorization/policyDefinitions","name":"c69b870e-857b-458b-af02-bb234f7a00d3"},{"properties":{"displayName":"Microsoft - Managed Control 1125 - Audit Reduction And Report Generation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1125"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c6ce745a-670e-47d3-a6c4-3cfe5ef00c10","type":"Microsoft.Authorization/policyDefinitions","name":"c6ce745a-670e-47d3-a6c4-3cfe5ef00c10"},{"properties":{"displayName":"[Preview]: - Deploy Diagnostic Settings for Recovery Services Vault to Log Analytics workspace - for resource specific categories.","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Diagnostic Settings for Recovery Services Vault to stream to Log Analytics - workspace for Resource specific categories. If any of the Resource specific - categories are not enabled, a new diagnostic setting is created.","metadata":{"version":"1.0.0-preview","preview":true,"category":"Monitoring"},"parameters":{"profileName":{"type":"String","metadata":{"displayName":"[Preview]: - Profile name","description":"The diagnostic settings profile name"},"defaultValue":"setbypolicy_logAnalytics"},"logAnalytics":{"type":"String","metadata":{"displayName":"[Preview]: - Log Analytics workspace","description":"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant ''Log Analytics Contributor'' permissions (or similar) - to the policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"tagName":{"type":"String","metadata":{"displayName":"[Preview]: - Exclusion Tag Name","description":"Name of the tag to use for excluding vaults - from this policy. This should be used along with the Exclusion Tag Value parameter."},"defaultValue":""},"tagValue":{"type":"String","metadata":{"displayName":"[Preview]: - Exclusion Tag Value","description":"Value of the tag to use for excluding - vaults from this policy. This should be used along with the Exclusion Tag - Name parameter."},"defaultValue":""}},"policyRule":{"if":{"allof":[{"field":"type","equals":"Microsoft.RecoveryServices/vaults"},{"not":{"field":"[concat(''tags['',parameters(''tagName''), - '']'')]","equals":"[parameters(''tagValue'')]"}}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"allof":[{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"allof":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].Category","in":["CoreAzureBackup","AddonAzureBackupJobs","AddonAzureBackupAlerts","AddonAzureBackupPolicy","AddonAzureBackupStorage","AddonAzureBackupProtectedInstance"]},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].Enabled","equals":"True"}]}},"Equals":6},{"field":"Microsoft.Insights/diagnosticSettings/workspaceId","notEquals":""},{"field":"Microsoft.Insights/diagnosticSettings/logAnalyticsDestinationType","equals":"Dedicated"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vaultName":{"type":"string"},"logAnalytics":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.RecoveryServices/vaults/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''vaultName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","logAnalyticsDestinationType":"Dedicated","metrics":[],"logs":[{"category":"CoreAzureBackup","enabled":"true"},{"category":"AddonAzureBackupAlerts","enabled":"true"},{"category":"AddonAzureBackupJobs","enabled":"true"},{"category":"AddonAzureBackupPolicy","enabled":"true"},{"category":"AddonAzureBackupProtectedInstance","enabled":"true"},{"category":"AddonAzureBackupStorage","enabled":"true"}]}}],"outputs":{"policy":{"type":"string","value":"[concat(parameters(''logAnalytics''), - ''configured for diagnostic logs for '', '': '', parameters(''vaultName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]"}}},"parameters":{"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"vaultName":{"value":"[field(''name'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c717fb0c-d118-4c43-ab3d-ece30ac81fb3","type":"Microsoft.Authorization/policyDefinitions","name":"c717fb0c-d118-4c43-ab3d-ece30ac81fb3"},{"properties":{"displayName":"Microsoft - Managed Control 1619 - Information In Shared Resources","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1619"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c722e569-cb52-45f3-a643-836547d016e1","type":"Microsoft.Authorization/policyDefinitions","name":"c722e569-cb52-45f3-a643-836547d016e1"},{"properties":{"displayName":"Microsoft - Managed Control 1121 - Audit Review, Analysis, And Reporting | Correlation - With Physical Monitoring","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1121"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c72b0eb9-1fc2-44e5-a866-e7cb0532f7c1","type":"Microsoft.Authorization/policyDefinitions","name":"c72b0eb9-1fc2-44e5-a866-e7cb0532f7c1"},{"properties":{"displayName":"Authentication - should be enabled on your Function app","policyType":"BuiltIn","mode":"Indexed","description":"Azure - App Service Authentication is a feature that can prevent anonymous HTTP requests - from reaching the Function app, or authenticate those that have tokens before - they reach the Function app","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","equals":"functionapp"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/siteAuthEnabled","equals":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8","type":"Microsoft.Authorization/policyDefinitions","name":"c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8"},{"properties":{"displayName":"Microsoft - Managed Control 1353 - Incident Response Training","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1353"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c785ad59-f78f-44ad-9a7f-d1202318c748","type":"Microsoft.Authorization/policyDefinitions","name":"c785ad59-f78f-44ad-9a7f-d1202318c748"},{"properties":{"displayName":"[Deprecated]: - Email notifications to admins and subscription owners should be enabled in - SQL server advanced data security settings","policyType":"BuiltIn","mode":"Indexed","description":"Audit - that ''email notification to admins and subscription owners'' is enabled in - the SQL server advanced threat protection settings. This ensures that any - detections of anomalous activities on SQL server are reported as soon as possible - to the admins.","metadata":{"version":"1.0.0-deprecated","category":"SQL","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"Disabled"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/securityAlertPolicies","name":"default","existenceCondition":{"field":"Microsoft.Sql/servers/securityAlertPolicies/emailAccountAdmins","equals":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c8343d2f-fdc9-4a97-b76f-fc71d1163bfc","type":"Microsoft.Authorization/policyDefinitions","name":"c8343d2f-fdc9-4a97-b76f-fc71d1163bfc"},{"properties":{"displayName":"Deploy - Diagnostic Settings for Batch Account to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Batch Account to stream to a regional Log Analytics - workspace when any Batch Account which is missing this diagnostic settings - is created or updated.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"},"defaultValue":"setbypolicy_logAnalytics"},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"],"defaultValue":"False"},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Log Analytics workspace - - True or False"},"allowedValues":["True","False"],"defaultValue":"True"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Batch/batchAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.Batch/batchAccounts/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"ServiceLog","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c84e5349-db6d-4769-805e-e14037dab9b5","type":"Microsoft.Authorization/policyDefinitions","name":"c84e5349-db6d-4769-805e-e14037dab9b5"},{"properties":{"displayName":"[Deprecated]: - API App should only be accessible over HTTPS","policyType":"BuiltIn","mode":"All","description":"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"OnlyHttpsForApiApp","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c85538c1-b527-4ce4-bdb4-1dabcb3fd90d","type":"Microsoft.Authorization/policyDefinitions","name":"c85538c1-b527-4ce4-bdb4-1dabcb3fd90d"},{"properties":{"displayName":"Microsoft - Managed Control 1470 - Emergency Shutoff","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1470"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c89ba09f-2e0f-44d0-8095-65b05bd151ef","type":"Microsoft.Authorization/policyDefinitions","name":"c89ba09f-2e0f-44d0-8095-65b05bd151ef"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''Security Options - Interactive - Logon''","policyType":"BuiltIn","mode":"All","description":"This policy should - only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines with non-compliant settings in Group Policy category: ''Security - Options - Interactive Logon''. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsInteractiveLogon","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c8abcef9-fc26-482f-b8db-5fa60ee4586d","type":"Microsoft.Authorization/policyDefinitions","name":"c8abcef9-fc26-482f-b8db-5fa60ee4586d"},{"properties":{"displayName":"Microsoft - Managed Control 1018 - Account Management | Role-Based Schemes","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1018"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c9121abf-e698-4ee9-b1cf-71ee528ff07f","type":"Microsoft.Authorization/policyDefinitions","name":"c9121abf-e698-4ee9-b1cf-71ee528ff07f"},{"properties":{"displayName":"Diagnostic - logs in Data Lake Analytics should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of diagnostic logs. This enables you to recreate activity trails - to use for investigation purposes; when a security incident occurs or when - your network is compromised","metadata":{"version":"3.0.0","category":"Data - Lake"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataLakeAnalytics/accounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","type":"Microsoft.Authorization/policyDefinitions","name":"c95c74d9-38fe-4f0d-af86-0c7d626a315c"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''User Rights Assignment''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''User Rights Assignment''. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_UserRightsAssignment","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c961dac9-5916-42e8-8fb1-703148323994","type":"Microsoft.Authorization/policyDefinitions","name":"c961dac9-5916-42e8-8fb1-703148323994"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs with a pending reboot","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with a pending reboot. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsPendingReboot","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WindowsPendingReboot"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c96f3246-4382-4264-bf6b-af0b35e23c3c","type":"Microsoft.Authorization/policyDefinitions","name":"c96f3246-4382-4264-bf6b-af0b35e23c3c"},{"properties":{"displayName":"Deploy - Diagnostic Settings for Network Security Groups","policyType":"BuiltIn","mode":"Indexed","description":"This - policy automatically deploys diagnostic settings to network security groups. - A storage account with name ''{storagePrefixParameter}{NSGLocation}'' will - be automatically created.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"storagePrefix":{"type":"String","metadata":{"displayName":"Storage - Account Prefix for Regional Storage Account","description":"This prefix will - be combined with the network security group location to form the created storage - account name."}},"rgName":{"type":"String","metadata":{"displayName":"Resource - Group Name for Storage Account (must exist)","description":"The resource group - that the storage account will be created in. This resource group must already - exist.","strongType":"ExistingResourceGroups"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"setbypolicy","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"location":{"type":"string"},"storagePrefix":{"type":"string"},"nsgName":{"type":"string"},"rgName":{"type":"string"}},"variables":{"storageDeployName":"[concat(''policyStorage_'', - uniqueString(parameters(''location''), parameters(''nsgName'')))]"},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/providers/diagnosticSettings","name":"[concat(parameters(''nsgName''),''/Microsoft.Insights/setbypolicy'')]","apiVersion":"2017-05-01-preview","location":"[parameters(''location'')]","dependsOn":["[variables(''storageDeployName'')]"],"properties":{"storageAccountId":"[reference(variables(''storageDeployName'')).outputs.storageAccountId.value]","logs":[{"category":"NetworkSecurityGroupEvent","enabled":true,"retentionPolicy":{"enabled":false,"days":0}},{"category":"NetworkSecurityGroupRuleCounter","enabled":true,"retentionPolicy":{"enabled":false,"days":0}}]}},{"apiVersion":"2017-05-10","name":"[variables(''storageDeployName'')]","type":"Microsoft.Resources/deployments","resourceGroup":"[parameters(''rgName'')]","properties":{"mode":"incremental","parameters":{"location":{"value":"[parameters(''location'')]"},"storagePrefix":{"value":"[parameters(''storagePrefix'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json","contentVersion":"1.0.0.0","parameters":{"location":{"type":"string"},"storagePrefix":{"type":"string"}},"resources":[{"apiVersion":"2017-06-01","type":"Microsoft.Storage/storageAccounts","name":"[concat(parameters(''storageprefix''), - parameters(''location''))]","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"[parameters(''location'')]","tags":{"created-by":"policy"},"scale":null,"properties":{"networkAcls":{"bypass":"AzureServices","defaultAction":"Allow","ipRules":[],"virtualNetworkRules":[]},"supportsHttpsTrafficOnly":true}}],"outputs":{"storageAccountId":{"type":"string","value":"[resourceId(parameters(''rgName''), - ''Microsoft.Storage/storageAccounts'',concat(parameters(''storagePrefix''), - parameters(''location'')))]"}}}}}]},"parameters":{"location":{"value":"[field(''location'')]"},"storagePrefix":{"value":"[parameters(''storagePrefix'')]"},"rgName":{"value":"[parameters(''rgName'')]"},"nsgName":{"value":"[field(''name'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c9c29499-c1d1-4195-99bd-2ec9e3a9dc89","type":"Microsoft.Authorization/policyDefinitions","name":"c9c29499-c1d1-4195-99bd-2ec9e3a9dc89"},{"properties":{"displayName":"Storage - accounts should allow access from trusted Microsoft services","policyType":"BuiltIn","mode":"Indexed","description":"Some - Microsoft services that interact with storage accounts operate from networks - that can''t be granted access through network rules. To help this type of - service work as intended, allow the set of trusted Microsoft services to bypass - the network rules. These services will then use strong authentication to access - the storage account.","metadata":{"version":"1.0.0","category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"field":"Microsoft.Storage/storageAccounts/networkAcls.bypass","exists":"true"},{"field":"Microsoft.Storage/storageAccounts/networkAcls.bypass","notContains":"AzureServices"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c9d007d0-c057-4772-b18c-01e546713bcd","type":"Microsoft.Authorization/policyDefinitions","name":"c9d007d0-c057-4772-b18c-01e546713bcd"},{"properties":{"displayName":"App - Configuration should use a private link","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any App Configuration instance that does not use a private link.","metadata":{"version":"1.0.0","category":"App - Configuration"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.AppConfiguration/configurationStores"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections","existenceCondition":{"field":"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","type":"Microsoft.Authorization/policyDefinitions","name":"ca610c1d-041c-4332-9d88-7ed3094967c7"},{"properties":{"displayName":"Microsoft - Managed Control 1035 - Least Privilege | Authorize Access To Security Functions","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1035"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ca94b046-45e2-444f-a862-dc8ce262a516","type":"Microsoft.Authorization/policyDefinitions","name":"ca94b046-45e2-444f-a862-dc8ce262a516"},{"properties":{"displayName":"Microsoft - Managed Control 1243 - Contingency Planning Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1243"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ca9a4469-d6df-4ab2-a42f-1213c396f0ec","type":"Microsoft.Authorization/policyDefinitions","name":"ca9a4469-d6df-4ab2-a42f-1213c396f0ec"},{"properties":{"displayName":"Microsoft - Managed Control 1306 - Identification And Authentication (Org. Users) | Net. - Access To Priv. Accts. - Replay","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1306"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cafc6c3c-5fc5-4c5e-a99b-a0ccb1d34eff","type":"Microsoft.Authorization/policyDefinitions","name":"cafc6c3c-5fc5-4c5e-a99b-a0ccb1d34eff"},{"properties":{"displayName":"Remote - debugging should be turned off for Web Applications","policyType":"BuiltIn","mode":"Indexed","description":"Remote - debugging requires inbound ports to be opened on a web application. Remote - debugging should be turned off.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","existenceCondition":{"field":"Microsoft.Web/sites/config/web.remoteDebuggingEnabled","equals":"false"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","type":"Microsoft.Authorization/policyDefinitions","name":"cb510bfd-1cba-4d9f-a230-cb0976f4bb71"},{"properties":{"displayName":"Microsoft - Managed Control 1486 - Alternate Work Site","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1486"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cb790345-a51f-43de-934e-98dbfaf9dca5","type":"Microsoft.Authorization/policyDefinitions","name":"cb790345-a51f-43de-934e-98dbfaf9dca5"},{"properties":{"displayName":"Microsoft - Managed Control 1167 - Continuous Monitoring","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1167"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cbb2be76-4891-430b-95a7-ca0b0a3d1300","type":"Microsoft.Authorization/policyDefinitions","name":"cbb2be76-4891-430b-95a7-ca0b0a3d1300"},{"properties":{"displayName":"Microsoft - Managed Control 1374 - Incident Response Assistance","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1374"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cc5c8616-52ef-4e5e-8000-491634ed9249","type":"Microsoft.Authorization/policyDefinitions","name":"cc5c8616-52ef-4e5e-8000-491634ed9249"},{"properties":{"displayName":"Show - audit results from Windows VMs in which the Administrators group does not - contain only the specified members","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines in which the Administrators group does not - contain only the specified members. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AdministratorsGroupMembers","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cc7cda28-f867-4311-8497-a526129a8d19","type":"Microsoft.Authorization/policyDefinitions","name":"cc7cda28-f867-4311-8497-a526129a8d19"},{"properties":{"displayName":"[Preview]: - Sensitive data in your SQL databases should be classified","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Security Center monitors the data discovery and classification scan results - for your SQL databases and provides recommendations to classify the sensitive - data in your databases for better monitoring and security","metadata":{"version":"1.0.0-preview","category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","in":["Microsoft.Sql/servers/databases","Microsoft.Sql/managedInstances/databases"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"sqlDataClassification","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","type":"Microsoft.Authorization/policyDefinitions","name":"cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349"},{"properties":{"displayName":"Allowed - virtual machine size SKUs","policyType":"BuiltIn","mode":"Indexed","description":"This - policy enables you to specify a set of virtual machine size SKUs that your - organization can deploy.","metadata":{"version":"1.0.1","category":"Compute"},"parameters":{"listOfAllowedSKUs":{"type":"Array","metadata":{"description":"The - list of size SKUs that can be specified for virtual machines.","displayName":"Allowed - Size SKUs","strongType":"VMSKUs"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"not":{"field":"Microsoft.Compute/virtualMachines/sku.name","in":"[parameters(''listOfAllowedSKUs'')]"}}]},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cccc23c7-8427-4f53-ad12-b6a63eb452b3","type":"Microsoft.Authorization/policyDefinitions","name":"cccc23c7-8427-4f53-ad12-b6a63eb452b3"},{"properties":{"displayName":"Microsoft - Managed Control 1443 - Media Use","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Media Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1443"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cd0ec6fa-a2e7-4361-aee4-a8688659a9ed","type":"Microsoft.Authorization/policyDefinitions","name":"cd0ec6fa-a2e7-4361-aee4-a8688659a9ed"},{"properties":{"displayName":"Inherit - a tag from the resource group","policyType":"BuiltIn","mode":"Indexed","description":"Adds - or replaces the specified tag and value from the parent resource group when - any resource is created or updated. Existing resources can be remediated by - triggering a remediation task.","metadata":{"version":"1.0.0","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}}},"policyRule":{"if":{"allOf":[{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","notEquals":"[resourceGroup().tags[parameters(''tagName'')]]"},{"value":"[resourceGroup().tags[parameters(''tagName'')]]","notEquals":""}]},"then":{"effect":"modify","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[resourceGroup().tags[parameters(''tagName'')]]"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cd3aa116-8754-49c9-a813-ad46512ece54","type":"Microsoft.Authorization/policyDefinitions","name":"cd3aa116-8754-49c9-a813-ad46512ece54"},{"properties":{"displayName":"[Deprecated]: - Allow resource creation if ''department'' tag set","policyType":"BuiltIn","mode":"Indexed","description":"Allows - resource creation only if the ''department'' tag is set","metadata":{"version":"1.0.0-deprecated","category":"Tags","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"tags","containsKey":"department"}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cd8dc879-a2ae-43c3-8211-1877c5755064","type":"Microsoft.Authorization/policyDefinitions","name":"cd8dc879-a2ae-43c3-8211-1877c5755064"},{"properties":{"displayName":"Microsoft - Managed Control 1582 - Information System Documentation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1582"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cd9e2f38-259b-462c-bfad-0ad7ab4e65c5","type":"Microsoft.Authorization/policyDefinitions","name":"cd9e2f38-259b-462c-bfad-0ad7ab4e65c5"},{"properties":{"displayName":"Show - audit results from Windows VMs that allow re-use of the previous 24 passwords","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that allow re-use of the previous 24 passwords. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"EnforcePasswordHistory","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cdbf72d9-ac9c-4026-8a3a-491a5ac59293","type":"Microsoft.Authorization/policyDefinitions","name":"cdbf72d9-ac9c-4026-8a3a-491a5ac59293"},{"properties":{"displayName":"Microsoft - Managed Control 1104 - Audit Events","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1104"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cdd8d244-18b2-4306-a1d1-df175ae0935f","type":"Microsoft.Authorization/policyDefinitions","name":"cdd8d244-18b2-4306-a1d1-df175ae0935f"},{"properties":{"displayName":"Deploy - export to Event Hub for Azure Security Center alerts and recommendations","policyType":"BuiltIn","mode":"All","description":"Enable - export to Event Hub of Azure Security Center alerts and/or recommendations. - This policy deploys an export to Event Hub configuration with your conditions - and target Event Hub on the assigned scope. To deploy this policy on newly - created subscriptions, open the Compliance tab, select the relevant non-compliant - assignment and create a remediation task.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"resourceGroupName":{"type":"String","metadata":{"displayName":"Resource - group name","description":"The resource group name where the export to Event - Hub configuration is created. If you enter a name for a resource group that - doesn''t exist, it''ll be created in the subscription. Note that each resource - group can only have one export to Event Hub configured."}},"resourceGroupLocation":{"type":"String","metadata":{"displayName":"Resource - group location","description":"The location where the resource group and the - export to Event Hub configuration are created.","strongType":"location"}},"exportedDataTypes":{"type":"Array","metadata":{"displayName":"Exported - data types","description":"The data types to be exported. Example: Security - recommendations;Security alerts;"},"allowedValues":["Security recommendations","Security - alerts"],"defaultValue":["Security recommendations","Security alerts"]},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation - IDs","description":"Applicable only for export of security recommendations. - To export all recommendations, leave this empty. To export specific recommendations, - enter a list of recommendation IDs separated by semicolons ('';''). Recommendation - IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments), - or Azure Resource Graph Explorer (https://portal.azure.com/#blade/HubsExtension/ArgQueryBlade), - choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation - severities","description":"Applicable only for export of security recommendations. - Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert - severities","description":"Applicable only for export of security alerts. - Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"eventHubDetails":{"type":"String","metadata":{"displayName":"Event - Hub details","description":"The Event Hub details of where the data should - be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations - rules with ''Send'' claim. If you do not already have an event hub, visit - Event Hubs to create one (https://portal.azure.com/#blade/HubsExtension/BrowseResource/resourceType/Microsoft.EventHub%2Fnamespaces).","strongType":"Microsoft.EventHub/namespaces/eventhubs/authorizationrules","assignPermissions":true}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Security/automations","name":"exportToEventHub","existenceScope":"resourcegroup","ResourceGroupName":"[parameters(''resourceGroupName'')]","deploymentScope":"subscription","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceGroupName":{"type":"string"},"resourceGroupLocation":{"type":"string"},"exportedDataTypes":{"type":"array"},"recommendationNames":{"type":"array"},"recommendationSeverities":{"type":"array"},"alertSeverities":{"type":"array"},"eventHubDetails":{"type":"string"},"guidValue":{"type":"string","defaultValue":"[newGuid()]"}},"variables":{"scopeDescription":"scope - for subscription {0}","recommendationNamesLength":"[length(parameters(''recommendationNames''))]","recommendationSeveritiesLength":"[length(parameters(''recommendationSeverities''))]","alertSeveritiesLength":"[length(parameters(''alertSeverities''))]","recommendationNamesLengthIfEmpty":"[if(equals(variables(''recommendationNamesLength''), - 0), 1, variables(''recommendationNamesLength''))]","recommendationSeveritiesLengthIfEmpty":"[if(equals(variables(''recommendationSeveritiesLength''), - 0), 1, variables(''recommendationSeveritiesLength''))]","alertSeveritiesLengthIfEmpty":"[if(equals(variables(''alertSeveritiesLength''), - 0), 1, variables(''alertSeveritiesLength''))]","totalRuleCombinationsForOneRecommendationName":"[variables(''recommendationSeveritiesLengthIfEmpty'')]","totalRuleCombinationsForOneRecommendationSeverity":1,"exportedDataTypesLength":"[length(parameters(''exportedDataTypes''))]","exportedDataTypesLengthIfEmpty":"[if(equals(variables(''exportedDataTypesLength''), - 0), 1, variables(''exportedDataTypesLength''))]","SeperatedEventHubDetails":"[split(parameters(''eventHubDetails''),''/'')]","dataTypeMap":{"Security - recommendations":"Assessments","Security alerts":"Alerts"},"alertSeverityMap":{"High":"high","Medium":"medium","Low":"low"},"ruleSetsForAssessmentsObj":{"copy":[{"name":"ruleSetsForAssessmentsArr","count":"[mul(variables(''recommendationNamesLengthIfEmpty''),variables(''recommendationSeveritiesLengthIfEmpty''))]","input":{"rules":[{"propertyJPath":"[if(equals(variables(''recommendationNamesLength''),0),''type'',''name'')]","propertyType":"string","expectedValue":"[if(equals(variables(''recommendationNamesLength''),0),''Microsoft.Security/assessments'',parameters(''recommendationNames'')[mod(div(copyIndex(''ruleSetsForAssessmentsArr''),variables(''totalRuleCombinationsForOneRecommendationName'')),variables(''recommendationNamesLength''))])]","operator":"Contains"},{"propertyJPath":"properties.metadata.severity","propertyType":"string","expectedValue":"[parameters(''recommendationSeverities'')[mod(div(copyIndex(''ruleSetsForAssessmentsArr''),variables(''totalRuleCombinationsForOneRecommendationSeverity'')),variables(''recommendationSeveritiesLength''))]]","operator":"Equals"}]}}]},"ruleSetsForAlertsObj":{"copy":[{"name":"ruleSetsForAlertsArr","count":"[variables(''alertSeveritiesLengthIfEmpty'')]","input":{"rules":[{"propertyJPath":"Severity","propertyType":"string","expectedValue":"[variables(''alertSeverityMap'')[parameters(''alertSeverities'')[mod(copyIndex(''ruleSetsForAlertsArr''),variables(''alertSeveritiesLengthIfEmpty''))]]]","operator":"Equals"}]}}]}},"resources":[{"name":"[parameters(''resourceGroupName'')]","type":"Microsoft.Resources/resourceGroups","apiVersion":"2019-10-01","location":"[parameters(''resourceGroupLocation'')]","tags":{},"properties":{}},{"type":"Microsoft.Resources/deployments","apiVersion":"2019-10-01","name":"[concat(''nestedAutomationDeployment'', - ''_'', parameters(''guidValue''))]","resourceGroup":"[parameters(''resourceGroupName'')]","dependsOn":["[resourceId(''Microsoft.Resources/resourceGroups/'', - parameters(''resourceGroupName''))]"],"properties":{"mode":"Incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{},"variables":{},"resources":[{"tags":{},"apiVersion":"2019-01-01-preview","location":"[parameters(''resourceGroupLocation'')]","name":"exportToEventHub","type":"Microsoft.Security/automations","dependsOn":[],"properties":{"description":"Export - Azure Security Center alerts and/or recommendations to Event Hub via policy","isEnabled":true,"scopes":[{"description":"[replace(variables(''scopeDescription''),''{0}'', - subscription().subscriptionId)]","scopePath":"[subscription().id]"}],"copy":[{"name":"sources","count":"[variables(''exportedDataTypesLengthIfEmpty'')]","input":{"eventSource":"[variables(''dataTypeMap'')[parameters(''exportedDataTypes'')[copyIndex(''sources'')]]]","ruleSets":"[if(equals(parameters(''exportedDataTypes'')[copyIndex(''sources'')], - ''Security recommendations''), variables(''ruleSetsForAssessmentsObj'').ruleSetsForAssessmentsArr, - variables(''ruleSetsForAlertsObj'').ruleSetsForAlertsArr)]"}}],"actions":[{"actionType":"EventHub","eventHubResourceId":"[concat(''/'', - variables(''SeperatedEventHubDetails'')[1], ''/'', variables(''SeperatedEventHubDetails'')[2], - ''/'', variables(''SeperatedEventHubDetails'')[3], ''/'', variables(''SeperatedEventHubDetails'')[4], - ''/'', variables(''SeperatedEventHubDetails'')[5], ''/'', variables(''SeperatedEventHubDetails'')[6], - ''/'', variables(''SeperatedEventHubDetails'')[7], ''/'', variables(''SeperatedEventHubDetails'')[8], - ''/'', variables(''SeperatedEventHubDetails'')[9], ''/'', variables(''SeperatedEventHubDetails'')[10])]","connectionString":"[listkeys(parameters(''eventHubDetails''),''2017-04-01'').primaryConnectionString]"}]}}]}}}]},"parameters":{"resourceGroupName":{"value":"[parameters(''resourceGroupName'')]"},"resourceGroupLocation":{"value":"[parameters(''resourceGroupLocation'')]"},"exportedDataTypes":{"value":"[parameters(''exportedDataTypes'')]"},"recommendationNames":{"value":"[parameters(''recommendationNames'')]"},"recommendationSeverities":{"value":"[parameters(''recommendationSeverities'')]"},"alertSeverities":{"value":"[parameters(''alertSeverities'')]"},"eventHubDetails":{"value":"[parameters(''eventHubDetails'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cdfcce10-4578-4ecd-9703-530938e4abcb","type":"Microsoft.Authorization/policyDefinitions","name":"cdfcce10-4578-4ecd-9703-530938e4abcb"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''System Audit Policies - - Privilege Use''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''System Audit Policies - - Privilege Use''. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesPrivilegeUse","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SystemAuditPoliciesPrivilegeUse"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ce2370f6-0ac5-4d85-8ab4-10721cc640b0","type":"Microsoft.Authorization/policyDefinitions","name":"ce2370f6-0ac5-4d85-8ab4-10721cc640b0"},{"properties":{"displayName":"Microsoft - Managed Control 1209 - Configuration Settings","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1209"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ce669c31-9103-4552-ae9c-cdef4e03580d","type":"Microsoft.Authorization/policyDefinitions","name":"ce669c31-9103-4552-ae9c-cdef4e03580d"},{"properties":{"displayName":"Microsoft - Managed Control 1242 - Contingency Planning Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1242"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cf3b3293-667a-445e-a722-fa0b0afc0958","type":"Microsoft.Authorization/policyDefinitions","name":"cf3b3293-667a-445e-a722-fa0b0afc0958"},{"properties":{"displayName":"Microsoft - Managed Control 1097 - Role-Based Security Training | Suspicious Communications - And Anomalous System Behavior","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Awareness and Training control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1097"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cf3e4836-f19e-47eb-a8cd-c3ca150452c0","type":"Microsoft.Authorization/policyDefinitions","name":"cf3e4836-f19e-47eb-a8cd-c3ca150452c0"},{"properties":{"displayName":"Microsoft - Managed Control 1424 - Maintenance Personnel | Individuals Without Appropriate - Access","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1424"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cf55fc87-48e1-4676-a2f8-d9a8cf993283","type":"Microsoft.Authorization/policyDefinitions","name":"cf55fc87-48e1-4676-a2f8-d9a8cf993283"},{"properties":{"displayName":"Diagnostic - logs in Key Vault should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of diagnostic logs. This enables you to recreate activity trails - to use for investigation purposes when a security incident occurs or when - your network is compromised","metadata":{"version":"3.0.0","category":"Key - Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/vaults"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","type":"Microsoft.Authorization/policyDefinitions","name":"cf820ca0-f99e-4f3e-84fb-66e913812d21"},{"properties":{"displayName":"Microsoft - Managed Control 1292 - Information System Backup | Test Restoration Using - Sampling","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1292"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d03516cf-0293-489f-9b32-a18f2a79f836","type":"Microsoft.Authorization/policyDefinitions","name":"d03516cf-0293-489f-9b32-a18f2a79f836"},{"properties":{"displayName":"Microsoft - Managed Control 1724 - Error Handling","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1724"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d07594d1-0307-4c08-94db-5d71ff31f0f6","type":"Microsoft.Authorization/policyDefinitions","name":"d07594d1-0307-4c08-94db-5d71ff31f0f6"},{"properties":{"displayName":"Container - Registries should not allow unrestricted network access","policyType":"BuiltIn","mode":"Indexed","description":"Audit - Container Registries that do not have any Network (IP or VNET) Rules configured - and allow all network access by default. Container Registries with at least - one IP / Firewall rule or configured virtual network will be deemed compliant. - For more information on Container Registry Network rules, please visit: https://aka.ms/acr/vnet.","metadata":{"version":"1.0.0","category":"Container - Registry"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerRegistry/registries"},{"anyof":[{"field":"Microsoft.ContainerRegistry/registries/networkRuleSet.defaultAction","exists":"false"},{"field":"Microsoft.ContainerRegistry/registries/networkRuleSet.defaultAction","equals":"Allow"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","type":"Microsoft.Authorization/policyDefinitions","name":"d0793b48-0edc-4296-a390-4c75d1bdfd71"},{"properties":{"displayName":"Microsoft - Managed Control 1084 - Publicly Accessible Content","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1084"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d0eb15db-dd1c-4d1d-b200-b12dd6cd060c","type":"Microsoft.Authorization/policyDefinitions","name":"d0eb15db-dd1c-4d1d-b200-b12dd6cd060c"},{"properties":{"displayName":"Add - or replace a tag on resource groups","policyType":"BuiltIn","mode":"All","description":"Adds - or replaces the specified tag and value when any resource group is created - or updated. Existing resource groups can be remediated by triggering a remediation - task.","metadata":{"version":"1.0.0","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Resources/subscriptions/resourceGroups"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","notEquals":"[parameters(''tagValue'')]"}]},"then":{"effect":"modify","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[parameters(''tagValue'')]"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d157c373-a6c4-483d-aaad-570756956268","type":"Microsoft.Authorization/policyDefinitions","name":"d157c373-a6c4-483d-aaad-570756956268"},{"properties":{"displayName":"Enforce - SSL connection should be enabled for PostgreSQL database servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any PostgreSQL server that is not enforcing SSL connection. - Azure Database for PostgreSQL prefers connecting your client applications - to the PostgreSQL service using Secure Sockets Layer (SSL). Enforcing SSL - connections between your database server and your client applications helps - protect against ''man-in-the-middle'' attacks by encrypting the data stream - between the server and your application","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DBforPostgreSQL/servers"},{"field":"Microsoft.DBforPostgreSQL/servers/sslEnforcement","exists":"true"},{"field":"Microsoft.DBforPostgreSQL/servers/sslEnforcement","notEquals":"Enabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","type":"Microsoft.Authorization/policyDefinitions","name":"d158790f-bfb0-486c-8631-2dc6b4e8e6af"},{"properties":{"displayName":"Microsoft - Managed Control 1620 - Denial Of Service Protection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1620"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d17c826b-1dec-43e1-a984-7b71c446649c","type":"Microsoft.Authorization/policyDefinitions","name":"d17c826b-1dec-43e1-a984-7b71c446649c"},{"properties":{"displayName":"Microsoft - Managed Control 1409 - Maintenance Tools | Prevent Unauthorized Removal","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1409"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d1880188-e51a-4772-b2ab-68f5e8bd27f6","type":"Microsoft.Authorization/policyDefinitions","name":"d1880188-e51a-4772-b2ab-68f5e8bd27f6"},{"properties":{"displayName":"[Deprecated]: - Audit Function Apps that are not using custom domains","policyType":"BuiltIn","mode":"All","description":"Use - of custom domains protects a Function app from common attacks such as phishing - and other DNS-related attacks.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"functionapp"},{"field":"kind","equals":"functionapp,linux"},{"field":"kind","equals":"functionapp,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UsedCustomDomains","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d1cb47db-b7a1-4c46-814e-aad1c0e84f3c","type":"Microsoft.Authorization/policyDefinitions","name":"d1cb47db-b7a1-4c46-814e-aad1c0e84f3c"},{"properties":{"displayName":"Microsoft - Managed Control 1195 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1195"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d1e1d65c-1013-4484-bd54-991332e6a0d2","type":"Microsoft.Authorization/policyDefinitions","name":"d1e1d65c-1013-4484-bd54-991332e6a0d2"},{"properties":{"displayName":"Microsoft - Managed Control 1721 - Spam Protection | Central Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1721"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d207aaef-7c4d-4f8c-9dce-4d62dfa3d29a","type":"Microsoft.Authorization/policyDefinitions","name":"d207aaef-7c4d-4f8c-9dce-4d62dfa3d29a"},{"properties":{"displayName":"Microsoft - Managed Control 1106 - Audit Events | Reviews And Updates","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1106"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d2b4feae-61ab-423f-a4c5-0e38ac4464d8","type":"Microsoft.Authorization/policyDefinitions","name":"d2b4feae-61ab-423f-a4c5-0e38ac4464d8"},{"properties":{"displayName":"Microsoft - Managed Control 1030 - Information Flow Enforcement | Physical / Logical Separation - Of Information Flows","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1030"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d3531453-b869-4606-9122-29c1cd6e7ed1","type":"Microsoft.Authorization/policyDefinitions","name":"d3531453-b869-4606-9122-29c1cd6e7ed1"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs on which the DSC configuration is not compliant","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows VMs on which - the Desired State Configuration (DSC) configuration is not compliant. This - policy is only applicable to machines with WMF 4 and above. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsDscConfiguration","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WindowsDscConfiguration"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d38b4c26-9d2e-47d7-aefe-18d859a8706a","type":"Microsoft.Authorization/policyDefinitions","name":"d38b4c26-9d2e-47d7-aefe-18d859a8706a"},{"properties":{"displayName":"Long-term - geo-redundant backup should be enabled for Azure SQL Databases","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Azure SQL Database with long-term geo-redundant backup not - enabled.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers/databases"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies","name":"default","existenceCondition":{"anyOf":[{"field":"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies/weeklyRetention","notEquals":"PT0S"},{"field":"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies/monthlyRetention","notEquals":"PT0S"},{"field":"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies/yearlyRetention","notEquals":"PT0S"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d38fc420-0735-4ef3-ac11-c806f651a570","type":"Microsoft.Authorization/policyDefinitions","name":"d38fc420-0735-4ef3-ac11-c806f651a570"},{"properties":{"displayName":"Microsoft - Managed Control 1641 - Transmission Confidentiality And Integrity | Cryptographic - Or Alternate Physical Protection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1641"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d39d4f68-7346-4133-8841-15318a714a24","type":"Microsoft.Authorization/policyDefinitions","name":"d39d4f68-7346-4133-8841-15318a714a24"},{"properties":{"displayName":"Microsoft - Managed Control 1249 - Contingency Plan","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1249"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d3bf4251-0818-42db-950b-afd5b25a51c2","type":"Microsoft.Authorization/policyDefinitions","name":"d3bf4251-0818-42db-950b-afd5b25a51c2"},{"properties":{"displayName":"Microsoft - Managed Control 1562 - Allocation Of Resources","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1562"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d4142013-7964-4163-a313-a900301c2cef","type":"Microsoft.Authorization/policyDefinitions","name":"d4142013-7964-4163-a313-a900301c2cef"},{"properties":{"displayName":"Virtual - machines should be connected to an approved virtual network","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any virtual machine connected to a virtual network that is not - approved.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"},"virtualNetworkId":{"type":"String","metadata":{"displayName":"Virtual - network Id","description":"Resource Id of the virtual network. Example: /subscriptions/YourSubscriptionId/resourceGroups/YourResourceGroupName/providers/Microsoft.Network/virtualNetworks/Name"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkInterfaces"},{"not":{"field":"Microsoft.Network/networkInterfaces/ipconfigurations[*].subnet.id","like":"[concat(parameters(''virtualNetworkId''),''/*'')]"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d416745a-506c-48b6-8ab1-83cb814bcaa3","type":"Microsoft.Authorization/policyDefinitions","name":"d416745a-506c-48b6-8ab1-83cb814bcaa3"},{"properties":{"displayName":"Microsoft - Managed Control 1383 - Incident Response Plan","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1383"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d4558451-e16a-4d2d-a066-fe12a6282bb9","type":"Microsoft.Authorization/policyDefinitions","name":"d4558451-e16a-4d2d-a066-fe12a6282bb9"},{"properties":{"displayName":"Microsoft - Managed Control 1112 - Response To Audit Processing Failures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1112"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d530aad8-4ee2-45f4-b234-c061dae683c0","type":"Microsoft.Authorization/policyDefinitions","name":"d530aad8-4ee2-45f4-b234-c061dae683c0"},{"properties":{"displayName":"Deploy - Diagnostic Settings for Data Lake Analytics to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Data Lake Analytics to stream to a regional Log - Analytics workspace when any Data Lake Analytics which is missing this diagnostic - settings is created or updated.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"},"defaultValue":"setbypolicy_logAnalytics"},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"],"defaultValue":"False"},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Log Analytics workspace - - True or False"},"allowedValues":["True","False"],"defaultValue":"True"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataLakeAnalytics/accounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.DataLakeAnalytics/accounts/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"Audit","enabled":"[parameters(''logsEnabled'')]"},{"category":"Requests","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d56a5a7c-72d7-42bc-8ceb-3baf4c0eae03","type":"Microsoft.Authorization/policyDefinitions","name":"d56a5a7c-72d7-42bc-8ceb-3baf4c0eae03"},{"properties":{"displayName":"Microsoft - Managed Control 1585 - Security Engineering Principles","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1585"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d57f8732-5cdc-4cda-8d27-ab148e1f3a55","type":"Microsoft.Authorization/policyDefinitions","name":"d57f8732-5cdc-4cda-8d27-ab148e1f3a55"},{"properties":{"displayName":"Microsoft - Managed Control 1667 - System And Information Integrity Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1667"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d61880dc-6e38-4f2a-a30c-3406a98f8220","type":"Microsoft.Authorization/policyDefinitions","name":"d61880dc-6e38-4f2a-a30c-3406a98f8220"},{"properties":{"displayName":"Microsoft - Managed Control 1150 - Security Assessments | External Organizations","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1150"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d630429d-e763-40b1-8fba-d20ba7314afb","type":"Microsoft.Authorization/policyDefinitions","name":"d630429d-e763-40b1-8fba-d20ba7314afb"},{"properties":{"displayName":"Event - Hub should use a virtual network service endpoint","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Event Hub not configured to use a virtual network service - endpoint.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.EventHub/namespaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/virtualNetworkRules","existenceCondition":{"field":"Microsoft.EventHub/namespaces/virtualNetworkRules/virtualNetworkSubnetId","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d63edb4a-c612-454d-b47d-191a724fcbf0","type":"Microsoft.Authorization/policyDefinitions","name":"d63edb4a-c612-454d-b47d-191a724fcbf0"},{"properties":{"displayName":"Microsoft - Managed Control 1549 - Vulnerability Scanning","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Risk Assessment control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1549"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d6976a08-d969-4df2-bb38-29556c2eb48a","type":"Microsoft.Authorization/policyDefinitions","name":"d6976a08-d969-4df2-bb38-29556c2eb48a"},{"properties":{"displayName":"[Preview]: - Log Analytics agent should be installed on your Windows Azure Arc machines","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits Windows Azure Arc machines if the Log Analytics agent is not - installed.","metadata":{"version":"1.0.0-preview","category":"Monitoring","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.HybridCompute/machines/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.HybridCompute/machines/extensions/type","equals":"MicrosoftMonitoringAgent"},{"field":"Microsoft.HybridCompute/machines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"},{"field":"Microsoft.HybridCompute/machines/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","type":"Microsoft.Authorization/policyDefinitions","name":"d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e"},{"properties":{"displayName":"Microsoft - Managed Control 1473 - Emergency Power","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1473"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d7047705-d719-46a7-8bb0-76ad233eba71","type":"Microsoft.Authorization/policyDefinitions","name":"d7047705-d719-46a7-8bb0-76ad233eba71"},{"properties":{"displayName":"Microsoft - Managed Control 1529 - Third-Party Personnel Security","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1529"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d74fdc92-1cb8-4a34-9978-8556425cd14c","type":"Microsoft.Authorization/policyDefinitions","name":"d74fdc92-1cb8-4a34-9978-8556425cd14c"},{"properties":{"displayName":"Microsoft - Managed Control 1350 - Identification And Authentication (Non-Org. Users) - | Use Of FICAM-Issued Profiles","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1350"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d77fd943-6ba6-4a21-ba07-22b03e347cc4","type":"Microsoft.Authorization/policyDefinitions","name":"d77fd943-6ba6-4a21-ba07-22b03e347cc4"},{"properties":{"displayName":"Show - audit results from Windows Server VMs on which Windows Serial Console is not - enabled","policyType":"BuiltIn","mode":"All","description":"This policy should - only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - Server virtual machines on which Windows Serial Console is not enabled. For - more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsSerialConsole","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d7ccd0ca-8d78-42af-a43d-6b7f928accbc","type":"Microsoft.Authorization/policyDefinitions","name":"d7ccd0ca-8d78-42af-a43d-6b7f928accbc"},{"properties":{"displayName":"Microsoft - Managed Control 1016 - Account Management | Automated Audit Actions","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1016"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d8b43277-512e-40c3-ab00-14b3b6e72238","type":"Microsoft.Authorization/policyDefinitions","name":"d8b43277-512e-40c3-ab00-14b3b6e72238"},{"properties":{"displayName":"Microsoft - Managed Control 1488 - Alternate Work Site","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1488"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d8ef30eb-a44f-47af-8524-ac19a36d41d2","type":"Microsoft.Authorization/policyDefinitions","name":"d8ef30eb-a44f-47af-8524-ac19a36d41d2"},{"properties":{"displayName":"Microsoft - Managed Control 1577 - Acquisition Process | Continuous Monitoring Plan","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1577"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d922484a-8cfc-4a6b-95a4-77d6a685407f","type":"Microsoft.Authorization/policyDefinitions","name":"d922484a-8cfc-4a6b-95a4-77d6a685407f"},{"properties":{"displayName":"Public - network access should be disabled for MySQL servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits MySQL servers in your environment with public network access - enabled. For more details, visit https://go.microsoft.com/fwlink/?linkid=2120014.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DBforMySQL/servers"},{"field":"Microsoft.DBforMySQL/servers/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","type":"Microsoft.Authorization/policyDefinitions","name":"d9844e8a-1437-4aeb-a32c-0c992f056095"},{"properties":{"displayName":"Microsoft - Managed Control 1271 - Alternate Storage Site | Accessibility","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1271"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/da3bfb53-9c46-4010-b3db-a7ba1296dada","type":"Microsoft.Authorization/policyDefinitions","name":"da3bfb53-9c46-4010-b3db-a7ba1296dada"},{"properties":{"displayName":"Microsoft - Managed Control 1516 - Personnel Termination","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1516"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/da3cd269-156f-435b-b472-c3af34c032ed","type":"Microsoft.Authorization/policyDefinitions","name":"da3cd269-156f-435b-b472-c3af34c032ed"},{"properties":{"displayName":"Deploy - Diagnostic Settings for Batch Account to Event Hub","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Batch Account to stream to a regional Event Hub - when any Batch Account which is missing this diagnostic settings is created - or updated.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"},"defaultValue":"setbypolicy_eventHub"},"eventHubRuleId":{"type":"String","metadata":{"displayName":"Event - Hub Authorization Rule Id","description":"The Event Hub authorization rule - Id for Azure Diagnostics. The authorization rule needs to be at Event Hub - namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}","strongType":"Microsoft.EventHub/Namespaces/AuthorizationRules","assignPermissions":true}},"eventHubLocation":{"type":"String","metadata":{"displayName":"Event - Hub Location","description":"The location the Event Hub resides in. Only Batch - Accounts in this location will be linked to this Event Hub.","strongType":"location"},"defaultValue":""},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Event Hub - - True or False"},"allowedValues":["True","False"],"defaultValue":"False"},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Event Hub - True - or False"},"allowedValues":["True","False"],"defaultValue":"True"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"anyOf":[{"value":"[parameters(''eventHubLocation'')]","equals":""},{"field":"location","equals":"[parameters(''eventHubLocation'')]"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"eventHubRuleId":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.Batch/batchAccounts/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"eventHubAuthorizationRuleId":"[parameters(''eventHubRuleId'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"ServiceLog","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"eventHubRuleId":{"value":"[parameters(''eventHubRuleId'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/db51110f-0865-4a6e-b274-e2e07a5b2cd7","type":"Microsoft.Authorization/policyDefinitions","name":"db51110f-0865-4a6e-b274-e2e07a5b2cd7"},{"properties":{"displayName":"Microsoft - Managed Control 1277 - Alternate Processing Site | Priority Of Service","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1277"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dc43e829-3d50-4a0a-aa0f-428d551862aa","type":"Microsoft.Authorization/policyDefinitions","name":"dc43e829-3d50-4a0a-aa0f-428d551862aa"},{"properties":{"displayName":"Microsoft - Managed Control 1439 - Media Sanitization","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Media Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1439"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dce72873-c5f1-47c3-9b4f-6b8207fd5a45","type":"Microsoft.Authorization/policyDefinitions","name":"dce72873-c5f1-47c3-9b4f-6b8207fd5a45"},{"properties":{"displayName":"Microsoft - Managed Control 1264 - Contingency Plan Testing | Coordinate With Related - Plans","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1264"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dd280d4b-50a1-42fb-a479-ece5878acf19","type":"Microsoft.Authorization/policyDefinitions","name":"dd280d4b-50a1-42fb-a479-ece5878acf19"},{"properties":{"displayName":"[Deprecated]: - Audit Web Applications that are not using custom domains","policyType":"BuiltIn","mode":"All","description":"Use - of custom domains protects a web application from common attacks such as phishing - and other DNS-related attacks.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"},{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UsedCustomDomains","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dd2ea520-6b06-45c3-806e-ea297c23e06a","type":"Microsoft.Authorization/policyDefinitions","name":"dd2ea520-6b06-45c3-806e-ea297c23e06a"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''System Audit Policies - - Policy Change''","policyType":"BuiltIn","mode":"All","description":"This policy - should only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines with non-compliant settings in Group Policy category: ''System - Audit Policies - Policy Change''. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesPolicyChange","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dd4680ed-0559-4a6a-ad10-081d14cbb484","type":"Microsoft.Authorization/policyDefinitions","name":"dd4680ed-0559-4a6a-ad10-081d14cbb484"},{"properties":{"displayName":"Microsoft - Managed Control 1715 - Software, Firmware, And Information Integrity | Automated - Response To Integrity Violations","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1715"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dd469ae0-71a8-4adc-aafc-de6949ca3339","type":"Microsoft.Authorization/policyDefinitions","name":"dd469ae0-71a8-4adc-aafc-de6949ca3339"},{"properties":{"displayName":"Microsoft - Managed Control 1678 - Malicious Code Protection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1678"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dd533cb0-b416-4be7-8e86-4d154824dfd7","type":"Microsoft.Authorization/policyDefinitions","name":"dd533cb0-b416-4be7-8e86-4d154824dfd7"},{"properties":{"displayName":"Microsoft - Managed Control 1391 - Information Spillage Response | Training","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1391"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dd6ac1a1-660e-4810-baa8-74e868e2ed47","type":"Microsoft.Authorization/policyDefinitions","name":"dd6ac1a1-660e-4810-baa8-74e868e2ed47"},{"properties":{"displayName":"Microsoft - Managed Control 1146 - Security Assessments","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1146"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dd83410c-ecb6-4547-8f14-748c3cbdc7ac","type":"Microsoft.Authorization/policyDefinitions","name":"dd83410c-ecb6-4547-8f14-748c3cbdc7ac"},{"properties":{"displayName":"Microsoft - Managed Control 1602 - Developer Security Testing And Evaluation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1602"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ddae2e97-a449-499f-a1c8-aea4a7e52ec9","type":"Microsoft.Authorization/policyDefinitions","name":"ddae2e97-a449-499f-a1c8-aea4a7e52ec9"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''Security Settings - Account - Policies''","policyType":"BuiltIn","mode":"All","description":"This policy - should only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines with non-compliant settings in Group Policy category: ''Security - Settings - Account Policies''. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecuritySettingsAccountPolicies","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ddb53c61-9db4-41d4-a953-2abff5b66c12","type":"Microsoft.Authorization/policyDefinitions","name":"ddb53c61-9db4-41d4-a953-2abff5b66c12"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''Security Options - - Recovery console''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - Recovery console''. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders":{"type":"String","metadata":{"displayName":"Recovery - console: Allow floppy copy and access to all drives and all folders","description":"Specifies - whether to make the Recovery Console SET command available, which allows setting - of recovery console environment variables."},"defaultValue":"0"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsRecoveryconsole","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue'', - ''='', parameters(''RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsRecoveryconsole"},"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders":{"value":"[parameters(''RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue","value":"[parameters(''RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue","value":"[parameters(''RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ddc0a4d5-5e08-43d5-9fd9-b586d8d7116b","type":"Microsoft.Authorization/policyDefinitions","name":"ddc0a4d5-5e08-43d5-9fd9-b586d8d7116b"},{"properties":{"displayName":"Microsoft - Managed Control 1689 - Information System Monitoring","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1689"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/de901f2f-a01a-4456-97f0-33cda7966172","type":"Microsoft.Authorization/policyDefinitions","name":"de901f2f-a01a-4456-97f0-33cda7966172"},{"properties":{"displayName":"[Preview]: - Deploy Dependency agent to hybrid Linux Azure Arc machines","policyType":"BuiltIn","mode":"Indexed","description":"This - policy deploys the Dependency agent to Linux Azure Arc machines if the agent - isn''t installed.","metadata":{"version":"1.0.0-preview","category":"Monitoring","preview":true},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.HybridCompute/machines/extensions","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"existenceCondition":{"allOf":[{"field":"Microsoft.HybridCompute/machines/extensions/type","equals":"DependencyAgentLinux"},{"field":"Microsoft.HybridCompute/machines/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"},{"field":"Microsoft.HybridCompute/machines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"variables":{"vmExtensionName":"DependencyAgent","vmExtensionPublisher":"Microsoft.Azure.Monitoring.DependencyAgent","vmExtensionType":"DependencyAgentLinux"},"resources":[{"name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","type":"Microsoft.HybridCompute/machines/extensions","location":"[parameters(''location'')]","apiVersion":"2019-12-12","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","settings":{}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - DA extension for VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/deacecc0-9f84-44d2-bb82-46f32d766d43","type":"Microsoft.Authorization/policyDefinitions","name":"deacecc0-9f84-44d2-bb82-46f32d766d43"},{"properties":{"displayName":"Microsoft - Managed Control 1528 - Access Agreements","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1528"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/deb9797c-22f8-40e8-b342-a84003c924e6","type":"Microsoft.Authorization/policyDefinitions","name":"deb9797c-22f8-40e8-b342-a84003c924e6"},{"properties":{"displayName":"MariaDB - server should use a virtual network service endpoint","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits MariaDB servers not configured to use a virtual network service - endpoint. For more details, visit https://aka.ms/mariadbvirtualnetwork.","metadata":{"version":"1.0.1","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforMariaDB/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforMariaDB/servers/virtualNetworkRules","existenceCondition":{"field":"Microsoft.DBforMariaDB/servers/virtualNetworkRules/virtualNetworkSubnetId","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dfbd9a64-6114-48de-a47d-90574dc2e489","type":"Microsoft.Authorization/policyDefinitions","name":"dfbd9a64-6114-48de-a47d-90574dc2e489"},{"properties":{"displayName":"Microsoft - Managed Control 1673 - Flaw Remediation | Automated Flaw Remediation Status","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1673"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dff0b90d-5a6f-491c-b2f8-b90aa402d844","type":"Microsoft.Authorization/policyDefinitions","name":"dff0b90d-5a6f-491c-b2f8-b90aa402d844"},{"properties":{"displayName":"[Deprecated]: - Allow resource creation only in Japan data centers","policyType":"BuiltIn","mode":"Indexed","description":"Allows - resource creation in the following locations only: Japan East, Japan West","metadata":{"category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"location","in":["japaneast","japanwest"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e01598e8-6538-41ed-95e8-8b29746cd697","type":"Microsoft.Authorization/policyDefinitions","name":"e01598e8-6538-41ed-95e8-8b29746cd697"},{"properties":{"displayName":"Cosmos - DB should use a virtual network service endpoint","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Cosmos DB not configured to use a virtual network service - endpoint.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/virtualNetworkRules[*].id","exists":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e0a2b1a3-f7f9-4569-807f-2a9edebdf4d9","type":"Microsoft.Authorization/policyDefinitions","name":"e0a2b1a3-f7f9-4569-807f-2a9edebdf4d9"},{"properties":{"displayName":"Microsoft - Managed Control 1206 - Access Restrictions For Change | Limit Production / - Operational Privileges","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1206"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e0de232d-02a0-4652-872d-88afb4ae5e91","type":"Microsoft.Authorization/policyDefinitions","name":"e0de232d-02a0-4652-872d-88afb4ae5e91"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs that do not have the specified Windows - PowerShell execution policy","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - where Windows PowerShell is not configured to use the specified PowerShell - execution policy. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"ExecutionPolicy":{"type":"String","metadata":{"displayName":"PowerShell - Execution Policy","description":"The expected PowerShell execution policy."},"allowedValues":["AllSigned","Bypass","Default","RemoteSigned","Restricted","Undefined","Unrestricted"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsPowerShellExecutionPolicy","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy'', - ''='', parameters(''ExecutionPolicy'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WindowsPowerShellExecutionPolicy"},"ExecutionPolicy":{"value":"[parameters(''ExecutionPolicy'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"ExecutionPolicy":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy","value":"[parameters(''ExecutionPolicy'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy","value":"[parameters(''ExecutionPolicy'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e0efc13a-122a-47c5-b817-2ccfe5d12615","type":"Microsoft.Authorization/policyDefinitions","name":"e0efc13a-122a-47c5-b817-2ccfe5d12615"},{"properties":{"displayName":"Microsoft - Managed Control 1714 - Software, Firmware, And Information Integrity | Automated - Notifications Of Integrity Violations","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1714"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e12494fa-b81e-4080-af71-7dbacc2da0ec","type":"Microsoft.Authorization/policyDefinitions","name":"e12494fa-b81e-4080-af71-7dbacc2da0ec"},{"properties":{"displayName":"Microsoft - Managed Control 1686 - Information System Monitoring","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1686"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e17085c5-0be8-4423-b39b-a52d3d1402e5","type":"Microsoft.Authorization/policyDefinitions","name":"e17085c5-0be8-4423-b39b-a52d3d1402e5"},{"properties":{"displayName":"Microsoft - Managed Control 1722 - Spam Protection | Automatic Updates","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1722"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e1da06bd-25b6-4127-a301-c313d6873fff","type":"Microsoft.Authorization/policyDefinitions","name":"e1da06bd-25b6-4127-a301-c313d6873fff"},{"properties":{"displayName":"Vulnerabilities - in security configuration on your machines should be remediated","policyType":"BuiltIn","mode":"All","description":"Servers - which do not satisfy the configured baseline will be monitored by Azure Security - Center as recommendations","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"osVulnerabilities","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","type":"Microsoft.Authorization/policyDefinitions","name":"e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15"},{"properties":{"displayName":"Microsoft - Managed Control 1047 - System Use Notification","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1047"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e1ff6d62-a55c-41ab-90ba-90bb5b7b6f62","type":"Microsoft.Authorization/policyDefinitions","name":"e1ff6d62-a55c-41ab-90ba-90bb5b7b6f62"},{"properties":{"displayName":"Microsoft - Managed Control 1276 - Alternate Processing Site | Accessibility","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1276"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e214e563-1206-4a43-a56b-ac5880c9c571","type":"Microsoft.Authorization/policyDefinitions","name":"e214e563-1206-4a43-a56b-ac5880c9c571"},{"properties":{"displayName":"Microsoft - Managed Control 1560 - System And Services Acquisition Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1560"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e29e0915-5c2f-4d09-8806-048b749ad763","type":"Microsoft.Authorization/policyDefinitions","name":"e29e0915-5c2f-4d09-8806-048b749ad763"},{"properties":{"displayName":"Ensure - that ''HTTP Version'' is the latest, if used to run the Function app","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for HTTP either due to security flaws or to include - additional functionality. Using the latest HTTP version for web apps to take - advantage of security fixes, if any, and/or new functionalities of the newer - version.","metadata":{"version":"1.0.0","category":"App Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/web.http20Enabled","equals":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e2c1c086-2d84-4019-bff3-c44ccd95113c","type":"Microsoft.Authorization/policyDefinitions","name":"e2c1c086-2d84-4019-bff3-c44ccd95113c"},{"properties":{"displayName":"Audit - Dependency agent deployment in virtual machine scale sets - VM Image (OS) - unlisted","policyType":"BuiltIn","mode":"Indexed","description":"Reports virtual - machine scale sets as non-compliant if the VM Image (OS) is not in the list - defined and the agent is not installed. The list of OS images will be updated - over time as support is updated.","metadata":{"version":"1.0.1","category":"Monitoring"},"parameters":{"listOfImageIdToInclude_windows":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Windows OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"},"defaultValue":[]},"listOfImageIdToInclude_linux":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Linux OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"},"defaultValue":[]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"not":{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude_windows'')]"},{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude_linux'')]"},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["12-SP2","12-SP3","12-SP4"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["14.04.0-LTS","14.04.1-LTS","14.04.5-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["16.04-LTS","16.04.0-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["18.04-LTS"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["Centos","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","existenceCondition":{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e2dd799a-a932-4e9d-ac17-d473bc3c6c10","type":"Microsoft.Authorization/policyDefinitions","name":"e2dd799a-a932-4e9d-ac17-d473bc3c6c10"},{"properties":{"displayName":"Microsoft - Managed Control 1161 - Continuous Monitoring","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1161"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e2f8f6c6-dde4-436b-a79d-bc50e129eb3a","type":"Microsoft.Authorization/policyDefinitions","name":"e2f8f6c6-dde4-436b-a79d-bc50e129eb3a"},{"properties":{"displayName":"Microsoft - Managed Control 1387 - Information Spillage Response","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1387"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e3007185-3857-43a9-8237-06ca94f1084c","type":"Microsoft.Authorization/policyDefinitions","name":"e3007185-3857-43a9-8237-06ca94f1084c"},{"properties":{"displayName":"Microsoft - Managed Control 1479 - Fire Protection | Automatic Fire Suppression","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1479"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e327b072-281d-4f75-9c28-4216e5d72f26","type":"Microsoft.Authorization/policyDefinitions","name":"e327b072-281d-4f75-9c28-4216e5d72f26"},{"properties":{"displayName":"Azure - VPN gateways should not use ''basic'' SKU","policyType":"BuiltIn","mode":"All","description":"This - policy ensures that VPN gateways do not use ''basic'' SKU.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/virtualNetworkGateways"},{"field":"Microsoft.Network/virtualNetworkGateways/gatewayType","equals":"Vpn"},{"field":"Microsoft.Network/virtualNetworkGateways/sku.tier","equals":"Basic"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e345b6c3-24bd-4c93-9bbb-7e5e49a17b78","type":"Microsoft.Authorization/policyDefinitions","name":"e345b6c3-24bd-4c93-9bbb-7e5e49a17b78"},{"properties":{"displayName":"MFA - should be enabled on accounts with read permissions on your subscription","policyType":"BuiltIn","mode":"All","description":"Multi-Factor - Authentication (MFA) should be enabled for all subscription accounts with - read privileges to prevent a breach of accounts or resources.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"EnableMFAForReadPermissions","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","type":"Microsoft.Authorization/policyDefinitions","name":"e3576e28-8b17-4677-84c3-db2990658d64"},{"properties":{"displayName":"RDP - access from the Internet should be blocked","policyType":"BuiltIn","mode":"All","description":"This - policy audits any network security rule that allows RDP access from Internet","metadata":{"version":"2.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups/securityRules"},{"allOf":[{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Allow"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"},{"anyOf":[{"field":"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange","equals":"*"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange","equals":"3389"},{"value":"[if(and(not(empty(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange''))), - contains(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange''),''-'')), - and(lessOrEquals(int(first(split(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange''), - ''-''))),3389),greaterOrEquals(int(last(split(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange''), - ''-''))),3389)), ''false'')]","equals":"true"},{"count":{"field":"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]","where":{"value":"[if(and(not(empty(first(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]'')))), - contains(first(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]'')),''-'')), - and(lessOrEquals(int(first(split(first(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]'')), - ''-''))),3389),greaterOrEquals(int(last(split(first(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]'')), - ''-''))),3389)) , ''false'')]","equals":"true"}},"greater":0},{"not":{"field":"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]","notEquals":"*"}},{"not":{"field":"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]","notEquals":"3389"}}]},{"anyOf":[{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"*"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"Internet"},{"not":{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]","notEquals":"*"}},{"not":{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]","notEquals":"Internet"}}]}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e372f825-a257-4fb8-9175-797a8a8627d6","type":"Microsoft.Authorization/policyDefinitions","name":"e372f825-a257-4fb8-9175-797a8a8627d6"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''Security Options - Shutdown''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Security Options - Shutdown''. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsShutdown","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e3a77a94-cf41-4ee8-b45c-98be28841c03","type":"Microsoft.Authorization/policyDefinitions","name":"e3a77a94-cf41-4ee8-b45c-98be28841c03"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''Security Settings - - Account Policies''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Settings - - Account Policies''. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"EnforcePasswordHistory":{"type":"String","metadata":{"displayName":"Enforce - password history","description":"Specifies limits on password reuse - how - many times a new password must be created for a user account before the password - can be repeated."},"defaultValue":"24"},"MaximumPasswordAge":{"type":"String","metadata":{"displayName":"Maximum - password age","description":"Specifies the maximum number of days that may - elapse before a user account password must be changed. The format of the value - is two integers separated by a comma, denoting an inclusive range."},"defaultValue":"1,70"},"MinimumPasswordAge":{"type":"String","metadata":{"displayName":"Minimum - password age","description":"Specifies the minimum number of days that must - elapse before a user account password can be changed."},"defaultValue":"1"},"MinimumPasswordLength":{"type":"String","metadata":{"displayName":"Minimum - password length","description":"Specifies the minimum number of characters - that a user account password may contain."},"defaultValue":"14"},"PasswordMustMeetComplexityRequirements":{"type":"String","metadata":{"displayName":"Password - must meet complexity requirements","description":"Specifies whether a user - account password must be complex. If required, a complex password must not - contain part of user''s account name or full name; be at least 6 characters - long; contain a mix of uppercase, lowercase, number, and non-alphabetic characters."},"defaultValue":"1"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecuritySettingsAccountPolicies","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Enforce - password history;ExpectedValue'', ''='', parameters(''EnforcePasswordHistory''), - '','', ''Maximum password age;ExpectedValue'', ''='', parameters(''MaximumPasswordAge''), - '','', ''Minimum password age;ExpectedValue'', ''='', parameters(''MinimumPasswordAge''), - '','', ''Minimum password length;ExpectedValue'', ''='', parameters(''MinimumPasswordLength''), - '','', ''Password must meet complexity requirements;ExpectedValue'', ''='', - parameters(''PasswordMustMeetComplexityRequirements'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecuritySettingsAccountPolicies"},"EnforcePasswordHistory":{"value":"[parameters(''EnforcePasswordHistory'')]"},"MaximumPasswordAge":{"value":"[parameters(''MaximumPasswordAge'')]"},"MinimumPasswordAge":{"value":"[parameters(''MinimumPasswordAge'')]"},"MinimumPasswordLength":{"value":"[parameters(''MinimumPasswordLength'')]"},"PasswordMustMeetComplexityRequirements":{"value":"[parameters(''PasswordMustMeetComplexityRequirements'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"EnforcePasswordHistory":{"type":"string"},"MaximumPasswordAge":{"type":"string"},"MinimumPasswordAge":{"type":"string"},"MinimumPasswordLength":{"type":"string"},"PasswordMustMeetComplexityRequirements":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Enforce - password history;ExpectedValue","value":"[parameters(''EnforcePasswordHistory'')]"},{"name":"Maximum - password age;ExpectedValue","value":"[parameters(''MaximumPasswordAge'')]"},{"name":"Minimum - password age;ExpectedValue","value":"[parameters(''MinimumPasswordAge'')]"},{"name":"Minimum - password length;ExpectedValue","value":"[parameters(''MinimumPasswordLength'')]"},{"name":"Password - must meet complexity requirements;ExpectedValue","value":"[parameters(''PasswordMustMeetComplexityRequirements'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Enforce - password history;ExpectedValue","value":"[parameters(''EnforcePasswordHistory'')]"},{"name":"Maximum - password age;ExpectedValue","value":"[parameters(''MaximumPasswordAge'')]"},{"name":"Minimum - password age;ExpectedValue","value":"[parameters(''MinimumPasswordAge'')]"},{"name":"Minimum - password length;ExpectedValue","value":"[parameters(''MinimumPasswordLength'')]"},{"name":"Password - must meet complexity requirements;ExpectedValue","value":"[parameters(''PasswordMustMeetComplexityRequirements'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e3d95ab7-f47a-49d8-a347-784177b6c94c","type":"Microsoft.Authorization/policyDefinitions","name":"e3d95ab7-f47a-49d8-a347-784177b6c94c"},{"properties":{"displayName":"Microsoft - Managed Control 1451 - Physical Access Control","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1451"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e3f1e5a3-25c1-4476-8cb6-3955031f8e65","type":"Microsoft.Authorization/policyDefinitions","name":"e3f1e5a3-25c1-4476-8cb6-3955031f8e65"},{"properties":{"displayName":"Microsoft - Managed Control 1357 - Incident Response Training | Automated Training Environments","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1357"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e4213689-05e8-4241-9d4e-8dd1cdafd105","type":"Microsoft.Authorization/policyDefinitions","name":"e4213689-05e8-4241-9d4e-8dd1cdafd105"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''Security Options - - User Account Control''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - User Account Control''. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"UACAdminApprovalModeForTheBuiltinAdministratorAccount":{"type":"String","metadata":{"displayName":"UAC: - Admin Approval Mode for the Built-in Administrator account","description":"Specifies - the behavior of Admin Approval Mode for the built-in Administrator account."},"defaultValue":"1"},"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode":{"type":"String","metadata":{"displayName":"UAC: - Behavior of the elevation prompt for administrators in Admin Approval Mode","description":"Specifies - the behavior of the elevation prompt for administrators."},"defaultValue":"2"},"UACDetectApplicationInstallationsAndPromptForElevation":{"type":"String","metadata":{"displayName":"UAC: - Detect application installations and prompt for elevation","description":"Specifies - the behavior of application installation detection for the computer."},"defaultValue":"1"},"UACRunAllAdministratorsInAdminApprovalMode":{"type":"String","metadata":{"displayName":"UAC: - Run all administrators in Admin Approval Mode","description":"Specifies the - behavior of all User Account Control (UAC) policy settings for the computer."},"defaultValue":"1"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsUserAccountControl","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue'', - ''='', parameters(''UACAdminApprovalModeForTheBuiltinAdministratorAccount''), - '','', ''User Account Control: Behavior of the elevation prompt for administrators - in Admin Approval Mode;ExpectedValue'', ''='', parameters(''UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode''), - '','', ''User Account Control: Detect application installations and prompt - for elevation;ExpectedValue'', ''='', parameters(''UACDetectApplicationInstallationsAndPromptForElevation''), - '','', ''User Account Control: Run all administrators in Admin Approval Mode;ExpectedValue'', - ''='', parameters(''UACRunAllAdministratorsInAdminApprovalMode'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsUserAccountControl"},"UACAdminApprovalModeForTheBuiltinAdministratorAccount":{"value":"[parameters(''UACAdminApprovalModeForTheBuiltinAdministratorAccount'')]"},"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode":{"value":"[parameters(''UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode'')]"},"UACDetectApplicationInstallationsAndPromptForElevation":{"value":"[parameters(''UACDetectApplicationInstallationsAndPromptForElevation'')]"},"UACRunAllAdministratorsInAdminApprovalMode":{"value":"[parameters(''UACRunAllAdministratorsInAdminApprovalMode'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"UACAdminApprovalModeForTheBuiltinAdministratorAccount":{"type":"string"},"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode":{"type":"string"},"UACDetectApplicationInstallationsAndPromptForElevation":{"type":"string"},"UACRunAllAdministratorsInAdminApprovalMode":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue","value":"[parameters(''UACAdminApprovalModeForTheBuiltinAdministratorAccount'')]"},{"name":"User - Account Control: Behavior of the elevation prompt for administrators in Admin - Approval Mode;ExpectedValue","value":"[parameters(''UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode'')]"},{"name":"User - Account Control: Detect application installations and prompt for elevation;ExpectedValue","value":"[parameters(''UACDetectApplicationInstallationsAndPromptForElevation'')]"},{"name":"User - Account Control: Run all administrators in Admin Approval Mode;ExpectedValue","value":"[parameters(''UACRunAllAdministratorsInAdminApprovalMode'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue","value":"[parameters(''UACAdminApprovalModeForTheBuiltinAdministratorAccount'')]"},{"name":"User - Account Control: Behavior of the elevation prompt for administrators in Admin - Approval Mode;ExpectedValue","value":"[parameters(''UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode'')]"},{"name":"User - Account Control: Detect application installations and prompt for elevation;ExpectedValue","value":"[parameters(''UACDetectApplicationInstallationsAndPromptForElevation'')]"},{"name":"User - Account Control: Run all administrators in Admin Approval Mode;ExpectedValue","value":"[parameters(''UACRunAllAdministratorsInAdminApprovalMode'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e425e402-a050-45e5-b010-bd3f934589fc","type":"Microsoft.Authorization/policyDefinitions","name":"e425e402-a050-45e5-b010-bd3f934589fc"},{"properties":{"displayName":"Microsoft - Managed Control 1340 - Authenticator Management | No Embedded Unencrypted - Static Authenticators","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1340"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e51ff84b-e5ea-408f-b651-2ecc2933e4c6","type":"Microsoft.Authorization/policyDefinitions","name":"e51ff84b-e5ea-408f-b651-2ecc2933e4c6"},{"properties":{"displayName":"Microsoft - Managed Control 1381 - Incident Response Plan","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1381"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e5368258-9684-4567-8126-269f34e65eab","type":"Microsoft.Authorization/policyDefinitions","name":"e5368258-9684-4567-8126-269f34e65eab"},{"properties":{"displayName":"Microsoft - Managed Control 1421 - Maintenance Personnel","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1421"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e539caaa-da8c-41b8-9e1e-449851e2f7a6","type":"Microsoft.Authorization/policyDefinitions","name":"e539caaa-da8c-41b8-9e1e-449851e2f7a6"},{"properties":{"displayName":"Microsoft - Managed Control 1716 - Software, Firmware, And Information Integrity | Integration - Of Detection And Response","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1716"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e54c325e-42a0-4dcf-b105-046e0f6f590f","type":"Microsoft.Authorization/policyDefinitions","name":"e54c325e-42a0-4dcf-b105-046e0f6f590f"},{"properties":{"displayName":"Microsoft - Managed Control 1023 - Account Management | Usage Conditions","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1023"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e55698b6-3dea-4aa9-99b9-d8218c6ab6e5","type":"Microsoft.Authorization/policyDefinitions","name":"e55698b6-3dea-4aa9-99b9-d8218c6ab6e5"},{"properties":{"displayName":"Allowed - locations","policyType":"BuiltIn","mode":"Indexed","description":"This policy - enables you to restrict the locations your organization can specify when deploying - resources. Use to enforce your geo-compliance requirements. Excludes resource - groups, Microsoft.AzureActiveDirectory/b2cDirectories, and resources that - use the ''global'' region.","metadata":{"version":"1.0.0","category":"General"},"parameters":{"listOfAllowedLocations":{"type":"Array","metadata":{"description":"The - list of locations that can be specified when deploying resources.","strongType":"location","displayName":"Allowed - locations"}}},"policyRule":{"if":{"allOf":[{"field":"location","notIn":"[parameters(''listOfAllowedLocations'')]"},{"field":"location","notEquals":"global"},{"field":"type","notEquals":"Microsoft.AzureActiveDirectory/b2cDirectories"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e56962a6-4747-49cd-b67b-bf8b01975c4c","type":"Microsoft.Authorization/policyDefinitions","name":"e56962a6-4747-49cd-b67b-bf8b01975c4c"},{"properties":{"displayName":"Microsoft - Managed Control 1296 - Information System Recovery And Reconstitution | Transaction - Recovery","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1296"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e57b98a0-a011-4956-a79d-5d17ed8b8e48","type":"Microsoft.Authorization/policyDefinitions","name":"e57b98a0-a011-4956-a79d-5d17ed8b8e48"},{"properties":{"displayName":"Microsoft - Managed Control 1499 - Rules Of Behavior","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1499"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e59671ab-9720-4ee2-9c60-170e8c82251e","type":"Microsoft.Authorization/policyDefinitions","name":"e59671ab-9720-4ee2-9c60-170e8c82251e"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''Security Options - - Accounts''","policyType":"BuiltIn","mode":"Indexed","description":"This policy - creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - Accounts''. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"AccountsGuestAccountStatus":{"type":"String","metadata":{"displayName":"Accounts: - Guest account status","description":"Specifies whether the local Guest account - is disabled."},"defaultValue":"0"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsAccounts","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Accounts: - Guest account status;ExpectedValue'', ''='', parameters(''AccountsGuestAccountStatus'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsAccounts"},"AccountsGuestAccountStatus":{"value":"[parameters(''AccountsGuestAccountStatus'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"AccountsGuestAccountStatus":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Accounts: - Guest account status;ExpectedValue","value":"[parameters(''AccountsGuestAccountStatus'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Accounts: - Guest account status;ExpectedValue","value":"[parameters(''AccountsGuestAccountStatus'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e5b81f87-9185-4224-bf00-9f505e9f89f3","type":"Microsoft.Authorization/policyDefinitions","name":"e5b81f87-9185-4224-bf00-9f505e9f89f3"},{"properties":{"displayName":"[Deprecated]: - Audit Web Applications that are not using latest supported Node.js Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported Node.js version for the latest security classes. Using - older classes and types can make your application vulnerable.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestNodeJS","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e67687e8-08d5-4e7f-8226-5b4753bba008","type":"Microsoft.Authorization/policyDefinitions","name":"e67687e8-08d5-4e7f-8226-5b4753bba008"},{"properties":{"displayName":"Microsoft - Managed Control 1465 - Monitoring Physical Access | Monitoring Physical Access - To Information Systems","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1465"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e6e41554-86b5-4537-9f7f-4fc41a1d1640","type":"Microsoft.Authorization/policyDefinitions","name":"e6e41554-86b5-4537-9f7f-4fc41a1d1640"},{"properties":{"displayName":"Subnets - should be associated with a Network Security Group","policyType":"BuiltIn","mode":"All","description":"Protect - your subnet from potential threats by restricting access to it with a Network - Security Group (NSG). NSGs contain a list of Access Control List (ACL) rules - that allow or deny network traffic to your subnet.","metadata":{"version":"2.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Network/virtualNetworks/subnets"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"networkSecurityGroupsOnSubnets","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","type":"Microsoft.Authorization/policyDefinitions","name":"e71308d3-144b-4262-b144-efdc3cc90517"},{"properties":{"displayName":"Microsoft - Managed Control 1567 - System Development Life Cycle","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1567"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e72edbf6-aa61-436d-a227-0f32b77194b3","type":"Microsoft.Authorization/policyDefinitions","name":"e72edbf6-aa61-436d-a227-0f32b77194b3"},{"properties":{"displayName":"Microsoft - Managed Control 1311 - Identifier Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1311"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e7568697-0c9e-4ea3-9cec-9e567d14f3c6","type":"Microsoft.Authorization/policyDefinitions","name":"e7568697-0c9e-4ea3-9cec-9e567d14f3c6"},{"properties":{"displayName":"[Deprecated]: - Advanced Threat Protection types should be set to ''All'' in SQL server Advanced - Data Security settings","policyType":"BuiltIn","mode":"Indexed","description":"It - is recommended to enable all Advanced Threat Protection types on your SQL - servers. Enabling all types protects against SQL injection, database vulnerabilities, - and any other anomalous activities.","metadata":{"version":"1.0.0-deprecated","category":"SQL","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"Disabled"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/securityAlertPolicies","name":"default","existenceCondition":{"field":"Microsoft.Sql/servers/securityAlertPolicies/disabledAlerts[*]","equals":""}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e756b945-1b1b-480b-8de8-9a0859d5f7ad","type":"Microsoft.Authorization/policyDefinitions","name":"e756b945-1b1b-480b-8de8-9a0859d5f7ad"},{"properties":{"displayName":"Microsoft - Managed Control 1154 - System Interconnections | Unclassified Non-National - Security System Connections","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1154"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e757ceb9-93b3-45fe-a4f4-f43f64f1ac5a","type":"Microsoft.Authorization/policyDefinitions","name":"e757ceb9-93b3-45fe-a4f4-f43f64f1ac5a"},{"properties":{"displayName":"Allowed - locations for resource groups","policyType":"BuiltIn","mode":"All","description":"This - policy enables you to restrict the locations your organization can create - resource groups in. Use to enforce your geo-compliance requirements.","metadata":{"version":"1.0.0","category":"General"},"parameters":{"listOfAllowedLocations":{"type":"Array","metadata":{"description":"The - list of locations that resource groups can be created in.","strongType":"location","displayName":"Allowed - locations"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Resources/subscriptions/resourceGroups"},{"field":"location","notIn":"[parameters(''listOfAllowedLocations'')]"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e765b5de-1225-4ba3-bd56-1ac6695af988","type":"Microsoft.Authorization/policyDefinitions","name":"e765b5de-1225-4ba3-bd56-1ac6695af988"},{"properties":{"displayName":"Microsoft - Managed Control 1273 - Alternate Processing Site","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1273"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e77fcbf2-a1e8-44f1-860e-ed6583761e65","type":"Microsoft.Authorization/policyDefinitions","name":"e77fcbf2-a1e8-44f1-860e-ed6583761e65"},{"properties":{"displayName":"[Deprecated]: - Audit Web Sockets state for a Web Application","policyType":"BuiltIn","mode":"All","description":"The - Web Sockets protocol is vulnerable to different types of security threats. - Use of Web Sockets within a web application must be carefully reviewed.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"},{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"DisableWebSockets","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e797f851-8be7-4c40-bb56-2e3395215b0e","type":"Microsoft.Authorization/policyDefinitions","name":"e797f851-8be7-4c40-bb56-2e3395215b0e"},{"properties":{"displayName":"Microsoft - Managed Control 1169 - Continuous Monitoring | Trend Analyses","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1169"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e7ba2cb3-5675-4468-8b50-8486bdd998a5","type":"Microsoft.Authorization/policyDefinitions","name":"e7ba2cb3-5675-4468-8b50-8486bdd998a5"},{"properties":{"displayName":"Enforce - SSL connection should be enabled for MySQL database servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any MySQL server that is not enforcing SSL connection. Azure - Database for MySQL supports connecting your Azure Database for MySQL server - to client applications using Secure Sockets Layer (SSL). Enforcing SSL connections - between your database server and your client applications helps protect against - ''man in the middle'' attacks by encrypting the data stream between the server - and your application.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DBforMySQL/servers"},{"field":"Microsoft.DBforMySQL/servers/sslEnforcement","exists":"true"},{"field":"Microsoft.DBforMySQL/servers/sslEnforcement","notEquals":"Enabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","type":"Microsoft.Authorization/policyDefinitions","name":"e802a67a-daf5-4436-9ea6-f6d821dd0c5d"},{"properties":{"displayName":"Microsoft - Managed Control 1237 - Software Usage Restrictions | Open Source Software","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1237"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e80b6812-0bfa-4383-8223-cdd86a46a890","type":"Microsoft.Authorization/policyDefinitions","name":"e80b6812-0bfa-4383-8223-cdd86a46a890"},{"properties":{"displayName":"Vulnerabilities - in container security configurations should be remediated","policyType":"BuiltIn","mode":"All","description":"Audit - vulnerabilities in security configuration on machines with Docker installed - and display as recommendations in Azure Security Center.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines","Microsoft.Compute/virtualMachineScaleSets"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"ContainerBenchmark","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","type":"Microsoft.Authorization/policyDefinitions","name":"e8cbc669-f12d-49eb-93e7-9273119e9933"},{"properties":{"displayName":"Deploy - Diagnostic Settings for Data Lake Storage Gen1 to Event Hub","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Data Lake Storage Gen1 to stream to a regional - Event Hub when any Data Lake Storage Gen1 which is missing this diagnostic - settings is created or updated.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"},"defaultValue":"setbypolicy_eventHub"},"eventHubRuleId":{"type":"String","metadata":{"displayName":"Event - Hub Authorization Rule Id","description":"The Event Hub authorization rule - Id for Azure Diagnostics. The authorization rule needs to be at Event Hub - namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}","strongType":"Microsoft.EventHub/Namespaces/AuthorizationRules","assignPermissions":true}},"eventHubLocation":{"type":"String","metadata":{"displayName":"Event - Hub Location","description":"The location the Event Hub resides in. Only Data - Lake Storage in this location will be linked to this Event Hub.","strongType":"location"},"defaultValue":""},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Event Hub - - True or False"},"allowedValues":["True","False"],"defaultValue":"False"},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Event Hub - True - or False"},"allowedValues":["True","False"],"defaultValue":"True"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DataLakeStore/accounts"},{"anyOf":[{"value":"[parameters(''eventHubLocation'')]","equals":""},{"field":"location","equals":"[parameters(''eventHubLocation'')]"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"eventHubRuleId":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.DataLakeStore/accounts/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"eventHubAuthorizationRuleId":"[parameters(''eventHubRuleId'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"Audit","enabled":"[parameters(''logsEnabled'')]"},{"category":"Requests","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"eventHubRuleId":{"value":"[parameters(''eventHubRuleId'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e8d096bc-85de-4c5f-8cfb-857bd1b9d62d","type":"Microsoft.Authorization/policyDefinitions","name":"e8d096bc-85de-4c5f-8cfb-857bd1b9d62d"},{"properties":{"displayName":"Container - Registries should use private links","policyType":"BuiltIn","mode":"Indexed","description":"Audit - Container Registries that do not have at least one approved private endpoint - connection. Clients in a virtual network can securely access resources that - have private endpoint connections through private links. For more information, - visit: https://aka.ms/acr/private-link.","metadata":{"version":"1.0.0","category":"Container - Registry"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerRegistry/registries"},{"count":{"field":"Microsoft.ContainerRegistry/registries/privateEndpointConnections[*]","where":{"field":"Microsoft.ContainerRegistry/registries/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","type":"Microsoft.Authorization/policyDefinitions","name":"e8eef0a8-67cf-4eb4-9386-14b0e78733d4"},{"properties":{"displayName":"Microsoft - Managed Control 1626 - Boundary Protection | External Telecommunications Services","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1626"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e8f6bddd-6d67-439a-88d4-c5fe39a79341","type":"Microsoft.Authorization/policyDefinitions","name":"e8f6bddd-6d67-439a-88d4-c5fe39a79341"},{"properties":{"displayName":"Microsoft - Managed Control 1502 - Rules Of Behavior | Social Media And Networking Restrictions","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1502"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e901375c-8f01-4ac8-9183-d5312f47fe63","type":"Microsoft.Authorization/policyDefinitions","name":"e901375c-8f01-4ac8-9183-d5312f47fe63"},{"properties":{"displayName":"Microsoft - Managed Control 1723 - Information Input Validation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1723"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e91927a0-ac1d-44a0-95f8-5185f9dfce9f","type":"Microsoft.Authorization/policyDefinitions","name":"e91927a0-ac1d-44a0-95f8-5185f9dfce9f"},{"properties":{"displayName":"Microsoft - Managed Control 1200 - Security Impact Analysis","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1200"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e98fe9d7-2ed3-44f8-93b7-24dca69783ff","type":"Microsoft.Authorization/policyDefinitions","name":"e98fe9d7-2ed3-44f8-93b7-24dca69783ff"},{"properties":{"displayName":"Microsoft - Managed Control 1487 - Alternate Work Site","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1487"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e9c3371d-c30c-4f58-abd9-30b8a8199571","type":"Microsoft.Authorization/policyDefinitions","name":"e9c3371d-c30c-4f58-abd9-30b8a8199571"},{"properties":{"displayName":"Remote - debugging should be turned off for API Apps","policyType":"BuiltIn","mode":"Indexed","description":"Remote - debugging requires inbound ports to be opened on API apps. Remote debugging - should be turned off.","metadata":{"version":"1.0.0","category":"App Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/remoteDebuggingEnabled","equals":"false"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","type":"Microsoft.Authorization/policyDefinitions","name":"e9c8d085-d9cc-4b17-9cdc-059f1f01f19e"},{"properties":{"displayName":"Microsoft - Managed Control 1363 - Incident Handling | Automated Incident Handling Processes","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1363"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ea3e8156-89a1-45b1-8bd6-938abc79fdfd","type":"Microsoft.Authorization/policyDefinitions","name":"ea3e8156-89a1-45b1-8bd6-938abc79fdfd"},{"properties":{"displayName":"Inherit - a tag from the resource group if missing","policyType":"BuiltIn","mode":"Indexed","description":"Adds - the specified tag with its value from the parent resource group when any resource - missing this tag is created or updated. Existing resources can be remediated - by triggering a remediation task. If the tag exists with a different value - it will not be changed.","metadata":{"version":"1.0.0","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}}},"policyRule":{"if":{"allOf":[{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''tagName'')]]","notEquals":""}]},"then":{"effect":"modify","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"add","field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[resourceGroup().tags[parameters(''tagName'')]]"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ea3f2387-9b95-492a-a190-fcdc54f7b070","type":"Microsoft.Authorization/policyDefinitions","name":"ea3f2387-9b95-492a-a190-fcdc54f7b070"},{"properties":{"displayName":"Key - Vault should use a virtual network service endpoint","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Key Vault not configured to use a virtual network service - endpoint.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/vaults"},{"anyOf":[{"field":"Microsoft.KeyVault/vaults/networkAcls.defaultAction","notEquals":"Deny"},{"field":"Microsoft.KeyVault/vaults/networkAcls.virtualNetworkRules[*].id","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ea4d6841-2173-4317-9747-ff522a45120f","type":"Microsoft.Authorization/policyDefinitions","name":"ea4d6841-2173-4317-9747-ff522a45120f"},{"properties":{"displayName":"Microsoft - Managed Control 1422 - Maintenance Personnel","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1422"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ea556850-838d-4a37-8ce5-9d7642f95e11","type":"Microsoft.Authorization/policyDefinitions","name":"ea556850-838d-4a37-8ce5-9d7642f95e11"},{"properties":{"displayName":"Microsoft - Managed Control 1542 - Risk Assessment","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Risk Assessment control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1542"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/eab340d0-3d55-4826-a0e5-feebfeb0131d","type":"Microsoft.Authorization/policyDefinitions","name":"eab340d0-3d55-4826-a0e5-feebfeb0131d"},{"properties":{"displayName":"Ensure - Function app has ''Client Certificates (Incoming client certificates)'' set - to ''On''","policyType":"BuiltIn","mode":"Indexed","description":"Client certificates - allow for the app to request a certificate for incoming requests. Only clients - that have a valid certificate will be able to reach the app.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"},{"field":"Microsoft.Web/sites/clientCertEnabled","equals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","type":"Microsoft.Authorization/policyDefinitions","name":"eaebaea7-8013-4ceb-9d14-7eb32271373c"},{"properties":{"displayName":"Microsoft - Managed Control 1064 - Remote Access | Privileged Commands / Access","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1064"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/eb4d9508-cbf0-4a3c-bb5c-6c95b159f3fb","type":"Microsoft.Authorization/policyDefinitions","name":"eb4d9508-cbf0-4a3c-bb5c-6c95b159f3fb"},{"properties":{"displayName":"Microsoft - Managed Control 1321 - Authenticator Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1321"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/eb627cc6-3a9d-46b5-96b7-5fca49178a37","type":"Microsoft.Authorization/policyDefinitions","name":"eb627cc6-3a9d-46b5-96b7-5fca49178a37"},{"properties":{"displayName":"Log - checkpoints should be enabled for PostgreSQL database servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy helps audit any PostgreSQL databases in your environment without log_checkpoints - setting enabled.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforPostgreSQL/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforPostgreSQL/servers/configurations","name":"log_checkpoints","existenceCondition":{"field":"Microsoft.DBforPostgreSQL/servers/configurations/value","equals":"ON"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d","type":"Microsoft.Authorization/policyDefinitions","name":"eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d"},{"properties":{"displayName":"Log - connections should be enabled for PostgreSQL database servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy helps audit any PostgreSQL databases in your environment without log_connections - setting enabled.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforPostgreSQL/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforPostgreSQL/servers/configurations","name":"log_connections","existenceCondition":{"field":"Microsoft.DBforPostgreSQL/servers/configurations/value","equals":"ON"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e442","type":"Microsoft.Authorization/policyDefinitions","name":"eb6f77b9-bd53-4e35-a23d-7f65d5f0e442"},{"properties":{"displayName":"Disconnections - should be logged for PostgreSQL database servers.","policyType":"BuiltIn","mode":"Indexed","description":"This - policy helps audit any PostgreSQL databases in your environment without log_disconnections - enabled.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforPostgreSQL/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforPostgreSQL/servers/configurations","name":"log_disconnections","existenceCondition":{"field":"Microsoft.DBforPostgreSQL/servers/configurations/value","equals":"ON"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e446","type":"Microsoft.Authorization/policyDefinitions","name":"eb6f77b9-bd53-4e35-a23d-7f65d5f0e446"},{"properties":{"displayName":"Log - duration should be enabled for PostgreSQL database servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy helps audit any PostgreSQL databases in your environment without log_duration - setting enabled.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforPostgreSQL/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforPostgreSQL/servers/configurations","name":"log_duration","existenceCondition":{"field":"Microsoft.DBforPostgreSQL/servers/configurations/value","equals":"ON"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e8f3","type":"Microsoft.Authorization/policyDefinitions","name":"eb6f77b9-bd53-4e35-a23d-7f65d5f0e8f3"},{"properties":{"displayName":"Deprecated - accounts with owner permissions should be removed from your subscription","policyType":"BuiltIn","mode":"All","description":"Deprecated - accounts with owner permissions should be removed from your subscription. Deprecated - accounts are accounts that have been blocked from signing in.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"RemoveDeprecatedAccountsWithOwnerPermissions","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","type":"Microsoft.Authorization/policyDefinitions","name":"ebb62a0c-3560-49e1-89ed-27e074e9f8ad"},{"properties":{"displayName":"Deploy - prerequisites to audit Linux VMs that allow remote connections from accounts - without passwords","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that allow remote connections from accounts without passwords. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"3.0.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordPolicy_msid110","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"PasswordPolicy_msid110"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforLinux'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforLinux","typeHandlerVersion":"1.0","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ec49586f-4939-402d-a29e-6ff502b20592","type":"Microsoft.Authorization/policyDefinitions","name":"ec49586f-4939-402d-a29e-6ff502b20592"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''Administrative Templates - - Control Panel''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Administrative Templates - - Control Panel''. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_AdministrativeTemplatesControlPanel","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_AdministrativeTemplatesControlPanel"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ec7ac234-2af5-4729-94d2-c557c071799d","type":"Microsoft.Authorization/policyDefinitions","name":"ec7ac234-2af5-4729-94d2-c557c071799d"},{"properties":{"displayName":"Microsoft - Managed Control 1241 - User-Installed Software | Alerts For Unauthorized Installations","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1241"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/eca4d7b2-65e2-4e04-95d4-c68606b063c3","type":"Microsoft.Authorization/policyDefinitions","name":"eca4d7b2-65e2-4e04-95d4-c68606b063c3"},{"properties":{"displayName":"Microsoft - Managed Control 1622 - Boundary Protection","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1622"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ecf56554-164d-499a-8d00-206b07c27bed","type":"Microsoft.Authorization/policyDefinitions","name":"ecf56554-164d-499a-8d00-206b07c27bed"},{"properties":{"displayName":"Deploy - Diagnostic Settings for Key Vault to Event Hub","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Key Vault to stream to a regional Event Hub when - any Key Vault which is missing this diagnostic settings is created or updated.","metadata":{"version":"2.0.0","category":"Key - Vault"},"parameters":{"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"},"defaultValue":"setbypolicy"},"eventHubRuleId":{"type":"String","metadata":{"displayName":"Event - Hub Authorization Rule Id","description":"The Event Hub authorization rule - Id for Azure Diagnostics. The authorization rule needs to be at Event Hub - namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}","strongType":"Microsoft.EventHub/Namespaces/AuthorizationRules","assignPermissions":true}},"eventHubLocation":{"type":"String","metadata":{"displayName":"Event - Hub Location","description":"The location the Event Hub resides in. Only Key - Vaults in this location will be linked to this Event Hub.","strongType":"location"},"defaultValue":""},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Event Hub - - True or False"},"allowedValues":["True","False"],"defaultValue":"False"},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Event Hub - True - or False"},"allowedValues":["True","False"],"defaultValue":"True"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/vaults"},{"anyOf":[{"value":"[parameters(''eventHubLocation'')]","equals":""},{"field":"location","equals":"[parameters(''eventHubLocation'')]"}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vaultName":{"type":"string"},"location":{"type":"string"},"eventHubRuleId":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"resources":[{"type":"Microsoft.KeyVault/vaults/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''vaultName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"eventHubAuthorizationRuleId":"[parameters(''eventHubRuleId'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"AuditEvent","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - diagnostic settings for '', parameters(''vaultName''))]"}}},"parameters":{"location":{"value":"[field(''location'')]"},"vaultName":{"value":"[field(''name'')]"},"eventHubRuleId":{"value":"[parameters(''eventHubRuleId'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ed7c8c13-51e7-49d1-8a43-8490431a0da2","type":"Microsoft.Authorization/policyDefinitions","name":"ed7c8c13-51e7-49d1-8a43-8490431a0da2"},{"properties":{"displayName":"Microsoft - Managed Control 1217 - Least Functionality | Periodic Review","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1217"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/edea4f20-b02c-4115-be75-86c080e5c0ed","type":"Microsoft.Authorization/policyDefinitions","name":"edea4f20-b02c-4115-be75-86c080e5c0ed"},{"properties":{"displayName":"Deploy - Diagnostic Settings for Stream Analytics to Event Hub","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Stream Analytics to stream to a regional Event - Hub when any Stream Analytics which is missing this diagnostic settings is - created or updated.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"},"defaultValue":"setbypolicy_eventHub"},"eventHubRuleId":{"type":"String","metadata":{"displayName":"Event - Hub Authorization Rule Id","description":"The Event Hub authorization rule - Id for Azure Diagnostics. The authorization rule needs to be at Event Hub - namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}","strongType":"Microsoft.EventHub/Namespaces/AuthorizationRules","assignPermissions":true}},"eventHubLocation":{"type":"String","metadata":{"displayName":"Event - Hub Location","description":"The location the Event Hub resides in. Only Stream - Analytics in this location will be linked to this Event Hub.","strongType":"location"},"defaultValue":""},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Event Hub - - True or False"},"allowedValues":["True","False"],"defaultValue":"False"},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Event Hub - True - or False"},"allowedValues":["True","False"],"defaultValue":"True"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.StreamAnalytics/streamingjobs"},{"anyOf":[{"value":"[parameters(''eventHubLocation'')]","equals":""},{"field":"location","equals":"[parameters(''eventHubLocation'')]"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"eventHubRuleId":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.StreamAnalytics/streamingjobs/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"eventHubAuthorizationRuleId":"[parameters(''eventHubRuleId'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"Execution","enabled":"[parameters(''logsEnabled'')]"},{"category":"Authoring","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"eventHubRuleId":{"value":"[parameters(''eventHubRuleId'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/edf3780c-3d70-40fe-b17e-ab72013dafca","type":"Microsoft.Authorization/policyDefinitions","name":"edf3780c-3d70-40fe-b17e-ab72013dafca"},{"properties":{"displayName":"Microsoft - Managed Control 1189 - Configuration Change Control","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1189"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ee45e02a-4140-416c-82c4-fecfea660b9d","type":"Microsoft.Authorization/policyDefinitions","name":"ee45e02a-4140-416c-82c4-fecfea660b9d"},{"properties":{"displayName":"Microsoft - Managed Control 1089 - Security Awareness Training","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Awareness and Training control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1089"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ef080e67-0d1a-4f76-a0c5-fb9b0358485e","type":"Microsoft.Authorization/policyDefinitions","name":"ef080e67-0d1a-4f76-a0c5-fb9b0358485e"},{"properties":{"displayName":"Microsoft - Managed Control 1314 - Identifier Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1314"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ef0c8530-efd9-45b8-b753-f03083d06295","type":"Microsoft.Authorization/policyDefinitions","name":"ef0c8530-efd9-45b8-b753-f03083d06295"},{"properties":{"displayName":"Microsoft - Managed Control 1128 - Time Stamps","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1128"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ef212163-3bc4-4e86-bcf8-705127086393","type":"Microsoft.Authorization/policyDefinitions","name":"ef212163-3bc4-4e86-bcf8-705127086393"},{"properties":{"displayName":"Vulnerability - assessment should be enabled on your SQL servers","policyType":"BuiltIn","mode":"Indexed","description":"Audit - Azure SQL servers which do not have recurring vulnerability assessment scans - enabled. Vulnerability assessment can discover, track, and help you remediate - potential database vulnerabilities.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/vulnerabilityAssessments","name":"default","existenceCondition":{"field":"Microsoft.Sql/servers/vulnerabilityAssessments/recurringScans.isEnabled","equals":"True"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","type":"Microsoft.Authorization/policyDefinitions","name":"ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9"},{"properties":{"displayName":"API - Management services should use a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Virtual - network on API Management services of the specified SKU should be enabled.","metadata":{"version":"1.0.0","category":"API - Management"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"},"evaluatedSkuNames":{"type":"Array","metadata":{"displayName":"API - Management SKU Names","description":"List of API Management SKUs against which - this policy will be evaluated."},"allowedValues":["Developer","Basic","Standard","Premium","Consumption"],"defaultValue":["Developer","Premium"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ApiManagement/service"},{"field":"Microsoft.ApiManagement/service/sku.name","in":"[parameters(''evaluatedSkuNames'')]"},{"anyOf":[{"field":"Microsoft.ApiManagement/service/virtualNetworkType","exists":"false"},{"field":"Microsoft.ApiManagement/service/virtualNetworkType","equals":"None"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","type":"Microsoft.Authorization/policyDefinitions","name":"ef619a2c-cc4d-4d03-b2ba-8c94a834d85b"},{"properties":{"displayName":"Deploy - Diagnostic Settings for Event Hub to Event Hub","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Event Hub to stream to a regional Event Hub when - any Event Hub which is missing this diagnostic settings is created or updated.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"},"defaultValue":"setbypolicy_eventHub"},"eventHubRuleId":{"type":"String","metadata":{"displayName":"Event - Hub Authorization Rule Id","description":"The Event Hub authorization rule - Id for Azure Diagnostics. The authorization rule needs to be at Event Hub - namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}","strongType":"Microsoft.EventHub/Namespaces/AuthorizationRules","assignPermissions":true}},"eventHubLocation":{"type":"String","metadata":{"displayName":"Event - Hub Destination Location","description":"The location the Event Hub that will - get diagnostic data resides in. Only source Event Hubs in this location will - be linked to this destination Event Hub.","strongType":"location"},"defaultValue":""},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Event Hub - - True or False"},"allowedValues":["True","False"],"defaultValue":"False"},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Event Hub - True - or False"},"allowedValues":["True","False"],"defaultValue":"True"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces"},{"anyOf":[{"value":"[parameters(''eventHubLocation'')]","equals":""},{"field":"location","equals":"[parameters(''eventHubLocation'')]"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"eventHubRuleId":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.EventHub/namespaces/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"eventHubAuthorizationRuleId":"[parameters(''eventHubRuleId'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"ArchiveLogs","enabled":"[parameters(''logsEnabled'')]"},{"category":"OperationalLogs","enabled":"[parameters(''logsEnabled'')]"},{"category":"AutoScaleLogs","enabled":"[parameters(''logsEnabled'')]"},{"category":"KafkaCoordinatorLogs","enabled":"[parameters(''logsEnabled'')]"},{"category":"EventHubVNetConnectionEvent","enabled":"[parameters(''logsEnabled'')]"},{"category":"CustomerManagedKeyUserLogs","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"eventHubRuleId":{"value":"[parameters(''eventHubRuleId'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ef7b61ef-b8e4-4c91-8e78-6946c6b0023f","type":"Microsoft.Authorization/policyDefinitions","name":"ef7b61ef-b8e4-4c91-8e78-6946c6b0023f"},{"properties":{"displayName":"Microsoft - Managed Control 1472 - Emergency Shutoff","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1472"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ef869332-921d-4c28-9402-3be73e6e50c8","type":"Microsoft.Authorization/policyDefinitions","name":"ef869332-921d-4c28-9402-3be73e6e50c8"},{"properties":{"displayName":"The - Log Analytics agent should be installed on Virtual Machine Scale Sets","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Windows/Linux Virtual Machine Scale Sets if the Log Analytics - agent is not installed.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/type","in":["MicrosoftMonitoringAgent","OmsAgentForLinux"]},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/provisioningState","equals":"Succeeded"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/settings.workspaceId","exists":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/efbde977-ba53-4479-b8e9-10b957924fbf","type":"Microsoft.Authorization/policyDefinitions","name":"efbde977-ba53-4479-b8e9-10b957924fbf"},{"properties":{"displayName":"Microsoft - Managed Control 1012 - Account Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1012"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/efd7b9ae-1db6-4eb6-b0fe-87e6565f9738","type":"Microsoft.Authorization/policyDefinitions","name":"efd7b9ae-1db6-4eb6-b0fe-87e6565f9738"},{"properties":{"displayName":"Microsoft - Managed Control 1358 - Incident Response Testing","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1358"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/effbaeef-5bf4-400d-895e-ef8cbc0e64c7","type":"Microsoft.Authorization/policyDefinitions","name":"effbaeef-5bf4-400d-895e-ef8cbc0e64c7"},{"properties":{"displayName":"Ensure - that Register with Azure Active Directory is enabled on Function App","policyType":"BuiltIn","mode":"Indexed","description":"Managed - service identity in App Service makes the app more secure by eliminating secrets - from the app, such as credentials in the connection strings. When registering - with Azure Active Directory in the app service, the app will connect to other - Azure services securely without the need of username and passwords","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/web.managedServiceIdentityId","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f0473e7a-a1ba-4e86-afb2-e829e11b01d8","type":"Microsoft.Authorization/policyDefinitions","name":"f0473e7a-a1ba-4e86-afb2-e829e11b01d8"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs that have the specified applications installed","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"ApplicationName":{"type":"String","metadata":{"displayName":"Application - names (supports wildcards)","description":"A semicolon-separated list of the - names of the applications that should not be installed. e.g. ''Microsoft SQL - Server 2014 (64-bit); Microsoft Visual Studio Code'' or ''Microsoft SQL Server - 2014*'' (to match any application starting with ''Microsoft SQL Server 2014'')"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"NotInstalledApplication","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[InstalledApplication]NotInstalledApplicationResource1;Name'', - ''='', parameters(''ApplicationName'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"NotInstalledApplication"},"ApplicationName":{"value":"[parameters(''ApplicationName'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"ApplicationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[InstalledApplication]NotInstalledApplicationResource1;Name","value":"[parameters(''ApplicationName'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[InstalledApplication]NotInstalledApplicationResource1;Name","value":"[parameters(''ApplicationName'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f0633351-c7b2-41ff-9981-508fc08553c2","type":"Microsoft.Authorization/policyDefinitions","name":"f0633351-c7b2-41ff-9981-508fc08553c2"},{"properties":{"displayName":"Microsoft - Managed Control 1531 - Third-Party Personnel Security","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1531"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f0643e0c-eee5-4113-8684-c608d05c5236","type":"Microsoft.Authorization/policyDefinitions","name":"f0643e0c-eee5-4113-8684-c608d05c5236"},{"properties":{"displayName":"Latest - TLS version should be used in your Web App","policyType":"BuiltIn","mode":"Indexed","description":"Upgrade - to the latest TLS version","metadata":{"version":"1.0.0","category":"App Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/minTlsVersion","equals":"1.2"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","type":"Microsoft.Authorization/policyDefinitions","name":"f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b"},{"properties":{"displayName":"Deploy - Workflow Automation for Azure Security Center alerts","policyType":"BuiltIn","mode":"All","description":"Enable - automation of Azure Security Center alerts. This policy deploys a workflow - automation with your conditions and triggers on the assigned scope. To deploy - this policy on newly created subscriptions, open the Compliance tab, select - the relevant non-compliant assignment and create a remediation task.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"automationName":{"type":"String","metadata":{"displayName":"Automation - name","description":"This is the automation name."}},"resourceGroupName":{"type":"String","metadata":{"displayName":"Resource - group name","description":"The resource group name where the workflow automation - is created. If you enter a name for a resource group that doesn''t exist, - it''ll be created in the subscription."}},"resourceGroupLocation":{"type":"String","metadata":{"displayName":"Resource - group location","description":"The location where the resource group and the - workflow automation are created.","strongType":"location"}},"alertName":{"type":"String","metadata":{"displayName":"Alert - name contains","description":"String included in the required alert name. - For a full reference list of Security Center''s alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference."},"defaultValue":""},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert - severities","description":"Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic - App","description":"The Logic App that is triggered. If you do not already - have a logic app, visit Logic Apps to create one (https://portal.azure.com/#blade/HubsExtension/BrowseResourceBlade/resourceType/Microsoft.Logic%2Fworkflows).","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic - app trigger","description":"The trigger connector of the logic app that is - triggered. Possible values: ''Manual (Incoming HTTP request)'', ''When an - Azure Security Center Alert is created or triggered''."},"allowedValues":["Manual - (Incoming HTTP request)","When an Azure Security Center Alert is created or - triggered"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Security/automations","name":"[parameters(''automationName'')]","existenceScope":"resourcegroup","ResourceGroupName":"[parameters(''resourceGroupName'')]","deploymentScope":"subscription","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"automationName":{"type":"string"},"resourceGroupName":{"type":"string"},"resourceGroupLocation":{"type":"string"},"alertName":{"type":"string"},"alertSeverities":{"type":"array"},"logicAppResourceId":{"type":"string"},"logicAppTrigger":{"type":"string"},"guidValue":{"type":"string","defaultValue":"[newGuid()]"}},"variables":{"scopeDescription":"scope - for subscription {0}","alertSeveritiesLength":"[length(parameters(''alertSeverities''))]","alertSeveritiesLengthIfEmpty":"[if(equals(variables(''alertSeveritiesLength''), - 0), 1, variables(''alertSeveritiesLength''))]","severityMap":{"High":"high","Medium":"medium","Low":"low"},"triggerMap":{"Manual - (Incoming HTTP request)":"manual","When an Azure Security Center Alert is - created or triggered":"When_an_Azure_Security_Center_Alert_is_created_or_triggered"}},"resources":[{"name":"[parameters(''resourceGroupName'')]","type":"Microsoft.Resources/resourceGroups","apiVersion":"2019-10-01","location":"[parameters(''resourceGroupLocation'')]","tags":{},"properties":{}},{"type":"Microsoft.Resources/deployments","apiVersion":"2019-10-01","name":"[concat(''nestedAutomationDeployment'', - ''_'', parameters(''guidValue''))]","resourceGroup":"[parameters(''resourceGroupName'')]","dependsOn":["[resourceId(''Microsoft.Resources/resourceGroups/'', - parameters(''resourceGroupName''))]"],"properties":{"mode":"Incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{},"variables":{},"resources":[{"tags":{},"apiVersion":"2019-01-01-preview","location":"[parameters(''resourceGroupLocation'')]","name":"[parameters(''automationName'')]","type":"Microsoft.Security/automations","dependsOn":[],"properties":{"description":"Workflow - Automation for Azure Security Center alerts via policy","isEnabled":true,"scopes":[{"description":"[replace(variables(''scopeDescription''),''{0}'', - subscription().subscriptionId)]","scopePath":"[subscription().id]"}],"sources":[{"eventSource":"Alerts","copy":[{"name":"ruleSets","count":"[variables(''alertSeveritiesLengthIfEmpty'')]","input":{"rules":[{"propertyJPath":"[if(equals(parameters(''alertName''), - ''''), ''Version'', ''AlertDisplayName'')]","propertyType":"string","expectedValue":"[if(equals(parameters(''alertName''), - ''''), ''3.'', parameters(''alertName''))]","operator":"Contains"},{"propertyJPath":"Severity","propertyType":"string","expectedValue":"[variables(''severityMap'')[parameters(''alertSeverities'')[mod(copyIndex(''ruleSets''), - variables(''alertSeveritiesLengthIfEmpty''))]]]","operator":"Equals"}]}}]}],"actions":[{"actionType":"LogicApp","logicAppResourceId":"[parameters(''logicAppResourceId'')]","uri":"[listCallbackUrl(concat(parameters(''logicAppResourceId''), - ''/triggers/'', variables(''triggerMap'')[parameters(''logicAppTrigger'')]),''2016-06-01'').value]"}]}}]}}}]},"parameters":{"automationName":{"value":"[parameters(''automationName'')]"},"resourceGroupName":{"value":"[parameters(''resourceGroupName'')]"},"resourceGroupLocation":{"value":"[parameters(''resourceGroupLocation'')]"},"alertName":{"value":"[parameters(''alertName'')]"},"alertSeverities":{"value":"[parameters(''alertSeverities'')]"},"logicAppResourceId":{"value":"[parameters(''logicAppResourceId'')]"},"logicAppTrigger":{"value":"[parameters(''logicAppTrigger'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f1525828-9a90-4fcf-be48-268cdd02361e","type":"Microsoft.Authorization/policyDefinitions","name":"f1525828-9a90-4fcf-be48-268cdd02361e"},{"properties":{"displayName":"Microsoft - Managed Control 1028 - Information Flow Enforcement","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1028"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f171df5c-921b-41e9-b12b-50801c315475","type":"Microsoft.Authorization/policyDefinitions","name":"f171df5c-921b-41e9-b12b-50801c315475"},{"properties":{"displayName":"Virtual - networks should use specified virtual network gateway","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any virtual network if the default route does not point to the - specified virtual network gateway.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"virtualNetworkGatewayId":{"type":"String","metadata":{"displayName":"Virtual - network gateway Id","description":"Resource Id of the virtual network gateway. - Example: /subscriptions/YourSubscriptionId/resourceGroups/YourResourceGroup/providers/Microsoft.Network/virtualNetworkGateways/Name"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Network/virtualNetworks"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Network/virtualNetworks/subnets","name":"GatewaySubnet","existenceCondition":{"not":{"field":"Microsoft.Network/virtualNetworks/subnets/ipConfigurations[*].id","notContains":"[concat(parameters(''virtualNetworkGatewayId''), - ''/'')]"}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f1776c76-f58c-4245-a8d0-2b207198dc8b","type":"Microsoft.Authorization/policyDefinitions","name":"f1776c76-f58c-4245-a8d0-2b207198dc8b"},{"properties":{"displayName":"Deploy - prerequisites to audit Linux VMs that do not have the passwd file permissions - set to 0644","policyType":"BuiltIn","mode":"Indexed","description":"This policy - creates a Guest Configuration assignment to audit Linux virtual machines that - do not have the passwd file permissions set to 0644. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"3.0.0","category":"Guest Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordPolicy_msid121","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"PasswordPolicy_msid121"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforLinux'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforLinux","typeHandlerVersion":"1.0","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f19aa1c1-6b91-4c27-ae6a-970279f03db9","type":"Microsoft.Authorization/policyDefinitions","name":"f19aa1c1-6b91-4c27-ae6a-970279f03db9"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''Administrative Templates - - MSS (Legacy)''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Administrative Templates - - MSS (Legacy)''. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_AdminstrativeTemplatesMSSLegacy","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_AdminstrativeTemplatesMSSLegacy"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f1f4825d-58fb-4257-8016-8c00e3c9ed9d","type":"Microsoft.Authorization/policyDefinitions","name":"f1f4825d-58fb-4257-8016-8c00e3c9ed9d"},{"properties":{"displayName":"Microsoft - Managed Control 1701 - Information System Monitoring | Host-Based Devices","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1701"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f25bc08f-27cb-43b6-9a23-014d00700426","type":"Microsoft.Authorization/policyDefinitions","name":"f25bc08f-27cb-43b6-9a23-014d00700426"},{"properties":{"displayName":"Microsoft - Managed Control 1457 - Physical Access Control","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1457"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f2d9d3e6-8886-4305-865d-639163e5c305","type":"Microsoft.Authorization/policyDefinitions","name":"f2d9d3e6-8886-4305-865d-639163e5c305"},{"properties":{"displayName":"Microsoft - Managed Control 1309 - Identification And Authentication (Org. Users) | Acceptance - Of Piv Credentials","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1309"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f355d62b-39a8-4ba3-abf7-90f71cb3b000","type":"Microsoft.Authorization/policyDefinitions","name":"f355d62b-39a8-4ba3-abf7-90f71cb3b000"},{"properties":{"displayName":"Microsoft - Managed Control 1615 - System And Communications Protection Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1615"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f35e02aa-0a55-49f8-8811-8abfa7e6f2c0","type":"Microsoft.Authorization/policyDefinitions","name":"f35e02aa-0a55-49f8-8811-8abfa7e6f2c0"},{"properties":{"displayName":"Microsoft - Managed Control 1255 - Contingency Plan | Continue Essential Missions / Business - Functions","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1255"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f3793f5e-937f-44f7-bfba-40647ef3efa0","type":"Microsoft.Authorization/policyDefinitions","name":"f3793f5e-937f-44f7-bfba-40647ef3efa0"},{"properties":{"displayName":"Show - audit results from Windows VMs in which the Administrators group does not - contain all of the specified members","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines in which the Administrators group does not - contain all of the specified members. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AdministratorsGroupMembersToInclude","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f3b44e5d-1456-475f-9c67-c66c4618e85a","type":"Microsoft.Authorization/policyDefinitions","name":"f3b44e5d-1456-475f-9c67-c66c4618e85a"},{"properties":{"displayName":"Show - audit results from Windows VMs that do not contain the specified certificates - in Trusted Root","policyType":"BuiltIn","mode":"All","description":"This policy - should only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - VMs that do not contain the specified certificates in the Trusted Root Certification - Authorities certificate store (Cert:\\LocalMachine\\Root). For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsCertificateInTrustedRoot","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f3b9ad83-000d-4dc1-bff0-6d54533dd03f","type":"Microsoft.Authorization/policyDefinitions","name":"f3b9ad83-000d-4dc1-bff0-6d54533dd03f"},{"properties":{"displayName":"Microsoft - Managed Control 1706 - Security Alerts, Advisories, And Directives","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1706"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f475ee0e-f560-4c9b-876b-04a77460a404","type":"Microsoft.Authorization/policyDefinitions","name":"f475ee0e-f560-4c9b-876b-04a77460a404"},{"properties":{"displayName":"Audit - Log Analytics workspace for VM - Report Mismatch","policyType":"BuiltIn","mode":"Indexed","description":"Reports - VMs as non-compliant if they aren''t logging to the Log Analytics workspace - specified in the policy/initiative assignment.","metadata":{"version":"1.0.1","category":"Monitoring"},"parameters":{"logAnalyticsWorkspaceId":{"type":"String","metadata":{"displayName":"Log - Analytics Workspace Id that VMs should be configured for","description":"This - is the Id (GUID) of the Log Analytics Workspace that the VMs should be configured - for."}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines/extensions"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"},{"field":"Microsoft.Compute/virtualMachines/extensions/settings.workspaceId","notEquals":"[parameters(''logAnalyticsWorkspaceId'')]"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f47b5582-33ec-4c5c-87c0-b010a6b2e917","type":"Microsoft.Authorization/policyDefinitions","name":"f47b5582-33ec-4c5c-87c0-b010a6b2e917"},{"properties":{"displayName":"Authorization - rules on the Event Hub instance should be defined","policyType":"BuiltIn","mode":"All","description":"Audit - existence of authorization rules on Event Hub entities to grant least-privileged - access","metadata":{"version":"1.0.0","category":"Event Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.EventHub/namespaces/eventhubs"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/eventHubs/authorizationRules"}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f4826e5f-6a27-407c-ae3e-9582eb39891d","type":"Microsoft.Authorization/policyDefinitions","name":"f4826e5f-6a27-407c-ae3e-9582eb39891d"},{"properties":{"displayName":"Show - audit results from Windows VMs that do not have the password complexity setting - enabled","policyType":"BuiltIn","mode":"All","description":"This policy should - only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines that do not have the password complexity setting enabled. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordMustMeetComplexityRequirements","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f48b2913-1dc5-4834-8c72-ccc1dfd819bb","type":"Microsoft.Authorization/policyDefinitions","name":"f48b2913-1dc5-4834-8c72-ccc1dfd819bb"},{"properties":{"displayName":"Microsoft - Managed Control 1495 - System Security Plan","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1495"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f4978d0e-a596-48e7-9f8c-bbf52554ce8d","type":"Microsoft.Authorization/policyDefinitions","name":"f4978d0e-a596-48e7-9f8c-bbf52554ce8d"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs that have not restarted within the specified - number of days","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that have not restarted within the specified number of days. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.1.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"NumberOfDays":{"type":"String","metadata":{"displayName":"Number - of days","description":"The number of days without restart until the machine - is considered non-compliant"},"defaultValue":"12"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"MachineLastBootUpTime","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[MachineUpTime]MachineLastBootUpTime;NumberOfDays'', - ''='', parameters(''NumberOfDays'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"MachineLastBootUpTime"},"NumberOfDays":{"value":"[parameters(''NumberOfDays'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"NumberOfDays":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[MachineUpTime]MachineLastBootUpTime;NumberOfDays","value":"[parameters(''NumberOfDays'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[MachineUpTime]MachineLastBootUpTime;NumberOfDays","value":"[parameters(''NumberOfDays'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f4b245d4-46c9-42be-9b1a-49e2b5b94194","type":"Microsoft.Authorization/policyDefinitions","name":"f4b245d4-46c9-42be-9b1a-49e2b5b94194"},{"properties":{"displayName":"Deploy - Auditing on SQL servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy ensures that Auditing is enabled on SQL Servers for enhanced security - and compliance. It will automatically create a storage account in the same - region as the SQL server to store audit records.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"retentionDays":{"type":"String","metadata":{"description":"The - value in days of the retention period (0 indicates unlimited retention)","displayName":"Retention - days (optional, 180 days if unspecified)"},"defaultValue":"180"},"storageAccountsResourceGroup":{"type":"String","metadata":{"displayName":"Resource - group name for storage accounts","description":"Auditing writes database events - to an audit log in your Azure Storage account (a storage account will be created - in each region where a SQL Server is created that will be shared by all servers - in that region). Important - for proper operation of Auditing do not delete - or rename the resource group or the storage accounts.","strongType":"existingResourceGroups"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"DeployIfNotExists","details":{"type":"Microsoft.Sql/servers/auditingSettings","name":"Default","existenceCondition":{"field":"Microsoft.Sql/auditingSettings.state","equals":"Enabled"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3","/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serverName":{"type":"string"},"auditRetentionDays":{"type":"string"},"storageAccountsResourceGroup":{"type":"string"},"location":{"type":"string"}},"variables":{"retentionDays":"[int(parameters(''auditRetentionDays''))]","subscriptionId":"[subscription().subscriptionId]","uniqueStorage":"[uniqueString(variables(''subscriptionId''), - parameters(''location''), parameters(''storageAccountsResourceGroup''))]","locationCode":"[substring(parameters(''location''), - 0, 3)]","storageName":"[tolower(concat(''sqlaudit'', variables(''locationCode''), - variables(''uniqueStorage'')))]","createStorageAccountDeploymentName":"[concat(''sqlServerAuditingStorageAccount-'', - uniqueString(variables(''locationCode''), parameters(''serverName'')))]"},"resources":[{"apiVersion":"2017-05-10","name":"[variables(''createStorageAccountDeploymentName'')]","type":"Microsoft.Resources/deployments","resourceGroup":"[parameters(''storageAccountsResourceGroup'')]","properties":{"mode":"Incremental","parameters":{"location":{"value":"[parameters(''location'')]"},"storageName":{"value":"[variables(''storageName'')]"}},"templateLink":{"uri":"https://raw.githubusercontent.com/Azure/azure-policy/master/samples/SQL/deploy-sql-server-auditing/createStorage.template.json","contentVersion":"1.0.0.0"}}},{"name":"[concat(parameters(''serverName''), - ''/Default'')]","type":"Microsoft.Sql/servers/auditingSettings","apiVersion":"2017-03-01-preview","properties":{"state":"Enabled","storageEndpoint":"[reference(variables(''createStorageAccountDeploymentName'')).outputs.storageAccountEndPoint.value]","storageAccountAccessKey":"[reference(variables(''createStorageAccountDeploymentName'')).outputs.storageAccountKey.value]","retentionDays":"[variables(''retentionDays'')]","auditActionsAndGroups":null,"storageAccountSubscriptionId":"[subscription().subscriptionId]","isStorageSecondaryKeyInUse":false}}]},"parameters":{"serverName":{"value":"[field(''name'')]"},"auditRetentionDays":{"value":"[parameters(''retentionDays'')]"},"storageAccountsResourceGroup":{"value":"[parameters(''storageAccountsResourceGroup'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f4c68484-132f-41f9-9b6d-3e4b1cb55036","type":"Microsoft.Authorization/policyDefinitions","name":"f4c68484-132f-41f9-9b6d-3e4b1cb55036"},{"properties":{"displayName":"Microsoft - Managed Control 1469 - Power Equipment And Cabling","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1469"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f509c5b6-0de0-4a4e-9b2e-cd9cbf3a58fd","type":"Microsoft.Authorization/policyDefinitions","name":"f509c5b6-0de0-4a4e-9b2e-cd9cbf3a58fd"},{"properties":{"displayName":"Microsoft - Managed Control 1618 - Security Function Isolation","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1618"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f52f89aa-4489-4ec4-950e-8c96a036baa9","type":"Microsoft.Authorization/policyDefinitions","name":"f52f89aa-4489-4ec4-950e-8c96a036baa9"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''Security Options - - Network Access''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - Network Access''. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"NetworkAccessRemotelyAccessibleRegistryPaths":{"type":"String","metadata":{"displayName":"Network - access: Remotely accessible registry paths","description":"Specifies which - registry paths will be accessible over the network, regardless of the users - or groups listed in the access control list (ACL) of the `winreg` registry - key."},"defaultValue":"System\\CurrentControlSet\\Control\\ProductOptions|#|System\\CurrentControlSet\\Control\\Server - Applications|#|Software\\Microsoft\\Windows NT\\CurrentVersion"},"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths":{"type":"String","metadata":{"displayName":"Network - access: Remotely accessible registry paths and sub-paths","description":"Specifies - which registry paths and sub-paths will be accessible over the network, regardless - of the users or groups listed in the access control list (ACL) of the `winreg` - registry key."},"defaultValue":"System\\CurrentControlSet\\Control\\Print\\Printers|#|System\\CurrentControlSet\\Services\\Eventlog|#|Software\\Microsoft\\OLAP - Server|#|Software\\Microsoft\\Windows NT\\CurrentVersion\\Print|#|Software\\Microsoft\\Windows - NT\\CurrentVersion\\Windows|#|System\\CurrentControlSet\\Control\\ContentIndex|#|System\\CurrentControlSet\\Control\\Terminal - Server|#|System\\CurrentControlSet\\Control\\Terminal Server\\UserConfig|#|System\\CurrentControlSet\\Control\\Terminal - Server\\DefaultUserConfiguration|#|Software\\Microsoft\\Windows NT\\CurrentVersion\\Perflib|#|System\\CurrentControlSet\\Services\\SysmonLog"},"NetworkAccessSharesThatCanBeAccessedAnonymously":{"type":"String","metadata":{"displayName":"Network - access: Shares that can be accessed anonymously","description":"Specifies - which network shares can be accessed by anonymous users. The default configuration - for this policy setting has little effect because all users have to be authenticated - before they can access shared resources on the server."},"defaultValue":"0"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsNetworkAccess","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Network - access: Remotely accessible registry paths;ExpectedValue'', ''='', parameters(''NetworkAccessRemotelyAccessibleRegistryPaths''), - '','', ''Network access: Remotely accessible registry paths and sub-paths;ExpectedValue'', - ''='', parameters(''NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths''), - '','', ''Network access: Shares that can be accessed anonymously;ExpectedValue'', - ''='', parameters(''NetworkAccessSharesThatCanBeAccessedAnonymously'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsNetworkAccess"},"NetworkAccessRemotelyAccessibleRegistryPaths":{"value":"[parameters(''NetworkAccessRemotelyAccessibleRegistryPaths'')]"},"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths":{"value":"[parameters(''NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths'')]"},"NetworkAccessSharesThatCanBeAccessedAnonymously":{"value":"[parameters(''NetworkAccessSharesThatCanBeAccessedAnonymously'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"NetworkAccessRemotelyAccessibleRegistryPaths":{"type":"string"},"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths":{"type":"string"},"NetworkAccessSharesThatCanBeAccessedAnonymously":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Network - access: Remotely accessible registry paths;ExpectedValue","value":"[parameters(''NetworkAccessRemotelyAccessibleRegistryPaths'')]"},{"name":"Network - access: Remotely accessible registry paths and sub-paths;ExpectedValue","value":"[parameters(''NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths'')]"},{"name":"Network - access: Shares that can be accessed anonymously;ExpectedValue","value":"[parameters(''NetworkAccessSharesThatCanBeAccessedAnonymously'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Network - access: Remotely accessible registry paths;ExpectedValue","value":"[parameters(''NetworkAccessRemotelyAccessibleRegistryPaths'')]"},{"name":"Network - access: Remotely accessible registry paths and sub-paths;ExpectedValue","value":"[parameters(''NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths'')]"},{"name":"Network - access: Shares that can be accessed anonymously;ExpectedValue","value":"[parameters(''NetworkAccessSharesThatCanBeAccessedAnonymously'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f56a3ab2-89d1-44de-ac0d-2ada5962e22a","type":"Microsoft.Authorization/policyDefinitions","name":"f56a3ab2-89d1-44de-ac0d-2ada5962e22a"},{"properties":{"displayName":"Microsoft - Managed Control 1198 - Configuration Change Control | Security Representative","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1198"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f56be5c3-660b-4c61-9078-f67cf072c356","type":"Microsoft.Authorization/policyDefinitions","name":"f56be5c3-660b-4c61-9078-f67cf072c356"},{"properties":{"displayName":"Microsoft - Managed Control 1328 - Authenticator Management | Password-Based Authentication","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1328"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f5c66fdc-3d02-4034-9db5-ba57802609de","type":"Microsoft.Authorization/policyDefinitions","name":"f5c66fdc-3d02-4034-9db5-ba57802609de"},{"properties":{"displayName":"Microsoft - Managed Control 1193 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1193"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f5fd629f-3075-4cae-ab53-bad65495a4ac","type":"Microsoft.Authorization/policyDefinitions","name":"f5fd629f-3075-4cae-ab53-bad65495a4ac"},{"properties":{"displayName":"Web - Application Firewall should be a set mode for Application Gateway and Azure - Front Door Service","policyType":"BuiltIn","mode":"Indexed","description":"Mandates - detect or prevent mode to be active on all Web Application Firewall policies - for Azure Front Door and Application Gateway. Web Application Firewall policies - can have a consistent mode configuration across a resource group.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Deny"},"modeRequirement":{"type":"String","metadata":{"displayName":"Mode - Requirement","description":"Mode required for all WAF policies"},"allowedValues":["Prevention","Detection"],"defaultValue":"Detection"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Network/frontdoorwebapplicationfirewallpolicies"},{"field":"Microsoft.Network/frontdoorWebApplicationFirewallPolicies/policySettings.mode","notEquals":"[parameters(''modeRequirement'')]"}]},{"allOf":[{"field":"type","equals":"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies"},{"field":"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/policySettings.mode","notEquals":"[parameters(''modeRequirement'')]"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f6b68e5a-7207-4638-a1fb-47d90404209e","type":"Microsoft.Authorization/policyDefinitions","name":"f6b68e5a-7207-4638-a1fb-47d90404209e"},{"properties":{"displayName":"Internet-facing - virtual machines should be protected with network security groups","policyType":"BuiltIn","mode":"All","description":"Protect - your virtual machines from potential threats by restricting access to them - with network security groups (NSG). Learn more about controlling traffic with - NSGs at https://aka.ms/nsg-doc","metadata":{"version":"1.1.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"networkSecurityGroupsOnVirtualMachines","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","type":"Microsoft.Authorization/policyDefinitions","name":"f6de0be7-9a8a-4b8a-b349-43cf02d22f7c"},{"properties":{"displayName":"Microsoft - Managed Control 1214 - Least Functionality","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1214"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f714a4e2-b580-47b6-ae8c-f2812d3750f3","type":"Microsoft.Authorization/policyDefinitions","name":"f714a4e2-b580-47b6-ae8c-f2812d3750f3"},{"properties":{"displayName":"Microsoft - Managed Control 1591 - External Information System Services | Ident. Of Functions - / Ports / Protocols / Services","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1591"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f751cdb7-fbee-406b-969b-815d367cb9b3","type":"Microsoft.Authorization/policyDefinitions","name":"f751cdb7-fbee-406b-969b-815d367cb9b3"},{"properties":{"displayName":"Microsoft - Managed Control 1330 - Authenticator Management | Password-Based Authentication","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1330"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f75cedb2-5def-4b31-973e-b69e8c7bd031","type":"Microsoft.Authorization/policyDefinitions","name":"f75cedb2-5def-4b31-973e-b69e8c7bd031"},{"properties":{"displayName":"Microsoft - Managed Control 1540 - Security Categorization","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Risk Assessment control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1540"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f771f8cb-6642-45cc-9a15-8a41cd5c6977","type":"Microsoft.Authorization/policyDefinitions","name":"f771f8cb-6642-45cc-9a15-8a41cd5c6977"},{"properties":{"displayName":"Microsoft - Managed Control 1449 - Physical Access Authorizations","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1449"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f784d3b0-5f2b-49b7-b9f3-00ba8653ced5","type":"Microsoft.Authorization/policyDefinitions","name":"f784d3b0-5f2b-49b7-b9f3-00ba8653ced5"},{"properties":{"displayName":"Microsoft - Managed Control 1506 - Personnel Security Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1506"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f7d2ff17-d604-4dd9-b607-9ecf63f28ad2","type":"Microsoft.Authorization/policyDefinitions","name":"f7d2ff17-d604-4dd9-b607-9ecf63f28ad2"},{"properties":{"displayName":"Show - audit results from Windows VMs that do not have the specified Windows PowerShell - execution policy","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines where Windows PowerShell is not configured - to use the specified PowerShell execution policy. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsPowerShellExecutionPolicy","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f8036bd0-c10b-4931-86bb-94a878add855","type":"Microsoft.Authorization/policyDefinitions","name":"f8036bd0-c10b-4931-86bb-94a878add855"},{"properties":{"displayName":"Microsoft - Managed Control 1705 - Security Alerts, Advisories, And Directives","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1705"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f82e3639-fa2b-4e06-a786-932d8379b972","type":"Microsoft.Authorization/policyDefinitions","name":"f82e3639-fa2b-4e06-a786-932d8379b972"},{"properties":{"displayName":"External - accounts with owner permissions should be removed from your subscription","policyType":"BuiltIn","mode":"All","description":"External - accounts with owner permissions should be removed from your subscription in - order to prevent unmonitored access.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"RemoveExternalAccountsWithOwnerPermissions","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","type":"Microsoft.Authorization/policyDefinitions","name":"f8456c1c-aa66-4dfb-861a-25d127b775c9"},{"properties":{"displayName":"Microsoft - Managed Control 1345 - Cryptographic Module Authentication","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1345"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f86aa129-7c07-4aa4-bbf5-792d93ffd9ea","type":"Microsoft.Authorization/policyDefinitions","name":"f86aa129-7c07-4aa4-bbf5-792d93ffd9ea"},{"properties":{"displayName":"Microsoft - Managed Control 1065 - Remote Access | Privileged Commands / Access","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1065"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f87b8085-dca9-4cf1-8f7b-9822b997797c","type":"Microsoft.Authorization/policyDefinitions","name":"f87b8085-dca9-4cf1-8f7b-9822b997797c"},{"properties":{"displayName":"Deploy - prerequisites to audit Windows VMs configurations in ''System Audit Policies - - System''","policyType":"BuiltIn","mode":"Indexed","description":"This policy - creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''System Audit Policies - - System''. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"AuditOtherSystemEvents":{"type":"String","metadata":{"displayName":"Audit - Other System Events","description":"Specifies whether audit events are generated - for Windows Firewall Service and Windows Firewall driver start and stop events, - failure events for these services and Windows Firewall Service policy processing - failures."},"allowedValues":["No Auditing","Success","Failure","Success and - Failure"],"defaultValue":"No Auditing"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesSystem","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Audit - Other System Events;ExpectedValue'', ''='', parameters(''AuditOtherSystemEvents'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SystemAuditPoliciesSystem"},"AuditOtherSystemEvents":{"value":"[parameters(''AuditOtherSystemEvents'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"AuditOtherSystemEvents":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit - Other System Events;ExpectedValue","value":"[parameters(''AuditOtherSystemEvents'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit - Other System Events;ExpectedValue","value":"[parameters(''AuditOtherSystemEvents'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f8b0158d-4766-490f-bea0-259e52dba473","type":"Microsoft.Authorization/policyDefinitions","name":"f8b0158d-4766-490f-bea0-259e52dba473"},{"properties":{"displayName":"Diagnostic - logs in Service Bus should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of diagnostic logs. This enables you to recreate activity trails - to use for investigation purposes; when a security incident occurs or when - your network is compromised","metadata":{"version":"3.0.0","category":"Service - Bus"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ServiceBus/namespaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","type":"Microsoft.Authorization/policyDefinitions","name":"f8d36e2f-389b-4ee4-898d-21aeb69a0f45"},{"properties":{"displayName":"Microsoft - Managed Control 1203 - Access Restrictions For Change | Automated Access Enforcement - / Auditing","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1203"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f9012d14-e3e6-4d7b-b926-9f37b5537066","type":"Microsoft.Authorization/policyDefinitions","name":"f9012d14-e3e6-4d7b-b926-9f37b5537066"},{"properties":{"displayName":"Microsoft - Managed Control 1697 - Information System Monitoring | Analyze Traffic / Covert - Exfiltration","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1697"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f9873db2-18ad-46b3-a11a-1a1f8cbf0335","type":"Microsoft.Authorization/policyDefinitions","name":"f9873db2-18ad-46b3-a11a-1a1f8cbf0335"},{"properties":{"displayName":"Microsoft - Managed Control 1478 - Fire Protection | Suppression Devices / Systems","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1478"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f997df46-cfbb-4cc8-aac8-3fecdaf6a183","type":"Microsoft.Authorization/policyDefinitions","name":"f997df46-cfbb-4cc8-aac8-3fecdaf6a183"},{"properties":{"displayName":"Microsoft - Managed Control 1535 - Personnel Sanctions","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1535"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f9a165d2-967d-4733-8399-1074270dae2e","type":"Microsoft.Authorization/policyDefinitions","name":"f9a165d2-967d-4733-8399-1074270dae2e"},{"properties":{"displayName":"Microsoft - Managed Control 1108 - Content Of Audit Records | Additional Audit Information","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1108"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f9ad559e-c12d-415e-9a78-e50fdd7da7ba","type":"Microsoft.Authorization/policyDefinitions","name":"f9ad559e-c12d-415e-9a78-e50fdd7da7ba"},{"properties":{"displayName":"Diagnostic - logs in Azure Stream Analytics should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of diagnostic logs. This enables you to recreate activity trails - to use for investigation purposes; when a security incident occurs or when - your network is compromised","metadata":{"version":"3.0.0","category":"Stream - Analytics"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.StreamAnalytics/streamingJobs"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","type":"Microsoft.Authorization/policyDefinitions","name":"f9be5368-9bf5-4b84-9e0a-7850da98bb46"},{"properties":{"displayName":"Latest - TLS version should be used in your Function App","policyType":"BuiltIn","mode":"Indexed","description":"Upgrade - to the latest TLS version","metadata":{"version":"1.0.0","category":"App Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/minTlsVersion","equals":"1.2"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","type":"Microsoft.Authorization/policyDefinitions","name":"f9d614c5-c173-4d56-95a7-b4437057d193"},{"properties":{"displayName":"Microsoft - Managed Control 1280 - Telecommunications Services | Priority Of Service Provisions","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1280"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fa108498-b3a8-4ffb-9e79-1107e76afad3","type":"Microsoft.Authorization/policyDefinitions","name":"fa108498-b3a8-4ffb-9e79-1107e76afad3"},{"properties":{"displayName":"Microsoft - Managed Control 1037 - Least Privilege | Network Access To Privileged Commands","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1037"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fa4c2a3d-1294-41a3-9ada-0e540471e9fb","type":"Microsoft.Authorization/policyDefinitions","name":"fa4c2a3d-1294-41a3-9ada-0e540471e9fb"},{"properties":{"displayName":"Microsoft - Managed Control 1435 - Media Transport","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Media Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1435"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fa8d221b-d130-4637-ba16-501e666628bb","type":"Microsoft.Authorization/policyDefinitions","name":"fa8d221b-d130-4637-ba16-501e666628bb"},{"properties":{"displayName":"Microsoft - Managed Control 1675 - Flaw Remediation | Time To Remediate Flaws / Benchmarks - For Corrective Actions","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1675"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/facb66e0-1c48-478a-bed5-747a312323e1","type":"Microsoft.Authorization/policyDefinitions","name":"facb66e0-1c48-478a-bed5-747a312323e1"},{"properties":{"displayName":"Audit - Linux virtual machines on which the Linux Guest Configuration extension is - not enabled","policyType":"BuiltIn","mode":"Indexed","description":"This policy - audits Linux virtual machines hosted in Azure that are supported by Guest - Configuration but do not have the Guest Configuration extension enabled. For - more information on Guest Configuration, visit https://aka.ms/gcpol.","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachines/extensions","name":"AzurePolicyforLinux","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.GuestConfiguration"},{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"ConfigurationforLinux"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/faf25c8c-9598-4305-b4de-0aee1317fb31","type":"Microsoft.Authorization/policyDefinitions","name":"faf25c8c-9598-4305-b4de-0aee1317fb31"},{"properties":{"displayName":"Deploy - prerequisites to enable Guest Configuration Policy on Linux VMs.","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration on Linux VMs. This is a prerequisite for Guest Configuration - Policy and must be assigned to the scope before using any Guest Configuration - policy. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol.","metadata":{"category":"Guest Configuration","version":"3.0.0","requiredProviders":["Microsoft.GuestConfiguration"]},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.Compute/virtualMachines/extensions","name":"AzurePolicyforLinux","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.GuestConfiguration"},{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"ConfigurationforLinux"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"resources":[{"apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforLinux'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforLinux","typeHandlerVersion":"1.0","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fb27e9e0-526e-4ae1-89f2-a2a0bf0f8a50","type":"Microsoft.Authorization/policyDefinitions","name":"fb27e9e0-526e-4ae1-89f2-a2a0bf0f8a50"},{"properties":{"displayName":"Microsoft - Managed Control 1086 - Publicly Accessible Content","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1086"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fb321e6f-16a0-4be3-878f-500956e309c5","type":"Microsoft.Authorization/policyDefinitions","name":"fb321e6f-16a0-4be3-878f-500956e309c5"},{"properties":{"displayName":"Microsoft - Managed Control 1222 - Information System Component Inventory","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Configuration Management control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1222"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fb39e62f-6bda-4558-8088-ec03d5670914","type":"Microsoft.Authorization/policyDefinitions","name":"fb39e62f-6bda-4558-8088-ec03d5670914"},{"properties":{"displayName":"[Preview]: - Kubernetes Services should be upgraded to a non-vulnerable Kubernetes version","policyType":"BuiltIn","mode":"Indexed","description":"Upgrade - your Kubernetes service cluster to a later Kubernetes version to protect against - known vulnerabilities in your current Kubernetes version. Vulnerability CVE-2019-9946 - has been patched in Kubernetes versions 1.11.9+, 1.12.7+, 1.13.5+, and 1.14.0+","metadata":{"version":"1.0.1-preview","category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"anyOf":[{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","in":["1.13.4","1.13.3","1.13.2","1.13.1","1.13.0"]},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","in":["1.12.6","1.12.5","1.12.4","1.12.3","1.12.2","1.12.1","1.12.0"]},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","in":["1.11.8","1.11.7","1.11.6","1.11.5","1.11.4","1.11.3","1.11.2","1.11.1","1.11.0"]},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","Like":"1.10.*"},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","Like":"1.9.*"},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","Like":"1.8.*"},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","Like":"1.7.*"},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","Like":"1.6.*"},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","Like":"1.5.*"},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","Like":"1.4.*"},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","Like":"1.3.*"},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","Like":"1.2.*"},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","Like":"1.1.*"},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","Like":"1.0.*"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fb893a29-21bb-418c-a157-e99480ec364c","type":"Microsoft.Authorization/policyDefinitions","name":"fb893a29-21bb-418c-a157-e99480ec364c"},{"properties":{"displayName":"Storage - account containing the container with activity logs must be encrypted with - BYOK","policyType":"BuiltIn","mode":"All","description":"This policy audits - if the Storage account containing the container with activity logs is encrypted - with BYOK. The policy works only if the storage account lies on the same subscription - as activity logs by design. More information on Azure Storage encryption at - rest can be found here https://aka.ms/azurestoragebyok. ","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/logProfiles"},{"field":"Microsoft.Insights/logProfiles/storageAccountId","exists":"true"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Storage/storageAccounts","existenceScope":"subscription","existenceCondition":{"allOf":[{"value":"[contains(field(''Microsoft.Insights/logProfiles/storageAccountId''), - subscription().Id)]","equals":"true"},{"field":"name","equals":"[last(split(field(''Microsoft.Insights/logProfiles/storageAccountId''),''/''))]"},{"field":"Microsoft.Storage/storageAccounts/encryption.keySource","equals":"Microsoft.Keyvault"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fbb99e8e-e444-4da0-9ff1-75c92f5a85b2","type":"Microsoft.Authorization/policyDefinitions","name":"fbb99e8e-e444-4da0-9ff1-75c92f5a85b2"},{"properties":{"displayName":"[Preview]: - All Internet traffic should be routed via your deployed Azure Firewall","policyType":"BuiltIn","mode":"All","description":"Azure - Security Center has identified that some of your subnets aren''t protected - with a next generation firewall. Protect your subnets from potential threats - by restricting access to them with Azure Firewall or a supported next generation - firewall","metadata":{"version":"2.0.0-preview","category":"Network","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable All Internet traffic should be routed - via your deployed Azure Firewall"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/virtualNetworks/subnets"},{"field":"Microsoft.Network/virtualNetworks/subnets/routeTable","exists":false},{"count":{"field":"Microsoft.Network/virtualNetworks/subnets/ipConfigurations[*]"},"greaterOrEquals":2},{"field":"name","notIn":["AzureFirewallSubnet","GatewaySubnet","AzureBastionSubnet"]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Network/networkSecurityGroups","name":"[string(last(split(field(''Microsoft.Network/virtualNetworks/subnets/networkSecurityGroup.id''), - ''/'')))]","resourceGroupName":"[string(take(skip(split(field(''Microsoft.Network/virtualNetworks/subnets/networkSecurityGroup.id''), - ''/''), 4), 1))]","existenceCondition":{"allOf":[{"count":{"field":"Microsoft.Network/networkSecurityGroups/subnets[*]","where":{"field":"Microsoft.Network/networkSecurityGroups/subnets[*].id","like":"[concat(''/subscriptions/'', - subscription().subscriptionId, ''/resourceGroups/*/providers/Microsoft.Network/virtualNetworks/'', - first(split(field(''fullName''), ''/'')), ''/subnets/'', field(''name''))]"}},"equals":1},{"count":{"field":"Microsoft.Network/networkSecurityGroups/securityRules[*]","where":{"allOf":[{"field":"Microsoft.Network/networkSecurityGroups/securityRules[*].direction","equals":"Outbound"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules[*].access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules[*].destinationAddressPrefix","in":["*","Internet"]},{"anyOf":[{"field":"Microsoft.Network/networkSecurityGroups/securityRules[*].destinationPortRange","in":["*","0-65535"]},{"not":{"field":"Microsoft.Network/networkSecurityGroups/securityRules[*].destinationPortRanges","notEquals":"0-65535"}}]}]}},"greater":0},{"count":{"field":"Microsoft.Network/networkSecurityGroups/securityRules[*]","where":{"allOf":[{"field":"Microsoft.Network/networkSecurityGroups/securityRules[*].direction","equals":"Outbound"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules[*].access","equals":"Allow"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules[*].destinationAddressPrefix","in":["*","Internet"]}]}},"equals":0}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","type":"Microsoft.Authorization/policyDefinitions","name":"fc5e4038-4584-4632-8c85-c0448d374b2c"},{"properties":{"displayName":"Microsoft - Managed Control 1075 - Access Control For Mobile Devices | Full Device / Container-Based Encryption","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1075"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fc933d22-04df-48ed-8f87-22a3773d4309","type":"Microsoft.Authorization/policyDefinitions","name":"fc933d22-04df-48ed-8f87-22a3773d4309"},{"properties":{"displayName":"Show - audit results from Windows VMs configurations in ''Security Options - Microsoft - Network Client''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Security Options - Microsoft Network Client''. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0","category":"Guest - Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsMicrosoftNetworkClient","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fcbc55c9-f25a-4e55-a6cb-33acb3be778b","type":"Microsoft.Authorization/policyDefinitions","name":"fcbc55c9-f25a-4e55-a6cb-33acb3be778b"},{"properties":{"displayName":"Microsoft - Managed Control 1318 - Authenticator Management","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1318"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fced5fda-3bdb-4d73-bfea-0e2c80428b66","type":"Microsoft.Authorization/policyDefinitions","name":"fced5fda-3bdb-4d73-bfea-0e2c80428b66"},{"properties":{"displayName":"Microsoft - Managed Control 1543 - Risk Assessment","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Risk Assessment control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1543"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fd00b778-b5b5-49c0-a994-734ea7bd3624","type":"Microsoft.Authorization/policyDefinitions","name":"fd00b778-b5b5-49c0-a994-734ea7bd3624"},{"properties":{"displayName":"Microsoft - Managed Control 1707 - Security Alerts, Advisories, And Directives | Automated - Alerts And Advisories","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Information Integrity control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1707"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fd4a2ac8-868a-4702-a345-6c896c3361ce","type":"Microsoft.Authorization/policyDefinitions","name":"fd4a2ac8-868a-4702-a345-6c896c3361ce"},{"properties":{"displayName":"Microsoft - Managed Control 1299 - Identification And Authentication Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Identification and Authentication control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1299"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fd4e54f7-9ab0-4bae-b6cc-457809948a89","type":"Microsoft.Authorization/policyDefinitions","name":"fd4e54f7-9ab0-4bae-b6cc-457809948a89"},{"properties":{"displayName":"Microsoft - Managed Control 1627 - Boundary Protection | External Telecommunications Services","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Communications Protection control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1627"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fd73310d-76fc-422d-bda4-3a077149f179","type":"Microsoft.Authorization/policyDefinitions","name":"fd73310d-76fc-422d-bda4-3a077149f179"},{"properties":{"displayName":"Microsoft - Managed Control 1130 - Time Stamps | Synchronization With Authoritative Time - Source","policyType":"Static","mode":"Indexed","description":"Microsoft implements - this Audit and Accountability control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1130"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fd7c4c1d-51ee-4349-9dab-89a7f8c8d102","type":"Microsoft.Authorization/policyDefinitions","name":"fd7c4c1d-51ee-4349-9dab-89a7f8c8d102"},{"properties":{"displayName":"Public - network access should be disabled for MariaDB servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits MariaDB servers in your environment with public network access - enabled. For more details, visit https://go.microsoft.com/fwlink/?linkid=2119542.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DBforMariaDB/servers"},{"field":"Microsoft.DBforMariaDB/servers/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","type":"Microsoft.Authorization/policyDefinitions","name":"fdccbe47-f3e3-4213-ad5d-ea459b2fa077"},{"properties":{"displayName":"Microsoft - Managed Control 1611 - Developer-Provided Training","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1611"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fdda8a0c-ac32-43f6-b2f4-7dc1df03f43f","type":"Microsoft.Authorization/policyDefinitions","name":"fdda8a0c-ac32-43f6-b2f4-7dc1df03f43f"},{"properties":{"displayName":"Microsoft - Managed Control 1405 - Maintenance Tools | Inspect Tools","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1405"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fe1a0bf3-409a-4b00-b60d-0b1f917f7e7b","type":"Microsoft.Authorization/policyDefinitions","name":"fe1a0bf3-409a-4b00-b60d-0b1f917f7e7b"},{"properties":{"displayName":"Microsoft - Managed Control 1613 - Developer Security Architecture And Design","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this System and Services Acquisition control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1613"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fe2ad78b-8748-4bff-a924-f74dfca93f30","type":"Microsoft.Authorization/policyDefinitions","name":"fe2ad78b-8748-4bff-a924-f74dfca93f30"},{"properties":{"displayName":"Show - audit results from Linux VMs that do not have the specified applications installed","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that do not have the specified applications - installed. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"3.0.0","category":"Guest Configuration"},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"installed_application_linux","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fee5cb2b-9d9b-410e-afe3-2902d90d0004","type":"Microsoft.Authorization/policyDefinitions","name":"fee5cb2b-9d9b-410e-afe3-2902d90d0004"},{"properties":{"displayName":"Vulnerabilities - on your SQL databases should be remediated","policyType":"BuiltIn","mode":"Indexed","description":"Monitor - Vulnerability Assessment scan results and recommendations for how to remediate - database vulnerabilities.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","in":["Microsoft.Sql/servers/databases","Microsoft.Sql/managedinstances/databases"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"sqlVulnerabilityAssessment","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","type":"Microsoft.Authorization/policyDefinitions","name":"feedbf84-6b99-488c-acc2-71c829aa5ffc"},{"properties":{"displayName":"Microsoft - Managed Control 1407 - Maintenance Tools | Prevent Unauthorized Removal","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Maintenance control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1407"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ff9fbd83-1d8d-4b41-aac2-94cb44b33976","type":"Microsoft.Authorization/policyDefinitions","name":"ff9fbd83-1d8d-4b41-aac2-94cb44b33976"},{"properties":{"displayName":"Deploy - export to Log Analytics workspace for Azure Security Center alerts and recommendations","policyType":"BuiltIn","mode":"All","description":"Enable - export to Log Analytics workspace of Azure Security Center alerts and/or recommendations. - This policy deploys an export to Log Analytics workspace configuration with - your conditions and target workspace on the assigned scope. To deploy this - policy on newly created subscriptions, open the Compliance tab, select the - relevant non-compliant assignment and create a remediation task.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"resourceGroupName":{"type":"String","metadata":{"displayName":"Resource - group name","description":"The resource group name where the export to Log - Analytics workspace configuration is created. If you enter a name for a resource - group that doesn''t exist, it''ll be created in the subscription. Note that - each resource group can only have one export to Log Analytics workspace configured."}},"resourceGroupLocation":{"type":"String","metadata":{"displayName":"Resource - group location","description":"The location where the resource group and the - export to Log Analytics workspace configuration are created.","strongType":"location"}},"exportedDataTypes":{"type":"Array","metadata":{"displayName":"Exported - data types","description":"The data types to be exported. Example: Security - recommendations;Security alerts;"},"allowedValues":["Security recommendations","Security - alerts"],"defaultValue":["Security recommendations","Security alerts"]},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation - IDs","description":"Applicable only for export of security recommendations. - To export all recommendations, leave this empty. To export specific recommendations, - enter a list of recommendation IDs separated by semicolons ('';''). Recommendation - IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments), - or Azure Resource Graph Explorer (https://portal.azure.com/#blade/HubsExtension/ArgQueryBlade), - choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation - severities","description":"Applicable only for export of security recommendations. - Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert - severities","description":"Applicable only for export of security alerts. - Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"workspaceResourceId":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"The Log Analytics workspace of where the - data should be exported to. If you do not already have a log analytics workspace, - visit Log Analytics workspaces to create one (https://portal.azure.com/#blade/HubsExtension/BrowseResource/resourceType/Microsoft.OperationalInsights%2Fworkspaces).","strongType":"Microsoft.OperationalInsights/workspaces","assignPermissions":true}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Security/automations","name":"ExportToWorkspace","existenceScope":"resourcegroup","ResourceGroupName":"[parameters(''resourceGroupName'')]","deploymentScope":"subscription","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceGroupName":{"type":"string"},"resourceGroupLocation":{"type":"string"},"exportedDataTypes":{"type":"array"},"recommendationNames":{"type":"array"},"recommendationSeverities":{"type":"array"},"alertSeverities":{"type":"array"},"workspaceResourceId":{"type":"string"},"guidValue":{"type":"string","defaultValue":"[newGuid()]"}},"variables":{"scopeDescription":"scope - for subscription {0}","recommendationNamesLength":"[length(parameters(''recommendationNames''))]","recommendationSeveritiesLength":"[length(parameters(''recommendationSeverities''))]","alertSeveritiesLength":"[length(parameters(''alertSeverities''))]","recommendationNamesLengthIfEmpty":"[if(equals(variables(''recommendationNamesLength''), - 0), 1, variables(''recommendationNamesLength''))]","recommendationSeveritiesLengthIfEmpty":"[if(equals(variables(''recommendationSeveritiesLength''), - 0), 1, variables(''recommendationSeveritiesLength''))]","alertSeveritiesLengthIfEmpty":"[if(equals(variables(''alertSeveritiesLength''), - 0), 1, variables(''alertSeveritiesLength''))]","totalRuleCombinationsForOneRecommendationName":"[variables(''recommendationSeveritiesLengthIfEmpty'')]","totalRuleCombinationsForOneRecommendationSeverity":1,"exportedDataTypesLength":"[length(parameters(''exportedDataTypes''))]","exportedDataTypesLengthIfEmpty":"[if(equals(variables(''exportedDataTypesLength''), - 0), 1, variables(''exportedDataTypesLength''))]","dataTypeMap":{"Security - recommendations":"Assessments","Security alerts":"Alerts"},"alertSeverityMap":{"High":"high","Medium":"medium","Low":"low"},"ruleSetsForAssessmentsObj":{"copy":[{"name":"ruleSetsForAssessmentsArr","count":"[mul(variables(''recommendationNamesLengthIfEmpty''),variables(''recommendationSeveritiesLengthIfEmpty''))]","input":{"rules":[{"propertyJPath":"[if(equals(variables(''recommendationNamesLength''),0),''type'',''name'')]","propertyType":"string","expectedValue":"[if(equals(variables(''recommendationNamesLength''),0),''Microsoft.Security/assessments'',parameters(''recommendationNames'')[mod(div(copyIndex(''ruleSetsForAssessmentsArr''),variables(''totalRuleCombinationsForOneRecommendationName'')),variables(''recommendationNamesLength''))])]","operator":"Contains"},{"propertyJPath":"properties.metadata.severity","propertyType":"string","expectedValue":"[parameters(''recommendationSeverities'')[mod(div(copyIndex(''ruleSetsForAssessmentsArr''),variables(''totalRuleCombinationsForOneRecommendationSeverity'')),variables(''recommendationSeveritiesLength''))]]","operator":"Equals"}]}}]},"ruleSetsForAlertsObj":{"copy":[{"name":"ruleSetsForAlertsArr","count":"[variables(''alertSeveritiesLengthIfEmpty'')]","input":{"rules":[{"propertyJPath":"Severity","propertyType":"string","expectedValue":"[variables(''alertSeverityMap'')[parameters(''alertSeverities'')[mod(copyIndex(''ruleSetsForAlertsArr''),variables(''alertSeveritiesLengthIfEmpty''))]]]","operator":"Equals"}]}}]}},"resources":[{"name":"[parameters(''resourceGroupName'')]","type":"Microsoft.Resources/resourceGroups","apiVersion":"2019-10-01","location":"[parameters(''resourceGroupLocation'')]","tags":{},"properties":{}},{"type":"Microsoft.Resources/deployments","apiVersion":"2019-10-01","name":"[concat(''nestedAutomationDeployment'', - ''_'', parameters(''guidValue''))]","resourceGroup":"[parameters(''resourceGroupName'')]","dependsOn":["[resourceId(''Microsoft.Resources/resourceGroups/'', - parameters(''resourceGroupName''))]"],"properties":{"mode":"Incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{},"variables":{},"resources":[{"tags":{},"apiVersion":"2019-01-01-preview","location":"[parameters(''resourceGroupLocation'')]","name":"ExportToWorkspace","type":"Microsoft.Security/automations","dependsOn":[],"properties":{"description":"Export - Azure Security Center alerts and/or recommendations to Log Analytics workspace - via policy","isEnabled":true,"scopes":[{"description":"[replace(variables(''scopeDescription''),''{0}'', - subscription().subscriptionId)]","scopePath":"[subscription().id]"}],"copy":[{"name":"sources","count":"[variables(''exportedDataTypesLengthIfEmpty'')]","input":{"eventSource":"[variables(''dataTypeMap'')[parameters(''exportedDataTypes'')[copyIndex(''sources'')]]]","ruleSets":"[if(equals(parameters(''exportedDataTypes'')[copyIndex(''sources'')], - ''Security recommendations''), variables(''ruleSetsForAssessmentsObj'').ruleSetsForAssessmentsArr, - variables(''ruleSetsForAlertsObj'').ruleSetsForAlertsArr)]"}}],"actions":[{"actionType":"Workspace","workspaceResourceId":"[parameters(''workspaceResourceId'')]"}]}}]}}}]},"parameters":{"resourceGroupName":{"value":"[parameters(''resourceGroupName'')]"},"resourceGroupLocation":{"value":"[parameters(''resourceGroupLocation'')]"},"exportedDataTypes":{"value":"[parameters(''exportedDataTypes'')]"},"recommendationNames":{"value":"[parameters(''recommendationNames'')]"},"recommendationSeverities":{"value":"[parameters(''recommendationSeverities'')]"},"alertSeverities":{"value":"[parameters(''alertSeverities'')]"},"workspaceResourceId":{"value":"[parameters(''workspaceResourceId'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ffb6f416-7bd2-4488-8828-56585fef2be9","type":"Microsoft.Authorization/policyDefinitions","name":"ffb6f416-7bd2-4488-8828-56585fef2be9"},{"properties":{"displayName":"Microsoft - Managed Control 1158 - Security Authorization","policyType":"Static","mode":"Indexed","description":"Microsoft - implements this Security Assessment and Authorization control","metadata":{"version":"1.0.0","category":"Regulatory - Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1158"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fff50cf2-28eb-45b4-b378-c99412688907","type":"Microsoft.Authorization/policyDefinitions","name":"fff50cf2-28eb-45b4-b378-c99412688907"},{"properties":{"displayName":"[Preview]: - Manage certificate validity period","policyType":"BuiltIn","mode":"Microsoft.KeyVault.Data","description":"This - policy manages the maximum validity period for certificates in months.","metadata":{"version":"1.0.1-preview","category":"Key - Vault","preview":true},"parameters":{"maximumValidityInMonths":{"type":"Integer","metadata":{"displayName":"[Preview]: - The maximum validity in months","description":"The limit to how long a certificate - may be valid for. Certificates with lengthy validity periods aren''t best - practice."}},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"''Audit'' allows a non-compliant resource to be created, - but flags it as non-compliant. ''Deny'' blocks the resource creation. ''Disable'' - turns off the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"field":"Microsoft.KeyVault.Data/vaults/certificates/properties.validityInMonths","greater":"[parameters(''maximumValidityInMonths'')]"},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","type":"Microsoft.Authorization/policyDefinitions","name":"0a075868-4c26-42ef-914c-5bc007359560"},{"properties":{"displayName":"[Deprecated]: - Ensure containers listen only on allowed ports in AKS","policyType":"BuiltIn","mode":"Microsoft.ContainerService.Data","description":"This - policy enforces containers to listen only on allowed ports in an Azure Kubernetes - Service cluster. This policy is deprecated, please visit https://aka.ms/kubepolicydoc - for instructions on using new Kubernetes policies.","metadata":{"version":"1.0.1-deprecated","category":"Kubernetes - service","deprecated":true},"parameters":{"allowedContainerPortsRegex":{"type":"String","metadata":{"displayName":"[Deprecated]: - Allowed container ports regex","description":"Regex representing container - ports allowed in Kubernetes cluster. E.g. Regex for allowing ports 443,446 - is ^(443|446)$"}},"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["EnforceRegoPolicy","Disabled"],"defaultValue":"EnforceRegoPolicy"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"[parameters(''effect'')]","details":{"policyId":"ContainerAllowedPorts","policy":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/KubernetesService/container-allowed-ports/limited-preview/gatekeeperpolicy.rego","policyParameters":{"allowedContainerPortsRegex":"[parameters(''allowedContainerPortsRegex'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0f636243-1b1c-4d50-880f-310f6199f2cb","type":"Microsoft.Authorization/policyDefinitions","name":"0f636243-1b1c-4d50-880f-310f6199f2cb"},{"properties":{"displayName":"[Preview]: - Manage allowed certificate key types","policyType":"BuiltIn","mode":"Microsoft.KeyVault.Data","description":"This - policy manages the allowed key types for certificates.","metadata":{"version":"1.0.1-preview","category":"Key - Vault","preview":true},"parameters":{"allowedKeyTypes":{"type":"Array","metadata":{"displayName":"[Preview]: - Allowed key types","description":"The list of allowed certificate key types."},"allowedValues":["RSA","RSA-HSM","EC","EC-HSM"],"defaultValue":["RSA","RSA-HSM"]},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"''Audit'' allows a non-compliant resource to be created, - but flags it as non-compliant. ''Deny'' blocks the resource creation. ''Disable'' - turns off the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"field":"Microsoft.KeyVault.Data/vaults/certificates/keyProperties.keyType","notIn":"[parameters(''allowedKeyTypes'')]"},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1151cede-290b-4ba0-8b38-0ad145ac888f","type":"Microsoft.Authorization/policyDefinitions","name":"1151cede-290b-4ba0-8b38-0ad145ac888f"},{"properties":{"displayName":"[Preview]: - Manage certificate lifetime action triggers","policyType":"BuiltIn","mode":"Microsoft.KeyVault.Data","description":"This - policy manages the configuration for certificate lifetime action triggers - before certificate expiration.","metadata":{"version":"1.0.1-preview","category":"Key - Vault","preview":true},"parameters":{"maximumPercentageLife":{"type":"Integer","metadata":{"displayName":"[Preview]: - The maximum lifetime percentage","description":"Enter the percentage of lifetime - of the certificate when you want to trigger the policy action. For example, - to trigger a policy action at 80% of the certificate''s valid life, enter - ''80''."}},"minimumDaysBeforeExpiry":{"type":"Integer","metadata":{"displayName":"[Preview]: - The minimum days before expiry","description":"Enter the days before expiration - of the certificate when you want to trigger the policy action. For example, - to trigger a policy action 90 days before the certificate''s expiration, enter - ''90''."}},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"''Audit'' allows a non-compliant resource to be created, - but flags it as non-compliant. ''Deny'' blocks the resource creation. ''Disable'' - turns off the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"Microsoft.KeyVault.Data/vaults/certificates/lifetimeAction.daysBeforeExpiry","exists":true},{"field":"Microsoft.KeyVault.Data/vaults/certificates/lifetimeAction.daysBeforeExpiry","less":"[parameters(''minimumDaysBeforeExpiry'')]"}]},{"allOf":[{"field":"Microsoft.KeyVault.Data/vaults/certificates/lifetimeAction.lifetimePercentage","exists":true},{"field":"Microsoft.KeyVault.Data/vaults/certificates/lifetimeAction.lifetimePercentage","greater":"[parameters(''maximumPercentageLife'')]"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/12ef42cb-9903-4e39-9c26-422d29570417","type":"Microsoft.Authorization/policyDefinitions","name":"12ef42cb-9903-4e39-9c26-422d29570417"},{"properties":{"displayName":"[Deprecated]: - Enforce labels on pods in AKS","policyType":"BuiltIn","mode":"Microsoft.ContainerService.Data","description":"This - policy enforces the specified labels are provided for pods in an Azure Kubernetes - Service cluster. This policy is deprecated, please visit https://aka.ms/kubepolicydoc - for instructions on using new Kubernetes policies.","metadata":{"version":"1.0.1-deprecated","category":"Kubernetes - service","deprecated":true},"parameters":{"commaSeparatedListOfLabels":{"type":"String","metadata":{"displayName":"[Deprecated]: - Comma-separated list of labels","description":"A comma-separated list of labels - to be specified on Pods in Kubernetes cluster. E.g. test1,test2"}},"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["EnforceRegoPolicy","Disabled"],"defaultValue":"EnforceRegoPolicy"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"[parameters(''effect'')]","details":{"policyId":"PodEnforceLabels","policy":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/KubernetesService/pod-enforce-labels/limited-preview/gatekeeperpolicy.rego","policyParameters":{"commaSeparatedListOfLabels":"[parameters(''commaSeparatedListOfLabels'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/16c6ca72-89d2-4798-b87e-496f9de7fcb7","type":"Microsoft.Authorization/policyDefinitions","name":"16c6ca72-89d2-4798-b87e-496f9de7fcb7"},{"properties":{"displayName":"[Preview]: - Enforce HTTPS ingress in Kubernetes cluster","policyType":"BuiltIn","mode":"Microsoft.Kubernetes.Data","description":"This - policy enforces HTTPS ingress in a Kubernetes cluster. For instructions on - using this policy, visit https://aka.ms/kubepolicydoc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"''Audit'' allows a non-compliant resource to be created, - but flags it as non-compliant. ''Deny'' blocks the resource creation. ''Disable'' - turns off the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"deny"},"excludedNamespaces":{"type":"Array","metadata":{"displayName":"[Preview]: - Namespace exclusions","description":"List of Kubernetes namespaces to exclude - from policy evaluation."},"defaultValue":["kube-system","gatekeeper-system","azure-arc"]}},"policyRule":{"if":{"field":"type","in":["AKS - Engine","Microsoft.Kubernetes/connectedClusters","Microsoft.ContainerService/managedClusters"]},"then":{"effect":"[parameters(''effect'')]","details":{"constraintTemplate":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/ingress-https-only/template.yaml","constraint":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/ingress-https-only/constraint.yaml","values":{"excludedNamespaces":"[parameters(''excludedNamespaces'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","type":"Microsoft.Authorization/policyDefinitions","name":"1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d"},{"properties":{"displayName":"[Preview]: - Configure log filter expressions and datastore to be used for full logs for - specified Azure Machine Learning computes","policyType":"BuiltIn","mode":"Microsoft.MachineLearningServices.Data","description":"This - policy helps provide log filter expression and datastore to be used for full - logs in specified Azure Machine Learning computes and can be assigned at the - workspace. For more information, visit https://aka.ms/amlpolicydoc.","metadata":{"version":"1.0.0-preview","category":"Machine - Learning","preview":true},"parameters":{"computeNames":{"type":"Array","metadata":{"displayName":"[Preview]: - Compute names where Azure ML jobs run","description":"List of compute names - where this policy should be applied. Ex. cpu-cluster;gpu-cluster. If no value - is provided to this parameter then policy is applicable to all computes."},"defaultValue":[]},"logFilters":{"type":"Array","metadata":{"displayName":"[Preview]: - Log filter expressions","description":"List of log filter expressions used - to filter logs. Ex. ^prefix1.*$"},"defaultValue":[]},"datastore":{"type":"String","metadata":{"displayName":"[Preview]: - Datastore","description":"Datastore used to store filtered logs. Ex. LogsDatastore - which is configured in AML."}},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy."},"allowedValues":["enforceSetting","disabled"],"defaultValue":"enforceSetting"}},"policyRule":{"if":{"anyOf":[{"field":"Microsoft.MachineLearningServices.Data/workspaces/computes/name","in":"[parameters(''computeNames'')]"},{"value":"[length(parameters(''computeNames''))]","equals":0}]},"then":{"effect":"[parameters(''effect'')]","details":{"setting":{"name":"logFilter","value":{"filters":"[parameters(''logFilters'')]","datastore":"[parameters(''datastore'')]"}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1d413020-63de-11ea-bc55-0242ac130003","type":"Microsoft.Authorization/policyDefinitions","name":"1d413020-63de-11ea-bc55-0242ac130003"},{"properties":{"displayName":"[Preview]: - Ensure services listen only on allowed ports in Kubernetes cluster","policyType":"BuiltIn","mode":"Microsoft.Kubernetes.Data","description":"This - policy enforces services to listen only on allowed ports in a Kubernetes cluster. - For instructions on using this policy, visit https://aka.ms/kubepolicydoc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"allowedServicePortsList":{"type":"Array","metadata":{"displayName":"[Preview]: - Allowed service ports list","description":"The list of service ports allowed - in a Kubernetes cluster."}},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"''Audit'' allows a non-compliant resource to be created, - but flags it as non-compliant. ''Deny'' blocks the resource creation. ''Disable'' - turns off the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"deny"},"excludedNamespaces":{"type":"Array","metadata":{"displayName":"[Preview]: - Namespace exclusions","description":"List of Kubernetes namespaces to exclude - from policy evaluation."},"defaultValue":["kube-system","gatekeeper-system","azure-arc"]}},"policyRule":{"if":{"field":"type","in":["AKS - Engine","Microsoft.Kubernetes/connectedClusters","Microsoft.ContainerService/managedClusters"]},"then":{"effect":"[parameters(''effect'')]","details":{"constraintTemplate":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/service-allowed-ports/template.yaml","constraint":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/service-allowed-ports/constraint.yaml","values":{"allowedServicePorts":"[parameters(''allowedServicePortsList'')]","excludedNamespaces":"[parameters(''excludedNamespaces'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","type":"Microsoft.Authorization/policyDefinitions","name":"233a2a17-77ca-4fb1-9b6b-69223d272a44"},{"properties":{"displayName":"[Deprecated]: - Ensure services listen only on allowed ports in AKS","policyType":"BuiltIn","mode":"Microsoft.ContainerService.Data","description":"This - policy enforces services to listen only on allowed ports in an Azure Kubernetes - Service cluster. This policy is deprecated, please visit https://aka.ms/kubepolicydoc - for instructions on using new Kubernetes policies.","metadata":{"version":"1.0.1-deprecated","category":"Kubernetes - service","deprecated":true},"parameters":{"allowedServicePortsRegex":{"type":"String","metadata":{"displayName":"[Deprecated]: - Allowed service ports regex","description":"Regex representing service ports - allowed in Kubernetes cluster. E.g. Regex for allowing ports 443,446 is ^(443|446)$"}},"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["EnforceRegoPolicy","Disabled"],"defaultValue":"EnforceRegoPolicy"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"[parameters(''effect'')]","details":{"policyId":"ServiceAllowedPorts","policy":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/KubernetesService/service-allowed-ports/limited-preview/gatekeeperpolicy.rego","policyParameters":{"allowedServicePortsRegex":"[parameters(''allowedServicePortsRegex'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/25dee3db-6ce0-4c02-ab5d-245887b24077","type":"Microsoft.Authorization/policyDefinitions","name":"25dee3db-6ce0-4c02-ab5d-245887b24077"},{"properties":{"displayName":"[Deprecated]: - Enforce HTTPS ingress in AKS","policyType":"BuiltIn","mode":"Microsoft.ContainerService.Data","description":"This - policy enforces HTTPS ingress in an Azure Kubernetes Service cluster. This - policy is deprecated, please visit https://aka.ms/kubepolicydoc for instructions - on using new Kubernetes policies.","metadata":{"version":"1.0.1-deprecated","category":"Kubernetes - service","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["EnforceRegoPolicy","Disabled"],"defaultValue":"EnforceRegoPolicy"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"[parameters(''effect'')]","details":{"policyId":"HttpsIngressOnly","policy":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/KubernetesService/ingress-https-only/limited-preview/gatekeeperpolicy.rego"}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2fbff515-eecc-4b7e-9b63-fcc7138b7dc3","type":"Microsoft.Authorization/policyDefinitions","name":"2fbff515-eecc-4b7e-9b63-fcc7138b7dc3"},{"properties":{"displayName":"[Preview]: - Configure an approval endpoint called prior to jobs running for specified - Azure Machine Learning computes","policyType":"BuiltIn","mode":"Microsoft.MachineLearningServices.Data","description":"This - policy helps configure an approval endpoint called prior to jobs running for - specified Azure Machine Learning computes and can be assigned at the workspace. - For more information. For more information, visit https://aka.ms/amlpolicydoc.","metadata":{"version":"1.0.0-preview","category":"Machine - Learning","preview":true},"parameters":{"computeNames":{"type":"Array","metadata":{"displayName":"[Preview]: - Compute names where Azure ML jobs run","description":"List of compute names - where this policy should be applied. Ex. cpu-cluster;gpu-cluster. If no value - is provided to this parameter then policy is applicable to all computes."},"defaultValue":[]},"approvalEndpoint":{"type":"String","metadata":{"displayName":"[Preview]: - Approval endpoint","description":"Approval endpoint that needs to be called - before an Azure ML job is run. Ex. http://amlrunapproval/approve"}},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy."},"allowedValues":["enforceSetting","disabled"],"defaultValue":"enforceSetting"}},"policyRule":{"if":{"anyOf":[{"field":"Microsoft.MachineLearningServices.Data/workspaces/computes/name","in":"[parameters(''computeNames'')]"},{"value":"[length(parameters(''computeNames''))]","equals":0}]},"then":{"effect":"[parameters(''effect'')]","details":{"setting":{"name":"approvalEndpoint","value":"[parameters(''approvalEndpoint'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3948394e-63de-11ea-bc55-0242ac130003","type":"Microsoft.Authorization/policyDefinitions","name":"3948394e-63de-11ea-bc55-0242ac130003"},{"properties":{"displayName":"[Preview]: - Enforce internal load balancers in Kubernetes cluster","policyType":"BuiltIn","mode":"Microsoft.Kubernetes.Data","description":"This - policy enforces load balancers do not have public IPs in a Kubernetes cluster. - For instructions on using this policy, visit https://aka.ms/kubepolicydoc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"''Audit'' allows a non-compliant resource to be created, - but flags it as non-compliant. ''Deny'' blocks the resource creation. ''Disable'' - turns off the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"deny"},"excludedNamespaces":{"type":"Array","metadata":{"displayName":"[Preview]: - Namespace exclusions","description":"List of Kubernetes namespaces to exclude - from policy evaluation."},"defaultValue":["kube-system","gatekeeper-system","azure-arc"]}},"policyRule":{"if":{"field":"type","in":["AKS - Engine","Microsoft.Kubernetes/connectedClusters","Microsoft.ContainerService/managedClusters"]},"then":{"effect":"[parameters(''effect'')]","details":{"constraintTemplate":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/load-balancer-no-public-ips/template.yaml","constraint":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/load-balancer-no-public-ips/constraint.yaml","values":{"excludedNamespaces":"[parameters(''excludedNamespaces'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3fc4dc25-5baf-40d8-9b05-7fe74c1bc64e","type":"Microsoft.Authorization/policyDefinitions","name":"3fc4dc25-5baf-40d8-9b05-7fe74c1bc64e"},{"properties":{"displayName":"[Preview]: - Ensure containers listen only on allowed ports in Kubernetes cluster","policyType":"BuiltIn","mode":"Microsoft.Kubernetes.Data","description":"This - policy enforces containers to listen only on allowed ports in a Kubernetes - cluster. For instructions on using this policy, visit https://aka.ms/kubepolicydoc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"allowedContainerPortsList":{"type":"Array","metadata":{"displayName":"[Preview]: - Allowed container ports list","description":"The list of container ports allowed - in a Kubernetes cluster."}},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"''Audit'' allows a non-compliant resource to be created, - but flags it as non-compliant. ''Deny'' blocks the resource creation. ''Disable'' - turns off the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"deny"},"excludedNamespaces":{"type":"Array","metadata":{"displayName":"[Preview]: - Namespace exclusions","description":"List of Kubernetes namespaces to exclude - from policy evaluation."},"defaultValue":["kube-system","gatekeeper-system","azure-arc"]}},"policyRule":{"if":{"field":"type","in":["AKS - Engine","Microsoft.Kubernetes/connectedClusters","Microsoft.ContainerService/managedClusters"]},"then":{"effect":"[parameters(''effect'')]","details":{"constraintTemplate":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/container-allowed-ports/template.yaml","constraint":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/container-allowed-ports/constraint.yaml","values":{"allowedContainerPorts":"[parameters(''allowedContainerPortsList'')]","excludedNamespaces":"[parameters(''excludedNamespaces'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","type":"Microsoft.Authorization/policyDefinitions","name":"440b515e-a580-421e-abeb-b159a61ddcbc"},{"properties":{"displayName":"[Preview]: - Enforce labels on pods in Kubernetes cluster","policyType":"BuiltIn","mode":"Microsoft.Kubernetes.Data","description":"This - policy enforces the specified labels are provided for pods in a Kubernetes - cluster. For instructions on using this policy, visit https://aka.ms/kubepolicydoc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"labelsList":{"type":"Array","metadata":{"displayName":"[Preview]: - List of labels","description":"The list of labels to be specified on Pods - in a Kubernetes cluster."}},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"''Audit'' allows a non-compliant resource to be created, - but flags it as non-compliant. ''Deny'' blocks the resource creation. ''Disable'' - turns off the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"deny"},"excludedNamespaces":{"type":"Array","metadata":{"displayName":"[Preview]: - Namespace exclusions","description":"List of Kubernetes namespaces to exclude - from policy evaluation."},"defaultValue":["kube-system","gatekeeper-system","azure-arc"]}},"policyRule":{"if":{"field":"type","in":["AKS - Engine","Microsoft.Kubernetes/connectedClusters","Microsoft.ContainerService/managedClusters"]},"then":{"effect":"[parameters(''effect'')]","details":{"constraintTemplate":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/pod-enforce-labels/template.yaml","constraint":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/pod-enforce-labels/constraint.yaml","values":{"labels":"[parameters(''labelsList'')]","excludedNamespaces":"[parameters(''excludedNamespaces'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/46592696-4c7b-4bf3-9e45-6c2763bdc0a6","type":"Microsoft.Authorization/policyDefinitions","name":"46592696-4c7b-4bf3-9e45-6c2763bdc0a6"},{"properties":{"displayName":"[Preview]: - Configure allowed module authors for specified Azure Machine Learning computes","policyType":"BuiltIn","mode":"Microsoft.MachineLearningServices.Data","description":"This - policy helps provide allowed module authors in specified Azure Machine Learning - computes and can be assigned at the workspace. For more information, visit - https://aka.ms/amlpolicydoc.","metadata":{"version":"1.0.1-preview","category":"Machine - Learning","preview":true},"parameters":{"computeNames":{"type":"Array","metadata":{"displayName":"[Preview]: - Compute names where Azure ML jobs run","description":"List of compute names - where this policy should be applied. Ex. cpu-cluster;gpu-cluster. If no value - is provided to this parameter then policy is applicable to all computes."},"defaultValue":[]},"allowedModuleAuthors":{"type":"Array","metadata":{"displayName":"[Preview]: - Allowed module authors","description":"List of allowed module authors."},"defaultValue":[]},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy."},"allowedValues":["enforceSetting","disabled"],"defaultValue":"enforceSetting"}},"policyRule":{"if":{"anyOf":[{"field":"Microsoft.MachineLearningServices.Data/workspaces/computes/name","in":"[parameters(''computeNames'')]"},{"value":"[length(parameters(''computeNames''))]","equals":0}]},"then":{"effect":"[parameters(''effect'')]","details":{"setting":{"name":"allowedModuleAuthors","value":"[parameters(''allowedModuleAuthors'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/53c70b02-63dd-11ea-bc55-0242ac130003","type":"Microsoft.Authorization/policyDefinitions","name":"53c70b02-63dd-11ea-bc55-0242ac130003"},{"properties":{"displayName":"[Preview]: - Configure allowed registries for specified Azure Machine Learning computes","policyType":"BuiltIn","mode":"Microsoft.MachineLearningServices.Data","description":"This - policy helps provide registries that are allowed in specified Azure Machine - Learning computes and can be assigned at the workspace. For more information, - visit https://aka.ms/amlpolicydoc.","metadata":{"version":"1.0.0-preview","category":"Machine - Learning","preview":true},"parameters":{"computeNames":{"type":"Array","metadata":{"displayName":"[Preview]: - Compute names where Azure ML jobs run","description":"List of compute names - where this policy should be applied. Ex. cpu-cluster;gpu-cluster. If no value - is provided to this parameter then policy is applicable to all computes."},"defaultValue":[]},"allowedACRs":{"type":"Array","metadata":{"displayName":"[Preview]: - Azure Container Registries","description":"List of Azure Container Registries - that can be used with Azure ML. Ex. amlrepo.azurecr.io;amlrepo.azurecr.io/foo"},"defaultValue":[]},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy."},"allowedValues":["enforceSetting","disabled"],"defaultValue":"enforceSetting"}},"policyRule":{"if":{"anyOf":[{"field":"Microsoft.MachineLearningServices.Data/workspaces/computes/name","in":"[parameters(''computeNames'')]"},{"value":"[length(parameters(''computeNames''))]","equals":0}]},"then":{"effect":"[parameters(''effect'')]","details":{"setting":{"name":"allowedACRs","value":"[parameters(''allowedACRs'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5853517a-63de-11ea-bc55-0242ac130003","type":"Microsoft.Authorization/policyDefinitions","name":"5853517a-63de-11ea-bc55-0242ac130003"},{"properties":{"displayName":"[Deprecated]: - Ensure only allowed container images in AKS","policyType":"BuiltIn","mode":"Microsoft.ContainerService.Data","description":"This - policy ensures only allowed container images are running in an Azure Kubernetes - Service cluster. This policy is deprecated, please visit https://aka.ms/kubepolicydoc - for instructions on using new Kubernetes policies.","metadata":{"version":"1.0.1-deprecated","category":"Kubernetes - service","deprecated":true},"parameters":{"allowedContainerImagesRegex":{"type":"String","metadata":{"displayName":"[Deprecated]: - Allowed container images regex","description":"Regex representing container - images allowed in Kubernetes cluster. E.g. Regex of azure container registry - images is ^.+azurecr.io/.+$"}},"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["EnforceRegoPolicy","Disabled"],"defaultValue":"EnforceRegoPolicy"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"[parameters(''effect'')]","details":{"policyId":"ContainerAllowedImages","policy":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/KubernetesService/container-allowed-images/limited-preview/gatekeeperpolicy.rego","policyParameters":{"allowedContainerImagesRegex":"[parameters(''allowedContainerImagesRegex'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f86cb6e-c4da-441b-807c-44bd0cc14e66","type":"Microsoft.Authorization/policyDefinitions","name":"5f86cb6e-c4da-441b-807c-44bd0cc14e66"},{"properties":{"displayName":"[Preview]: - Configure code signing for training code for specified Azure Machine Learning - computes","policyType":"BuiltIn","mode":"Microsoft.MachineLearningServices.Data","description":"This - policy helps provide code signing for training code in specified Azure Machine - Learning computes and can be assigned at the workspace. For more information, - visit https://aka.ms/amlpolicydoc.","metadata":{"version":"1.0.0-preview","category":"Machine - Learning","preview":true},"parameters":{"computeNames":{"type":"Array","metadata":{"displayName":"[Preview]: - Compute names where Azure Machine Learning jobs run","description":"List of - compute names where this policy should be applied. Example: ''cpu-cluster;gpu-cluster''. - If no value is provided to this parameter, policy is applicable to all computes."},"defaultValue":[]},"signingKey":{"type":"String","metadata":{"displayName":"[Preview]: - PGP public key","description":"Public key text in PGP public key format, with - newline characters encoded as string literals \"\\r\" and \"\\n\"."}},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy."},"allowedValues":["enforceSetting","disabled"],"defaultValue":"enforceSetting"}},"policyRule":{"if":{"anyOf":[{"field":"Microsoft.MachineLearningServices.Data/workspaces/computes/name","in":"[parameters(''computeNames'')]"},{"value":"[length(parameters(''computeNames''))]","equals":0}]},"then":{"effect":"[parameters(''effect'')]","details":{"setting":{"name":"signingKey","value":"[parameters(''signingKey'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6a6f7384-63de-11ea-bc55-0242ac130003","type":"Microsoft.Authorization/policyDefinitions","name":"6a6f7384-63de-11ea-bc55-0242ac130003"},{"properties":{"displayName":"[Preview]: - Configure allowed Python packages for specified Azure Machine Learning computes","policyType":"BuiltIn","mode":"Microsoft.MachineLearningServices.Data","description":" - This policy helps provide allowed Python packages in specified Azure Machine - Learning computes and can be assigned at the workspace. For more information, - visit https://aka.ms/amlpolicydoc.","metadata":{"version":"1.0.0-preview","category":"Machine - Learning","preview":true},"parameters":{"computeNames":{"type":"Array","metadata":{"displayName":"[Preview]: - Compute names where Azure ML jobs run","description":"List of compute names - where this policy should be applied. Ex. cpu-cluster;gpu-cluster. If no value - is provided to this parameter then policy is applicable to all computes."},"defaultValue":[]},"allowedPythonPackageChannels":{"type":"Array","metadata":{"displayName":"[Preview]: - Allowed Python package indexes","description":"List of allowed Python package - indexes. Ex. http://somepythonindex.org "},"defaultValue":[]},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy."},"allowedValues":["enforceSetting","disabled"],"defaultValue":"enforceSetting"}},"policyRule":{"if":{"anyOf":[{"field":"Microsoft.MachineLearningServices.Data/workspaces/computes/name","in":"[parameters(''computeNames'')]"},{"value":"[length(parameters(''computeNames''))]","equals":0}]},"then":{"effect":"[parameters(''effect'')]","details":{"setting":{"name":"allowedPythonPackageChannels","value":"[parameters(''allowedPythonPackageChannels'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/77eeea86-7e81-4a7d-9067-de844d096752","type":"Microsoft.Authorization/policyDefinitions","name":"77eeea86-7e81-4a7d-9067-de844d096752"},{"properties":{"displayName":"[Deprecated]: - Do not allow privileged containers in AKS","policyType":"BuiltIn","mode":"Microsoft.ContainerService.Data","description":"This - policy does not allow privileged containers creation in an Azure Kubernetes - Service cluster. This policy is deprecated, please visit https://aka.ms/kubepolicydoc - for instructions on using new Kubernetes policies.","metadata":{"version":"1.0.1-deprecated","category":"Kubernetes - service","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["EnforceRegoPolicy","Disabled"],"defaultValue":"EnforceRegoPolicy"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"[parameters(''effect'')]","details":{"policyId":"ContainerNoPrivilege","policy":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/KubernetesService/container-no-privilege/limited-preview/gatekeeperpolicy.rego"}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7ce7ac02-a5c6-45d6-8d1b-844feb1c1531","type":"Microsoft.Authorization/policyDefinitions","name":"7ce7ac02-a5c6-45d6-8d1b-844feb1c1531"},{"properties":{"displayName":"[Preview]: - Manage certificates issued by an integrated CA","policyType":"BuiltIn","mode":"Microsoft.KeyVault.Data","description":"This - policy manages certificates are issued by a specified key vault integrated - Certificate Authority.","metadata":{"version":"1.0.1-preview","category":"Key - Vault","preview":true},"parameters":{"allowedCAs":{"type":"Array","metadata":{"displayName":"[Preview]: - Allowed Azure Key Vault Supported CAs","description":"The list of allowed - certificate authorities supported by Azure Key Vault."},"allowedValues":["DigiCert","GlobalSign"],"defaultValue":["DigiCert","GlobalSign"]},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"''Audit'' allows a non-compliant resource to be created, - but flags it as non-compliant. ''Deny'' blocks the resource creation. ''Disable'' - turns off the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"field":"Microsoft.KeyVault.Data/vaults/certificates/issuer.name","notIn":"[parameters(''allowedCAs'')]"},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8e826246-c976-48f6-b03e-619bb92b3d82","type":"Microsoft.Authorization/policyDefinitions","name":"8e826246-c976-48f6-b03e-619bb92b3d82"},{"properties":{"displayName":"[Preview]: - Do not allow privileged containers in Kubernetes cluster","policyType":"BuiltIn","mode":"Microsoft.Kubernetes.Data","description":"This - policy does not allow privileged containers creation in a Kubernetes cluster. - For instructions on using this policy, visit https://aka.ms/kubepolicydoc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"''Audit'' allows a non-compliant resource to be created, - but flags it as non-compliant. ''Deny'' blocks the resource creation. ''Disable'' - turns off the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"deny"},"excludedNamespaces":{"type":"Array","metadata":{"displayName":"[Preview]: - Namespace exclusions","description":"List of Kubernetes namespaces to exclude - from policy evaluation."},"defaultValue":["kube-system","gatekeeper-system","azure-arc"]}},"policyRule":{"if":{"field":"type","in":["AKS - Engine","Microsoft.Kubernetes/connectedClusters","Microsoft.ContainerService/managedClusters"]},"then":{"effect":"[parameters(''effect'')]","details":{"constraintTemplate":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/container-no-privilege/template.yaml","constraint":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/container-no-privilege/constraint.yaml","values":{"excludedNamespaces":"[parameters(''excludedNamespaces'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","type":"Microsoft.Authorization/policyDefinitions","name":"95edb821-ddaf-4404-9732-666045e056b4"},{"properties":{"displayName":"[Preview]: - Manage certificates issued by a non-integrated CA","policyType":"BuiltIn","mode":"Microsoft.KeyVault.Data","description":"This - policy manages certificates are issued by a specified non-integrated Certificate - Authority.","metadata":{"version":"1.0.1-preview","category":"Key Vault","preview":true},"parameters":{"caCommonName":{"type":"String","metadata":{"displayName":"[Preview]: - The common name of the certificate authority","description":"The common name - (CN) of the Certificate Authority (CA) provider. For example, for an issuer - CN = Contoso, OU = .., DC = .., you can specify Contoso"}},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"''Audit'' allows a non-compliant resource to be created, - but flags it as non-compliant. ''Deny'' blocks the resource creation. ''Disable'' - turns off the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"field":"Microsoft.KeyVault.Data/vaults/certificates/issuer.commonName","notContains":"[parameters(''caCommonName'')]"},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a22f4a40-01d3-4c7d-8071-da157eeff341","type":"Microsoft.Authorization/policyDefinitions","name":"a22f4a40-01d3-4c7d-8071-da157eeff341"},{"properties":{"displayName":"[Deprecated]: - Ensure CPU and memory resource limits defined on containers in AKS","policyType":"BuiltIn","mode":"Microsoft.ContainerService.Data","description":"This - policy ensures CPU and memory resource limits are defined on containers in - an Azure Kubernetes Service cluster. This policy is deprecated, please visit - https://aka.ms/kubepolicydoc for instructions on using new Kubernetes policies.","metadata":{"version":"1.0.1-deprecated","category":"Kubernetes - service","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["EnforceRegoPolicy","Disabled"],"defaultValue":"EnforceRegoPolicy"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"[parameters(''effect'')]","details":{"policyId":"ContainerResourceLimits","policy":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/KubernetesService/container-resource-limits/limited-preview/gatekeeperpolicy.rego"}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2d3ed81-8d11-4079-80a5-1faadc0024f4","type":"Microsoft.Authorization/policyDefinitions","name":"a2d3ed81-8d11-4079-80a5-1faadc0024f4"},{"properties":{"displayName":"[Deprecated]: - Enforce internal load balancers in AKS","policyType":"BuiltIn","mode":"Microsoft.ContainerService.Data","description":"This - policy enforces load balancers do not have public IPs in an Azure Kubernetes - Service cluster. This policy is deprecated, please visit https://aka.ms/kubepolicydoc - for instructions on using new Kubernetes policies.","metadata":{"version":"1.0.1-deprecated","category":"Kubernetes - service","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["EnforceRegoPolicy","Disabled"],"defaultValue":"EnforceRegoPolicy"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"[parameters(''effect'')]","details":{"policyId":"LoadBalancersInternal","policy":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/KubernetesService/loadbalancer-no-publicips/limited-preview/gatekeeperpolicy.rego"}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a74d8f00-2fd9-4ce4-968e-0ee1eb821698","type":"Microsoft.Authorization/policyDefinitions","name":"a74d8f00-2fd9-4ce4-968e-0ee1eb821698"},{"properties":{"displayName":"[Deprecated]: - Enforce unique ingress hostnames across namespaces in Kubernetes cluster","policyType":"BuiltIn","mode":"Microsoft.Kubernetes.Data","description":"This - policy enforces unique ingress hostnames across namespaces in a Kubernetes - cluster. For instructions on using this policy, please go to https://aka.ms/kubepolicydoc.","metadata":{"version":"3.0.1-deprecated","category":"Kubernetes","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"''Audit'' allows a non-compliant resource to be created, - but flags it as non-compliant. ''Deny'' blocks the resource creation. ''Disable'' - turns off the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"deny"},"excludedNamespaces":{"type":"Array","metadata":{"displayName":"[Deprecated]: - Namespace exclusions","description":"List of Kubernetes namespaces to exclude - from policy evaluation."},"defaultValue":["kube-system","gatekeeper-system","azure-arc"]}},"policyRule":{"if":{"field":"type","in":["AKS - Engine","Microsoft.Kubernetes/connectedClusters"]},"then":{"effect":"[parameters(''effect'')]","details":{"constraintTemplate":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/ingress-hostnames-conflict/template.yaml","constraint":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/ingress-hostnames-conflict/constraint.yaml","values":{"excludedNamespaces":"[parameters(''excludedNamespaces'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b2fd3e59-6390-4f2b-8247-ea676bd03e2d","type":"Microsoft.Authorization/policyDefinitions","name":"b2fd3e59-6390-4f2b-8247-ea676bd03e2d"},{"properties":{"displayName":"[Preview]: - Manage allowed curve names for elliptic curve cryptography certificates","policyType":"BuiltIn","mode":"Microsoft.KeyVault.Data","description":"This - policy manages the allowed elliptic curve names for elliptic curve cryptography - certificates.","metadata":{"version":"1.0.1-preview","category":"Key Vault","preview":true},"parameters":{"allowedECNames":{"type":"Array","metadata":{"displayName":"[Preview]: - Allowed elliptic curve names","description":"The list of allowed curve names - for elliptic curve cryptography certificates."},"allowedValues":["P-256","P-256K","P-384","P-521"],"defaultValue":["P-256","P-256K","P-384","P-521"]},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"''Audit'' allows a non-compliant resource to be created, - but flags it as non-compliant. ''Deny'' blocks the resource creation. ''Disable'' - turns off the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"Microsoft.KeyVault.Data/vaults/certificates/keyProperties.keyType","in":["EC","EC-HSM"]},{"field":"Microsoft.KeyVault.Data/vaults/certificates/keyProperties.ellipticCurveName","notIn":"[parameters(''allowedECNames'')]"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bd78111f-4953-4367-9fd5-7e08808b54bf","type":"Microsoft.Authorization/policyDefinitions","name":"bd78111f-4953-4367-9fd5-7e08808b54bf"},{"properties":{"displayName":"[Preview]: - Manage minimum key size for RSA certificates","policyType":"BuiltIn","mode":"Microsoft.KeyVault.Data","description":"This - policy manages the minimum key size for RSA certificates.","metadata":{"version":"1.0.1-preview","category":"Key - Vault","preview":true},"parameters":{"minimumRSAKeySize":{"type":"Integer","metadata":{"displayName":"[Preview]: - Minimum RSA key size","description":"The minimum key size for RSA certificates."},"allowedValues":[2048,3072,4096]},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"''Audit'' allows a non-compliant resource to be created, - but flags it as non-compliant. ''Deny'' blocks the resource creation. ''Disable'' - turns off the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"Microsoft.KeyVault.Data/vaults/certificates/keyProperties.keyType","in":["RSA","RSA-HSM"]},{"field":"Microsoft.KeyVault.Data/vaults/certificates/keyProperties.keySize","less":"[parameters(''minimumRSAKeySize'')]"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cee51871-e572-4576-855c-047c820360f0","type":"Microsoft.Authorization/policyDefinitions","name":"cee51871-e572-4576-855c-047c820360f0"},{"properties":{"displayName":"[Deprecated]: - Enforce unique ingress hostnames across namespaces in AKS","policyType":"BuiltIn","mode":"Microsoft.ContainerService.Data","description":"This - policy enforces unique ingress hostnames across namespaces in an Azure Kubernetes - Service cluster. This policy is deprecated, please visit https://aka.ms/kubepolicydoc - for instructions on using new Kubernetes policies.","metadata":{"version":"1.0.1-deprecated","category":"Kubernetes - service","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["EnforceRegoPolicy","Disabled"],"defaultValue":"EnforceRegoPolicy"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"[parameters(''effect'')]","details":{"policyId":"UniqueIngressHostnames","policy":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/KubernetesService/ingress-hostnames-conflict/limited-preview/gatekeeperpolicy.rego"}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d011d9f7-ba32-4005-b727-b3d09371ca60","type":"Microsoft.Authorization/policyDefinitions","name":"d011d9f7-ba32-4005-b727-b3d09371ca60"},{"properties":{"displayName":"[Preview]: - Ensure container CPU and memory resource limits do not exceed the specified - limits in Kubernetes cluster","policyType":"BuiltIn","mode":"Microsoft.Kubernetes.Data","description":"This - policy ensures container CPU and memory resource limits are defined and do - not exceed the specified limits in a Kubernetes cluster. For instructions - on using this policy, visit https://aka.ms/kubepolicydoc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"cpuLimit":{"type":"String","metadata":{"displayName":"[Preview]: - Max allowed CPU units","description":"The maximum CPU units allowed for a - container. E.g. 200m. For more information, please refer https://aka.ms/k8s-policy-pod-limits"}},"memoryLimit":{"type":"String","metadata":{"displayName":"[Preview]: - Max allowed memory bytes","description":"The maximum memory bytes allowed - for a container. E.g. 1Gi. For more information, please refer https://aka.ms/k8s-policy-pod-limits"}},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"''Audit'' allows a non-compliant resource to be created, - but flags it as non-compliant. ''Deny'' blocks the resource creation. ''Disable'' - turns off the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"deny"},"excludedNamespaces":{"type":"Array","metadata":{"displayName":"[Preview]: - Namespace exclusions","description":"List of Kubernetes namespaces to exclude - from policy evaluation."},"defaultValue":["kube-system","gatekeeper-system","azure-arc"]}},"policyRule":{"if":{"field":"type","in":["AKS - Engine","Microsoft.Kubernetes/connectedClusters","Microsoft.ContainerService/managedClusters"]},"then":{"effect":"[parameters(''effect'')]","details":{"constraintTemplate":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/container-resource-limits/template.yaml","constraint":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/container-resource-limits/constraint.yaml","values":{"cpuLimit":"[parameters(''cpuLimit'')]","memoryLimit":"[parameters(''memoryLimit'')]","excludedNamespaces":"[parameters(''excludedNamespaces'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","type":"Microsoft.Authorization/policyDefinitions","name":"e345eecc-fa47-480f-9e88-67dcc122b164"},{"properties":{"displayName":"[Preview]: - Manage certificates that are within a specified number of days of expiration","policyType":"BuiltIn","mode":"Microsoft.KeyVault.Data","description":"This - policy manages certificates that are within a specified number of days to - their expiration date.","metadata":{"version":"1.0.1-preview","category":"Key - Vault","preview":true},"parameters":{"daysToExpire":{"type":"Integer","metadata":{"displayName":"[Preview]: - Days to expire","description":"The number of days for a certificate to expire."}},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"''Audit'' allows a non-compliant resource to be created, - but flags it as non-compliant. ''Deny'' blocks the resource creation. ''Disable'' - turns off the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"field":"Microsoft.KeyVault.Data/vaults/certificates/attributes.expiresOn","lessOrEquals":"[addDays(utcNow(), - parameters(''daysToExpire''))]"},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f772fb64-8e40-40ad-87bc-7706e1949427","type":"Microsoft.Authorization/policyDefinitions","name":"f772fb64-8e40-40ad-87bc-7706e1949427"},{"properties":{"displayName":"[Preview]: - Ensure only allowed container images in Kubernetes cluster","policyType":"BuiltIn","mode":"Microsoft.Kubernetes.Data","description":"This - policy ensures only allowed container images are running in a Kubernetes cluster. - For instructions on using this policy, visit https://aka.ms/kubepolicydoc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"allowedContainerImagesRegex":{"type":"String","metadata":{"displayName":"[Preview]: - Allowed container images regex","description":"The RegEx rule used to match - allowed container images in a Kubernetes cluster. For example, to allow any - Azure Container Registry image by matching partial path: ^.+azurecr.io/.+$"}},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"''Audit'' allows a non-compliant resource to be created, - but flags it as non-compliant. ''Deny'' blocks the resource creation. ''Disable'' - turns off the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"deny"},"excludedNamespaces":{"type":"Array","metadata":{"displayName":"[Preview]: - Namespace exclusions","description":"List of Kubernetes namespaces to exclude - from policy evaluation."},"defaultValue":["kube-system","gatekeeper-system","azure-arc"]}},"policyRule":{"if":{"field":"type","in":["AKS - Engine","Microsoft.Kubernetes/connectedClusters","Microsoft.ContainerService/managedClusters"]},"then":{"effect":"[parameters(''effect'')]","details":{"constraintTemplate":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/container-allowed-images/template.yaml","constraint":"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/container-allowed-images/constraint.yaml","values":{"allowedContainerImagesRegex":"[parameters(''allowedContainerImagesRegex'')]","excludedNamespaces":"[parameters(''excludedNamespaces'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","type":"Microsoft.Authorization/policyDefinitions","name":"febd0533-8e55-448f-b837-bd0e06f16469"},{"properties":{"policyType":"Custom","mode":"Indexed","description":"Don''t - create a VM anywhere","metadata":{"createdBy":"123743cc-88ef-49ee-920e-13958fe5697d","createdOn":"2020-07-01T00:57:59.6846659Z","updatedBy":null,"updatedOn":null},"policyRule":{"if":{"allOf":[{"source":"action","equals":"Microsoft.Compute/virtualMachines/write"},{"field":"location","in":["eastus","eastus2","centralus"]}]},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0","type":"Microsoft.Authorization/policyDefinitions","name":"pypolicyea4a13f0"},{"properties":{"displayName":"nrms-hdinsight-require-subnet_1.0","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-04-01T22:24:01.1484325Z","updatedBy":null,"updatedOn":null},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"},"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.HDInsight/clusters"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"not":{"field":"Microsoft.HDInsight/clusters/computeProfile.roles[*].virtualNetworkProfile.subnet","notIn":["null",""]}}]},{"allOf":[{"field":"type","equals":"Microsoft.HDInsight/clusters"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"Microsoft.HDInsight/clusters/computeProfile.roles[*].virtualNetworkProfile.subnet","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/11094169db59074f","type":"Microsoft.Authorization/policyDefinitions","name":"11094169db59074f"},{"properties":{"displayName":"nrms-hdinsight-require-subnet_1.2","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T19:32:57.4990001Z","updatedBy":null,"updatedOn":null},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"},"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.HDInsight/clusters"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"tags[''NRMSVNetIntException'']","exists":"false"},{"value":"[resourceGroup().tags[''NRMSVNetIntException'']]","equals":""},{"field":"tags[''autopilotcluster'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotcluster'']]","equals":""},{"field":"tags[''autopilotenvironment'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotenvironment'']]","equals":""},{"not":{"field":"Microsoft.HDInsight/clusters/computeProfile.roles[*].virtualNetworkProfile.subnet","notIn":["null",""]}}]},{"allOf":[{"field":"type","equals":"Microsoft.HDInsight/clusters"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"Microsoft.HDInsight/clusters/computeProfile.roles[*].virtualNetworkProfile.subnet","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/1b0f9cd579f5f04a","type":"Microsoft.Authorization/policyDefinitions","name":"1b0f9cd579f5f04a"},{"properties":{"displayName":"geneva - monitoring extension and azsecpack append policy for vmss_1.2","policyType":"Custom","mode":"Indexed","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-06-23T19:35:01.9059556Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"resourcetagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name","description":"Rule is not deployed if this tag exists on the Virtual - Machine"}},"resourcegrouptagname1":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name at the resource group level","description":"Rule is not deployed - if this tag exists on the Resource Group"}},"resourcegrouptagname2":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name at the resource group level","description":"Rule is not deployed - if this tag exists on the Resource Group"}},"subscriptiontagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name at the subscription level","description":"Rule is not deployed if - this tag exists on the Subscription"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''resourcetagname''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''resourcegrouptagname1'')]]","equals":""},{"value":"[resourceGroup().tags[parameters(''resourcegrouptagname2'')]]","equals":""},{"value":"[subscription().tags[parameters(''subscriptiontagname'')]]","equals":""},{"anyOf":[{"field":"Microsoft.Compute/VirtualMachineScaleSets/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"}]},{"field":"Microsoft.Compute/VirtualMachineScaleSets/virtualMachineProfile","exists":"true"},{"field":"Microsoft.Compute/VirtualMachineScaleSets/extensionProfile.extensions[*].type","notEquals":"GenevaMonitoring"},{"field":"Microsoft.Compute/VirtualMachineScaleSets/extensionProfile.extensions[*].type","notEquals":"VirtualMachineRuntimeService"},{"not":{"field":"Microsoft.Compute/VirtualMachineScaleSets/osProfile.windowsConfiguration.provisionVMAgent","equals":"false"}}]},"then":{"effect":"append","details":[{"field":"Microsoft.Compute/VirtualMachineScaleSets/extensionProfile.extensions[*]","value":{"name":"Microsoft.Azure.Geneva.GenevaMonitoring","properties":{"publisher":"Microsoft.Azure.Geneva","type":"GenevaMonitoring","typeHandlerVersion":"2.0","autoUpgradeMinorVersion":true,"settings":{}}}}]}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/1b5a57eabcce7d7d","type":"Microsoft.Authorization/policyDefinitions","name":"1b5a57eabcce7d7d"},{"properties":{"displayName":"nrms-nsg-rule-102_1.2","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-07-09T18:15:23.2021003Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"},"defaultValue":""},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"},"defaultValue":[]},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"allowedValues":["NA","NRMSException","SkipNRMSCorp","nrmsskipcorpnetsaw","SkipNRMSSAW","SkipNRMSDatabricks","SkipNRMSRDPSSH","SkipNRMSMgmt","SkipNRMSHigh","SkipNRMSVNet","SkipNRMSLoadBal","SkipNRMSDB","SkipNRMSMedium"],"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"[parameters(''sourceValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","contains":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","in":["Any","*"]},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/21f42d11eb755867","type":"Microsoft.Authorization/policyDefinitions","name":"21f42d11eb755867"},{"properties":{"displayName":"nrms-kubernet-require-azure-networkplugin_1.0","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-04-01T22:23:57.6004986Z","updatedBy":null,"updatedOn":null},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"},"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"not":{"field":"Microsoft.ContainerService/managedClusters/networkProfile.networkPlugin","notIn":["null",""]}}]},{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"not":{"field":"Microsoft.ContainerService/managedClusters/networkProfile.networkPlugin","equals":"azure"}}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/26db8d27b6fa91aa","type":"Microsoft.Authorization/policyDefinitions","name":"26db8d27b6fa91aa"},{"properties":{"displayName":"audit - ssh auth on existing resources_1.1","policyType":"Custom","mode":"All","description":"This - policy audits whether any Linux VMs use password-only authentication for SSH - on existing resources.","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-12-06T21:04:41.4787743Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"resourcetagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name","description":"Rule is not deployed if this tag exists on the Virtual - Machine"}},"resourcegrouptagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name at the resource group level","description":"Rule is not deployed - if this tag exists on the Resource Group"}}},"policyRule":{"if":{"allof":[{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''resourcetagname''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''resourcegrouptagname'')]]","notEquals":""},{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"True"},{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration.disablePasswordAuthentication","equals":"false"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/28b685eba93cc71f","type":"Microsoft.Authorization/policyDefinitions","name":"28b685eba93cc71f"},{"properties":{"displayName":"nrms-nsg-rule-101_1.1","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-07-08T19:20:14.0863618Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"}},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"}},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"allowedValues":["NA","NRMSException","SkipNRMSCorp","nrmsskipcorpnetsaw","SkipNRMSSAW","SkipNRMSDatabricks","SkipNRMSRDPSSH","SkipNRMSMgmt","SkipNRMSHigh","SkipNRMSVNet","SkipNRMSLoadBal","SkipNRMSDB","SkipNRMSMedium"],"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"[parameters(''sourceValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","equals":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"Any"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/34612a1acdd0093","type":"Microsoft.Authorization/policyDefinitions","name":"34612a1acdd0093"},{"properties":{"displayName":"nrms-nsg-rule-103_1.4","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:27:38.9264536Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"},"defaultValue":""},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"},"defaultValue":[]},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''tagname'')]]","equals":""},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[resourceGroup().tags[''SkipNRMSAll'']]","equals":""},{"field":"tags[''autopilotcluster'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotcluster'']]","equals":""},{"field":"tags[''autopilotenvironment'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotenvironment'']]","equals":""},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","contains":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","in":["Any","*"]},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/3c07197392ad62f","type":"Microsoft.Authorization/policyDefinitions","name":"3c07197392ad62f"},{"properties":{"displayName":"nrms-nsg-rule-105_1.1","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-07-08T19:20:18.4394851Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"}},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"}},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"allowedValues":["NA","NRMSException","SkipNRMSCorp","nrmsskipcorpnetsaw","SkipNRMSSAW","SkipNRMSDatabricks","SkipNRMSRDPSSH","SkipNRMSMgmt","SkipNRMSHigh","SkipNRMSVNet","SkipNRMSLoadBal","SkipNRMSDB","SkipNRMSMedium"],"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"[parameters(''sourceValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","equals":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"Any"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/40879463350508de","type":"Microsoft.Authorization/policyDefinitions","name":"40879463350508de"},{"properties":{"displayName":"audit - ssh auth on new vmss_1.4","policyType":"Custom","mode":"All","description":"This - policy audits whether any Linux VMSSs use password-only authentication for - SSH on new resources.","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-05-12T23:41:52.0436302Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"resourcetagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name","description":"Rule is not deployed if this tag exists on the Virtual - Machine"}},"resourcegrouptagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name at the resource group level","description":"Rule is not deployed - if this tag exists on the Resource Group"}},"subscriptiontagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name at the subscription level","description":"Rule is not deployed if - this tag exists on the Subscription"}}},"policyRule":{"if":{"allOf":[{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''resourcetagname''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''resourcegrouptagname'')]]","equals":""},{"value":"[subscription().tags[parameters(''subscriptiontagname'')]]","equals":""},{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"anyof":[{"field":"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.osProfile.linuxConfiguration.disablePasswordAuthentication","exists":"False"},{"field":"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.osProfile.linuxConfiguration.disablePasswordAuthentication","equals":"false"}]},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"7isolutions"},{"field":"Microsoft.Compute/imageOffer","in":["sapp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"128technology"},{"field":"Microsoft.Compute/imageOffer","in":["128t_networking_platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"4psa"},{"field":"Microsoft.Compute/imageOffer","in":["voipnow"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"a10networks"},{"field":"Microsoft.Compute/imageOffer","in":["a10-lightning-adc","a10-vthunder-adc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"accellion"},{"field":"Microsoft.Compute/imageOffer","in":["kiteworks-by-accellion"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"abiquo"},{"field":"Microsoft.Compute/imageOffer","in":["abiquo-hybrid-cloud-34"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"accops"},{"field":"Microsoft.Compute/imageOffer","in":["hysecure5050"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"actian_matrix"},{"field":"Microsoft.Compute/imageOffer","in":["actian_matrix"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"actifio"},{"field":"Microsoft.Compute/imageOffer","in":["actifio-sky"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"actian-corp"},{"field":"Microsoft.Compute/imageOffer","in":["vector-community","vector-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Acronis"},{"field":"Microsoft.Compute/imageOffer","in":["storage"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"activeeon"},{"field":"Microsoft.Compute/imageOffer","in":["activeeon-workload-scheduler"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"aerospike"},{"field":"Microsoft.Compute/imageOffer","in":["aerospike-database-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"affinio"},{"field":"Microsoft.Compute/imageOffer","in":["platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"aiscaler-cache-control-ddos-and-url-rewriting-"},{"field":"Microsoft.Compute/imageOffer","in":["aimobile-site-acceleration","aiprotect-ddos-firewall","aiscaler-traffic-manager-caching","aivideo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"akamai-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["enterprise-application-access"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"alces-flight-limited"},{"field":"Microsoft.Compute/imageOffer","in":["alces-flight-compute-solo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"alertlogic"},{"field":"Microsoft.Compute/imageOffer","in":["alert-logic-tm","alert-logic-wsm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"alienvault"},{"field":"Microsoft.Compute/imageOffer","in":["unified-security-management-anywhere"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"alldigital-brevity"},{"field":"Microsoft.Compute/imageOffer","in":["alldigital-brevity-uploader"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"altair-engineering-inc"},{"field":"Microsoft.Compute/imageOffer","in":["altair_hwulva"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"altamira-corporation"},{"field":"Microsoft.Compute/imageOffer","in":["lumify"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"antmedia"},{"field":"Microsoft.Compute/imageOffer","in":["ams_community_edition","ant_media_server_enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"apigee"},{"field":"Microsoft.Compute/imageOffer","in":["apigee-edge"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appcara"},{"field":"Microsoft.Compute/imageOffer","in":["app360v43-001"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appcelerator"},{"field":"Microsoft.Compute/imageOffer","in":["appcelerator-arrow-azure-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appex-networks"},{"field":"Microsoft.Compute/imageOffer","in":["cloudexpress"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appistry"},{"field":"Microsoft.Compute/imageOffer","in":["genomepilot"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appscale-marketplace"},{"field":"Microsoft.Compute/imageOffer","in":["appscale"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"arangodb"},{"field":"Microsoft.Compute/imageOffer","in":["arangodb"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"arista-networks"},{"field":"Microsoft.Compute/imageOffer","in":["veos-router"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"array_networks"},{"field":"Microsoft.Compute/imageOffer","in":["array-networks-vapv"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"astadia-1148316"},{"field":"Microsoft.Compute/imageOffer","in":["astadia-ui-automation-tee"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"atomicorp"},{"field":"Microsoft.Compute/imageOffer","in":["secure-os","secure-ubuntu-os"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"audiocodes"},{"field":"Microsoft.Compute/imageOffer","in":["mediantsessionbordercontroller"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"auriq-systems"},{"field":"Microsoft.Compute/imageOffer","in":["essentia"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"awingu"},{"field":"Microsoft.Compute/imageOffer","in":["awingu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"aviatrix-systems"},{"field":"Microsoft.Compute/imageOffer","in":["aviatrix-cloud-services","aviatrix-companion-gateway","aviatrix-companion-gateway-v2","aviatrix-vpn-gw","aviatrix_multi_cloud_service","aviatrix_openvpn_service","aviatrix_openvpn_service10","aviatrix_openvpn_service25","aviatrix_openvpn_service50"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"avi-networks"},{"field":"Microsoft.Compute/imageOffer","in":["avi-vantage-adc","internal-avi-vantage-adc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"axway"},{"field":"Microsoft.Compute/imageOffer","in":["axway-mailgate-secure-collaboration-advanced","axway-mailgate-secure-collaboration-premium","axway-mailgate-secure-collaboration-standard"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"azul"},{"field":"Microsoft.Compute/imageOffer","in":["azul-zulu-ubuntu-1804"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"azurecyclecloud"},{"field":"Microsoft.Compute/imageOffer","in":["azure-cyclecloud-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"AzureDatabricks"},{"field":"Microsoft.Compute/imageOffer","in":["Databricks"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"baas-techbureau"},{"field":"Microsoft.Compute/imageOffer","in":["b1327623-d29b-4cc1-b833-85067dcc7bce"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"baffle-io"},{"field":"Microsoft.Compute/imageOffer","in":["baffle-application-data-protection"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"balabit"},{"field":"Microsoft.Compute/imageOffer","in":["balabit-shell-control-box","psm","sps"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"barracudanetworks"},{"field":"Microsoft.Compute/imageOffer","in":["barracuda-app-sec-control-center","barracuda-email-security-gateway","barracuda-ng-cc","barracuda-ng-firewall","waf"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"basho"},{"field":"Microsoft.Compute/imageOffer","in":["riak-2-0-1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","in":["autodesk-maya-arnold-centos73","rendering-centos73"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bdy"},{"field":"Microsoft.Compute/imageOffer","in":["buddy"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Bitnami"},{"field":"Microsoft.Compute/imageOffer","in":["3-4","abantecart","activemq","akeneo","alfrescocommunity","apachesolr","artifactory","canvaslms","cassandra","civicrm","cmsmadesimple","codiad","concrete5","consul","coppermine","couchdb","diaspora","discourse","djangostack","dokuwiki","dolibarr","DreamFactory","drupal","elastic-search","elk","erpnext","espocrm","etcd","eXo-Platform","exoplatform","fatfreecrm","ghost","gitlab","grafana","hadoop","hhvmstack","hordegroupwarewebmail","jasperreports","jenkins","joomla","jrubystack","kafka","kong","kubernetessandbox","lampstack","lappstack","letschat","liferay","limesurvey","livehelperchat","magento","mahara","mantis","mariadb","mattermost","mautic","mean","mediawiki","memcached","modx","mongodb","moodle","multicraft","mybb","mysql","nats","neo4j","neos","nginxstack","noalyss","nodejs","ocportal","odoo","openatrium","opencart","openedx","openfire","openproject","orangehrm","osclass","owncloud","oxid-eshop","parseserver","phabricator","phpbb","phplist","pimcore","piwik","plone","pootle","postgresql","prestashop","processmakerenterprise","processmakeropensourceedition","processwire","publify","rabbitmq","redash","redis","redmine","redmineplusagile","reportserver","reportserverenterprise","resourcespace","reviewboard","reviewboardpowerpack","roundcube","rubystack","seopanel","shopware","silverstripe","simplemachinesforum","sonarqube","spree","subversion","suitecrm","tensorflowserving","testlink","tikiwikicmsgroupware","tinytinyrss","tom-cat","trac","typo3","weblate","webmailpro","wildfly","wordpress","wordpress-multisite","wordpresspro","x2enginesalescrm","xoops","youtrack","zookeeper","zurmo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"black-duck-software"},{"field":"Microsoft.Compute/imageOffer","in":["blackduck_hub_vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"blk-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["blk-io-erc-20-rest-service"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"blockapps"},{"field":"Microsoft.Compute/imageOffer","in":["strato-blockchain-base-template-latest"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"blockstack"},{"field":"Microsoft.Compute/imageOffer","in":["blockstack-core-v14"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"blockchain-foundry"},{"field":"Microsoft.Compute/imageOffer","in":["syscoin-api","syscoin-full-node","syscoin-price-peg"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bloombase"},{"field":"Microsoft.Compute/imageOffer","in":["bloombase-storesafe-3_4_7_0_el7_x86_64"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bluecat"},{"field":"Microsoft.Compute/imageOffer","in":["bluecat-bam-for-azure","bluecat-dns-for-azure","bluecat-edge-service-point-vm-for-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bluetalon"},{"field":"Microsoft.Compute/imageOffer","in":["bluetalon"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"brocade_communications"},{"field":"Microsoft.Compute/imageOffer","in":["brocade-virtual-traffic-manager","brocade-virtual-traffic-manager-with-waf-module","brocade-virtual-web-application-firewall"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bt-americas-inc"},{"field":"Microsoft.Compute/imageOffer","in":["diamondip-sapphire-ev10","diamondip-sapphire-ev20","diamondip-sapphire-v10","diamondip-sapphire-v20","diamondip-sapphire-v5","diamondip-sapphire-vcaa20"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"buddhalabs"},{"field":"Microsoft.Compute/imageOffer","in":["sles_12_pci"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"carto"},{"field":"Microsoft.Compute/imageOffer","in":["cartobuilder2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cask"},{"field":"Microsoft.Compute/imageOffer","in":["cdap-cloud-sandbox"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","in":["UbuntuServer","Ubuntu_Core"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cavirin"},{"field":"Microsoft.Compute/imageOffer","in":["cavirin-platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cautelalabs"},{"field":"Microsoft.Compute/imageOffer","in":["log_management"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"celum-gmbh"},{"field":"Microsoft.Compute/imageOffer","in":["celumdam"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cds"},{"field":"Microsoft.Compute/imageOffer","in":["cds-data-migration-solution-for-legacy-to-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-6-v2-0-2-l1","cis-centos-7-v2-1-1-l1","cis-oracle-linux-6-v1-0-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-rhel-6-v2-0-2-l1","cis-rhel-7-v2-2-0-l1","cis-suse-linux-11-v2-0-0-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1404-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"certivox"},{"field":"Microsoft.Compute/imageOffer","in":["sso-test"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cfd-direct"},{"field":"Microsoft.Compute/imageOffer","in":["cfd-direct-from-the-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"chain"},{"field":"Microsoft.Compute/imageOffer","in":["chain-core-developer-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"checkpoint"},{"field":"Microsoft.Compute/imageOffer","in":["check-point-r77-10","check-point-vsec-r80","check-point-vsec-r80-blink","sg2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"chef-software"},{"field":"Microsoft.Compute/imageOffer","in":["chef-automate-vm-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"circleci"},{"field":"Microsoft.Compute/imageOffer","in":["circleci-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cires21"},{"field":"Microsoft.Compute/imageOffer","in":["c21l-enc","c21l-mos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cisco"},{"field":"Microsoft.Compute/imageOffer","in":["cisco-asav","cisco-csr-1000v","cisco-ftdv","cisco-meraki-vmx100","cisco-ngfwv-vm-test-unsupported","cisco_cloud_vedge_17_2_4","cos65","cos72","cos72_main_dev","uos14","vwaas-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"citrix"},{"field":"Microsoft.Compute/imageOffer","in":["citrix-sd-wan-opt","netscaler-ma-service-agent-120","netscaler-ma-service-agent-121","netscaler-sd-wan","netscaler-vpx","netscalervpx-120","netscalervpx-121","netscalervpx110-6531","netscalervpx111"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"clear-linux-project"},{"field":"Microsoft.Compute/imageOffer","in":["clear-linux-os"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"clouber"},{"field":"Microsoft.Compute/imageOffer","in":["cuber","cws","mcenter"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-cruiser"},{"field":"Microsoft.Compute/imageOffer","in":["cloud-cruiser-16"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudbees"},{"field":"Microsoft.Compute/imageOffer","in":["jenkins-enterprise","jenkins-operations-center"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudbees-enterprise-jenkins"},{"field":"Microsoft.Compute/imageOffer","in":["cloudbees-jenkins-enterprise","cloudbees-jenkins-operations-center"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudbolt-software"},{"field":"Microsoft.Compute/imageOffer","in":["cloudbolt"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudboost"},{"field":"Microsoft.Compute/imageOffer","in":["cloudboost"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudenablers-inc"},{"field":"Microsoft.Compute/imageOffer","in":["corestack"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","in":["squid-proxy"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","in":["cloudera-altus-centos-os","cloudera-centos-6","cloudera-centos-os","test-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudlanes"},{"field":"Microsoft.Compute/imageOffer","in":["cloud-video-accelerator-nfs","cloudlanes-cloud-backup-accelerator-vtl"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudlink"},{"field":"Microsoft.Compute/imageOffer","in":["cloudlink-securevm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudplan-gmbh"},{"field":"Microsoft.Compute/imageOffer","in":["cloudplan_pcn_linux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudsecurity"},{"field":"Microsoft.Compute/imageOffer","in":["paladion_ondemand_nextgen_firewall"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudsoft"},{"field":"Microsoft.Compute/imageOffer","in":["cloudsoft-amp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"clustrix"},{"field":"Microsoft.Compute/imageOffer","in":["clustrixdb"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"codelathe"},{"field":"Microsoft.Compute/imageOffer","in":["codelathe-filecloud-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"codenvy"},{"field":"Microsoft.Compute/imageOffer","in":["codenvy-on-prem"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cognosys"},{"field":"Microsoft.Compute/imageOffer","in":["1-click-secured-joomla-on-centos-7-3","1-click-secured-joomla-on-ubuntu-1404-lts","1-click-secured-joomla-on-ubuntu-1604-lts","1-click-secured-joomla-on-ubuntu-1804-lts","centos-6-9","centos-7-3","centos-7-4","centos-7-5","deploy-a-secured-modx-on-ubuntu-14-04-lts","deploy-a-secured-silverstripe-on-ubuntu-14-04-lts","hardened-mysql-5-6-on-centos-7-3","hardened-mysql-5-6-on-ubu-1404-lts","hardened-mysql-5-7-on-centos-7-3","hardened-mysql-5-7-on-ubu-1404-lts","hardened-postgresql-on-ubu-1404-lts","invoice-ninja-2-5-1-1-on-ubuntu-1404","jruby-on-ubuntu-14-04-lts","low-latency-broadcasting-server-for-live-events","owncloud-9-with-lamp-stack-on-ubuntu-1404","piwigogallerys-ubuntu_14-04_lts","sec1011-dokuwiki-on-ubuntu-1404","sec1013-elasticsearch-on-ubuntu-1404","sec1014-opencart-on-ubuntu-1404","sec1015-orangehrm-on-ubuntu-1404","sec1016-nodejs-server-on-ubuntu-1404","sec1018-haproxy-on-ubuntu-1404","sec1019-secured-tomcat-on-ubuntu-1404","sec1020-phpbb-on-hardened-ubuntu-1404","sec1021-mybb-on-hardened-ubuntu-1404","sec1022-sugarcrm-on-ubuntu-1404","sec1023-moodle-on-ubuntu-1404","sec1024_magento-on-ubuntu-1404","sec1025-secured-drupal-on-ubuntu-1404","sec1027-secured-wordpress-on-ubuntu-1404","sec1028-secured-lamp-sever-on-ubuntu-1404","sec1029-secured-mediawiki-on-ubuntu-1404","sec1030-secured-subversion-on-ubuntu-1404","sec1031-secured-passenger-nginx-on-ubuntu-1404","sec1033-secured-piwik-on-ubuntu-1404","sec1034-secured-pligg-on-ubuntu-1404","sec1035-secured-jenkins-on-ubuntu-1404","sec1036-secured-postgresql-on-ubuntu-1404","secure-cloud-lamp-ubuntu-1404","secured-abantecart-on-centos","secured-abantecart-on-ubuntu-14-04-lts","secured-acquia-drupal-on-centos","secured-acquiadurpal-on-ubuntu-14-04-lts","secured-apachesolr-on-centos","secured-apachesolr-on-ubuntu-14-04-lts","secured-arartifactory-on-centos","secured-artifactory-on-ubuntu-14-04-lts","secured-cakephp-on-centos","secured-cakephp-on-ubuntu-14-04-lts","secured-cms-made-simple-on-centos","secured-cms-made-simple-on-ubuntu-14-04-lts","secured-codiad-on-centos","secured-codiad-on-ubuntu-14-04-lts","secured-cogdam-on-centos","secured-cogdam-on-ubuntu-14-04-lts","secured-concrete5-on-centos","secured-concrete5-on-ubuntu-14-04-lts","secured-coppermine-on-centos","secured-coppermine-on-ubuntu-14-04-lts","secured-crushftp-on-centos","secured-crushftp-on-ubuntu-14-04-lts","secured-django-on-centos","secured-django-on-ubuntu-14-04-lts","secured-dokuwiki-on-centos","secured-dolibarr-on-centos","secured-dolivbarr-on-ubuntu-14-04-lts","secured-drupal-on-centos","secured-elasticsearch-on-centos","secured-enterprise-nginx-varnish-haproxy-php","secured-espocrm-on-centos","secured-espocrm-on-ubuntu-14-04-lts","secured-exoplatform-on-centos","secured-exoplatform-on-ubuntu-14-04-lts","secured-ghost-on-centos","secured-ghost-on-ubuntu-14-04-lts","secured-gradle-on-centos","secured-gradle-on-ubuntu-14-04-lts","secured-haproxy-on-centos","secured-invoice-ninja-on-centos","secured-jboss-as-on-centos","secured-jbossas-on-ubuntu-14-04-lts","secured-jenkins-on-centos","secured-jruby-on-cento","secured-lamp-on-centos","secured-lamp-on-centos-m10","secured-lapp-on-centos","secured-lapp-on-ubuntu-14-04-lts","secured-lemp-sever-on-ubuntu-1404","secured-lime-survey-on-centos","secured-limesurvey-on-ubuntu-1404","secured-live-helper-chat-on-centos","secured-livehelperchat-on-ubuntu-14-04-lts","secured-magento-on-centos","secured-mahara-on-centos","secured-mahara-on-ubuntu-14-04-lts","secured-mantis-on-centos","secured-mantis-on-ubuntu-14-04-lts","secured-mariadb-on-ubuntu-16-04","secured-mautic-on-centos","secured-mautic-on-ubuntu-14-04-lts","secured-media-wiki-on-centos","secured-modx-on-centos","secured-moodle-on-centos","secured-ngnix-on-centos-7-3","secured-ngnix-on-ubuntu-14-04-lts","secured-ngnix-on-ubuntu-16-04-lts","secured-noalyss-on-centos","secured-noalyss-on-ubuntu-14-04-lts","secured-nodejs-on-centos","secured-occlass-on-ubuntu-14-04-lts","secured-ocportal-on-ubuntu-14-04-lts","secured-open-cart-on-centos","secured-orangehrm-on-centos","secured-osclass-on-centos","secured-owncloud-on-centos","secured-oxid-eshop-on-centos","secured-oxideshop-on-ubuntu-14-04-lts","secured-passenger-nginx-on-centos","secured-piwigo-gallery-on-centos","secured-plone-on-centos","secured-plone-on-ubuntu-14-04-lts","secured-prestashop-on-centos","secured-prestashop-on-ubuntu-14-04-lts","secured-railo-on-ubuntu-14-04-lts","secured-redis-on-centos","secured-redis-on-ubuntu-1404","secured-redmine-on-centos","secured-redmine-on-ubuntu-14-04-lts","secured-redmineagile-on-ubuntu-14-04-lts","secured-report-server-on-centos","secured-reportserverent-on-ubuntu-14-04-lts","secured-resource-space-on-centos","secured-resourcespace-on-ubuntu-14-04-lts","secured-round-cube-on-centos","secured-roundcube-on-ubuntu-14-04-lts","secured-ruby-on-centos","secured-ruby-on-ubuntu-14-04-lts","secured-seopanel-on-centos","secured-seopanel-on-ubuntu-14-04-lts","secured-silverstripe-on-centos","secured-simple-invoice-on-centos","secured-simple-machines-on-centos","secured-simple-machines-on-ubuntu-14-04-lts","secured-simpleinvoice-on-ubuntu-14-04-lts","secured-subversion-on-centos","secured-suitecrm-on-centos","secured-suitecrm-on-ubuntu-14-04-lts","secured-test-link-on-centos","secured-testlink-on-ubuntu-14-04-lts","secured-thinkup-on-centos","secured-thinkup-on-ubuntu-14-04-lts","secured-tikiwikicms-on-centos","secured-tikiwikicms-on-ubuntu-14-04-lts","secured-tiny-tiny-rss-on-centos","secured-tinytinyrss-on-ubuntu-14-04-lts","secured-tomcat-on-centos","secured-trac-on-centos","secured-trac-on-ubuntu-14-04-lts","secured-typo3-on-centos","secured-typo3-on-ubuntu-14-04-lts","secured-varnish-on-centos","secured-varnish-on-ubuntu-1404","secured-wildfly-on-centos","secured-wildfly-on-ubuntu-14-04-lts","secured-wordpress-on-centos-7-3","secured-wordpress-on-ubuntu-16-04-lts","secured-x-cart-on-ubuntu-14-04-lts","secured-xoops-on-centos","secured-xoops-on-ubuntu-14-04-lts","secured-zurmo-on-centos","secured-zurmo-on-ubuntu-14-04-lts","suse15","ubuntu-14-04-lts","ubuntu-16-04-lts","ubuntu-17-04-high-performance-hardened-tcp-bbr","ubuntu-18-04","ubuntu-18-04-lts"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cohesity"},{"field":"Microsoft.Compute/imageOffer","in":["cohesity-cloudtd-tool"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cohesive"},{"field":"Microsoft.Compute/imageOffer","in":["vns3_4x_network_security"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"confluentinc"},{"field":"Microsoft.Compute/imageOffer","in":["confluentplatform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"consensys"},{"field":"Microsoft.Compute/imageOffer","in":["truffle"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"convertigo"},{"field":"Microsoft.Compute/imageOffer","in":["convertigo-for-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"corda"},{"field":"Microsoft.Compute/imageOffer","in":["corda"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"CoreOS"},{"field":"Microsoft.Compute/imageOffer","in":["CoreOS"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"couchbase"},{"field":"Microsoft.Compute/imageOffer","in":["couchbase-server-enterprise","couchbase-sync-gateway-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","in":["Debian"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cryptzone"},{"field":"Microsoft.Compute/imageOffer","in":["appgate-appliance-3_2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cybernetica-as"},{"field":"Microsoft.Compute/imageOffer","in":["uxp-securityserver-connector","uxp-securityserver_vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cyxtera"},{"field":"Microsoft.Compute/imageOffer","in":["appgatesdp-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dataart"},{"field":"Microsoft.Compute/imageOffer","in":["devicehive"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"databricks"},{"field":"Microsoft.Compute/imageOffer","in":["spfqogzeculbhdh"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"datalayer"},{"field":"Microsoft.Compute/imageOffer","in":["datalayer-notebook"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"datastax"},{"field":"Microsoft.Compute/imageOffer","in":["datastax-enterprise","datastax-enterprise-non-production-use-only"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"datasunrise"},{"field":"Microsoft.Compute/imageOffer","in":["datasunrise-database-security-suite"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dataiku"},{"field":"Microsoft.Compute/imageOffer","in":["dataiku-data-science-studio"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"datometry"},{"field":"Microsoft.Compute/imageOffer","in":["hyper-q"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dellemc"},{"field":"Microsoft.Compute/imageOffer","in":["dell-emc-avamar-virtual-edition","dell-emc-datadomain-management-center","dell-emc-datadomain-virtual-edition","dell-emc-datadomain-virtual-edition-v4","dell-emc-networker-virtual-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"delphix"},{"field":"Microsoft.Compute/imageOffer","in":["delphix_dynamic_data_platform","omniosce"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"denodo"},{"field":"Microsoft.Compute/imageOffer","in":["denodo-platform","denodo-platform-7_0"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"denyall"},{"field":"Microsoft.Compute/imageOffer","in":["denyall-rweb","denyall-vulnerability-manager","denyall-web-application-firewall"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dgsecure"},{"field":"Microsoft.Compute/imageOffer","in":["dgsecure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"diladele"},{"field":"Microsoft.Compute/imageOffer","in":["websafety"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dimensionalmechanics-inc"},{"field":"Microsoft.Compute/imageOffer","in":["neopulse-ai-studio","neopulse-query-runtime"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"docker"},{"field":"Microsoft.Compute/imageOffer","in":["docker-ce","docker-ce-edge","docker-datacenter-custom","docker-ee","docker-ee-basic","docker4azure","docker4azure-cs"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dome9"},{"field":"Microsoft.Compute/imageOffer","in":["dome9ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"drizti"},{"field":"Microsoft.Compute/imageOffer","in":["hpcbox-ansys-19-cluster-master","hpcbox-cluster-compute-node","hpcbox-cluster-cuda-node","hpcbox-cluster-gpu-node","hpcbox-docker-cluster-master","hpcbox-openfoam-cluster-master","hpcbox-su2-cluster-master"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"drone"},{"field":"Microsoft.Compute/imageOffer","in":["drone"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dyadic_security"},{"field":"Microsoft.Compute/imageOffer","in":["dyadic_sec","ukc_image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dynatrace"},{"field":"Microsoft.Compute/imageOffer","in":["ruxit-managed-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"eastwind-networks-inc"},{"field":"Microsoft.Compute/imageOffer","in":["eastwind-ixia-sensor"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"egnyte"},{"field":"Microsoft.Compute/imageOffer","in":["egnyte-connect"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"elasticbox"},{"field":"Microsoft.Compute/imageOffer","in":["elasticbox-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"electric-cloud"},{"field":"Microsoft.Compute/imageOffer","in":["electricflowce"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"elfiqnetworks"},{"field":"Microsoft.Compute/imageOffer","in":["cloud-connector"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"emercoin"},{"field":"Microsoft.Compute/imageOffer","in":["emercoin"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"enterprise-ethereum-alliance"},{"field":"Microsoft.Compute/imageOffer","in":["quorum-demo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"enterprisedb-corp"},{"field":"Microsoft.Compute/imageOffer","in":["edb-postgres-ark"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"equalum"},{"field":"Microsoft.Compute/imageOffer","in":["equalum-vm-byol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"esdenera"},{"field":"Microsoft.Compute/imageOffer","in":["esdenera-firewall-3"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ethereum"},{"field":"Microsoft.Compute/imageOffer","in":["ethereum-studio"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"evostream-inc"},{"field":"Microsoft.Compute/imageOffer","in":["ems-for-template","ems-test"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"exasol"},{"field":"Microsoft.Compute/imageOffer","in":["exasol-analytics-database-byol","exasolution-analytic-database"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"falconstorsoftware"},{"field":"Microsoft.Compute/imageOffer","in":["fss-v9"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"f5-networks"},{"field":"Microsoft.Compute/imageOffer","in":["f5-big-ip-adc","f5-big-ip-advanced-waf","f5-big-ip-best","f5-big-ip-better","f5-big-ip-byol","f5-big-ip-good","f5-big-ip-per-app-ve","f5-big-iq","f5-web-application-firewall"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"filecatalyst"},{"field":"Microsoft.Compute/imageOffer","in":["filecatalyst-direct-per-hr-billing","filecatalyst-direct-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"firehost"},{"field":"Microsoft.Compute/imageOffer","in":["firehost_armor","firehost_armor_ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"flexify-io"},{"field":"Microsoft.Compute/imageOffer","in":["single-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"flashgrid-inc"},{"field":"Microsoft.Compute/imageOffer","in":["flashgrid-racnode"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"foghorn-systems"},{"field":"Microsoft.Compute/imageOffer","in":["foghorn-edge-device-manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"forcepoint-llc"},{"field":"Microsoft.Compute/imageOffer","in":["forcepoint-ngfw"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"forscene"},{"field":"Microsoft.Compute/imageOffer","in":["forscene-edgeserver"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"fortycloud"},{"field":"Microsoft.Compute/imageOffer","in":["fortycloud-gw"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"fortinet"},{"field":"Microsoft.Compute/imageOffer","in":["fortinet-fortianalyzer","fortinet-fortimanager","fortinet_fortigate-vm_v5","fortinet_fortimail","fortinet_fortivoice","fortinet_fortiweb-vm_v5"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"fujitsu_fast"},{"field":"Microsoft.Compute/imageOffer","in":["fep10-rh7-test","feptest"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"gemalto-safenet"},{"field":"Microsoft.Compute/imageOffer","in":["safenet-keysecure-k170v","safenet-protectv","safenet-protectv-manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"gigamon-inc"},{"field":"Microsoft.Compute/imageOffer","in":["gigamon-fm-5_3_01","gigamon-fm-5_3_01_hourly","gigamon-fm-5_4_00","gigamon-fm-5_4_00_hourly"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"gitlab"},{"field":"Microsoft.Compute/imageOffer","in":["gitlab-ce","gitlab-ee"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"GitHub"},{"field":"Microsoft.Compute/imageOffer","in":["GitHub-Enterprise","githubenterprise-test-publishing"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"great-software-laboratory-private-limited"},{"field":"Microsoft.Compute/imageOffer","in":["xid"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"greensql"},{"field":"Microsoft.Compute/imageOffer","in":["greensql-database-security"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"gridgain"},{"field":"Microsoft.Compute/imageOffer","in":["gridgain-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"guardicore"},{"field":"Microsoft.Compute/imageOffer","in":["guardicorecentra","infection_monkey"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"haivision"},{"field":"Microsoft.Compute/imageOffer","in":["haivision-media-gateway-1-2","haivision-media-gateway-1-5","haivision-media-gateway-1-6-2","media-gateway"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"h2o-ai"},{"field":"Microsoft.Compute/imageOffer","in":["h2o-driverles-ai","h2o-driverless-ai","h2o-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"haproxy-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["hapee-rhel","hapee-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"harpaitalia"},{"field":"Microsoft.Compute/imageOffer","in":["mcuboenergy","yg","yougreen_trial"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hcl-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["hcl17cp1104"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"heimdall-data"},{"field":"Microsoft.Compute/imageOffer","in":["heimdall-data"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"help-systems"},{"field":"Microsoft.Compute/imageOffer","in":["goanywheremftubuntulinux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hewlett-packard"},{"field":"Microsoft.Compute/imageOffer","in":["hpe-helion-stackato"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hillstone-networks"},{"field":"Microsoft.Compute/imageOffer","in":["cloudedge-virtual-ngfw-advanced-edition","cloudedge-virtual-ngfw-standard-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hortonworks"},{"field":"Microsoft.Compute/imageOffer","in":["cloudbreak-for-hortonworks-data-platform","hortonworks-sandbox"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hitachi-solutions"},{"field":"Microsoft.Compute/imageOffer","in":["credeon-sfs-and-kms-for-sharepoint-online","credeonsecurefull-textsearch1_0"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hpe"},{"field":"Microsoft.Compute/imageOffer","in":["storeoncevsa"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"huawei"},{"field":"Microsoft.Compute/imageOffer","in":["euleros-v2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hyperglance"},{"field":"Microsoft.Compute/imageOffer","in":["hyperglance-dynamic-topology"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hypergrid"},{"field":"Microsoft.Compute/imageOffer","in":["hyperform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hytrust"},{"field":"Microsoft.Compute/imageOffer","in":["hytrust-keycontrol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ibm"},{"field":"Microsoft.Compute/imageOffer","in":["ibm-security-guardium-multi-cloud","qradar_security_analytics"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"iaansys"},{"field":"Microsoft.Compute/imageOffer","in":["iaansys-magento"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"iboss"},{"field":"Microsoft.Compute/imageOffer","in":["iboss-14600-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"imaginecommunications"},{"field":"Microsoft.Compute/imageOffer","in":["cloudxtream-cdvr","cloudxtream-dai-vms","telurio-aim"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"imperva"},{"field":"Microsoft.Compute/imageOffer","in":["imperva-dam-v13","securesphere-waf","securesphere-waf-for-azr","securesphere-waf-v12","securesphere-waf-v13"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"infoblox"},{"field":"Microsoft.Compute/imageOffer","in":["infoblox-vnios-te-v1420"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"informatica"},{"field":"Microsoft.Compute/imageOffer","in":["bdm10-1-1-u2","big-data-management-10-2","big-data-management-10-2-1","data_accelerator_for_azure_byol","data_quality_10_1_1_rhel_7_3_byol","eic","ics-byol","ics-payg-ubuntu","platform_10_1_1_multi_node_domain_rhel-7-3_byol","platform_10_2_hf1_domain_rhel-7-3_byol","powercenter-v10-domain-image-ubuntu14-04-3","powercenter-v10-update1-domain-image-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"informationbuilders"},{"field":"Microsoft.Compute/imageOffer","in":["iway-big-data-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ingrammicro"},{"field":"Microsoft.Compute/imageOffer","in":["ingrammicroensimcentostrial"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intel"},{"field":"Microsoft.Compute/imageOffer","in":["lustre-cloud-edition-gs-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intel-bigdl"},{"field":"Microsoft.Compute/imageOffer","in":["bigdl-0815","bigdl__vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intel-fpga"},{"field":"Microsoft.Compute/imageOffer","in":["quartus_pro_opencl_sdk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intellicus-technologies-pvt-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["intellicus_bi_server_100_user_linux","intellicus_bi_server_10_user_linux","intellicus_bi_server_25_user_linux","intellicus_bi_server_50_user_linux","intellicus_bi_server_5_user_linux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intersystems"},{"field":"Microsoft.Compute/imageOffer","in":["intersystems-iris-single-node"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intigua"},{"field":"Microsoft.Compute/imageOffer","in":["intigua-agent-manager-3_7_0-trial","intigua-agent-manager-trial"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"iquest"},{"field":"Microsoft.Compute/imageOffer","in":["keyhub"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ishlangu-load-balancer-adc"},{"field":"Microsoft.Compute/imageOffer","in":["ishlangu-load-balancer-byol","ishlangu-load-balancer-is10","ishlangu-load-balancer-is100","ishlangu-load-balancer-is1000","ishlangu-load-balancer-is200","ishlangu-load-balancer-is5000","ishlangu-load-balancer-isbfg"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"issp-corporation"},{"field":"Microsoft.Compute/imageOffer","in":["ispocr"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"itelios"},{"field":"Microsoft.Compute/imageOffer","in":["magento2-on-zendserver"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jamcracker"},{"field":"Microsoft.Compute/imageOffer","in":["4632d5b4-feb0-4332-8452-f2e66133672f","jamcracker-cloudanalytics","jamcracker-cloudanalytics-version4","jamcracker-cloudanalytics-version5","jamcracker-csb-service-provider","jamcracker-csb-serviceprovider","jamcracker-csb-standard","jamcracker-csb-standard-v3","jamcracker-csb-standard-version4","jamcracker-hybrid-cloud-management-version4","jamcracker_cloud_control_appliance_version4","jsdnapp_csb_serviceprovider-version4","jsdnapp_hybrid","jsdnapp_hybrid_v3"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jedox"},{"field":"Microsoft.Compute/imageOffer","in":["jedox-for-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jelastic"},{"field":"Microsoft.Compute/imageOffer","in":["jelastic-hybrid-paas-standard"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jetnexus"},{"field":"Microsoft.Compute/imageOffer","in":["dvwa","jetnexus-application-load-balancer","jetnexus-global-load-balancer","jetnexus-waf","zap"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jetware-srl"},{"field":"Microsoft.Compute/imageOffer","in":["caffe2","caffe_python_cpu","caffe_python_gpu","cockroachdb","lamp_optimized","lemp7_optimized","memcached","mongodb","mxnet_python","mysql","nodejs_nginx","percona_mongodb","percona_mysql","postgresql","pytorch","pytorch_cuda_notebook","pytorch_cuda_production","redis","redmine","tensorflow_cpu_notebook","tensorflow_cpu_production","tensorflow_cuda_notebook","tensorflow_cuda_production","tensorflow_python","theano_python","wordpress4_lemp7"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jitterbit_integration"},{"field":"Microsoft.Compute/imageOffer","in":["jitterbit-harmony-agent"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jm-technology-inc"},{"field":"Microsoft.Compute/imageOffer","in":["smart-gateway"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"juniper-networks"},{"field":"Microsoft.Compute/imageOffer","in":["vmx-services-gateway-byol","vmx-services-gateway-byol-soltemp","vmx-virtual-router","vsrx-next-generation-firewall","vsrx-next-generation-firewall-payg","vsrx-next-generation-firewall-solution-templ-payg","vsrx-next-generation-firewall-solution-template"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kaazing"},{"field":"Microsoft.Compute/imageOffer","in":["kaazing-kwic","kaazing-vpa"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kali-linux"},{"field":"Microsoft.Compute/imageOffer","in":["kali-linux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kemptech"},{"field":"Microsoft.Compute/imageOffer","in":["kemp360central-byol","vlm-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kinetica"},{"field":"Microsoft.Compute/imageOffer","in":["kineticadbbyol","kineticadbpayasyougo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kaspersky_lab"},{"field":"Microsoft.Compute/imageOffer","in":["kaspersky_secure_mail_gateway"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"knime"},{"field":"Microsoft.Compute/imageOffer","in":["knime-server-5-user_4-4-0","knime-server-byol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"krypc-technologies-pvt-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["krypccore"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"leap-orbit"},{"field":"Microsoft.Compute/imageOffer","in":["leaporbitstoragebackedsftp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"leostream-corporation"},{"field":"Microsoft.Compute/imageOffer","in":["connection-broker"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"liquid-files"},{"field":"Microsoft.Compute/imageOffer","in":["liquidfiles"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"liquidware"},{"field":"Microsoft.Compute/imageOffer","in":["stratusphere"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"literatu"},{"field":"Microsoft.Compute/imageOffer","in":["literatu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"loadbalancer"},{"field":"Microsoft.Compute/imageOffer","in":["loadbalancer-org-load-balancer-for-azure","loadbalancer-org-load-balancer-for-azure-byol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"logsign"},{"field":"Microsoft.Compute/imageOffer","in":["logsignfocus"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"logtrust"},{"field":"Microsoft.Compute/imageOffer","in":["logtrust-log-management"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"looker"},{"field":"Microsoft.Compute/imageOffer","in":["looker-analytics-platform","looker-analytics-platform-326","looker-analytics-platform-5_6"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"lti-lt-infotech"},{"field":"Microsoft.Compute/imageOffer","in":["trade-finance-blockchain"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"luminate-security"},{"field":"Microsoft.Compute/imageOffer","in":["luminate-connector"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mapr-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["mapr52-base-dev","mapr60-base","mapr60-sandbox"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mariadb"},{"field":"Microsoft.Compute/imageOffer","in":["mariadb-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"marklogic"},{"field":"Microsoft.Compute/imageOffer","in":["marklogic-9-byol","marklogic-developer-9"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"massiveanalytic-"},{"field":"Microsoft.Compute/imageOffer","in":["oscarap"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mathworks-inc"},{"field":"Microsoft.Compute/imageOffer","in":["matlab-ref-arch-18a-v1-linux-disk","mps-ref-arch-18a-v1-linux-disk2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"matillion"},{"field":"Microsoft.Compute/imageOffer","in":["matillion-etl-snowflake"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mavinglobal"},{"field":"Microsoft.Compute/imageOffer","in":["mavin-business-trial","mavin-enterprise-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"meanio"},{"field":"Microsoft.Compute/imageOffer","in":["gitlab-enterprise-ready","linnovate-open-source-sla-pro","mean-machine-20","openideal3","redash"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"media3-technologies-llc"},{"field":"Microsoft.Compute/imageOffer","in":["cpan1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"memsql"},{"field":"Microsoft.Compute/imageOffer","in":["memsql-community-single-vm","memsql-enterprise-single-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mendix"},{"field":"Microsoft.Compute/imageOffer","in":["mendix-docker","mendix-pro"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mfe_azure"},{"field":"Microsoft.Compute/imageOffer","in":["atd-mcafee","mcafee_vnsp_controller_for_azure","mcafee_vnsp_for_azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm","linux-data-science-vm-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-aks"},{"field":"Microsoft.Compute/imageOffer","in":["aks"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"micro-focus"},{"field":"Microsoft.Compute/imageOffer","in":["replication_environment"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-avere"},{"field":"Microsoft.Compute/imageOffer","in":["vfxt"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-azure-batch"},{"field":"Microsoft.Compute/imageOffer","in":["centos-container","centos-container-rdma","ubuntu-server-container","ubuntu-server-container-rdma"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-azure-compute"},{"field":"Microsoft.Compute/imageOffer","in":["azureconfidentialcompute"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["azureml","linux-data-science-vm-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftAzureSiteRecovery"},{"field":"Microsoft.Compute/imageOffer","in":["ASR-Hydration-VMs"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftOSTC"},{"field":"Microsoft.Compute/imageOffer","in":["FreeBSD"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","in":["MLServer-CentOS","MLServer-RedHat","MLServer-Ubuntu","RServer-CentOS","RServer-Ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"midfin"},{"field":"Microsoft.Compute/imageOffer","in":["mf_neon_cgw"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"midvision"},{"field":"Microsoft.Compute/imageOffer","in":["ibm-datapower-virtual-edition-75","ibm-datapower-virtual-edition-76","ibm-datapower-virtual-edition-77","ibm-http-server","ibm-websphere-portal-server-85","ibm-websphere-portal-server-90","websphere-application-server-be","websphere-application-server-be-80","websphere-application-server-be-85","websphere-application-server-be-90","websphere-application-server-be-and-mq","websphere-application-server-lp","websphere-application-server-lp-16","websphere-application-server-lp-17","websphere-application-server-lp-18","websphere-application-server-nde","websphere-application-server-nde-80","websphere-application-server-nde-85","websphere-application-server-nde-90","websphere-mq","websphere-mq-75","websphere-mq-90","websphere-mq-91"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"miraclelinux"},{"field":"Microsoft.Compute/imageOffer","in":["asianux-server-4-sp5","asianux-server-4-sp6","asianux-server-4-sp7","asianux-server-7-sp1","asianux-server-7-sp2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"miri-infotech-pvt-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["wordpress"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mobilab"},{"field":"Microsoft.Compute/imageOffer","in":["magento-wirecard-checkout"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"moogsoft"},{"field":"Microsoft.Compute/imageOffer","in":["moogsoft-aiops"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"moviemasher"},{"field":"Microsoft.Compute/imageOffer","in":["moviemasher"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","in":["SQL2017-RHEL7","SQL2017-RHEL73","SQL2017-SLES12SP2","SQL2017-Ubuntu1604","SQL2019-RHEL7","SQL2019-Ubuntu1604"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mtnfog"},{"field":"Microsoft.Compute/imageOffer","in":["idyl-e3-entity-extraction-engine","prose-sentence-extraction-engine","renku-language-detection-engine","sonnet-tokenization-engine"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mxhero"},{"field":"Microsoft.Compute/imageOffer","in":["mail2cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"my-com"},{"field":"Microsoft.Compute/imageOffer","in":["tarantool"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"narrativescience"},{"field":"Microsoft.Compute/imageOffer","in":["narratives-for-power-bi"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nasuni"},{"field":"Microsoft.Compute/imageOffer","in":["nasuni-nmc","nasuni_edge_appliance"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ncbi"},{"field":"Microsoft.Compute/imageOffer","in":["ncbi-blast-2-3-0","ncbi-free-2-2-31"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nebbiolo-technologies-inc"},{"field":"Microsoft.Compute/imageOffer","in":["fog-system-manager","fogsm_basic"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"neo4j"},{"field":"Microsoft.Compute/imageOffer","in":["neo4j-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netapp"},{"field":"Microsoft.Compute/imageOffer","in":["netapp-altavault-cloud-integrated-storage-solution","netapp-oncommand-cloud-manager","netapp-ontap-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netgate"},{"field":"Microsoft.Compute/imageOffer","in":["netgate-pfsense-azure-fw-vpn-router"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netiq"},{"field":"Microsoft.Compute/imageOffer","in":["replication_environment"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netscout"},{"field":"Microsoft.Compute/imageOffer","in":["netscout_virtual_ngeniusone_with_vscout","netscout_vstream"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netmail"},{"field":"Microsoft.Compute/imageOffer","in":["netmail-search"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netsweeper"},{"field":"Microsoft.Compute/imageOffer","in":["netsweeper6-0-6"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netx"},{"field":"Microsoft.Compute/imageOffer","in":["simplehelp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"neusoft-neteye"},{"field":"Microsoft.Compute/imageOffer","in":["neusoft-nisg-va-v1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nginxinc"},{"field":"Microsoft.Compute/imageOffer","in":["nginx-plus-v1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nicepeopleatwork"},{"field":"Microsoft.Compute/imageOffer","in":["youzana"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nodejsapi"},{"field":"Microsoft.Compute/imageOffer","in":["node-js-api"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"noobaa"},{"field":"Microsoft.Compute/imageOffer","in":["noobaa-hybrid-s3-archive-05","noobaa-multi-cloud-deduplication"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"northbridge-secure"},{"field":"Microsoft.Compute/imageOffer","in":["netconnect1","netconnectx"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nubeva-inc"},{"field":"Microsoft.Compute/imageOffer","in":["controller","test"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nuco-networks"},{"field":"Microsoft.Compute/imageOffer","in":["aionnode"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nuxeo"},{"field":"Microsoft.Compute/imageOffer","in":["nuxeo-6-lts","nuxeo-lts"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nvidia"},{"field":"Microsoft.Compute/imageOffer","in":["ngc_azure_17_11"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"o2mc-real-time-data-platform"},{"field":"Microsoft.Compute/imageOffer","in":["o2mc-platform-app"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"oceanblue-cloud"},{"field":"Microsoft.Compute/imageOffer","in":["obc-sdwan-solutions"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"omega-software"},{"field":"Microsoft.Compute/imageOffer","in":["ods_datastage"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"onyx-point-inc"},{"field":"Microsoft.Compute/imageOffer","in":["op-bnf-v1","op-bnf1_6-v1","op-bpnifi-v1","op-bpnifi16-v1","op-scc-v1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"onapsis"},{"field":"Microsoft.Compute/imageOffer","in":["osp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"op5"},{"field":"Microsoft.Compute/imageOffer","in":["op5-monitor"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"opencell"},{"field":"Microsoft.Compute/imageOffer","in":["meveo","meveo403sp2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","CentOS-CI","CentOS-HPC","CentOS-LVM","CentOS-SRIOV"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"openvpn"},{"field":"Microsoft.Compute/imageOffer","in":["openvpnas"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","in":["Oracle-Database-Ee","Oracle-Database-Se","Oracle-Linux","Oracle-WebLogic-Server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"orientdb"},{"field":"Microsoft.Compute/imageOffer","in":["orientdb-community-edition","orientdb-community-edition-2_2","orientdb-enterprise-edition-2_2","orientdb-enterprise-edition-2_2_17"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"osirium-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["osirium-pxm-platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"osnexus"},{"field":"Microsoft.Compute/imageOffer","in":["quantastorvsav4"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"paloaltonetworks"},{"field":"Microsoft.Compute/imageOffer","in":["panorama","vmseries1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"panzura-file-system"},{"field":"Microsoft.Compute/imageOffer","in":["azura-freedom-filer-v7110","panzura-cloud-filer","panzura-freedom-filer-7140-13222","panzura-freedom-filer-716-13549","panzura-freedom-filer-v7020"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"parasoft"},{"field":"Microsoft.Compute/imageOffer","in":["parasoft-service-virtualization"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"passlogy"},{"field":"Microsoft.Compute/imageOffer","in":["passlogic"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"penta-security-systems-inc"},{"field":"Microsoft.Compute/imageOffer","in":["wapples"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"percona"},{"field":"Microsoft.Compute/imageOffer","in":["percona-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"postgres-pro"},{"field":"Microsoft.Compute/imageOffer","in":["postgres-pro-enterprise","postgres-pro-enterprise-10","postgres-pro-standard","postgres-pro-standard-10"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"plesk"},{"field":"Microsoft.Compute/imageOffer","in":["plesk-onyx-linux","solution-server-business","solution-server-wordpress"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"prestashop"},{"field":"Microsoft.Compute/imageOffer","in":["prestashop16-lamp","ubuntu-base-for-prestashop"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"prime-strategy"},{"field":"Microsoft.Compute/imageOffer","in":["kusanagi-77"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","in":["pivotal-gpdb-vm","pivotal-greenplum-images","pivotal-ops-manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"process-one"},{"field":"Microsoft.Compute/imageOffer","in":["ejabberd-community-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"profecia"},{"field":"Microsoft.Compute/imageOffer","in":["full_disk_encryption_vm","project_tools_vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"progelspa"},{"field":"Microsoft.Compute/imageOffer","in":["libra-esva-antispam"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ptsecurity"},{"field":"Microsoft.Compute/imageOffer","in":["ptaf-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pulse-secure"},{"field":"Microsoft.Compute/imageOffer","in":["pulse-connect-secure-vm","pulse-virtual-traffic-manager","pulse-virtual-traffic-manager-with-waf","pulse-virtual-traffic-manager-with-waf2","pulse-virtual-traffic-manager2","pulse-virtual-web-application-firewall","pulse-virtual-web-application-firewall2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"PuppetLabs"},{"field":"Microsoft.Compute/imageOffer","in":["PuppetEnterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"puppet"},{"field":"Microsoft.Compute/imageOffer","in":["puppet-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pydio"},{"field":"Microsoft.Compute/imageOffer","in":["pydio-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"qore-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["qorus"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"qualysguard"},{"field":"Microsoft.Compute/imageOffer","in":["qualys-virtual-firewall-appliance","qualys-virtual-scanner-v23b","qualys-virtual-scanner-v24"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"quasardb"},{"field":"Microsoft.Compute/imageOffer","in":["quasardb"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"qubole-inc"},{"field":"Microsoft.Compute/imageOffer","in":["qubole-data-service"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"quest"},{"field":"Microsoft.Compute/imageOffer","in":["fve"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"racknap"},{"field":"Microsoft.Compute/imageOffer","in":["racknap-server","racknap-server-linux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"radware"},{"field":"Microsoft.Compute/imageOffer","in":["radware-alteon-va"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"radiant-logic"},{"field":"Microsoft.Compute/imageOffer","in":["radiantone-vms"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rancher"},{"field":"Microsoft.Compute/imageOffer","in":["rancheros"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rapid7"},{"field":"Microsoft.Compute/imageOffer","in":["nexpose-scan-engine","rapid7-vm-console"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rapidminer"},{"field":"Microsoft.Compute/imageOffer","in":["rapidminer_server_75","rapidminer_server_76","rapidminer_server_80","rapidminer_server_81"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"realm"},{"field":"Microsoft.Compute/imageOffer","in":["realm-mobile-platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"reblaze"},{"field":"Microsoft.Compute/imageOffer","in":["rbzr-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","RHEL","rhel-byos","rhel-ocp-marketplace","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HANA"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"relevance-lab"},{"field":"Microsoft.Compute/imageOffer","in":["rlcatalyst"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"remotelearner"},{"field":"Microsoft.Compute/imageOffer","in":["fully-supported-moodle"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"revolution-analytics"},{"field":"Microsoft.Compute/imageOffer","in":["revolution-r-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RightScaleLinux"},{"field":"Microsoft.Compute/imageOffer","in":["RightImage-CentOS","RightImage-Ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RiverbedTechnology"},{"field":"Microsoft.Compute/imageOffer","in":["steelapp_traffic_manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"riverbed"},{"field":"Microsoft.Compute/imageOffer","in":["riverbed-sccm-5-5-1","riverbed-steelcentral-appinternals","riverbed-steelhead-9-2","riverbed-steelhead-9-5-0","riverbed-steelhead-9-6-0","riverbed_steelconnect_gw","riverbed_steelconnect_sh","steelapp_traffic_manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rocketsoftware"},{"field":"Microsoft.Compute/imageOffer","in":["rocket-discover"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rsa-security-llc"},{"field":"Microsoft.Compute/imageOffer","in":["rsa-nw-azure-arch","rsa-nw-azure-broker","rsa-nw-azure-con","rsa-nw-azure-esa","rsa-nw-azure-ldec","rsa-nw-azure-vlc","rsa-nw-suite-11","rsa-nw-suite-11-1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rsk-labs"},{"field":"Microsoft.Compute/imageOffer","in":["rsk-bamboo-beta-node","rsk-node-orchid"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"saama"},{"field":"Microsoft.Compute/imageOffer","in":["fluidanalyticsengine","insurancefraudanalytics","realworldevidence"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"saltstack"},{"field":"Microsoft.Compute/imageOffer","in":["centos65saltstackenterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"scalearc"},{"field":"Microsoft.Compute/imageOffer","in":["scalearc-for-mysql-paygo","scalearc-for-sql-server-pay-go","scalearc_mysql-server","scalearc_sql_server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"scalegrid"},{"field":"Microsoft.Compute/imageOffer","in":["centos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sap"},{"field":"Microsoft.Compute/imageOffer","in":["hanaexpress"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"scality"},{"field":"Microsoft.Compute/imageOffer","in":["scalityconnecthourly"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"secureworks"},{"field":"Microsoft.Compute/imageOffer","in":["scwx-azure-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"shadow-soft"},{"field":"Microsoft.Compute/imageOffer","in":["icinga","icinga2-5","icinga2-7"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"signal-sciences"},{"field":"Microsoft.Compute/imageOffer","in":["signalscienceswpp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sightapps"},{"field":"Microsoft.Compute/imageOffer","in":["sightapps"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"silver-peak-systems"},{"field":"Microsoft.Compute/imageOffer","in":["silver_peak_edgeconnect","silver_peak_vx"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"simmachinesinc"},{"field":"Microsoft.Compute/imageOffer","in":["simmachines_vm_v2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sinefa"},{"field":"Microsoft.Compute/imageOffer","in":["sinefa-probe"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"skyarc"},{"field":"Microsoft.Compute/imageOffer","in":["mt6","mta"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"smartmessage-autoflow"},{"field":"Microsoft.Compute/imageOffer","in":["martmessage-autoflow"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"snapt-adc"},{"field":"Microsoft.Compute/imageOffer","in":["snaptadc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"soasta"},{"field":"Microsoft.Compute/imageOffer","in":["cloudtest-lite"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"softnas"},{"field":"Microsoft.Compute/imageOffer","in":["cloud_dev","mp_ce","mp_ent","mp_nas_byol","mp_nas_ep","mp_nas_gp","mp_nas_hp","mp_plat","private_offerings","softnas-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"solanolabs"},{"field":"Microsoft.Compute/imageOffer","in":["solano-ci-private-beta"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"soha"},{"field":"Microsoft.Compute/imageOffer","in":["soha-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"solar-security"},{"field":"Microsoft.Compute/imageOffer","in":["solar-incode"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sonicwall-inc"},{"field":"Microsoft.Compute/imageOffer","in":["sonicwall-nsz-azure","waf"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sophos"},{"field":"Microsoft.Compute/imageOffer","in":["sophos-xg"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"spagobi"},{"field":"Microsoft.Compute/imageOffer","in":["spagobi"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"spacecurve"},{"field":"Microsoft.Compute/imageOffer","in":["spacecurve-quickstart"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"splunk"},{"field":"Microsoft.Compute/imageOffer","in":["splunk-enterprise-base-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"src-solution"},{"field":"Microsoft.Compute/imageOffer","in":["pilot-things-onem2m-smart-network"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sqlstream"},{"field":"Microsoft.Compute/imageOffer","in":["com"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sphere3d"},{"field":"Microsoft.Compute/imageOffer","in":["snapcloud-byol","snapcloud-standard"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stackato-platform-as-a-service"},{"field":"Microsoft.Compute/imageOffer","in":["activestate-stackato"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stackstorm"},{"field":"Microsoft.Compute/imageOffer","in":["stackstorm-2015-1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"startekfingerprintmatch"},{"field":"Microsoft.Compute/imageOffer","in":["bioserver"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"steelhive"},{"field":"Microsoft.Compute/imageOffer","in":["steelhive_carbon"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stonefly"},{"field":"Microsoft.Compute/imageOffer","in":["stonefly-cloud-drive"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stormshield"},{"field":"Microsoft.Compute/imageOffer","in":["stormshield-network-security-for-cloud","stormshield-network-security-for-cloud-xl"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"storreduce"},{"field":"Microsoft.Compute/imageOffer","in":["storreduce"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stratumn"},{"field":"Microsoft.Compute/imageOffer","in":["indigo-node"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"streamsets"},{"field":"Microsoft.Compute/imageOffer","in":["streamsets-data-collector"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"striim"},{"field":"Microsoft.Compute/imageOffer","in":["integrationforsqlserveronazure","integrationtoazurestorage","integrationtoeventhub","integrationtohdinsight"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["openSUSE-Leap","SLES","SLES-BYOS","SLES-HPC","SLES-HPC-Priority","SLES-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-SAPCAL","SLES-Standard","SUSE-CaaSP-Admin-BYOS","SUSE-CaaSP-Cluster-BYOS","SUSE-Manager-Proxy-BYOS","SUSE-Manager-Server-BYOS"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"symantectest1"},{"field":"Microsoft.Compute/imageOffer","in":["cwpsazure-beta-01"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"synack-inc"},{"field":"Microsoft.Compute/imageOffer","in":["synack-crowd-security-intelligence"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"synechron-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["blockchain_tradefinance_quorum"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"syte"},{"field":"Microsoft.Compute/imageOffer","in":["syteoffer"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tactic"},{"field":"Microsoft.Compute/imageOffer","in":["tactic-workflow-v001"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"talari-networks"},{"field":"Microsoft.Compute/imageOffer","in":["talari-networks-virtual-appliance"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"talena-inc"},{"field":"Microsoft.Compute/imageOffer","in":["talena_inc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tata_communications"},{"field":"Microsoft.Compute/imageOffer","in":["netfoundry_cloud_gateway"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tavendo"},{"field":"Microsoft.Compute/imageOffer","in":["crossbar_on_azure_ubuntu1404"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"techdivision"},{"field":"Microsoft.Compute/imageOffer","in":["appserver-io-pe"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"techlatest"},{"field":"Microsoft.Compute/imageOffer","in":["ethereumdevkit","rippledevelopersuit"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"telepat"},{"field":"Microsoft.Compute/imageOffer","in":["free"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tenable"},{"field":"Microsoft.Compute/imageOffer","in":["tenable-nessus-6-byol","tenable-nessus-professional","tenablecorenessus","tenablecorewas"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"teradata"},{"field":"Microsoft.Compute/imageOffer","in":["teradata-data-mover","teradata-data-mover-agent","teradata-data-mover-intellisphere","teradata-data-stream-controller","teradata-database-1510","teradata-database-1510-byol","teradata-database-1510-intellisphere","teradata-database-1510-v2","teradata-database-1610-intellisphere","teradata-database-1610-v2","teradata-database-1620","teradata-database-1620-byol","teradata-database-1620-intellisphere","teradata-database-enterprise","teradata-database-v1610","teradata-database-v1610-byol","teradata-ecosystem-manager","teradata-querygrid-manager","teradata-querygrid-manager-intellisphere","teradata-rest-services","teradata-server-management","teradata-viewpoint","teradata-viewpoint-intellisphere"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"thales-vormetric"},{"field":"Microsoft.Compute/imageOffer","in":["ciphertrust-ckm","vormetric-dsm","vormetric-dsm-6-1-0","vormetric-tokenization-server","vts-2_2_0_2604"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"things-board"},{"field":"Microsoft.Compute/imageOffer","in":["tb-pe-cassandra"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"thoughtspot-inc"},{"field":"Microsoft.Compute/imageOffer","in":["thoughtspotvirtualmachine"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tibco-software"},{"field":"Microsoft.Compute/imageOffer","in":["grid-server-engine"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tig"},{"field":"Microsoft.Compute/imageOffer","in":["backup-as-a-service"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tigergraph"},{"field":"Microsoft.Compute/imageOffer","in":["tigergraph"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tmaxsoft"},{"field":"Microsoft.Compute/imageOffer","in":["tmax-jeusee","tmax-jeusse","tmax-webtobse"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tokyosystemhouse"},{"field":"Microsoft.Compute/imageOffer","in":["osscobol151j-pg961-centos72"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"torusware"},{"field":"Microsoft.Compute/imageOffer","in":["speedus-lite-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"totemo"},{"field":"Microsoft.Compute/imageOffer","in":["totemo-azr-tm6"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"townsend-security"},{"field":"Microsoft.Compute/imageOffer","in":["alliance-key-manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"trendmicro"},{"field":"Microsoft.Compute/imageOffer","in":["deep-security-vm","deep-security-vm-byol","iot-security-sdk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"truestack"},{"field":"Microsoft.Compute/imageOffer","in":["tsdc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tsa-public-service"},{"field":"Microsoft.Compute/imageOffer","in":["ckan-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tunnelbiz"},{"field":"Microsoft.Compute/imageOffer","in":["centos70-min","centos7optimizwithwordpress","centos7phpoptimizing","centos7phpoptimizingnginx","centos7phpoptimizwlaravel","centos7phpoptimizwosticket","centos7webserverwithwaf","centos7withaspdotnetcore2apache","centos7withjoomla","debian_web_server","fedora","fusio","linuxwithlimesurvey","networkmonitoringsystem","rimauwaf_cloud","ubuntu_server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"twistlock"},{"field":"Microsoft.Compute/imageOffer","in":["twistlock"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"typesafe"},{"field":"Microsoft.Compute/imageOffer","in":["typesafe-reactive-maps-demo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ubeeko"},{"field":"Microsoft.Compute/imageOffer","in":["hfactory-tools-for-hdinsight","hfactory-tools-sandbox"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ubercloud"},{"field":"Microsoft.Compute/imageOffer","in":["ansys-17-2-fluids-structures","ansys_182_test","comsol-multiphysics-v5-2","openfoam-v2dot3-centos-v6","openfoam-v3dot0","star-ccm-v10-04","star-ccm-v10-06-heeds-mdo-v2015","star-ccm-v12-00"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ulex"},{"field":"Microsoft.Compute/imageOffer","in":["voximal"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"unifi-software"},{"field":"Microsoft.Compute/imageOffer","in":["unifi-data-catalog","unifi-dataplatform-2-3-3-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"unitrends"},{"field":"Microsoft.Compute/imageOffer","in":["unitrends-enterprise-backup-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"usp"},{"field":"Microsoft.Compute/imageOffer","in":["unified-streaming-vod-standard"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"varnish"},{"field":"Microsoft.Compute/imageOffer","in":["varnish-cache_","varnish-custom-statistics","varnish-plus-administration-and-statistics","varnish-plus-caching-engine-4"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vaultive-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cloud-security-platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vbot"},{"field":"Microsoft.Compute/imageOffer","in":["vbot"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"velocloud"},{"field":"Microsoft.Compute/imageOffer","in":["velocloud-virtual-edge","velocloud-virtual-edge-3x"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vidispine"},{"field":"Microsoft.Compute/imageOffer","in":["vidispine-content-management"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"veritas"},{"field":"Microsoft.Compute/imageOffer","in":["cloudpoint-2-0-0","veritas-resiliency-platform-vhd-offer"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"veeam"},{"field":"Microsoft.Compute/imageOffer","in":["veeamhubimage"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vigyanlabs-innovations-pvt-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["ipm-plus-energy-saver"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"viptela"},{"field":"Microsoft.Compute/imageOffer","in":["viptela-vedge-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vizixiotplatformretail001"},{"field":"Microsoft.Compute/imageOffer","in":["vizix-iot-platform-retail-005"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vmturbo"},{"field":"Microsoft.Compute/imageOffer","in":["turbonomic","vmturbo64-opsmgr-5_3"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vte"},{"field":"Microsoft.Compute/imageOffer","in":["slashdb"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vu-llc"},{"field":"Microsoft.Compute/imageOffer","in":["vu-app-server","vu-facerecogn","vu-fraudanalysis","vu-secureonboarding"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"wallarm"},{"field":"Microsoft.Compute/imageOffer","in":["wallarm-ng-waf-offer-1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"wallix"},{"field":"Microsoft.Compute/imageOffer","in":["wallix-wabsuite"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"watchguard-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["vm-firebox-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"waves"},{"field":"Microsoft.Compute/imageOffer","in":["waves"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"websense-apmailpe"},{"field":"Microsoft.Compute/imageOffer","in":["ap-data-email-gateway","forcepoint-email-security-85beta","triton-ap-data"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"wmspanel"},{"field":"Microsoft.Compute/imageOffer","in":["nimble-streamer-centos","nimble-streamer-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"wowza"},{"field":"Microsoft.Compute/imageOffer","in":["wowzastreamingengine"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"xfinityinc"},{"field":"Microsoft.Compute/imageOffer","in":["d3view-v5"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"xtremedata"},{"field":"Microsoft.Compute/imageOffer","in":["dbx"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"yellowfin"},{"field":"Microsoft.Compute/imageOffer","in":["yellowfin-for-azure-byol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"xyzrd-group-ou"},{"field":"Microsoft.Compute/imageOffer","in":["c73-zultys-mxvirtual"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"your-shop-online"},{"field":"Microsoft.Compute/imageOffer","in":["herefordshire-enterprise-platform-drupal-7","xenofile"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"zend"},{"field":"Microsoft.Compute/imageOffer","in":["php-56-zend-server","php-zend-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"z1"},{"field":"Microsoft.Compute/imageOffer","in":["z1-securehub"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"zerodown_software"},{"field":"Microsoft.Compute/imageOffer","in":["bcaasforazure","stackbcaas"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"zoomdata"},{"field":"Microsoft.Compute/imageOffer","in":["zoomdata-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"zscaler"},{"field":"Microsoft.Compute/imageOffer","in":["zscaler-private-access"]}]}]}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/408b8964022134ba","type":"Microsoft.Authorization/policyDefinitions","name":"408b8964022134ba"},{"properties":{"displayName":"sqlads-auditifnotexists-vulnerability - assessment should be enabled on your sql servers_1.0","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-06-10T02:12:37.034264Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"tagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name","description":"Rule is not deployed if this tag exists on the SQL - Server"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagname''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''tagname'')]]","equals":""},{"value":"[subscription().tags[parameters(''tagname'')]]","equals":""}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/vulnerabilityAssessments","name":"default","existenceCondition":{"field":"Microsoft.Sql/servers/vulnerabilityAssessments/recurringScans.isEnabled","equals":"True"}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/410c2966a1e1856e","type":"Microsoft.Authorization/policyDefinitions","name":"410c2966a1e1856e"},{"properties":{"displayName":"nrms-nsg-rule-103_1.1","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-07-08T19:20:16.1955196Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"}},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"}},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"allowedValues":["NA","NRMSException","SkipNRMSCorp","nrmsskipcorpnetsaw","SkipNRMSSAW","SkipNRMSDatabricks","SkipNRMSRDPSSH","SkipNRMSMgmt","SkipNRMSHigh","SkipNRMSVNet","SkipNRMSLoadBal","SkipNRMSDB","SkipNRMSMedium"],"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"[parameters(''sourceValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","equals":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"Any"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/42c70bae0daee0b3","type":"Microsoft.Authorization/policyDefinitions","name":"42c70bae0daee0b3"},{"properties":{"displayName":"nrms-nsg-rule-108_1.3","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:28:59.0487626Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"},"defaultValue":""},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"},"defaultValue":[]},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''tagname'')]]","equals":""},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[resourceGroup().tags[''SkipNRMSAll'']]","equals":""},{"field":"tags[''autopilotcluster'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotcluster'']]","equals":""},{"field":"tags[''autopilotenvironment'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotenvironment'']]","equals":""},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","contains":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","in":["Any","*"]},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/532396f35af78946","type":"Microsoft.Authorization/policyDefinitions","name":"532396f35af78946"},{"properties":{"displayName":"audit - ssh auth on new vms_1.4","policyType":"Custom","mode":"All","description":"This - policy audits whether any Linux VMs use password-only authentication for SSH - on new resources.","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-05-12T23:41:56.0529781Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"resourcetagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name","description":"Rule is not deployed if this tag exists on the Virtual - Machine"}},"resourcegrouptagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name at the resource group level","description":"Rule is not deployed - if this tag exists on the Resource Group"}},"subscriptiontagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name at the subscription level","description":"Rule is not deployed if - this tag exists on the Subscription"}}},"policyRule":{"if":{"allOf":[{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''resourcetagname''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''resourcegrouptagname'')]]","equals":""},{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"value":"[subscription().tags[parameters(''subscriptiontagname'')]]","equals":""},{"anyof":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration.disablePasswordAuthentication","exists":"False"},{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration.disablePasswordAuthentication","equals":"false"}]},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"7isolutions"},{"field":"Microsoft.Compute/imageOffer","in":["sapp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"128technology"},{"field":"Microsoft.Compute/imageOffer","in":["128t_networking_platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"4psa"},{"field":"Microsoft.Compute/imageOffer","in":["voipnow"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"a10networks"},{"field":"Microsoft.Compute/imageOffer","in":["a10-lightning-adc","a10-vthunder-adc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"accellion"},{"field":"Microsoft.Compute/imageOffer","in":["kiteworks-by-accellion"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"abiquo"},{"field":"Microsoft.Compute/imageOffer","in":["abiquo-hybrid-cloud-34"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"accops"},{"field":"Microsoft.Compute/imageOffer","in":["hysecure5050"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"actian_matrix"},{"field":"Microsoft.Compute/imageOffer","in":["actian_matrix"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"actifio"},{"field":"Microsoft.Compute/imageOffer","in":["actifio-sky"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"actian-corp"},{"field":"Microsoft.Compute/imageOffer","in":["vector-community","vector-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Acronis"},{"field":"Microsoft.Compute/imageOffer","in":["storage"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"activeeon"},{"field":"Microsoft.Compute/imageOffer","in":["activeeon-workload-scheduler"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"aerospike"},{"field":"Microsoft.Compute/imageOffer","in":["aerospike-database-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"affinio"},{"field":"Microsoft.Compute/imageOffer","in":["platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"aiscaler-cache-control-ddos-and-url-rewriting-"},{"field":"Microsoft.Compute/imageOffer","in":["aimobile-site-acceleration","aiprotect-ddos-firewall","aiscaler-traffic-manager-caching","aivideo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"akamai-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["enterprise-application-access"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"alces-flight-limited"},{"field":"Microsoft.Compute/imageOffer","in":["alces-flight-compute-solo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"alertlogic"},{"field":"Microsoft.Compute/imageOffer","in":["alert-logic-tm","alert-logic-wsm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"alienvault"},{"field":"Microsoft.Compute/imageOffer","in":["unified-security-management-anywhere"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"alldigital-brevity"},{"field":"Microsoft.Compute/imageOffer","in":["alldigital-brevity-uploader"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"altair-engineering-inc"},{"field":"Microsoft.Compute/imageOffer","in":["altair_hwulva"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"altamira-corporation"},{"field":"Microsoft.Compute/imageOffer","in":["lumify"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"antmedia"},{"field":"Microsoft.Compute/imageOffer","in":["ams_community_edition","ant_media_server_enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"apigee"},{"field":"Microsoft.Compute/imageOffer","in":["apigee-edge"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appcara"},{"field":"Microsoft.Compute/imageOffer","in":["app360v43-001"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appcelerator"},{"field":"Microsoft.Compute/imageOffer","in":["appcelerator-arrow-azure-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appex-networks"},{"field":"Microsoft.Compute/imageOffer","in":["cloudexpress"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appistry"},{"field":"Microsoft.Compute/imageOffer","in":["genomepilot"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appscale-marketplace"},{"field":"Microsoft.Compute/imageOffer","in":["appscale"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"arangodb"},{"field":"Microsoft.Compute/imageOffer","in":["arangodb"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"arista-networks"},{"field":"Microsoft.Compute/imageOffer","in":["veos-router"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"array_networks"},{"field":"Microsoft.Compute/imageOffer","in":["array-networks-vapv"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"astadia-1148316"},{"field":"Microsoft.Compute/imageOffer","in":["astadia-ui-automation-tee"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"atomicorp"},{"field":"Microsoft.Compute/imageOffer","in":["secure-os","secure-ubuntu-os"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"audiocodes"},{"field":"Microsoft.Compute/imageOffer","in":["mediantsessionbordercontroller"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"auriq-systems"},{"field":"Microsoft.Compute/imageOffer","in":["essentia"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"awingu"},{"field":"Microsoft.Compute/imageOffer","in":["awingu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"aviatrix-systems"},{"field":"Microsoft.Compute/imageOffer","in":["aviatrix-cloud-services","aviatrix-companion-gateway","aviatrix-companion-gateway-v2","aviatrix-vpn-gw","aviatrix_multi_cloud_service","aviatrix_openvpn_service","aviatrix_openvpn_service10","aviatrix_openvpn_service25","aviatrix_openvpn_service50"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"avi-networks"},{"field":"Microsoft.Compute/imageOffer","in":["avi-vantage-adc","internal-avi-vantage-adc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"axway"},{"field":"Microsoft.Compute/imageOffer","in":["axway-mailgate-secure-collaboration-advanced","axway-mailgate-secure-collaboration-premium","axway-mailgate-secure-collaboration-standard"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"azul"},{"field":"Microsoft.Compute/imageOffer","in":["azul-zulu-ubuntu-1804"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"azurecyclecloud"},{"field":"Microsoft.Compute/imageOffer","in":["azure-cyclecloud-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"AzureDatabricks"},{"field":"Microsoft.Compute/imageOffer","in":["Databricks"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"baas-techbureau"},{"field":"Microsoft.Compute/imageOffer","in":["b1327623-d29b-4cc1-b833-85067dcc7bce"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"baffle-io"},{"field":"Microsoft.Compute/imageOffer","in":["baffle-application-data-protection"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"balabit"},{"field":"Microsoft.Compute/imageOffer","in":["balabit-shell-control-box","psm","sps"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"barracudanetworks"},{"field":"Microsoft.Compute/imageOffer","in":["barracuda-app-sec-control-center","barracuda-email-security-gateway","barracuda-ng-cc","barracuda-ng-firewall","waf"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"basho"},{"field":"Microsoft.Compute/imageOffer","in":["riak-2-0-1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","in":["autodesk-maya-arnold-centos73","rendering-centos73"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bdy"},{"field":"Microsoft.Compute/imageOffer","in":["buddy"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Bitnami"},{"field":"Microsoft.Compute/imageOffer","in":["3-4","abantecart","activemq","akeneo","alfrescocommunity","apachesolr","artifactory","canvaslms","cassandra","civicrm","cmsmadesimple","codiad","concrete5","consul","coppermine","couchdb","diaspora","discourse","djangostack","dokuwiki","dolibarr","DreamFactory","drupal","elastic-search","elk","erpnext","espocrm","etcd","eXo-Platform","exoplatform","fatfreecrm","ghost","gitlab","grafana","hadoop","hhvmstack","hordegroupwarewebmail","jasperreports","jenkins","joomla","jrubystack","kafka","kong","kubernetessandbox","lampstack","lappstack","letschat","liferay","limesurvey","livehelperchat","magento","mahara","mantis","mariadb","mattermost","mautic","mean","mediawiki","memcached","modx","mongodb","moodle","multicraft","mybb","mysql","nats","neo4j","neos","nginxstack","noalyss","nodejs","ocportal","odoo","openatrium","opencart","openedx","openfire","openproject","orangehrm","osclass","owncloud","oxid-eshop","parseserver","phabricator","phpbb","phplist","pimcore","piwik","plone","pootle","postgresql","prestashop","processmakerenterprise","processmakeropensourceedition","processwire","publify","rabbitmq","redash","redis","redmine","redmineplusagile","reportserver","reportserverenterprise","resourcespace","reviewboard","reviewboardpowerpack","roundcube","rubystack","seopanel","shopware","silverstripe","simplemachinesforum","sonarqube","spree","subversion","suitecrm","tensorflowserving","testlink","tikiwikicmsgroupware","tinytinyrss","tom-cat","trac","typo3","weblate","webmailpro","wildfly","wordpress","wordpress-multisite","wordpresspro","x2enginesalescrm","xoops","youtrack","zookeeper","zurmo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"black-duck-software"},{"field":"Microsoft.Compute/imageOffer","in":["blackduck_hub_vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"blk-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["blk-io-erc-20-rest-service"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"blockapps"},{"field":"Microsoft.Compute/imageOffer","in":["strato-blockchain-base-template-latest"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"blockstack"},{"field":"Microsoft.Compute/imageOffer","in":["blockstack-core-v14"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"blockchain-foundry"},{"field":"Microsoft.Compute/imageOffer","in":["syscoin-api","syscoin-full-node","syscoin-price-peg"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bloombase"},{"field":"Microsoft.Compute/imageOffer","in":["bloombase-storesafe-3_4_7_0_el7_x86_64"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bluecat"},{"field":"Microsoft.Compute/imageOffer","in":["bluecat-bam-for-azure","bluecat-dns-for-azure","bluecat-edge-service-point-vm-for-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bluetalon"},{"field":"Microsoft.Compute/imageOffer","in":["bluetalon"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"brocade_communications"},{"field":"Microsoft.Compute/imageOffer","in":["brocade-virtual-traffic-manager","brocade-virtual-traffic-manager-with-waf-module","brocade-virtual-web-application-firewall"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bt-americas-inc"},{"field":"Microsoft.Compute/imageOffer","in":["diamondip-sapphire-ev10","diamondip-sapphire-ev20","diamondip-sapphire-v10","diamondip-sapphire-v20","diamondip-sapphire-v5","diamondip-sapphire-vcaa20"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"buddhalabs"},{"field":"Microsoft.Compute/imageOffer","in":["sles_12_pci"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"carto"},{"field":"Microsoft.Compute/imageOffer","in":["cartobuilder2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cask"},{"field":"Microsoft.Compute/imageOffer","in":["cdap-cloud-sandbox"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","in":["UbuntuServer","Ubuntu_Core"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cavirin"},{"field":"Microsoft.Compute/imageOffer","in":["cavirin-platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cautelalabs"},{"field":"Microsoft.Compute/imageOffer","in":["log_management"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"celum-gmbh"},{"field":"Microsoft.Compute/imageOffer","in":["celumdam"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cds"},{"field":"Microsoft.Compute/imageOffer","in":["cds-data-migration-solution-for-legacy-to-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-6-v2-0-2-l1","cis-centos-7-v2-1-1-l1","cis-oracle-linux-6-v1-0-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-rhel-6-v2-0-2-l1","cis-rhel-7-v2-2-0-l1","cis-suse-linux-11-v2-0-0-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1404-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"certivox"},{"field":"Microsoft.Compute/imageOffer","in":["sso-test"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cfd-direct"},{"field":"Microsoft.Compute/imageOffer","in":["cfd-direct-from-the-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"chain"},{"field":"Microsoft.Compute/imageOffer","in":["chain-core-developer-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"checkpoint"},{"field":"Microsoft.Compute/imageOffer","in":["check-point-r77-10","check-point-vsec-r80","check-point-vsec-r80-blink","sg2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"chef-software"},{"field":"Microsoft.Compute/imageOffer","in":["chef-automate-vm-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"circleci"},{"field":"Microsoft.Compute/imageOffer","in":["circleci-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cires21"},{"field":"Microsoft.Compute/imageOffer","in":["c21l-enc","c21l-mos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cisco"},{"field":"Microsoft.Compute/imageOffer","in":["cisco-asav","cisco-csr-1000v","cisco-ftdv","cisco-meraki-vmx100","cisco-ngfwv-vm-test-unsupported","cisco_cloud_vedge_17_2_4","cos65","cos72","cos72_main_dev","uos14","vwaas-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"citrix"},{"field":"Microsoft.Compute/imageOffer","in":["citrix-sd-wan-opt","netscaler-ma-service-agent-120","netscaler-ma-service-agent-121","netscaler-sd-wan","netscaler-vpx","netscalervpx-120","netscalervpx-121","netscalervpx110-6531","netscalervpx111"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"clear-linux-project"},{"field":"Microsoft.Compute/imageOffer","in":["clear-linux-os"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"clouber"},{"field":"Microsoft.Compute/imageOffer","in":["cuber","cws","mcenter"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-cruiser"},{"field":"Microsoft.Compute/imageOffer","in":["cloud-cruiser-16"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudbees"},{"field":"Microsoft.Compute/imageOffer","in":["jenkins-enterprise","jenkins-operations-center"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudbees-enterprise-jenkins"},{"field":"Microsoft.Compute/imageOffer","in":["cloudbees-jenkins-enterprise","cloudbees-jenkins-operations-center"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudbolt-software"},{"field":"Microsoft.Compute/imageOffer","in":["cloudbolt"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudboost"},{"field":"Microsoft.Compute/imageOffer","in":["cloudboost"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudenablers-inc"},{"field":"Microsoft.Compute/imageOffer","in":["corestack"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","in":["squid-proxy"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","in":["cloudera-altus-centos-os","cloudera-centos-6","cloudera-centos-os","test-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudlanes"},{"field":"Microsoft.Compute/imageOffer","in":["cloud-video-accelerator-nfs","cloudlanes-cloud-backup-accelerator-vtl"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudlink"},{"field":"Microsoft.Compute/imageOffer","in":["cloudlink-securevm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudplan-gmbh"},{"field":"Microsoft.Compute/imageOffer","in":["cloudplan_pcn_linux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudsecurity"},{"field":"Microsoft.Compute/imageOffer","in":["paladion_ondemand_nextgen_firewall"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudsoft"},{"field":"Microsoft.Compute/imageOffer","in":["cloudsoft-amp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"clustrix"},{"field":"Microsoft.Compute/imageOffer","in":["clustrixdb"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"codelathe"},{"field":"Microsoft.Compute/imageOffer","in":["codelathe-filecloud-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"codenvy"},{"field":"Microsoft.Compute/imageOffer","in":["codenvy-on-prem"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cognosys"},{"field":"Microsoft.Compute/imageOffer","in":["1-click-secured-joomla-on-centos-7-3","1-click-secured-joomla-on-ubuntu-1404-lts","1-click-secured-joomla-on-ubuntu-1604-lts","1-click-secured-joomla-on-ubuntu-1804-lts","centos-6-9","centos-7-3","centos-7-4","centos-7-5","deploy-a-secured-modx-on-ubuntu-14-04-lts","deploy-a-secured-silverstripe-on-ubuntu-14-04-lts","hardened-mysql-5-6-on-centos-7-3","hardened-mysql-5-6-on-ubu-1404-lts","hardened-mysql-5-7-on-centos-7-3","hardened-mysql-5-7-on-ubu-1404-lts","hardened-postgresql-on-ubu-1404-lts","invoice-ninja-2-5-1-1-on-ubuntu-1404","jruby-on-ubuntu-14-04-lts","low-latency-broadcasting-server-for-live-events","owncloud-9-with-lamp-stack-on-ubuntu-1404","piwigogallerys-ubuntu_14-04_lts","sec1011-dokuwiki-on-ubuntu-1404","sec1013-elasticsearch-on-ubuntu-1404","sec1014-opencart-on-ubuntu-1404","sec1015-orangehrm-on-ubuntu-1404","sec1016-nodejs-server-on-ubuntu-1404","sec1018-haproxy-on-ubuntu-1404","sec1019-secured-tomcat-on-ubuntu-1404","sec1020-phpbb-on-hardened-ubuntu-1404","sec1021-mybb-on-hardened-ubuntu-1404","sec1022-sugarcrm-on-ubuntu-1404","sec1023-moodle-on-ubuntu-1404","sec1024_magento-on-ubuntu-1404","sec1025-secured-drupal-on-ubuntu-1404","sec1027-secured-wordpress-on-ubuntu-1404","sec1028-secured-lamp-sever-on-ubuntu-1404","sec1029-secured-mediawiki-on-ubuntu-1404","sec1030-secured-subversion-on-ubuntu-1404","sec1031-secured-passenger-nginx-on-ubuntu-1404","sec1033-secured-piwik-on-ubuntu-1404","sec1034-secured-pligg-on-ubuntu-1404","sec1035-secured-jenkins-on-ubuntu-1404","sec1036-secured-postgresql-on-ubuntu-1404","secure-cloud-lamp-ubuntu-1404","secured-abantecart-on-centos","secured-abantecart-on-ubuntu-14-04-lts","secured-acquia-drupal-on-centos","secured-acquiadurpal-on-ubuntu-14-04-lts","secured-apachesolr-on-centos","secured-apachesolr-on-ubuntu-14-04-lts","secured-arartifactory-on-centos","secured-artifactory-on-ubuntu-14-04-lts","secured-cakephp-on-centos","secured-cakephp-on-ubuntu-14-04-lts","secured-cms-made-simple-on-centos","secured-cms-made-simple-on-ubuntu-14-04-lts","secured-codiad-on-centos","secured-codiad-on-ubuntu-14-04-lts","secured-cogdam-on-centos","secured-cogdam-on-ubuntu-14-04-lts","secured-concrete5-on-centos","secured-concrete5-on-ubuntu-14-04-lts","secured-coppermine-on-centos","secured-coppermine-on-ubuntu-14-04-lts","secured-crushftp-on-centos","secured-crushftp-on-ubuntu-14-04-lts","secured-django-on-centos","secured-django-on-ubuntu-14-04-lts","secured-dokuwiki-on-centos","secured-dolibarr-on-centos","secured-dolivbarr-on-ubuntu-14-04-lts","secured-drupal-on-centos","secured-elasticsearch-on-centos","secured-enterprise-nginx-varnish-haproxy-php","secured-espocrm-on-centos","secured-espocrm-on-ubuntu-14-04-lts","secured-exoplatform-on-centos","secured-exoplatform-on-ubuntu-14-04-lts","secured-ghost-on-centos","secured-ghost-on-ubuntu-14-04-lts","secured-gradle-on-centos","secured-gradle-on-ubuntu-14-04-lts","secured-haproxy-on-centos","secured-invoice-ninja-on-centos","secured-jboss-as-on-centos","secured-jbossas-on-ubuntu-14-04-lts","secured-jenkins-on-centos","secured-jruby-on-cento","secured-lamp-on-centos","secured-lamp-on-centos-m10","secured-lapp-on-centos","secured-lapp-on-ubuntu-14-04-lts","secured-lemp-sever-on-ubuntu-1404","secured-lime-survey-on-centos","secured-limesurvey-on-ubuntu-1404","secured-live-helper-chat-on-centos","secured-livehelperchat-on-ubuntu-14-04-lts","secured-magento-on-centos","secured-mahara-on-centos","secured-mahara-on-ubuntu-14-04-lts","secured-mantis-on-centos","secured-mantis-on-ubuntu-14-04-lts","secured-mariadb-on-ubuntu-16-04","secured-mautic-on-centos","secured-mautic-on-ubuntu-14-04-lts","secured-media-wiki-on-centos","secured-modx-on-centos","secured-moodle-on-centos","secured-ngnix-on-centos-7-3","secured-ngnix-on-ubuntu-14-04-lts","secured-ngnix-on-ubuntu-16-04-lts","secured-noalyss-on-centos","secured-noalyss-on-ubuntu-14-04-lts","secured-nodejs-on-centos","secured-occlass-on-ubuntu-14-04-lts","secured-ocportal-on-ubuntu-14-04-lts","secured-open-cart-on-centos","secured-orangehrm-on-centos","secured-osclass-on-centos","secured-owncloud-on-centos","secured-oxid-eshop-on-centos","secured-oxideshop-on-ubuntu-14-04-lts","secured-passenger-nginx-on-centos","secured-piwigo-gallery-on-centos","secured-plone-on-centos","secured-plone-on-ubuntu-14-04-lts","secured-prestashop-on-centos","secured-prestashop-on-ubuntu-14-04-lts","secured-railo-on-ubuntu-14-04-lts","secured-redis-on-centos","secured-redis-on-ubuntu-1404","secured-redmine-on-centos","secured-redmine-on-ubuntu-14-04-lts","secured-redmineagile-on-ubuntu-14-04-lts","secured-report-server-on-centos","secured-reportserverent-on-ubuntu-14-04-lts","secured-resource-space-on-centos","secured-resourcespace-on-ubuntu-14-04-lts","secured-round-cube-on-centos","secured-roundcube-on-ubuntu-14-04-lts","secured-ruby-on-centos","secured-ruby-on-ubuntu-14-04-lts","secured-seopanel-on-centos","secured-seopanel-on-ubuntu-14-04-lts","secured-silverstripe-on-centos","secured-simple-invoice-on-centos","secured-simple-machines-on-centos","secured-simple-machines-on-ubuntu-14-04-lts","secured-simpleinvoice-on-ubuntu-14-04-lts","secured-subversion-on-centos","secured-suitecrm-on-centos","secured-suitecrm-on-ubuntu-14-04-lts","secured-test-link-on-centos","secured-testlink-on-ubuntu-14-04-lts","secured-thinkup-on-centos","secured-thinkup-on-ubuntu-14-04-lts","secured-tikiwikicms-on-centos","secured-tikiwikicms-on-ubuntu-14-04-lts","secured-tiny-tiny-rss-on-centos","secured-tinytinyrss-on-ubuntu-14-04-lts","secured-tomcat-on-centos","secured-trac-on-centos","secured-trac-on-ubuntu-14-04-lts","secured-typo3-on-centos","secured-typo3-on-ubuntu-14-04-lts","secured-varnish-on-centos","secured-varnish-on-ubuntu-1404","secured-wildfly-on-centos","secured-wildfly-on-ubuntu-14-04-lts","secured-wordpress-on-centos-7-3","secured-wordpress-on-ubuntu-16-04-lts","secured-x-cart-on-ubuntu-14-04-lts","secured-xoops-on-centos","secured-xoops-on-ubuntu-14-04-lts","secured-zurmo-on-centos","secured-zurmo-on-ubuntu-14-04-lts","suse15","ubuntu-14-04-lts","ubuntu-16-04-lts","ubuntu-17-04-high-performance-hardened-tcp-bbr","ubuntu-18-04","ubuntu-18-04-lts"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cohesity"},{"field":"Microsoft.Compute/imageOffer","in":["cohesity-cloudtd-tool"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cohesive"},{"field":"Microsoft.Compute/imageOffer","in":["vns3_4x_network_security"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"confluentinc"},{"field":"Microsoft.Compute/imageOffer","in":["confluentplatform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"consensys"},{"field":"Microsoft.Compute/imageOffer","in":["truffle"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"convertigo"},{"field":"Microsoft.Compute/imageOffer","in":["convertigo-for-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"corda"},{"field":"Microsoft.Compute/imageOffer","in":["corda"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"CoreOS"},{"field":"Microsoft.Compute/imageOffer","in":["CoreOS"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"couchbase"},{"field":"Microsoft.Compute/imageOffer","in":["couchbase-server-enterprise","couchbase-sync-gateway-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","in":["Debian"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cryptzone"},{"field":"Microsoft.Compute/imageOffer","in":["appgate-appliance-3_2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cybernetica-as"},{"field":"Microsoft.Compute/imageOffer","in":["uxp-securityserver-connector","uxp-securityserver_vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cyxtera"},{"field":"Microsoft.Compute/imageOffer","in":["appgatesdp-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dataart"},{"field":"Microsoft.Compute/imageOffer","in":["devicehive"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"databricks"},{"field":"Microsoft.Compute/imageOffer","in":["spfqogzeculbhdh"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"datalayer"},{"field":"Microsoft.Compute/imageOffer","in":["datalayer-notebook"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"datastax"},{"field":"Microsoft.Compute/imageOffer","in":["datastax-enterprise","datastax-enterprise-non-production-use-only"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"datasunrise"},{"field":"Microsoft.Compute/imageOffer","in":["datasunrise-database-security-suite"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dataiku"},{"field":"Microsoft.Compute/imageOffer","in":["dataiku-data-science-studio"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"datometry"},{"field":"Microsoft.Compute/imageOffer","in":["hyper-q"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dellemc"},{"field":"Microsoft.Compute/imageOffer","in":["dell-emc-avamar-virtual-edition","dell-emc-datadomain-management-center","dell-emc-datadomain-virtual-edition","dell-emc-datadomain-virtual-edition-v4","dell-emc-networker-virtual-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"delphix"},{"field":"Microsoft.Compute/imageOffer","in":["delphix_dynamic_data_platform","omniosce"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"denodo"},{"field":"Microsoft.Compute/imageOffer","in":["denodo-platform","denodo-platform-7_0"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"denyall"},{"field":"Microsoft.Compute/imageOffer","in":["denyall-rweb","denyall-vulnerability-manager","denyall-web-application-firewall"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dgsecure"},{"field":"Microsoft.Compute/imageOffer","in":["dgsecure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"diladele"},{"field":"Microsoft.Compute/imageOffer","in":["websafety"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dimensionalmechanics-inc"},{"field":"Microsoft.Compute/imageOffer","in":["neopulse-ai-studio","neopulse-query-runtime"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"docker"},{"field":"Microsoft.Compute/imageOffer","in":["docker-ce","docker-ce-edge","docker-datacenter-custom","docker-ee","docker-ee-basic","docker4azure","docker4azure-cs"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dome9"},{"field":"Microsoft.Compute/imageOffer","in":["dome9ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"drizti"},{"field":"Microsoft.Compute/imageOffer","in":["hpcbox-ansys-19-cluster-master","hpcbox-cluster-compute-node","hpcbox-cluster-cuda-node","hpcbox-cluster-gpu-node","hpcbox-docker-cluster-master","hpcbox-openfoam-cluster-master","hpcbox-su2-cluster-master"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"drone"},{"field":"Microsoft.Compute/imageOffer","in":["drone"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dyadic_security"},{"field":"Microsoft.Compute/imageOffer","in":["dyadic_sec","ukc_image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dynatrace"},{"field":"Microsoft.Compute/imageOffer","in":["ruxit-managed-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"eastwind-networks-inc"},{"field":"Microsoft.Compute/imageOffer","in":["eastwind-ixia-sensor"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"egnyte"},{"field":"Microsoft.Compute/imageOffer","in":["egnyte-connect"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"elasticbox"},{"field":"Microsoft.Compute/imageOffer","in":["elasticbox-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"electric-cloud"},{"field":"Microsoft.Compute/imageOffer","in":["electricflowce"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"elfiqnetworks"},{"field":"Microsoft.Compute/imageOffer","in":["cloud-connector"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"emercoin"},{"field":"Microsoft.Compute/imageOffer","in":["emercoin"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"enterprise-ethereum-alliance"},{"field":"Microsoft.Compute/imageOffer","in":["quorum-demo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"enterprisedb-corp"},{"field":"Microsoft.Compute/imageOffer","in":["edb-postgres-ark"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"equalum"},{"field":"Microsoft.Compute/imageOffer","in":["equalum-vm-byol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"esdenera"},{"field":"Microsoft.Compute/imageOffer","in":["esdenera-firewall-3"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ethereum"},{"field":"Microsoft.Compute/imageOffer","in":["ethereum-studio"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"evostream-inc"},{"field":"Microsoft.Compute/imageOffer","in":["ems-for-template","ems-test"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"exasol"},{"field":"Microsoft.Compute/imageOffer","in":["exasol-analytics-database-byol","exasolution-analytic-database"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"falconstorsoftware"},{"field":"Microsoft.Compute/imageOffer","in":["fss-v9"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"f5-networks"},{"field":"Microsoft.Compute/imageOffer","in":["f5-big-ip-adc","f5-big-ip-advanced-waf","f5-big-ip-best","f5-big-ip-better","f5-big-ip-byol","f5-big-ip-good","f5-big-ip-per-app-ve","f5-big-iq","f5-web-application-firewall"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"filecatalyst"},{"field":"Microsoft.Compute/imageOffer","in":["filecatalyst-direct-per-hr-billing","filecatalyst-direct-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"firehost"},{"field":"Microsoft.Compute/imageOffer","in":["firehost_armor","firehost_armor_ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"flexify-io"},{"field":"Microsoft.Compute/imageOffer","in":["single-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"flashgrid-inc"},{"field":"Microsoft.Compute/imageOffer","in":["flashgrid-racnode"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"foghorn-systems"},{"field":"Microsoft.Compute/imageOffer","in":["foghorn-edge-device-manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"forcepoint-llc"},{"field":"Microsoft.Compute/imageOffer","in":["forcepoint-ngfw"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"forscene"},{"field":"Microsoft.Compute/imageOffer","in":["forscene-edgeserver"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"fortycloud"},{"field":"Microsoft.Compute/imageOffer","in":["fortycloud-gw"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"fortinet"},{"field":"Microsoft.Compute/imageOffer","in":["fortinet-fortianalyzer","fortinet-fortimanager","fortinet_fortigate-vm_v5","fortinet_fortimail","fortinet_fortivoice","fortinet_fortiweb-vm_v5"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"fujitsu_fast"},{"field":"Microsoft.Compute/imageOffer","in":["fep10-rh7-test","feptest"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"gemalto-safenet"},{"field":"Microsoft.Compute/imageOffer","in":["safenet-keysecure-k170v","safenet-protectv","safenet-protectv-manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"gigamon-inc"},{"field":"Microsoft.Compute/imageOffer","in":["gigamon-fm-5_3_01","gigamon-fm-5_3_01_hourly","gigamon-fm-5_4_00","gigamon-fm-5_4_00_hourly"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"gitlab"},{"field":"Microsoft.Compute/imageOffer","in":["gitlab-ce","gitlab-ee"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"GitHub"},{"field":"Microsoft.Compute/imageOffer","in":["GitHub-Enterprise","githubenterprise-test-publishing"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"great-software-laboratory-private-limited"},{"field":"Microsoft.Compute/imageOffer","in":["xid"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"greensql"},{"field":"Microsoft.Compute/imageOffer","in":["greensql-database-security"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"gridgain"},{"field":"Microsoft.Compute/imageOffer","in":["gridgain-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"guardicore"},{"field":"Microsoft.Compute/imageOffer","in":["guardicorecentra","infection_monkey"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"haivision"},{"field":"Microsoft.Compute/imageOffer","in":["haivision-media-gateway-1-2","haivision-media-gateway-1-5","haivision-media-gateway-1-6-2","media-gateway"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"h2o-ai"},{"field":"Microsoft.Compute/imageOffer","in":["h2o-driverles-ai","h2o-driverless-ai","h2o-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"haproxy-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["hapee-rhel","hapee-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"harpaitalia"},{"field":"Microsoft.Compute/imageOffer","in":["mcuboenergy","yg","yougreen_trial"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hcl-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["hcl17cp1104"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"heimdall-data"},{"field":"Microsoft.Compute/imageOffer","in":["heimdall-data"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"help-systems"},{"field":"Microsoft.Compute/imageOffer","in":["goanywheremftubuntulinux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hewlett-packard"},{"field":"Microsoft.Compute/imageOffer","in":["hpe-helion-stackato"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hillstone-networks"},{"field":"Microsoft.Compute/imageOffer","in":["cloudedge-virtual-ngfw-advanced-edition","cloudedge-virtual-ngfw-standard-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hortonworks"},{"field":"Microsoft.Compute/imageOffer","in":["cloudbreak-for-hortonworks-data-platform","hortonworks-sandbox"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hitachi-solutions"},{"field":"Microsoft.Compute/imageOffer","in":["credeon-sfs-and-kms-for-sharepoint-online","credeonsecurefull-textsearch1_0"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hpe"},{"field":"Microsoft.Compute/imageOffer","in":["storeoncevsa"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"huawei"},{"field":"Microsoft.Compute/imageOffer","in":["euleros-v2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hyperglance"},{"field":"Microsoft.Compute/imageOffer","in":["hyperglance-dynamic-topology"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hypergrid"},{"field":"Microsoft.Compute/imageOffer","in":["hyperform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hytrust"},{"field":"Microsoft.Compute/imageOffer","in":["hytrust-keycontrol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ibm"},{"field":"Microsoft.Compute/imageOffer","in":["ibm-security-guardium-multi-cloud","qradar_security_analytics"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"iaansys"},{"field":"Microsoft.Compute/imageOffer","in":["iaansys-magento"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"iboss"},{"field":"Microsoft.Compute/imageOffer","in":["iboss-14600-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"imaginecommunications"},{"field":"Microsoft.Compute/imageOffer","in":["cloudxtream-cdvr","cloudxtream-dai-vms","telurio-aim"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"imperva"},{"field":"Microsoft.Compute/imageOffer","in":["imperva-dam-v13","securesphere-waf","securesphere-waf-for-azr","securesphere-waf-v12","securesphere-waf-v13"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"infoblox"},{"field":"Microsoft.Compute/imageOffer","in":["infoblox-vnios-te-v1420"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"informatica"},{"field":"Microsoft.Compute/imageOffer","in":["bdm10-1-1-u2","big-data-management-10-2","big-data-management-10-2-1","data_accelerator_for_azure_byol","data_quality_10_1_1_rhel_7_3_byol","eic","ics-byol","ics-payg-ubuntu","platform_10_1_1_multi_node_domain_rhel-7-3_byol","platform_10_2_hf1_domain_rhel-7-3_byol","powercenter-v10-domain-image-ubuntu14-04-3","powercenter-v10-update1-domain-image-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"informationbuilders"},{"field":"Microsoft.Compute/imageOffer","in":["iway-big-data-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ingrammicro"},{"field":"Microsoft.Compute/imageOffer","in":["ingrammicroensimcentostrial"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intel"},{"field":"Microsoft.Compute/imageOffer","in":["lustre-cloud-edition-gs-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intel-bigdl"},{"field":"Microsoft.Compute/imageOffer","in":["bigdl-0815","bigdl__vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intel-fpga"},{"field":"Microsoft.Compute/imageOffer","in":["quartus_pro_opencl_sdk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intellicus-technologies-pvt-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["intellicus_bi_server_100_user_linux","intellicus_bi_server_10_user_linux","intellicus_bi_server_25_user_linux","intellicus_bi_server_50_user_linux","intellicus_bi_server_5_user_linux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intersystems"},{"field":"Microsoft.Compute/imageOffer","in":["intersystems-iris-single-node"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intigua"},{"field":"Microsoft.Compute/imageOffer","in":["intigua-agent-manager-3_7_0-trial","intigua-agent-manager-trial"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"iquest"},{"field":"Microsoft.Compute/imageOffer","in":["keyhub"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ishlangu-load-balancer-adc"},{"field":"Microsoft.Compute/imageOffer","in":["ishlangu-load-balancer-byol","ishlangu-load-balancer-is10","ishlangu-load-balancer-is100","ishlangu-load-balancer-is1000","ishlangu-load-balancer-is200","ishlangu-load-balancer-is5000","ishlangu-load-balancer-isbfg"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"issp-corporation"},{"field":"Microsoft.Compute/imageOffer","in":["ispocr"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"itelios"},{"field":"Microsoft.Compute/imageOffer","in":["magento2-on-zendserver"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jamcracker"},{"field":"Microsoft.Compute/imageOffer","in":["4632d5b4-feb0-4332-8452-f2e66133672f","jamcracker-cloudanalytics","jamcracker-cloudanalytics-version4","jamcracker-cloudanalytics-version5","jamcracker-csb-service-provider","jamcracker-csb-serviceprovider","jamcracker-csb-standard","jamcracker-csb-standard-v3","jamcracker-csb-standard-version4","jamcracker-hybrid-cloud-management-version4","jamcracker_cloud_control_appliance_version4","jsdnapp_csb_serviceprovider-version4","jsdnapp_hybrid","jsdnapp_hybrid_v3"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jedox"},{"field":"Microsoft.Compute/imageOffer","in":["jedox-for-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jelastic"},{"field":"Microsoft.Compute/imageOffer","in":["jelastic-hybrid-paas-standard"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jetnexus"},{"field":"Microsoft.Compute/imageOffer","in":["dvwa","jetnexus-application-load-balancer","jetnexus-global-load-balancer","jetnexus-waf","zap"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jetware-srl"},{"field":"Microsoft.Compute/imageOffer","in":["caffe2","caffe_python_cpu","caffe_python_gpu","cockroachdb","lamp_optimized","lemp7_optimized","memcached","mongodb","mxnet_python","mysql","nodejs_nginx","percona_mongodb","percona_mysql","postgresql","pytorch","pytorch_cuda_notebook","pytorch_cuda_production","redis","redmine","tensorflow_cpu_notebook","tensorflow_cpu_production","tensorflow_cuda_notebook","tensorflow_cuda_production","tensorflow_python","theano_python","wordpress4_lemp7"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jitterbit_integration"},{"field":"Microsoft.Compute/imageOffer","in":["jitterbit-harmony-agent"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jm-technology-inc"},{"field":"Microsoft.Compute/imageOffer","in":["smart-gateway"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"juniper-networks"},{"field":"Microsoft.Compute/imageOffer","in":["vmx-services-gateway-byol","vmx-services-gateway-byol-soltemp","vmx-virtual-router","vsrx-next-generation-firewall","vsrx-next-generation-firewall-payg","vsrx-next-generation-firewall-solution-templ-payg","vsrx-next-generation-firewall-solution-template"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kaazing"},{"field":"Microsoft.Compute/imageOffer","in":["kaazing-kwic","kaazing-vpa"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kali-linux"},{"field":"Microsoft.Compute/imageOffer","in":["kali-linux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kemptech"},{"field":"Microsoft.Compute/imageOffer","in":["kemp360central-byol","vlm-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kinetica"},{"field":"Microsoft.Compute/imageOffer","in":["kineticadbbyol","kineticadbpayasyougo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kaspersky_lab"},{"field":"Microsoft.Compute/imageOffer","in":["kaspersky_secure_mail_gateway"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"knime"},{"field":"Microsoft.Compute/imageOffer","in":["knime-server-5-user_4-4-0","knime-server-byol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"krypc-technologies-pvt-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["krypccore"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"leap-orbit"},{"field":"Microsoft.Compute/imageOffer","in":["leaporbitstoragebackedsftp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"leostream-corporation"},{"field":"Microsoft.Compute/imageOffer","in":["connection-broker"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"liquid-files"},{"field":"Microsoft.Compute/imageOffer","in":["liquidfiles"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"liquidware"},{"field":"Microsoft.Compute/imageOffer","in":["stratusphere"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"literatu"},{"field":"Microsoft.Compute/imageOffer","in":["literatu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"loadbalancer"},{"field":"Microsoft.Compute/imageOffer","in":["loadbalancer-org-load-balancer-for-azure","loadbalancer-org-load-balancer-for-azure-byol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"logsign"},{"field":"Microsoft.Compute/imageOffer","in":["logsignfocus"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"logtrust"},{"field":"Microsoft.Compute/imageOffer","in":["logtrust-log-management"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"looker"},{"field":"Microsoft.Compute/imageOffer","in":["looker-analytics-platform","looker-analytics-platform-326","looker-analytics-platform-5_6"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"lti-lt-infotech"},{"field":"Microsoft.Compute/imageOffer","in":["trade-finance-blockchain"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"luminate-security"},{"field":"Microsoft.Compute/imageOffer","in":["luminate-connector"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mapr-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["mapr52-base-dev","mapr60-base","mapr60-sandbox"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mariadb"},{"field":"Microsoft.Compute/imageOffer","in":["mariadb-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"marklogic"},{"field":"Microsoft.Compute/imageOffer","in":["marklogic-9-byol","marklogic-developer-9"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"massiveanalytic-"},{"field":"Microsoft.Compute/imageOffer","in":["oscarap"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mathworks-inc"},{"field":"Microsoft.Compute/imageOffer","in":["matlab-ref-arch-18a-v1-linux-disk","mps-ref-arch-18a-v1-linux-disk2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"matillion"},{"field":"Microsoft.Compute/imageOffer","in":["matillion-etl-snowflake"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mavinglobal"},{"field":"Microsoft.Compute/imageOffer","in":["mavin-business-trial","mavin-enterprise-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"meanio"},{"field":"Microsoft.Compute/imageOffer","in":["gitlab-enterprise-ready","linnovate-open-source-sla-pro","mean-machine-20","openideal3","redash"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"media3-technologies-llc"},{"field":"Microsoft.Compute/imageOffer","in":["cpan1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"memsql"},{"field":"Microsoft.Compute/imageOffer","in":["memsql-community-single-vm","memsql-enterprise-single-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mendix"},{"field":"Microsoft.Compute/imageOffer","in":["mendix-docker","mendix-pro"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mfe_azure"},{"field":"Microsoft.Compute/imageOffer","in":["atd-mcafee","mcafee_vnsp_controller_for_azure","mcafee_vnsp_for_azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm","linux-data-science-vm-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-aks"},{"field":"Microsoft.Compute/imageOffer","in":["aks"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"micro-focus"},{"field":"Microsoft.Compute/imageOffer","in":["replication_environment"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-avere"},{"field":"Microsoft.Compute/imageOffer","in":["vfxt"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-azure-batch"},{"field":"Microsoft.Compute/imageOffer","in":["centos-container","centos-container-rdma","ubuntu-server-container","ubuntu-server-container-rdma"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-azure-compute"},{"field":"Microsoft.Compute/imageOffer","in":["azureconfidentialcompute"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["azureml","linux-data-science-vm-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftAzureSiteRecovery"},{"field":"Microsoft.Compute/imageOffer","in":["ASR-Hydration-VMs"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftOSTC"},{"field":"Microsoft.Compute/imageOffer","in":["FreeBSD"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","in":["MLServer-CentOS","MLServer-RedHat","MLServer-Ubuntu","RServer-CentOS","RServer-Ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"midfin"},{"field":"Microsoft.Compute/imageOffer","in":["mf_neon_cgw"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"midvision"},{"field":"Microsoft.Compute/imageOffer","in":["ibm-datapower-virtual-edition-75","ibm-datapower-virtual-edition-76","ibm-datapower-virtual-edition-77","ibm-http-server","ibm-websphere-portal-server-85","ibm-websphere-portal-server-90","websphere-application-server-be","websphere-application-server-be-80","websphere-application-server-be-85","websphere-application-server-be-90","websphere-application-server-be-and-mq","websphere-application-server-lp","websphere-application-server-lp-16","websphere-application-server-lp-17","websphere-application-server-lp-18","websphere-application-server-nde","websphere-application-server-nde-80","websphere-application-server-nde-85","websphere-application-server-nde-90","websphere-mq","websphere-mq-75","websphere-mq-90","websphere-mq-91"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"miraclelinux"},{"field":"Microsoft.Compute/imageOffer","in":["asianux-server-4-sp5","asianux-server-4-sp6","asianux-server-4-sp7","asianux-server-7-sp1","asianux-server-7-sp2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"miri-infotech-pvt-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["wordpress"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mobilab"},{"field":"Microsoft.Compute/imageOffer","in":["magento-wirecard-checkout"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"moogsoft"},{"field":"Microsoft.Compute/imageOffer","in":["moogsoft-aiops"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"moviemasher"},{"field":"Microsoft.Compute/imageOffer","in":["moviemasher"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","in":["SQL2017-RHEL7","SQL2017-RHEL73","SQL2017-SLES12SP2","SQL2017-Ubuntu1604","SQL2019-RHEL7","SQL2019-Ubuntu1604"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mtnfog"},{"field":"Microsoft.Compute/imageOffer","in":["idyl-e3-entity-extraction-engine","prose-sentence-extraction-engine","renku-language-detection-engine","sonnet-tokenization-engine"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mxhero"},{"field":"Microsoft.Compute/imageOffer","in":["mail2cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"my-com"},{"field":"Microsoft.Compute/imageOffer","in":["tarantool"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"narrativescience"},{"field":"Microsoft.Compute/imageOffer","in":["narratives-for-power-bi"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nasuni"},{"field":"Microsoft.Compute/imageOffer","in":["nasuni-nmc","nasuni_edge_appliance"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ncbi"},{"field":"Microsoft.Compute/imageOffer","in":["ncbi-blast-2-3-0","ncbi-free-2-2-31"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nebbiolo-technologies-inc"},{"field":"Microsoft.Compute/imageOffer","in":["fog-system-manager","fogsm_basic"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"neo4j"},{"field":"Microsoft.Compute/imageOffer","in":["neo4j-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netapp"},{"field":"Microsoft.Compute/imageOffer","in":["netapp-altavault-cloud-integrated-storage-solution","netapp-oncommand-cloud-manager","netapp-ontap-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netgate"},{"field":"Microsoft.Compute/imageOffer","in":["netgate-pfsense-azure-fw-vpn-router"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netiq"},{"field":"Microsoft.Compute/imageOffer","in":["replication_environment"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netscout"},{"field":"Microsoft.Compute/imageOffer","in":["netscout_virtual_ngeniusone_with_vscout","netscout_vstream"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netmail"},{"field":"Microsoft.Compute/imageOffer","in":["netmail-search"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netsweeper"},{"field":"Microsoft.Compute/imageOffer","in":["netsweeper6-0-6"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netx"},{"field":"Microsoft.Compute/imageOffer","in":["simplehelp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"neusoft-neteye"},{"field":"Microsoft.Compute/imageOffer","in":["neusoft-nisg-va-v1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nginxinc"},{"field":"Microsoft.Compute/imageOffer","in":["nginx-plus-v1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nicepeopleatwork"},{"field":"Microsoft.Compute/imageOffer","in":["youzana"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nodejsapi"},{"field":"Microsoft.Compute/imageOffer","in":["node-js-api"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"noobaa"},{"field":"Microsoft.Compute/imageOffer","in":["noobaa-hybrid-s3-archive-05","noobaa-multi-cloud-deduplication"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"northbridge-secure"},{"field":"Microsoft.Compute/imageOffer","in":["netconnect1","netconnectx"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nubeva-inc"},{"field":"Microsoft.Compute/imageOffer","in":["controller","test"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nuco-networks"},{"field":"Microsoft.Compute/imageOffer","in":["aionnode"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nuxeo"},{"field":"Microsoft.Compute/imageOffer","in":["nuxeo-6-lts","nuxeo-lts"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nvidia"},{"field":"Microsoft.Compute/imageOffer","in":["ngc_azure_17_11"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"o2mc-real-time-data-platform"},{"field":"Microsoft.Compute/imageOffer","in":["o2mc-platform-app"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"oceanblue-cloud"},{"field":"Microsoft.Compute/imageOffer","in":["obc-sdwan-solutions"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"omega-software"},{"field":"Microsoft.Compute/imageOffer","in":["ods_datastage"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"onyx-point-inc"},{"field":"Microsoft.Compute/imageOffer","in":["op-bnf-v1","op-bnf1_6-v1","op-bpnifi-v1","op-bpnifi16-v1","op-scc-v1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"onapsis"},{"field":"Microsoft.Compute/imageOffer","in":["osp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"op5"},{"field":"Microsoft.Compute/imageOffer","in":["op5-monitor"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"opencell"},{"field":"Microsoft.Compute/imageOffer","in":["meveo","meveo403sp2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","CentOS-CI","CentOS-HPC","CentOS-LVM","CentOS-SRIOV"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"openvpn"},{"field":"Microsoft.Compute/imageOffer","in":["openvpnas"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","in":["Oracle-Database-Ee","Oracle-Database-Se","Oracle-Linux","Oracle-WebLogic-Server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"orientdb"},{"field":"Microsoft.Compute/imageOffer","in":["orientdb-community-edition","orientdb-community-edition-2_2","orientdb-enterprise-edition-2_2","orientdb-enterprise-edition-2_2_17"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"osirium-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["osirium-pxm-platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"osnexus"},{"field":"Microsoft.Compute/imageOffer","in":["quantastorvsav4"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"paloaltonetworks"},{"field":"Microsoft.Compute/imageOffer","in":["panorama","vmseries1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"panzura-file-system"},{"field":"Microsoft.Compute/imageOffer","in":["azura-freedom-filer-v7110","panzura-cloud-filer","panzura-freedom-filer-7140-13222","panzura-freedom-filer-716-13549","panzura-freedom-filer-v7020"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"parasoft"},{"field":"Microsoft.Compute/imageOffer","in":["parasoft-service-virtualization"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"passlogy"},{"field":"Microsoft.Compute/imageOffer","in":["passlogic"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"penta-security-systems-inc"},{"field":"Microsoft.Compute/imageOffer","in":["wapples"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"percona"},{"field":"Microsoft.Compute/imageOffer","in":["percona-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"postgres-pro"},{"field":"Microsoft.Compute/imageOffer","in":["postgres-pro-enterprise","postgres-pro-enterprise-10","postgres-pro-standard","postgres-pro-standard-10"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"plesk"},{"field":"Microsoft.Compute/imageOffer","in":["plesk-onyx-linux","solution-server-business","solution-server-wordpress"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"prestashop"},{"field":"Microsoft.Compute/imageOffer","in":["prestashop16-lamp","ubuntu-base-for-prestashop"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"prime-strategy"},{"field":"Microsoft.Compute/imageOffer","in":["kusanagi-77"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","in":["pivotal-gpdb-vm","pivotal-greenplum-images","pivotal-ops-manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"process-one"},{"field":"Microsoft.Compute/imageOffer","in":["ejabberd-community-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"profecia"},{"field":"Microsoft.Compute/imageOffer","in":["full_disk_encryption_vm","project_tools_vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"progelspa"},{"field":"Microsoft.Compute/imageOffer","in":["libra-esva-antispam"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ptsecurity"},{"field":"Microsoft.Compute/imageOffer","in":["ptaf-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pulse-secure"},{"field":"Microsoft.Compute/imageOffer","in":["pulse-connect-secure-vm","pulse-virtual-traffic-manager","pulse-virtual-traffic-manager-with-waf","pulse-virtual-traffic-manager-with-waf2","pulse-virtual-traffic-manager2","pulse-virtual-web-application-firewall","pulse-virtual-web-application-firewall2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"PuppetLabs"},{"field":"Microsoft.Compute/imageOffer","in":["PuppetEnterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"puppet"},{"field":"Microsoft.Compute/imageOffer","in":["puppet-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pydio"},{"field":"Microsoft.Compute/imageOffer","in":["pydio-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"qore-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["qorus"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"qualysguard"},{"field":"Microsoft.Compute/imageOffer","in":["qualys-virtual-firewall-appliance","qualys-virtual-scanner-v23b","qualys-virtual-scanner-v24"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"quasardb"},{"field":"Microsoft.Compute/imageOffer","in":["quasardb"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"qubole-inc"},{"field":"Microsoft.Compute/imageOffer","in":["qubole-data-service"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"quest"},{"field":"Microsoft.Compute/imageOffer","in":["fve"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"racknap"},{"field":"Microsoft.Compute/imageOffer","in":["racknap-server","racknap-server-linux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"radware"},{"field":"Microsoft.Compute/imageOffer","in":["radware-alteon-va"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"radiant-logic"},{"field":"Microsoft.Compute/imageOffer","in":["radiantone-vms"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rancher"},{"field":"Microsoft.Compute/imageOffer","in":["rancheros"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rapid7"},{"field":"Microsoft.Compute/imageOffer","in":["nexpose-scan-engine","rapid7-vm-console"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rapidminer"},{"field":"Microsoft.Compute/imageOffer","in":["rapidminer_server_75","rapidminer_server_76","rapidminer_server_80","rapidminer_server_81"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"realm"},{"field":"Microsoft.Compute/imageOffer","in":["realm-mobile-platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"reblaze"},{"field":"Microsoft.Compute/imageOffer","in":["rbzr-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","RHEL","rhel-byos","rhel-ocp-marketplace","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HANA"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"relevance-lab"},{"field":"Microsoft.Compute/imageOffer","in":["rlcatalyst"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"remotelearner"},{"field":"Microsoft.Compute/imageOffer","in":["fully-supported-moodle"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"revolution-analytics"},{"field":"Microsoft.Compute/imageOffer","in":["revolution-r-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RightScaleLinux"},{"field":"Microsoft.Compute/imageOffer","in":["RightImage-CentOS","RightImage-Ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RiverbedTechnology"},{"field":"Microsoft.Compute/imageOffer","in":["steelapp_traffic_manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"riverbed"},{"field":"Microsoft.Compute/imageOffer","in":["riverbed-sccm-5-5-1","riverbed-steelcentral-appinternals","riverbed-steelhead-9-2","riverbed-steelhead-9-5-0","riverbed-steelhead-9-6-0","riverbed_steelconnect_gw","riverbed_steelconnect_sh","steelapp_traffic_manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rocketsoftware"},{"field":"Microsoft.Compute/imageOffer","in":["rocket-discover"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rsa-security-llc"},{"field":"Microsoft.Compute/imageOffer","in":["rsa-nw-azure-arch","rsa-nw-azure-broker","rsa-nw-azure-con","rsa-nw-azure-esa","rsa-nw-azure-ldec","rsa-nw-azure-vlc","rsa-nw-suite-11","rsa-nw-suite-11-1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rsk-labs"},{"field":"Microsoft.Compute/imageOffer","in":["rsk-bamboo-beta-node","rsk-node-orchid"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"saama"},{"field":"Microsoft.Compute/imageOffer","in":["fluidanalyticsengine","insurancefraudanalytics","realworldevidence"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"saltstack"},{"field":"Microsoft.Compute/imageOffer","in":["centos65saltstackenterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"scalearc"},{"field":"Microsoft.Compute/imageOffer","in":["scalearc-for-mysql-paygo","scalearc-for-sql-server-pay-go","scalearc_mysql-server","scalearc_sql_server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"scalegrid"},{"field":"Microsoft.Compute/imageOffer","in":["centos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sap"},{"field":"Microsoft.Compute/imageOffer","in":["hanaexpress"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"scality"},{"field":"Microsoft.Compute/imageOffer","in":["scalityconnecthourly"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"secureworks"},{"field":"Microsoft.Compute/imageOffer","in":["scwx-azure-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"shadow-soft"},{"field":"Microsoft.Compute/imageOffer","in":["icinga","icinga2-5","icinga2-7"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"signal-sciences"},{"field":"Microsoft.Compute/imageOffer","in":["signalscienceswpp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sightapps"},{"field":"Microsoft.Compute/imageOffer","in":["sightapps"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"silver-peak-systems"},{"field":"Microsoft.Compute/imageOffer","in":["silver_peak_edgeconnect","silver_peak_vx"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"simmachinesinc"},{"field":"Microsoft.Compute/imageOffer","in":["simmachines_vm_v2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sinefa"},{"field":"Microsoft.Compute/imageOffer","in":["sinefa-probe"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"skyarc"},{"field":"Microsoft.Compute/imageOffer","in":["mt6","mta"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"smartmessage-autoflow"},{"field":"Microsoft.Compute/imageOffer","in":["martmessage-autoflow"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"snapt-adc"},{"field":"Microsoft.Compute/imageOffer","in":["snaptadc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"soasta"},{"field":"Microsoft.Compute/imageOffer","in":["cloudtest-lite"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"softnas"},{"field":"Microsoft.Compute/imageOffer","in":["cloud_dev","mp_ce","mp_ent","mp_nas_byol","mp_nas_ep","mp_nas_gp","mp_nas_hp","mp_plat","private_offerings","softnas-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"solanolabs"},{"field":"Microsoft.Compute/imageOffer","in":["solano-ci-private-beta"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"soha"},{"field":"Microsoft.Compute/imageOffer","in":["soha-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"solar-security"},{"field":"Microsoft.Compute/imageOffer","in":["solar-incode"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sonicwall-inc"},{"field":"Microsoft.Compute/imageOffer","in":["sonicwall-nsz-azure","waf"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sophos"},{"field":"Microsoft.Compute/imageOffer","in":["sophos-xg"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"spagobi"},{"field":"Microsoft.Compute/imageOffer","in":["spagobi"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"spacecurve"},{"field":"Microsoft.Compute/imageOffer","in":["spacecurve-quickstart"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"splunk"},{"field":"Microsoft.Compute/imageOffer","in":["splunk-enterprise-base-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"src-solution"},{"field":"Microsoft.Compute/imageOffer","in":["pilot-things-onem2m-smart-network"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sqlstream"},{"field":"Microsoft.Compute/imageOffer","in":["com"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sphere3d"},{"field":"Microsoft.Compute/imageOffer","in":["snapcloud-byol","snapcloud-standard"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stackato-platform-as-a-service"},{"field":"Microsoft.Compute/imageOffer","in":["activestate-stackato"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stackstorm"},{"field":"Microsoft.Compute/imageOffer","in":["stackstorm-2015-1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"startekfingerprintmatch"},{"field":"Microsoft.Compute/imageOffer","in":["bioserver"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"steelhive"},{"field":"Microsoft.Compute/imageOffer","in":["steelhive_carbon"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stonefly"},{"field":"Microsoft.Compute/imageOffer","in":["stonefly-cloud-drive"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stormshield"},{"field":"Microsoft.Compute/imageOffer","in":["stormshield-network-security-for-cloud","stormshield-network-security-for-cloud-xl"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"storreduce"},{"field":"Microsoft.Compute/imageOffer","in":["storreduce"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stratumn"},{"field":"Microsoft.Compute/imageOffer","in":["indigo-node"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"streamsets"},{"field":"Microsoft.Compute/imageOffer","in":["streamsets-data-collector"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"striim"},{"field":"Microsoft.Compute/imageOffer","in":["integrationforsqlserveronazure","integrationtoazurestorage","integrationtoeventhub","integrationtohdinsight"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["openSUSE-Leap","SLES","SLES-BYOS","SLES-HPC","SLES-HPC-Priority","SLES-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-SAPCAL","SLES-Standard","SUSE-CaaSP-Admin-BYOS","SUSE-CaaSP-Cluster-BYOS","SUSE-Manager-Proxy-BYOS","SUSE-Manager-Server-BYOS"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"symantectest1"},{"field":"Microsoft.Compute/imageOffer","in":["cwpsazure-beta-01"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"synack-inc"},{"field":"Microsoft.Compute/imageOffer","in":["synack-crowd-security-intelligence"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"synechron-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["blockchain_tradefinance_quorum"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"syte"},{"field":"Microsoft.Compute/imageOffer","in":["syteoffer"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tactic"},{"field":"Microsoft.Compute/imageOffer","in":["tactic-workflow-v001"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"talari-networks"},{"field":"Microsoft.Compute/imageOffer","in":["talari-networks-virtual-appliance"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"talena-inc"},{"field":"Microsoft.Compute/imageOffer","in":["talena_inc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tata_communications"},{"field":"Microsoft.Compute/imageOffer","in":["netfoundry_cloud_gateway"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tavendo"},{"field":"Microsoft.Compute/imageOffer","in":["crossbar_on_azure_ubuntu1404"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"techdivision"},{"field":"Microsoft.Compute/imageOffer","in":["appserver-io-pe"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"techlatest"},{"field":"Microsoft.Compute/imageOffer","in":["ethereumdevkit","rippledevelopersuit"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"telepat"},{"field":"Microsoft.Compute/imageOffer","in":["free"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tenable"},{"field":"Microsoft.Compute/imageOffer","in":["tenable-nessus-6-byol","tenable-nessus-professional","tenablecorenessus","tenablecorewas"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"teradata"},{"field":"Microsoft.Compute/imageOffer","in":["teradata-data-mover","teradata-data-mover-agent","teradata-data-mover-intellisphere","teradata-data-stream-controller","teradata-database-1510","teradata-database-1510-byol","teradata-database-1510-intellisphere","teradata-database-1510-v2","teradata-database-1610-intellisphere","teradata-database-1610-v2","teradata-database-1620","teradata-database-1620-byol","teradata-database-1620-intellisphere","teradata-database-enterprise","teradata-database-v1610","teradata-database-v1610-byol","teradata-ecosystem-manager","teradata-querygrid-manager","teradata-querygrid-manager-intellisphere","teradata-rest-services","teradata-server-management","teradata-viewpoint","teradata-viewpoint-intellisphere"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"thales-vormetric"},{"field":"Microsoft.Compute/imageOffer","in":["ciphertrust-ckm","vormetric-dsm","vormetric-dsm-6-1-0","vormetric-tokenization-server","vts-2_2_0_2604"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"things-board"},{"field":"Microsoft.Compute/imageOffer","in":["tb-pe-cassandra"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"thoughtspot-inc"},{"field":"Microsoft.Compute/imageOffer","in":["thoughtspotvirtualmachine"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tibco-software"},{"field":"Microsoft.Compute/imageOffer","in":["grid-server-engine"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tig"},{"field":"Microsoft.Compute/imageOffer","in":["backup-as-a-service"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tigergraph"},{"field":"Microsoft.Compute/imageOffer","in":["tigergraph"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tmaxsoft"},{"field":"Microsoft.Compute/imageOffer","in":["tmax-jeusee","tmax-jeusse","tmax-webtobse"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tokyosystemhouse"},{"field":"Microsoft.Compute/imageOffer","in":["osscobol151j-pg961-centos72"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"torusware"},{"field":"Microsoft.Compute/imageOffer","in":["speedus-lite-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"totemo"},{"field":"Microsoft.Compute/imageOffer","in":["totemo-azr-tm6"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"townsend-security"},{"field":"Microsoft.Compute/imageOffer","in":["alliance-key-manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"trendmicro"},{"field":"Microsoft.Compute/imageOffer","in":["deep-security-vm","deep-security-vm-byol","iot-security-sdk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"truestack"},{"field":"Microsoft.Compute/imageOffer","in":["tsdc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tsa-public-service"},{"field":"Microsoft.Compute/imageOffer","in":["ckan-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tunnelbiz"},{"field":"Microsoft.Compute/imageOffer","in":["centos70-min","centos7optimizwithwordpress","centos7phpoptimizing","centos7phpoptimizingnginx","centos7phpoptimizwlaravel","centos7phpoptimizwosticket","centos7webserverwithwaf","centos7withaspdotnetcore2apache","centos7withjoomla","debian_web_server","fedora","fusio","linuxwithlimesurvey","networkmonitoringsystem","rimauwaf_cloud","ubuntu_server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"twistlock"},{"field":"Microsoft.Compute/imageOffer","in":["twistlock"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"typesafe"},{"field":"Microsoft.Compute/imageOffer","in":["typesafe-reactive-maps-demo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ubeeko"},{"field":"Microsoft.Compute/imageOffer","in":["hfactory-tools-for-hdinsight","hfactory-tools-sandbox"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ubercloud"},{"field":"Microsoft.Compute/imageOffer","in":["ansys-17-2-fluids-structures","ansys_182_test","comsol-multiphysics-v5-2","openfoam-v2dot3-centos-v6","openfoam-v3dot0","star-ccm-v10-04","star-ccm-v10-06-heeds-mdo-v2015","star-ccm-v12-00"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ulex"},{"field":"Microsoft.Compute/imageOffer","in":["voximal"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"unifi-software"},{"field":"Microsoft.Compute/imageOffer","in":["unifi-data-catalog","unifi-dataplatform-2-3-3-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"unitrends"},{"field":"Microsoft.Compute/imageOffer","in":["unitrends-enterprise-backup-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"usp"},{"field":"Microsoft.Compute/imageOffer","in":["unified-streaming-vod-standard"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"varnish"},{"field":"Microsoft.Compute/imageOffer","in":["varnish-cache_","varnish-custom-statistics","varnish-plus-administration-and-statistics","varnish-plus-caching-engine-4"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vaultive-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cloud-security-platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vbot"},{"field":"Microsoft.Compute/imageOffer","in":["vbot"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"velocloud"},{"field":"Microsoft.Compute/imageOffer","in":["velocloud-virtual-edge","velocloud-virtual-edge-3x"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vidispine"},{"field":"Microsoft.Compute/imageOffer","in":["vidispine-content-management"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"veritas"},{"field":"Microsoft.Compute/imageOffer","in":["cloudpoint-2-0-0","veritas-resiliency-platform-vhd-offer"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"veeam"},{"field":"Microsoft.Compute/imageOffer","in":["veeamhubimage"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vigyanlabs-innovations-pvt-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["ipm-plus-energy-saver"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"viptela"},{"field":"Microsoft.Compute/imageOffer","in":["viptela-vedge-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vizixiotplatformretail001"},{"field":"Microsoft.Compute/imageOffer","in":["vizix-iot-platform-retail-005"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vmturbo"},{"field":"Microsoft.Compute/imageOffer","in":["turbonomic","vmturbo64-opsmgr-5_3"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vte"},{"field":"Microsoft.Compute/imageOffer","in":["slashdb"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vu-llc"},{"field":"Microsoft.Compute/imageOffer","in":["vu-app-server","vu-facerecogn","vu-fraudanalysis","vu-secureonboarding"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"wallarm"},{"field":"Microsoft.Compute/imageOffer","in":["wallarm-ng-waf-offer-1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"wallix"},{"field":"Microsoft.Compute/imageOffer","in":["wallix-wabsuite"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"watchguard-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["vm-firebox-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"waves"},{"field":"Microsoft.Compute/imageOffer","in":["waves"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"websense-apmailpe"},{"field":"Microsoft.Compute/imageOffer","in":["ap-data-email-gateway","forcepoint-email-security-85beta","triton-ap-data"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"wmspanel"},{"field":"Microsoft.Compute/imageOffer","in":["nimble-streamer-centos","nimble-streamer-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"wowza"},{"field":"Microsoft.Compute/imageOffer","in":["wowzastreamingengine"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"xfinityinc"},{"field":"Microsoft.Compute/imageOffer","in":["d3view-v5"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"xtremedata"},{"field":"Microsoft.Compute/imageOffer","in":["dbx"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"yellowfin"},{"field":"Microsoft.Compute/imageOffer","in":["yellowfin-for-azure-byol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"xyzrd-group-ou"},{"field":"Microsoft.Compute/imageOffer","in":["c73-zultys-mxvirtual"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"your-shop-online"},{"field":"Microsoft.Compute/imageOffer","in":["herefordshire-enterprise-platform-drupal-7","xenofile"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"zend"},{"field":"Microsoft.Compute/imageOffer","in":["php-56-zend-server","php-zend-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"z1"},{"field":"Microsoft.Compute/imageOffer","in":["z1-securehub"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"zerodown_software"},{"field":"Microsoft.Compute/imageOffer","in":["bcaasforazure","stackbcaas"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"zoomdata"},{"field":"Microsoft.Compute/imageOffer","in":["zoomdata-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"zscaler"},{"field":"Microsoft.Compute/imageOffer","in":["zscaler-private-access"]}]}]}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/566405fe94cbf731","type":"Microsoft.Authorization/policyDefinitions","name":"566405fe94cbf731"},{"properties":{"displayName":"nrms-batch-require-user-subscription-mode_2.1","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T19:32:58.4608022Z","updatedBy":null,"updatedOn":null},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"},"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts/pools"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"tags[''NRMSVNetIntException'']","exists":"false"},{"value":"[resourceGroup().tags[''NRMSVNetIntException'']]","equals":""},{"field":"tags[''autopilotcluster'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotcluster'']]","equals":""},{"field":"tags[''autopilotenvironment'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotenvironment'']]","equals":""},{"anyOf":[{"field":"Microsoft.Batch/batchAccounts/pools/networkConfiguration.subnetId","exists":"false"},{"field":"Microsoft.Batch/batchAccounts/pools/networkConfiguration.subnetId","in":["null",""]}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/5aac1290d24c772d","type":"Microsoft.Authorization/policyDefinitions","name":"5aac1290d24c772d"},{"properties":{"displayName":"nrms-nsg-rule-101_1.2","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-07-09T18:15:18.6642999Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"},"defaultValue":""},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"},"defaultValue":[]},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"allowedValues":["NA","NRMSException","SkipNRMSCorp","nrmsskipcorpnetsaw","SkipNRMSSAW","SkipNRMSDatabricks","SkipNRMSRDPSSH","SkipNRMSMgmt","SkipNRMSHigh","SkipNRMSVNet","SkipNRMSLoadBal","SkipNRMSDB","SkipNRMSMedium"],"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"[parameters(''sourceValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","contains":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","in":["Any","*"]},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/5d9c8a259a63a29b","type":"Microsoft.Authorization/policyDefinitions","name":"5d9c8a259a63a29b"},{"properties":{"displayName":"geneva - monitoring extension and azsecpack append policy for vmss_1.0","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-07-12T00:29:53.2880644Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"anyOf":[{"field":"Microsoft.Compute/VirtualMachineScaleSets/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"}]},{"field":"Microsoft.Compute/VirtualMachineScaleSets/virtualMachineProfile","exists":"true"},{"field":"Microsoft.Compute/VirtualMachineScaleSets/extensionProfile.extensions[*].type","notEquals":"GenevaMonitoring"}]},"then":{"effect":"append","details":[{"field":"Microsoft.Compute/VirtualMachineScaleSets/extensionProfile.extensions[*]","value":{"name":"Microsoft.Azure.Geneva.GenevaMonitoring","properties":{"publisher":"Microsoft.Azure.Geneva","type":"GenevaMonitoring","typeHandlerVersion":"2.0","autoUpgradeMinorVersion":true,"settings":{}}}}]}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/5e6e7d4c3e34256b","type":"Microsoft.Authorization/policyDefinitions","name":"5e6e7d4c3e34256b"},{"properties":{"displayName":"nrms-warning-non-c+ai-security-rules_1.0","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-06-26T21:23:29.4182093Z","updatedBy":null,"updatedOn":null},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"},"priorities":{"type":"Array","metadata":{"displayName":"Rule - Priority","description":"List of Rule Priority Numbers reserved for Security"}},"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups/securityRules"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","In":"[parameters(''priorities'')]"},{"field":"location","In":"[parameters(''allowedLocations'')]"},{"allOf":[{"not":{"field":"name","contains":"Cleanuptool"}},{"not":{"field":"name","contains":"NRMS-Rule-"}}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/6221d088cd1bcdc3","type":"Microsoft.Authorization/policyDefinitions","name":"6221d088cd1bcdc3"},{"properties":{"displayName":"nrms-warning-non-c+ai-security-rules_1.3","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T19:33:58.9010954Z","updatedBy":null,"updatedOn":null},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"},"priorities":{"type":"Array","metadata":{"displayName":"Rule - Priority","description":"List of Rule Priority Numbers reserved for Security"}},"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups/securityRules"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","In":"[parameters(''priorities'')]"},{"field":"location","In":"[parameters(''allowedLocations'')]"},{"field":"tags[''autopilotcluster'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotcluster'']]","equals":""},{"field":"tags[''autopilotenvironment'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotenvironment'']]","equals":""},{"allOf":[{"not":{"field":"name","contains":"Cleanuptool"}},{"not":{"field":"name","contains":"NRMS-Rule-"}}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/686f7311dc548f32","type":"Microsoft.Authorization/policyDefinitions","name":"686f7311dc548f32"},{"properties":{"displayName":"nrms-batch-require-user-subscription-mode_1.0","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-04-01T22:23:59.788546Z","updatedBy":null,"updatedOn":null},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"},"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"not":{"field":"Microsoft.Batch/batchAccounts/poolAllocationMode","notIn":["batchservice","null",""]}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/74c98b59a6341488","type":"Microsoft.Authorization/policyDefinitions","name":"74c98b59a6341488"},{"properties":{"displayName":"nrms-subnet-require-nsg_1.3","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T19:34:01.1631389Z","updatedBy":null,"updatedOn":null},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"},"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}}},"policyRule":{"if":{"allOf":[{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"tags[''SkipNRMSNSG'']","exists":"false"},{"value":"[resourceGroup().tags[''SkipNRMSNSG'']]","equals":""},{"field":"tags[''autopilotcluster'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotcluster'']]","equals":""},{"field":"tags[''autopilotenvironment'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotenvironment'']]","equals":""},{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Network/virtualNetworks/subnets"},{"not":{"field":"Microsoft.Network/virtualNetworks/subnets/networkSecurityGroup.id","notIn":["null",""]}}]},{"allOf":[{"field":"type","equals":"Microsoft.Network/virtualNetworks/subnets"},{"field":"Microsoft.Network/virtualNetworks/subnets/networkSecurityGroup.id","exists":"false"}]}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/789cfec91f9e1858","type":"Microsoft.Authorization/policyDefinitions","name":"789cfec91f9e1858"},{"properties":{"displayName":"nrms-nsg-rule-102_1.3","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:28:28.7454992Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"},"defaultValue":""},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"},"defaultValue":[]},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''tagname'')]]","equals":""},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[resourceGroup().tags[''SkipNRMSAll'']]","equals":""},{"field":"tags[''autopilotcluster'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotcluster'']]","equals":""},{"field":"tags[''autopilotenvironment'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotenvironment'']]","equals":""},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","contains":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","in":["Any","*"]},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/7c066e9166289efb","type":"Microsoft.Authorization/policyDefinitions","name":"7c066e9166289efb"},{"properties":{"displayName":"nrms-nsg-subnet_1.2","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:27:19.9099766Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"}},"resourceGroupExclusions":{"type":"Array","metadata":{"displayName":"Resource - Groups Excluded","description":"Any VNet in a resource group in this list - will be ignored."},"defaultValue":[]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/virtualNetworks/subnets"},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"},{"value":"[resourceGroup().name]","notIn":"[parameters(''resourceGroupExclusions'')]"},{"field":"name","notContains":"GatewaySubnet"},{"field":"tags[''SkipNRMSNSG'']","exists":"false"},{"value":"[resourceGroup().tags[''SkipNRMSNSG'']]","equals":""},{"field":"tags[''autopilotcluster'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotcluster'']]","equals":""},{"field":"tags[''autopilotenvironment'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotenvironment'']]","equals":""},{"anyOf":[{"not":{"field":"Microsoft.Network/virtualNetworks/subnets/networkSecurityGroup.id","notIn":["null",""]}},{"field":"Microsoft.Network/virtualNetworks/subnets/networkSecurityGroup.id","exists":"false"}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Authorization/policyAssignments","name":"DoesNotExistBecauseThisIsToCauseDeployment","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json","contentVersion":"1.0.0.1","parameters":{"fullSubnetName":{"type":"String"},"allowedLocations":{"type":"Array"}},"variables":{"vnetName":"[first(split(parameters(''fullSubnetName''),''/''))]","subnetName":"[last(split(parameters(''fullSubnetName''),''/''))]","rawNsgName":"[concat(variables(''vnetName''),''-'', - variables(''subnetName''), ''-NRMS'')]","nsgName":"[if(greater(length(variables(''rawNsgName'')),75),substring(variables(''rawNsgName''),0,75),variables(''rawNsgName''))]","nsgUpdateJson":{"networkSecurityGroup":{"id":"[resourceId(''Microsoft.Network/networkSecurityGroups'', - variables(''nsgName''))]"}}},"resources":[{"condition":"[contains(parameters(''allowedLocations''), - resourceGroup().location)]","type":"Microsoft.Network/networkSecurityGroups","name":"[variables(''nsgName'')]","apiVersion":"2018-03-01","location":"[resourceGroup().location]","tags":{"Creator":"Automatically - added by NRMS Azure Policy","NRMS-Info":"http://aka.ms/nrms","NRMS-Version":"2019-03-20"},"properties":{}},{"type":"Microsoft.Resources/deployments","name":"NRMS-Update-Subnet-Without-NSG","apiVersion":"2018-05-01","properties":{"mode":"Incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","resources":[{"apiVersion":"2018-11-01","type":"Microsoft.Network/virtualNetworks/subnets","name":"[parameters(''fullSubnetName'')]","location":"[resourceGroup().location]","properties":"[union(reference(resourceId(''Microsoft.Network/virtualNetworks/subnets'', - variables(''vnetName''), variables(''subnetName'')), ''2018-11-01''), variables(''nsgUpdateJson''))]"}]}},"dependsOn":["[variables(''nsgName'')]"]}]},"parameters":{"fullSubnetName":{"value":"[field(''fullName'')]"},"allowedLocations":{"value":"[parameters(''allowedLocations'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/852aeb0ee2c0a3a5","type":"Microsoft.Authorization/policyDefinitions","name":"852aeb0ee2c0a3a5"},{"properties":{"displayName":"nrms-nsg-rule-109_1.1","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-07-08T19:20:26.3856504Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"}},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"}},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"allowedValues":["NA","NRMSException","SkipNRMSCorp","nrmsskipcorpnetsaw","SkipNRMSSAW","SkipNRMSDatabricks","SkipNRMSRDPSSH","SkipNRMSMgmt","SkipNRMSHigh","SkipNRMSVNet","SkipNRMSLoadBal","SkipNRMSDB","SkipNRMSMedium"],"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"[parameters(''sourceValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","equals":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"Any"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/8657a5b3e83f5307","type":"Microsoft.Authorization/policyDefinitions","name":"8657a5b3e83f5307"},{"properties":{"displayName":"geneva - monitoring extension and azsecpack autoupdate policy for vmss_2.2","policyType":"Custom","mode":"Indexed","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-06-23T19:35:03.2379239Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"resourcetagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name","description":"Rule is not deployed if this tag exists on the Virtual - Machine"}},"resourcegrouptagname1":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name at the resource group level","description":"Rule is not deployed - if this tag exists on the Resource Group"}},"resourcegrouptagname2":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name at the resource group level","description":"Rule is not deployed - if this tag exists on the Resource Group"}},"subscriptiontagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name at the subscription level","description":"Rule is not deployed if - this tag exists on the Subscription"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''resourcetagname''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''resourcegrouptagname1'')]]","equals":""},{"value":"[resourceGroup().tags[parameters(''resourcegrouptagname2'')]]","equals":""},{"value":"[subscription().tags[parameters(''subscriptiontagname'')]]","equals":""},{"anyOf":[{"field":"Microsoft.Compute/VirtualMachineScaleSets/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"}]},{"field":"Microsoft.Compute/VirtualMachineScaleSets/osProfile.windowsConfiguration.provisionVMAgent","equals":"true"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/type","equals":"GenevaMonitoring"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.Azure.Geneva"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/enableAutomaticUpgrade","equals":"true"}]},{"allOf":[{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/type","equals":"VirtualMachineRuntimeService"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.Compute"}]}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmssName":{"type":"string"},"location":{"type":"string"}},"resources":[{"apiVersion":"2018-10-01","name":"[concat(parameters(''vmssName''), - ''/Microsoft.Azure.Geneva.GenevaMonitoring'')]","type":"Microsoft.Compute/virtualMachineScaleSets/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.Azure.Geneva","type":"GenevaMonitoring","typeHandlerVersion":"2.0","autoUpgradeMinorVersion":true,"enableAutomaticUpgrade":true,"settings":{}}}]},"parameters":{"vmssName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/884fc572e38f5fe9","type":"Microsoft.Authorization/policyDefinitions","name":"884fc572e38f5fe9"},{"properties":{"displayName":"nrms-kubernet-require-azure-networkplugin_1.0","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-06-26T21:23:24.5730438Z","updatedBy":null,"updatedOn":null},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"},"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"not":{"field":"Microsoft.ContainerService/managedClusters/networkProfile.networkPlugin","notIn":["null",""]}}]},{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"not":{"field":"Microsoft.ContainerService/managedClusters/networkProfile.networkPlugin","equals":"azure"}}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/88adc7594e846097","type":"Microsoft.Authorization/policyDefinitions","name":"88adc7594e846097"},{"properties":{"displayName":"nrms-batch-require-user-subscription-mode_1.0","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-06-26T21:23:23.3819739Z","updatedBy":null,"updatedOn":null},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"},"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"not":{"field":"Microsoft.Batch/batchAccounts/poolAllocationMode","notIn":["batchservice","null",""]}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/891d9369d047f6ac","type":"Microsoft.Authorization/policyDefinitions","name":"891d9369d047f6ac"},{"properties":{"displayName":"nrms-nsg-rule-104_1.1","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-07-08T19:20:15.9708014Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"}},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"}},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"allowedValues":["NA","NRMSException","SkipNRMSCorp","nrmsskipcorpnetsaw","SkipNRMSSAW","SkipNRMSDatabricks","SkipNRMSRDPSSH","SkipNRMSMgmt","SkipNRMSHigh","SkipNRMSVNet","SkipNRMSLoadBal","SkipNRMSDB","SkipNRMSMedium"],"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"[parameters(''sourceValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","equals":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"Any"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/8d69d8ee570b639","type":"Microsoft.Authorization/policyDefinitions","name":"8d69d8ee570b639"},{"properties":{"displayName":"sqlads-auditifnotexists-auditing - should be enabled on advanced data security settings on sql server_1.0","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-06-10T02:12:36.9468814Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"tagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name","description":"Rule is not deployed if this tag exists on the SQL - Server"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"setting":{"type":"String"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagname''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''tagname'')]]","equals":""},{"value":"[subscription().tags[parameters(''tagname'')]]","equals":""}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/auditingSettings","name":"default","existenceCondition":{"field":"Microsoft.Sql/auditingSettings.state","equals":"[parameters(''setting'')]"}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/8fce770def99399","type":"Microsoft.Authorization/policyDefinitions","name":"8fce770def99399"},{"properties":{"displayName":"nrms-nsg-rule-106_1.2","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-07-09T18:15:28.0710497Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"},"defaultValue":""},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"},"defaultValue":[]},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"allowedValues":["NA","NRMSException","SkipNRMSCorp","nrmsskipcorpnetsaw","SkipNRMSSAW","SkipNRMSDatabricks","SkipNRMSRDPSSH","SkipNRMSMgmt","SkipNRMSHigh","SkipNRMSVNet","SkipNRMSLoadBal","SkipNRMSDB","SkipNRMSMedium"],"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"[parameters(''sourceValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","contains":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","in":["Any","*"]},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/8fdec1516a77bbd6","type":"Microsoft.Authorization/policyDefinitions","name":"8fdec1516a77bbd6"},{"properties":{"displayName":"audit - ssh auth on existing vmss_1.4","policyType":"Custom","mode":"All","description":"This - policy audits whether any Linux VMSSs use password-only authentication for - SSH on existing resources.","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-05-12T23:41:53.0207896Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"resourcetagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name","description":"Rule is not deployed if this tag exists on the Virtual - Machine"}},"resourcegrouptagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name at the resource group level","description":"Rule is not deployed - if this tag exists on the Resource Group"}},"subscriptiontagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name at the subscription level","description":"Rule is not deployed if - this tag exists on the Subscription"}}},"policyRule":{"if":{"allof":[{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''resourcetagname''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''resourcegrouptagname'')]]","equals":""},{"value":"[subscription().tags[parameters(''subscriptiontagname'')]]","equals":""},{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"field":"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.osProfile.linuxConfiguration","exists":"True"},{"field":"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.osProfile.linuxConfiguration.disablePasswordAuthentication","equals":"false"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/9135d7012c4033cb","type":"Microsoft.Authorization/policyDefinitions","name":"9135d7012c4033cb"},{"properties":{"displayName":"nrms-nsg-rule-105_1.3","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:28:42.3856221Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"},"defaultValue":""},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"},"defaultValue":[]},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''tagname'')]]","equals":""},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[resourceGroup().tags[''SkipNRMSAll'']]","equals":""},{"field":"tags[''autopilotcluster'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotcluster'']]","equals":""},{"field":"tags[''autopilotenvironment'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotenvironment'']]","equals":""},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","contains":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","in":["Any","*"]},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/91f42c0ca66ff7dd","type":"Microsoft.Authorization/policyDefinitions","name":"91f42c0ca66ff7dd"},{"properties":{"displayName":"geneva - monitoring extension and azsecpack append policy for vmss_1.1","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-08-13T21:33:05.8939153Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"tagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name","description":"Rule is not deployed if this tag exists on the Virtual - Machine"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagname''), '']'')]","exists":"false"},{"anyOf":[{"field":"Microsoft.Compute/VirtualMachineScaleSets/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"}]},{"field":"Microsoft.Compute/VirtualMachineScaleSets/virtualMachineProfile","exists":"true"},{"field":"Microsoft.Compute/VirtualMachineScaleSets/extensionProfile.extensions[*].type","notEquals":"GenevaMonitoring"},{"not":{"field":"Microsoft.Compute/VirtualMachineScaleSets/osProfile.windowsConfiguration.provisionVMAgent","equals":"false"}}]},"then":{"effect":"append","details":[{"field":"Microsoft.Compute/VirtualMachineScaleSets/extensionProfile.extensions[*]","value":{"name":"Microsoft.Azure.Geneva.GenevaMonitoring","properties":{"publisher":"Microsoft.Azure.Geneva","type":"GenevaMonitoring","typeHandlerVersion":"2.0","autoUpgradeMinorVersion":true,"settings":{}}}}]}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/9534973cc57db387","type":"Microsoft.Authorization/policyDefinitions","name":"9534973cc57db387"},{"properties":{"displayName":"nrms-nsg-subnet_1.1","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-07-08T19:20:09.005562Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"}},"resourceGroupExclusions":{"type":"Array","metadata":{"displayName":"Resource - Groups Excluded","description":"Any VNet in a resource group in this list - will be ignored."},"defaultValue":[]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/virtualNetworks/subnets"},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"},{"value":"[resourceGroup().name]","notIn":"[parameters(''resourceGroupExclusions'')]"},{"field":"name","notContains":"GatewaySubnet"},{"field":"tags[''SkipNRMSNSG'']","exists":"false"},{"anyOf":[{"not":{"field":"Microsoft.Network/virtualNetworks/subnets/networkSecurityGroup.id","notIn":["null",""]}},{"field":"Microsoft.Network/virtualNetworks/subnets/networkSecurityGroup.id","exists":"false"}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Authorization/policyAssignments","name":"DoesNotExistBecauseThisIsToCauseDeployment","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json","contentVersion":"1.0.0.1","parameters":{"fullSubnetName":{"type":"String"},"allowedLocations":{"type":"Array"}},"variables":{"vnetName":"[first(split(parameters(''fullSubnetName''),''/''))]","subnetName":"[last(split(parameters(''fullSubnetName''),''/''))]","rawNsgName":"[concat(variables(''vnetName''),''-'', - variables(''subnetName''), ''-NRMS'')]","nsgName":"[if(greater(length(variables(''rawNsgName'')),75),substring(variables(''rawNsgName''),0,75),variables(''rawNsgName''))]","nsgUpdateJson":{"networkSecurityGroup":{"id":"[resourceId(''Microsoft.Network/networkSecurityGroups'', - variables(''nsgName''))]"}}},"resources":[{"condition":"[contains(parameters(''allowedLocations''), - resourceGroup().location)]","type":"Microsoft.Network/networkSecurityGroups","name":"[variables(''nsgName'')]","apiVersion":"2018-03-01","location":"[resourceGroup().location]","tags":{"Creator":"Automatically - added by NRMS Azure Policy","NRMS-Info":"http://aka.ms/nrms","NRMS-Version":"2019-03-20"},"properties":{}},{"type":"Microsoft.Resources/deployments","name":"NRMS-Update-Subnet-Without-NSG","apiVersion":"2018-05-01","properties":{"mode":"Incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","resources":[{"apiVersion":"2018-11-01","type":"Microsoft.Network/virtualNetworks/subnets","name":"[parameters(''fullSubnetName'')]","location":"[resourceGroup().location]","properties":"[union(reference(resourceId(''Microsoft.Network/virtualNetworks/subnets'', - variables(''vnetName''), variables(''subnetName'')), ''2018-11-01''), variables(''nsgUpdateJson''))]"}]}},"dependsOn":["[variables(''nsgName'')]"]}]},"parameters":{"fullSubnetName":{"value":"[field(''fullName'')]"},"allowedLocations":{"value":"[parameters(''allowedLocations'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/9644d220df7c67a","type":"Microsoft.Authorization/policyDefinitions","name":"9644d220df7c67a"},{"properties":{"displayName":"nrms-nsg-rule-105_1.2","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-07-09T18:15:26.1317211Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"},"defaultValue":""},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"},"defaultValue":[]},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"allowedValues":["NA","NRMSException","SkipNRMSCorp","nrmsskipcorpnetsaw","SkipNRMSSAW","SkipNRMSDatabricks","SkipNRMSRDPSSH","SkipNRMSMgmt","SkipNRMSHigh","SkipNRMSVNet","SkipNRMSLoadBal","SkipNRMSDB","SkipNRMSMedium"],"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"[parameters(''sourceValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","contains":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","in":["Any","*"]},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/9aca16db50fb914c","type":"Microsoft.Authorization/policyDefinitions","name":"9aca16db50fb914c"},{"properties":{"displayName":"nrms-nsg-rule-106_1.3","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:28:49.8100037Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"},"defaultValue":""},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"},"defaultValue":[]},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''tagname'')]]","equals":""},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[resourceGroup().tags[''SkipNRMSAll'']]","equals":""},{"field":"tags[''autopilotcluster'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotcluster'']]","equals":""},{"field":"tags[''autopilotenvironment'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotenvironment'']]","equals":""},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","contains":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","in":["Any","*"]},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/9b8d76c443040b08","type":"Microsoft.Authorization/policyDefinitions","name":"9b8d76c443040b08"},{"properties":{"displayName":"nrms-nsg-rule-101_1.3","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:29:02.8942844Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"},"defaultValue":""},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"},"defaultValue":[]},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''tagname'')]]","equals":""},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[resourceGroup().tags[''SkipNRMSAll'']]","equals":""},{"field":"tags[''autopilotcluster'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotcluster'']]","equals":""},{"field":"tags[''autopilotenvironment'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotenvironment'']]","equals":""},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","contains":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","in":["Any","*"]},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/9d78e6174e6e69be","type":"Microsoft.Authorization/policyDefinitions","name":"9d78e6174e6e69be"},{"properties":{"displayName":"audit - ssh auth on existing vms_1.4","policyType":"Custom","mode":"All","description":"This - policy audits whether any Linux VMs use password-only authentication for SSH - on existing resources.","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-05-12T23:41:51.7770777Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"resourcetagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name","description":"Rule is not deployed if this tag exists on the Virtual - Machine"}},"resourcegrouptagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name at the resource group level","description":"Rule is not deployed - if this tag exists on the Resource Group"}},"subscriptiontagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name at the subscription level","description":"Rule is not deployed if - this tag exists on the Subscription"}}},"policyRule":{"if":{"allof":[{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''resourcetagname''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''resourcegrouptagname'')]]","equals":""},{"value":"[subscription().tags[parameters(''subscriptiontagname'')]]","equals":""},{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"True"},{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration.disablePasswordAuthentication","equals":"false"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/9f778de970219a8a","type":"Microsoft.Authorization/policyDefinitions","name":"9f778de970219a8a"},{"properties":{"displayName":"geneva - monitoring extension and azsecpack autoupdate policy for vmss_2.1","policyType":"Custom","mode":"Indexed","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-08-13T21:33:07.7274256Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"tagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name","description":"Rule is not deployed if this tag exists on the Virtual - Machine"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagname''), '']'')]","exists":"false"},{"anyOf":[{"field":"Microsoft.Compute/VirtualMachineScaleSets/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"}]},{"not":{"field":"Microsoft.Compute/VirtualMachineScaleSets/osProfile.windowsConfiguration.provisionVMAgent","equals":"false"}}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","name":"Microsoft.Azure.Geneva.GenevaMonitoring","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/type","equals":"GenevaMonitoring"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.Azure.Geneva"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/enableAutomaticUpgrade","equals":"true"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmssName":{"type":"string"},"location":{"type":"string"}},"resources":[{"apiVersion":"2018-10-01","name":"[concat(parameters(''vmssName''), - ''/Microsoft.Azure.Geneva.GenevaMonitoring'')]","type":"Microsoft.Compute/virtualMachineScaleSets/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.Azure.Geneva","type":"GenevaMonitoring","typeHandlerVersion":"2.0","autoUpgradeMinorVersion":true,"enableAutomaticUpgrade":true,"settings":{}}}]},"parameters":{"vmssName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/a646ce8cd06eac96","type":"Microsoft.Authorization/policyDefinitions","name":"a646ce8cd06eac96"},{"properties":{"displayName":"sqlads-auditifnotexists-atp - types should be set to ''all'' in sql server advanced data security settings_1.0","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-06-10T02:12:40.6774801Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"tagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name","description":"Rule is not deployed if this tag exists on the SQL - Server"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagname''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''tagname'')]]","equals":""},{"value":"[subscription().tags[parameters(''tagname'')]]","equals":""}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/securityAlertPolicies","name":"default","existenceCondition":{"field":"Microsoft.Sql/servers/securityAlertPolicies/disabledAlerts[*]","equals":""}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/ac3fc8ad361a9985","type":"Microsoft.Authorization/policyDefinitions","name":"ac3fc8ad361a9985"},{"properties":{"displayName":"geneva - monitoring extension and azsecpack autoupdate policy for iaas_1.0","policyType":"Custom","mode":"Indexed","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-07-12T00:29:57.8179024Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","name":"Microsoft.Azure.Geneva.GenevaMonitoring","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"GenevaMonitoring"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Geneva"},{"field":"Microsoft.Compute/virtualMachines/extensions/enableAutomaticUpgrade","equals":"true"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"resources":[{"apiVersion":"2018-10-01","name":"[concat(parameters(''vmName''), - ''/Microsoft.Azure.Geneva.GenevaMonitoring'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.Azure.Geneva","type":"GenevaMonitoring","typeHandlerVersion":"2.0","autoUpgradeMinorVersion":true,"enableAutomaticUpgrade":true,"settings":{},"protectedSettings":{}}}]},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/b1d9e961d02c54d5","type":"Microsoft.Authorization/policyDefinitions","name":"b1d9e961d02c54d5"},{"properties":{"displayName":"nrms-nsg-rule-106_1.1","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-07-08T19:20:22.7538641Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"}},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"}},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"allowedValues":["NA","NRMSException","SkipNRMSCorp","nrmsskipcorpnetsaw","SkipNRMSSAW","SkipNRMSDatabricks","SkipNRMSRDPSSH","SkipNRMSMgmt","SkipNRMSHigh","SkipNRMSVNet","SkipNRMSLoadBal","SkipNRMSDB","SkipNRMSMedium"],"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"[parameters(''sourceValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","equals":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"Any"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/b4482f205fb6bbc1","type":"Microsoft.Authorization/policyDefinitions","name":"b4482f205fb6bbc1"},{"properties":{"displayName":"geneva - monitoring extension and azsecpack autoupdate policy for iaas_1.1","policyType":"Custom","mode":"Indexed","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-08-13T21:33:07.0355992Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"tagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name","description":"Rule is not deployed if this tag exists on the Virtual - Machine"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagname''), '']'')]","exists":"false"},{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"}]},{"not":{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration.provisionVMAgent","equals":"false"}}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","name":"Microsoft.Azure.Geneva.GenevaMonitoring","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"GenevaMonitoring"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Geneva"},{"field":"Microsoft.Compute/virtualMachines/extensions/enableAutomaticUpgrade","equals":"true"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"resources":[{"apiVersion":"2018-10-01","name":"[concat(parameters(''vmName''), - ''/Microsoft.Azure.Geneva.GenevaMonitoring'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.Azure.Geneva","type":"GenevaMonitoring","typeHandlerVersion":"2.0","autoUpgradeMinorVersion":true,"enableAutomaticUpgrade":true,"settings":{},"protectedSettings":{}}}]},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/b70c6f621534db23","type":"Microsoft.Authorization/policyDefinitions","name":"b70c6f621534db23"},{"properties":{"displayName":"nrms-hdinsight-require-subnet_1.0","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-06-26T21:23:22.8439408Z","updatedBy":null,"updatedOn":null},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"},"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.HDInsight/clusters"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"not":{"field":"Microsoft.HDInsight/clusters/computeProfile.roles[*].virtualNetworkProfile.subnet","notIn":["null",""]}}]},{"allOf":[{"field":"type","equals":"Microsoft.HDInsight/clusters"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"Microsoft.HDInsight/clusters/computeProfile.roles[*].virtualNetworkProfile.subnet","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/b7a0969ff954eaf7","type":"Microsoft.Authorization/policyDefinitions","name":"b7a0969ff954eaf7"},{"properties":{"displayName":"nrms-subnet-require-nsg_1.0","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-04-01T22:24:01.4784818Z","updatedBy":null,"updatedOn":null},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"},"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}}},"policyRule":{"if":{"allOf":[{"field":"location","in":"[parameters(''allowedLocations'')]"},{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Network/virtualNetworks/subnets"},{"not":{"field":"Microsoft.Network/virtualNetworks/subnets/networkSecurityGroup.id","notIn":["null",""]}}]},{"allOf":[{"field":"type","equals":"Microsoft.Network/virtualNetworks/subnets"},{"field":"Microsoft.Network/virtualNetworks/subnets/networkSecurityGroup.id","exists":"false"}]}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/b8f1faa61cb41f92","type":"Microsoft.Authorization/policyDefinitions","name":"b8f1faa61cb41f92"},{"properties":{"displayName":"audit - ssh auth on new vms_1.3","policyType":"Custom","mode":"All","description":"This - policy audits whether any Linux VMs use password-only authentication for SSH - on new resources.","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-25T22:01:41.9137032Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"resourcetagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name","description":"Rule is not deployed if this tag exists on the Virtual - Machine"}},"resourcegrouptagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name at the resource group level","description":"Rule is not deployed - if this tag exists on the Resource Group"}}},"policyRule":{"if":{"allOf":[{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''resourcetagname''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''resourcegrouptagname'')]]","equals":""},{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyof":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration.disablePasswordAuthentication","exists":"False"},{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration.disablePasswordAuthentication","equals":"false"}]},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"7isolutions"},{"field":"Microsoft.Compute/imageOffer","in":["sapp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"128technology"},{"field":"Microsoft.Compute/imageOffer","in":["128t_networking_platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"4psa"},{"field":"Microsoft.Compute/imageOffer","in":["voipnow"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"a10networks"},{"field":"Microsoft.Compute/imageOffer","in":["a10-lightning-adc","a10-vthunder-adc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"accellion"},{"field":"Microsoft.Compute/imageOffer","in":["kiteworks-by-accellion"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"abiquo"},{"field":"Microsoft.Compute/imageOffer","in":["abiquo-hybrid-cloud-34"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"accops"},{"field":"Microsoft.Compute/imageOffer","in":["hysecure5050"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"actian_matrix"},{"field":"Microsoft.Compute/imageOffer","in":["actian_matrix"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"actifio"},{"field":"Microsoft.Compute/imageOffer","in":["actifio-sky"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"actian-corp"},{"field":"Microsoft.Compute/imageOffer","in":["vector-community","vector-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Acronis"},{"field":"Microsoft.Compute/imageOffer","in":["storage"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"activeeon"},{"field":"Microsoft.Compute/imageOffer","in":["activeeon-workload-scheduler"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"aerospike"},{"field":"Microsoft.Compute/imageOffer","in":["aerospike-database-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"affinio"},{"field":"Microsoft.Compute/imageOffer","in":["platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"aiscaler-cache-control-ddos-and-url-rewriting-"},{"field":"Microsoft.Compute/imageOffer","in":["aimobile-site-acceleration","aiprotect-ddos-firewall","aiscaler-traffic-manager-caching","aivideo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"akamai-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["enterprise-application-access"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"alces-flight-limited"},{"field":"Microsoft.Compute/imageOffer","in":["alces-flight-compute-solo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"alertlogic"},{"field":"Microsoft.Compute/imageOffer","in":["alert-logic-tm","alert-logic-wsm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"alienvault"},{"field":"Microsoft.Compute/imageOffer","in":["unified-security-management-anywhere"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"alldigital-brevity"},{"field":"Microsoft.Compute/imageOffer","in":["alldigital-brevity-uploader"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"altair-engineering-inc"},{"field":"Microsoft.Compute/imageOffer","in":["altair_hwulva"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"altamira-corporation"},{"field":"Microsoft.Compute/imageOffer","in":["lumify"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"antmedia"},{"field":"Microsoft.Compute/imageOffer","in":["ams_community_edition","ant_media_server_enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"apigee"},{"field":"Microsoft.Compute/imageOffer","in":["apigee-edge"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appcara"},{"field":"Microsoft.Compute/imageOffer","in":["app360v43-001"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appcelerator"},{"field":"Microsoft.Compute/imageOffer","in":["appcelerator-arrow-azure-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appex-networks"},{"field":"Microsoft.Compute/imageOffer","in":["cloudexpress"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appistry"},{"field":"Microsoft.Compute/imageOffer","in":["genomepilot"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appscale-marketplace"},{"field":"Microsoft.Compute/imageOffer","in":["appscale"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"arangodb"},{"field":"Microsoft.Compute/imageOffer","in":["arangodb"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"arista-networks"},{"field":"Microsoft.Compute/imageOffer","in":["veos-router"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"array_networks"},{"field":"Microsoft.Compute/imageOffer","in":["array-networks-vapv"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"astadia-1148316"},{"field":"Microsoft.Compute/imageOffer","in":["astadia-ui-automation-tee"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"atomicorp"},{"field":"Microsoft.Compute/imageOffer","in":["secure-os","secure-ubuntu-os"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"audiocodes"},{"field":"Microsoft.Compute/imageOffer","in":["mediantsessionbordercontroller"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"auriq-systems"},{"field":"Microsoft.Compute/imageOffer","in":["essentia"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"awingu"},{"field":"Microsoft.Compute/imageOffer","in":["awingu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"aviatrix-systems"},{"field":"Microsoft.Compute/imageOffer","in":["aviatrix-cloud-services","aviatrix-companion-gateway","aviatrix-companion-gateway-v2","aviatrix-vpn-gw","aviatrix_multi_cloud_service","aviatrix_openvpn_service","aviatrix_openvpn_service10","aviatrix_openvpn_service25","aviatrix_openvpn_service50"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"avi-networks"},{"field":"Microsoft.Compute/imageOffer","in":["avi-vantage-adc","internal-avi-vantage-adc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"axway"},{"field":"Microsoft.Compute/imageOffer","in":["axway-mailgate-secure-collaboration-advanced","axway-mailgate-secure-collaboration-premium","axway-mailgate-secure-collaboration-standard"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"azul"},{"field":"Microsoft.Compute/imageOffer","in":["azul-zulu-ubuntu-1804"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"azurecyclecloud"},{"field":"Microsoft.Compute/imageOffer","in":["azure-cyclecloud-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"AzureDatabricks"},{"field":"Microsoft.Compute/imageOffer","in":["Databricks"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"baas-techbureau"},{"field":"Microsoft.Compute/imageOffer","in":["b1327623-d29b-4cc1-b833-85067dcc7bce"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"baffle-io"},{"field":"Microsoft.Compute/imageOffer","in":["baffle-application-data-protection"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"balabit"},{"field":"Microsoft.Compute/imageOffer","in":["balabit-shell-control-box","psm","sps"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"barracudanetworks"},{"field":"Microsoft.Compute/imageOffer","in":["barracuda-app-sec-control-center","barracuda-email-security-gateway","barracuda-ng-cc","barracuda-ng-firewall","waf"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"basho"},{"field":"Microsoft.Compute/imageOffer","in":["riak-2-0-1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","in":["autodesk-maya-arnold-centos73","rendering-centos73"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bdy"},{"field":"Microsoft.Compute/imageOffer","in":["buddy"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Bitnami"},{"field":"Microsoft.Compute/imageOffer","in":["3-4","abantecart","activemq","akeneo","alfrescocommunity","apachesolr","artifactory","canvaslms","cassandra","civicrm","cmsmadesimple","codiad","concrete5","consul","coppermine","couchdb","diaspora","discourse","djangostack","dokuwiki","dolibarr","DreamFactory","drupal","elastic-search","elk","erpnext","espocrm","etcd","eXo-Platform","exoplatform","fatfreecrm","ghost","gitlab","grafana","hadoop","hhvmstack","hordegroupwarewebmail","jasperreports","jenkins","joomla","jrubystack","kafka","kong","kubernetessandbox","lampstack","lappstack","letschat","liferay","limesurvey","livehelperchat","magento","mahara","mantis","mariadb","mattermost","mautic","mean","mediawiki","memcached","modx","mongodb","moodle","multicraft","mybb","mysql","nats","neo4j","neos","nginxstack","noalyss","nodejs","ocportal","odoo","openatrium","opencart","openedx","openfire","openproject","orangehrm","osclass","owncloud","oxid-eshop","parseserver","phabricator","phpbb","phplist","pimcore","piwik","plone","pootle","postgresql","prestashop","processmakerenterprise","processmakeropensourceedition","processwire","publify","rabbitmq","redash","redis","redmine","redmineplusagile","reportserver","reportserverenterprise","resourcespace","reviewboard","reviewboardpowerpack","roundcube","rubystack","seopanel","shopware","silverstripe","simplemachinesforum","sonarqube","spree","subversion","suitecrm","tensorflowserving","testlink","tikiwikicmsgroupware","tinytinyrss","tom-cat","trac","typo3","weblate","webmailpro","wildfly","wordpress","wordpress-multisite","wordpresspro","x2enginesalescrm","xoops","youtrack","zookeeper","zurmo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"black-duck-software"},{"field":"Microsoft.Compute/imageOffer","in":["blackduck_hub_vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"blk-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["blk-io-erc-20-rest-service"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"blockapps"},{"field":"Microsoft.Compute/imageOffer","in":["strato-blockchain-base-template-latest"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"blockstack"},{"field":"Microsoft.Compute/imageOffer","in":["blockstack-core-v14"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"blockchain-foundry"},{"field":"Microsoft.Compute/imageOffer","in":["syscoin-api","syscoin-full-node","syscoin-price-peg"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bloombase"},{"field":"Microsoft.Compute/imageOffer","in":["bloombase-storesafe-3_4_7_0_el7_x86_64"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bluecat"},{"field":"Microsoft.Compute/imageOffer","in":["bluecat-bam-for-azure","bluecat-dns-for-azure","bluecat-edge-service-point-vm-for-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bluetalon"},{"field":"Microsoft.Compute/imageOffer","in":["bluetalon"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"brocade_communications"},{"field":"Microsoft.Compute/imageOffer","in":["brocade-virtual-traffic-manager","brocade-virtual-traffic-manager-with-waf-module","brocade-virtual-web-application-firewall"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bt-americas-inc"},{"field":"Microsoft.Compute/imageOffer","in":["diamondip-sapphire-ev10","diamondip-sapphire-ev20","diamondip-sapphire-v10","diamondip-sapphire-v20","diamondip-sapphire-v5","diamondip-sapphire-vcaa20"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"buddhalabs"},{"field":"Microsoft.Compute/imageOffer","in":["sles_12_pci"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"carto"},{"field":"Microsoft.Compute/imageOffer","in":["cartobuilder2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cask"},{"field":"Microsoft.Compute/imageOffer","in":["cdap-cloud-sandbox"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","in":["UbuntuServer","Ubuntu_Core"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cavirin"},{"field":"Microsoft.Compute/imageOffer","in":["cavirin-platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cautelalabs"},{"field":"Microsoft.Compute/imageOffer","in":["log_management"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"celum-gmbh"},{"field":"Microsoft.Compute/imageOffer","in":["celumdam"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cds"},{"field":"Microsoft.Compute/imageOffer","in":["cds-data-migration-solution-for-legacy-to-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-6-v2-0-2-l1","cis-centos-7-v2-1-1-l1","cis-oracle-linux-6-v1-0-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-rhel-6-v2-0-2-l1","cis-rhel-7-v2-2-0-l1","cis-suse-linux-11-v2-0-0-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1404-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"certivox"},{"field":"Microsoft.Compute/imageOffer","in":["sso-test"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cfd-direct"},{"field":"Microsoft.Compute/imageOffer","in":["cfd-direct-from-the-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"chain"},{"field":"Microsoft.Compute/imageOffer","in":["chain-core-developer-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"checkpoint"},{"field":"Microsoft.Compute/imageOffer","in":["check-point-r77-10","check-point-vsec-r80","check-point-vsec-r80-blink","sg2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"chef-software"},{"field":"Microsoft.Compute/imageOffer","in":["chef-automate-vm-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"circleci"},{"field":"Microsoft.Compute/imageOffer","in":["circleci-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cires21"},{"field":"Microsoft.Compute/imageOffer","in":["c21l-enc","c21l-mos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cisco"},{"field":"Microsoft.Compute/imageOffer","in":["cisco-asav","cisco-csr-1000v","cisco-ftdv","cisco-meraki-vmx100","cisco-ngfwv-vm-test-unsupported","cisco_cloud_vedge_17_2_4","cos65","cos72","cos72_main_dev","uos14","vwaas-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"citrix"},{"field":"Microsoft.Compute/imageOffer","in":["citrix-sd-wan-opt","netscaler-ma-service-agent-120","netscaler-ma-service-agent-121","netscaler-sd-wan","netscaler-vpx","netscalervpx-120","netscalervpx-121","netscalervpx110-6531","netscalervpx111"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"clear-linux-project"},{"field":"Microsoft.Compute/imageOffer","in":["clear-linux-os"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"clouber"},{"field":"Microsoft.Compute/imageOffer","in":["cuber","cws","mcenter"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-cruiser"},{"field":"Microsoft.Compute/imageOffer","in":["cloud-cruiser-16"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudbees"},{"field":"Microsoft.Compute/imageOffer","in":["jenkins-enterprise","jenkins-operations-center"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudbees-enterprise-jenkins"},{"field":"Microsoft.Compute/imageOffer","in":["cloudbees-jenkins-enterprise","cloudbees-jenkins-operations-center"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudbolt-software"},{"field":"Microsoft.Compute/imageOffer","in":["cloudbolt"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudboost"},{"field":"Microsoft.Compute/imageOffer","in":["cloudboost"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudenablers-inc"},{"field":"Microsoft.Compute/imageOffer","in":["corestack"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","in":["squid-proxy"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","in":["cloudera-altus-centos-os","cloudera-centos-6","cloudera-centos-os","test-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudlanes"},{"field":"Microsoft.Compute/imageOffer","in":["cloud-video-accelerator-nfs","cloudlanes-cloud-backup-accelerator-vtl"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudlink"},{"field":"Microsoft.Compute/imageOffer","in":["cloudlink-securevm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudplan-gmbh"},{"field":"Microsoft.Compute/imageOffer","in":["cloudplan_pcn_linux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudsecurity"},{"field":"Microsoft.Compute/imageOffer","in":["paladion_ondemand_nextgen_firewall"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudsoft"},{"field":"Microsoft.Compute/imageOffer","in":["cloudsoft-amp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"clustrix"},{"field":"Microsoft.Compute/imageOffer","in":["clustrixdb"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"codelathe"},{"field":"Microsoft.Compute/imageOffer","in":["codelathe-filecloud-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"codenvy"},{"field":"Microsoft.Compute/imageOffer","in":["codenvy-on-prem"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cognosys"},{"field":"Microsoft.Compute/imageOffer","in":["1-click-secured-joomla-on-centos-7-3","1-click-secured-joomla-on-ubuntu-1404-lts","1-click-secured-joomla-on-ubuntu-1604-lts","1-click-secured-joomla-on-ubuntu-1804-lts","centos-6-9","centos-7-3","centos-7-4","centos-7-5","deploy-a-secured-modx-on-ubuntu-14-04-lts","deploy-a-secured-silverstripe-on-ubuntu-14-04-lts","hardened-mysql-5-6-on-centos-7-3","hardened-mysql-5-6-on-ubu-1404-lts","hardened-mysql-5-7-on-centos-7-3","hardened-mysql-5-7-on-ubu-1404-lts","hardened-postgresql-on-ubu-1404-lts","invoice-ninja-2-5-1-1-on-ubuntu-1404","jruby-on-ubuntu-14-04-lts","low-latency-broadcasting-server-for-live-events","owncloud-9-with-lamp-stack-on-ubuntu-1404","piwigogallerys-ubuntu_14-04_lts","sec1011-dokuwiki-on-ubuntu-1404","sec1013-elasticsearch-on-ubuntu-1404","sec1014-opencart-on-ubuntu-1404","sec1015-orangehrm-on-ubuntu-1404","sec1016-nodejs-server-on-ubuntu-1404","sec1018-haproxy-on-ubuntu-1404","sec1019-secured-tomcat-on-ubuntu-1404","sec1020-phpbb-on-hardened-ubuntu-1404","sec1021-mybb-on-hardened-ubuntu-1404","sec1022-sugarcrm-on-ubuntu-1404","sec1023-moodle-on-ubuntu-1404","sec1024_magento-on-ubuntu-1404","sec1025-secured-drupal-on-ubuntu-1404","sec1027-secured-wordpress-on-ubuntu-1404","sec1028-secured-lamp-sever-on-ubuntu-1404","sec1029-secured-mediawiki-on-ubuntu-1404","sec1030-secured-subversion-on-ubuntu-1404","sec1031-secured-passenger-nginx-on-ubuntu-1404","sec1033-secured-piwik-on-ubuntu-1404","sec1034-secured-pligg-on-ubuntu-1404","sec1035-secured-jenkins-on-ubuntu-1404","sec1036-secured-postgresql-on-ubuntu-1404","secure-cloud-lamp-ubuntu-1404","secured-abantecart-on-centos","secured-abantecart-on-ubuntu-14-04-lts","secured-acquia-drupal-on-centos","secured-acquiadurpal-on-ubuntu-14-04-lts","secured-apachesolr-on-centos","secured-apachesolr-on-ubuntu-14-04-lts","secured-arartifactory-on-centos","secured-artifactory-on-ubuntu-14-04-lts","secured-cakephp-on-centos","secured-cakephp-on-ubuntu-14-04-lts","secured-cms-made-simple-on-centos","secured-cms-made-simple-on-ubuntu-14-04-lts","secured-codiad-on-centos","secured-codiad-on-ubuntu-14-04-lts","secured-cogdam-on-centos","secured-cogdam-on-ubuntu-14-04-lts","secured-concrete5-on-centos","secured-concrete5-on-ubuntu-14-04-lts","secured-coppermine-on-centos","secured-coppermine-on-ubuntu-14-04-lts","secured-crushftp-on-centos","secured-crushftp-on-ubuntu-14-04-lts","secured-django-on-centos","secured-django-on-ubuntu-14-04-lts","secured-dokuwiki-on-centos","secured-dolibarr-on-centos","secured-dolivbarr-on-ubuntu-14-04-lts","secured-drupal-on-centos","secured-elasticsearch-on-centos","secured-enterprise-nginx-varnish-haproxy-php","secured-espocrm-on-centos","secured-espocrm-on-ubuntu-14-04-lts","secured-exoplatform-on-centos","secured-exoplatform-on-ubuntu-14-04-lts","secured-ghost-on-centos","secured-ghost-on-ubuntu-14-04-lts","secured-gradle-on-centos","secured-gradle-on-ubuntu-14-04-lts","secured-haproxy-on-centos","secured-invoice-ninja-on-centos","secured-jboss-as-on-centos","secured-jbossas-on-ubuntu-14-04-lts","secured-jenkins-on-centos","secured-jruby-on-cento","secured-lamp-on-centos","secured-lamp-on-centos-m10","secured-lapp-on-centos","secured-lapp-on-ubuntu-14-04-lts","secured-lemp-sever-on-ubuntu-1404","secured-lime-survey-on-centos","secured-limesurvey-on-ubuntu-1404","secured-live-helper-chat-on-centos","secured-livehelperchat-on-ubuntu-14-04-lts","secured-magento-on-centos","secured-mahara-on-centos","secured-mahara-on-ubuntu-14-04-lts","secured-mantis-on-centos","secured-mantis-on-ubuntu-14-04-lts","secured-mariadb-on-ubuntu-16-04","secured-mautic-on-centos","secured-mautic-on-ubuntu-14-04-lts","secured-media-wiki-on-centos","secured-modx-on-centos","secured-moodle-on-centos","secured-ngnix-on-centos-7-3","secured-ngnix-on-ubuntu-14-04-lts","secured-ngnix-on-ubuntu-16-04-lts","secured-noalyss-on-centos","secured-noalyss-on-ubuntu-14-04-lts","secured-nodejs-on-centos","secured-occlass-on-ubuntu-14-04-lts","secured-ocportal-on-ubuntu-14-04-lts","secured-open-cart-on-centos","secured-orangehrm-on-centos","secured-osclass-on-centos","secured-owncloud-on-centos","secured-oxid-eshop-on-centos","secured-oxideshop-on-ubuntu-14-04-lts","secured-passenger-nginx-on-centos","secured-piwigo-gallery-on-centos","secured-plone-on-centos","secured-plone-on-ubuntu-14-04-lts","secured-prestashop-on-centos","secured-prestashop-on-ubuntu-14-04-lts","secured-railo-on-ubuntu-14-04-lts","secured-redis-on-centos","secured-redis-on-ubuntu-1404","secured-redmine-on-centos","secured-redmine-on-ubuntu-14-04-lts","secured-redmineagile-on-ubuntu-14-04-lts","secured-report-server-on-centos","secured-reportserverent-on-ubuntu-14-04-lts","secured-resource-space-on-centos","secured-resourcespace-on-ubuntu-14-04-lts","secured-round-cube-on-centos","secured-roundcube-on-ubuntu-14-04-lts","secured-ruby-on-centos","secured-ruby-on-ubuntu-14-04-lts","secured-seopanel-on-centos","secured-seopanel-on-ubuntu-14-04-lts","secured-silverstripe-on-centos","secured-simple-invoice-on-centos","secured-simple-machines-on-centos","secured-simple-machines-on-ubuntu-14-04-lts","secured-simpleinvoice-on-ubuntu-14-04-lts","secured-subversion-on-centos","secured-suitecrm-on-centos","secured-suitecrm-on-ubuntu-14-04-lts","secured-test-link-on-centos","secured-testlink-on-ubuntu-14-04-lts","secured-thinkup-on-centos","secured-thinkup-on-ubuntu-14-04-lts","secured-tikiwikicms-on-centos","secured-tikiwikicms-on-ubuntu-14-04-lts","secured-tiny-tiny-rss-on-centos","secured-tinytinyrss-on-ubuntu-14-04-lts","secured-tomcat-on-centos","secured-trac-on-centos","secured-trac-on-ubuntu-14-04-lts","secured-typo3-on-centos","secured-typo3-on-ubuntu-14-04-lts","secured-varnish-on-centos","secured-varnish-on-ubuntu-1404","secured-wildfly-on-centos","secured-wildfly-on-ubuntu-14-04-lts","secured-wordpress-on-centos-7-3","secured-wordpress-on-ubuntu-16-04-lts","secured-x-cart-on-ubuntu-14-04-lts","secured-xoops-on-centos","secured-xoops-on-ubuntu-14-04-lts","secured-zurmo-on-centos","secured-zurmo-on-ubuntu-14-04-lts","suse15","ubuntu-14-04-lts","ubuntu-16-04-lts","ubuntu-17-04-high-performance-hardened-tcp-bbr","ubuntu-18-04","ubuntu-18-04-lts"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cohesity"},{"field":"Microsoft.Compute/imageOffer","in":["cohesity-cloudtd-tool"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cohesive"},{"field":"Microsoft.Compute/imageOffer","in":["vns3_4x_network_security"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"confluentinc"},{"field":"Microsoft.Compute/imageOffer","in":["confluentplatform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"consensys"},{"field":"Microsoft.Compute/imageOffer","in":["truffle"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"convertigo"},{"field":"Microsoft.Compute/imageOffer","in":["convertigo-for-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"corda"},{"field":"Microsoft.Compute/imageOffer","in":["corda"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"CoreOS"},{"field":"Microsoft.Compute/imageOffer","in":["CoreOS"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"couchbase"},{"field":"Microsoft.Compute/imageOffer","in":["couchbase-server-enterprise","couchbase-sync-gateway-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","in":["Debian"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cryptzone"},{"field":"Microsoft.Compute/imageOffer","in":["appgate-appliance-3_2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cybernetica-as"},{"field":"Microsoft.Compute/imageOffer","in":["uxp-securityserver-connector","uxp-securityserver_vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cyxtera"},{"field":"Microsoft.Compute/imageOffer","in":["appgatesdp-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dataart"},{"field":"Microsoft.Compute/imageOffer","in":["devicehive"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"databricks"},{"field":"Microsoft.Compute/imageOffer","in":["spfqogzeculbhdh"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"datalayer"},{"field":"Microsoft.Compute/imageOffer","in":["datalayer-notebook"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"datastax"},{"field":"Microsoft.Compute/imageOffer","in":["datastax-enterprise","datastax-enterprise-non-production-use-only"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"datasunrise"},{"field":"Microsoft.Compute/imageOffer","in":["datasunrise-database-security-suite"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dataiku"},{"field":"Microsoft.Compute/imageOffer","in":["dataiku-data-science-studio"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"datometry"},{"field":"Microsoft.Compute/imageOffer","in":["hyper-q"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dellemc"},{"field":"Microsoft.Compute/imageOffer","in":["dell-emc-avamar-virtual-edition","dell-emc-datadomain-management-center","dell-emc-datadomain-virtual-edition","dell-emc-datadomain-virtual-edition-v4","dell-emc-networker-virtual-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"delphix"},{"field":"Microsoft.Compute/imageOffer","in":["delphix_dynamic_data_platform","omniosce"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"denodo"},{"field":"Microsoft.Compute/imageOffer","in":["denodo-platform","denodo-platform-7_0"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"denyall"},{"field":"Microsoft.Compute/imageOffer","in":["denyall-rweb","denyall-vulnerability-manager","denyall-web-application-firewall"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dgsecure"},{"field":"Microsoft.Compute/imageOffer","in":["dgsecure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"diladele"},{"field":"Microsoft.Compute/imageOffer","in":["websafety"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dimensionalmechanics-inc"},{"field":"Microsoft.Compute/imageOffer","in":["neopulse-ai-studio","neopulse-query-runtime"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"docker"},{"field":"Microsoft.Compute/imageOffer","in":["docker-ce","docker-ce-edge","docker-datacenter-custom","docker-ee","docker-ee-basic","docker4azure","docker4azure-cs"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dome9"},{"field":"Microsoft.Compute/imageOffer","in":["dome9ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"drizti"},{"field":"Microsoft.Compute/imageOffer","in":["hpcbox-ansys-19-cluster-master","hpcbox-cluster-compute-node","hpcbox-cluster-cuda-node","hpcbox-cluster-gpu-node","hpcbox-docker-cluster-master","hpcbox-openfoam-cluster-master","hpcbox-su2-cluster-master"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"drone"},{"field":"Microsoft.Compute/imageOffer","in":["drone"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dyadic_security"},{"field":"Microsoft.Compute/imageOffer","in":["dyadic_sec","ukc_image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dynatrace"},{"field":"Microsoft.Compute/imageOffer","in":["ruxit-managed-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"eastwind-networks-inc"},{"field":"Microsoft.Compute/imageOffer","in":["eastwind-ixia-sensor"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"egnyte"},{"field":"Microsoft.Compute/imageOffer","in":["egnyte-connect"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"elasticbox"},{"field":"Microsoft.Compute/imageOffer","in":["elasticbox-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"electric-cloud"},{"field":"Microsoft.Compute/imageOffer","in":["electricflowce"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"elfiqnetworks"},{"field":"Microsoft.Compute/imageOffer","in":["cloud-connector"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"emercoin"},{"field":"Microsoft.Compute/imageOffer","in":["emercoin"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"enterprise-ethereum-alliance"},{"field":"Microsoft.Compute/imageOffer","in":["quorum-demo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"enterprisedb-corp"},{"field":"Microsoft.Compute/imageOffer","in":["edb-postgres-ark"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"equalum"},{"field":"Microsoft.Compute/imageOffer","in":["equalum-vm-byol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"esdenera"},{"field":"Microsoft.Compute/imageOffer","in":["esdenera-firewall-3"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ethereum"},{"field":"Microsoft.Compute/imageOffer","in":["ethereum-studio"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"evostream-inc"},{"field":"Microsoft.Compute/imageOffer","in":["ems-for-template","ems-test"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"exasol"},{"field":"Microsoft.Compute/imageOffer","in":["exasol-analytics-database-byol","exasolution-analytic-database"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"falconstorsoftware"},{"field":"Microsoft.Compute/imageOffer","in":["fss-v9"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"f5-networks"},{"field":"Microsoft.Compute/imageOffer","in":["f5-big-ip-adc","f5-big-ip-advanced-waf","f5-big-ip-best","f5-big-ip-better","f5-big-ip-byol","f5-big-ip-good","f5-big-ip-per-app-ve","f5-big-iq","f5-web-application-firewall"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"filecatalyst"},{"field":"Microsoft.Compute/imageOffer","in":["filecatalyst-direct-per-hr-billing","filecatalyst-direct-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"firehost"},{"field":"Microsoft.Compute/imageOffer","in":["firehost_armor","firehost_armor_ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"flexify-io"},{"field":"Microsoft.Compute/imageOffer","in":["single-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"flashgrid-inc"},{"field":"Microsoft.Compute/imageOffer","in":["flashgrid-racnode"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"foghorn-systems"},{"field":"Microsoft.Compute/imageOffer","in":["foghorn-edge-device-manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"forcepoint-llc"},{"field":"Microsoft.Compute/imageOffer","in":["forcepoint-ngfw"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"forscene"},{"field":"Microsoft.Compute/imageOffer","in":["forscene-edgeserver"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"fortycloud"},{"field":"Microsoft.Compute/imageOffer","in":["fortycloud-gw"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"fortinet"},{"field":"Microsoft.Compute/imageOffer","in":["fortinet-fortianalyzer","fortinet-fortimanager","fortinet_fortigate-vm_v5","fortinet_fortimail","fortinet_fortivoice","fortinet_fortiweb-vm_v5"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"fujitsu_fast"},{"field":"Microsoft.Compute/imageOffer","in":["fep10-rh7-test","feptest"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"gemalto-safenet"},{"field":"Microsoft.Compute/imageOffer","in":["safenet-keysecure-k170v","safenet-protectv","safenet-protectv-manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"gigamon-inc"},{"field":"Microsoft.Compute/imageOffer","in":["gigamon-fm-5_3_01","gigamon-fm-5_3_01_hourly","gigamon-fm-5_4_00","gigamon-fm-5_4_00_hourly"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"gitlab"},{"field":"Microsoft.Compute/imageOffer","in":["gitlab-ce","gitlab-ee"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"GitHub"},{"field":"Microsoft.Compute/imageOffer","in":["GitHub-Enterprise","githubenterprise-test-publishing"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"great-software-laboratory-private-limited"},{"field":"Microsoft.Compute/imageOffer","in":["xid"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"greensql"},{"field":"Microsoft.Compute/imageOffer","in":["greensql-database-security"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"gridgain"},{"field":"Microsoft.Compute/imageOffer","in":["gridgain-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"guardicore"},{"field":"Microsoft.Compute/imageOffer","in":["guardicorecentra","infection_monkey"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"haivision"},{"field":"Microsoft.Compute/imageOffer","in":["haivision-media-gateway-1-2","haivision-media-gateway-1-5","haivision-media-gateway-1-6-2","media-gateway"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"h2o-ai"},{"field":"Microsoft.Compute/imageOffer","in":["h2o-driverles-ai","h2o-driverless-ai","h2o-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"haproxy-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["hapee-rhel","hapee-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"harpaitalia"},{"field":"Microsoft.Compute/imageOffer","in":["mcuboenergy","yg","yougreen_trial"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hcl-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["hcl17cp1104"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"heimdall-data"},{"field":"Microsoft.Compute/imageOffer","in":["heimdall-data"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"help-systems"},{"field":"Microsoft.Compute/imageOffer","in":["goanywheremftubuntulinux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hewlett-packard"},{"field":"Microsoft.Compute/imageOffer","in":["hpe-helion-stackato"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hillstone-networks"},{"field":"Microsoft.Compute/imageOffer","in":["cloudedge-virtual-ngfw-advanced-edition","cloudedge-virtual-ngfw-standard-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hortonworks"},{"field":"Microsoft.Compute/imageOffer","in":["cloudbreak-for-hortonworks-data-platform","hortonworks-sandbox"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hitachi-solutions"},{"field":"Microsoft.Compute/imageOffer","in":["credeon-sfs-and-kms-for-sharepoint-online","credeonsecurefull-textsearch1_0"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hpe"},{"field":"Microsoft.Compute/imageOffer","in":["storeoncevsa"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"huawei"},{"field":"Microsoft.Compute/imageOffer","in":["euleros-v2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hyperglance"},{"field":"Microsoft.Compute/imageOffer","in":["hyperglance-dynamic-topology"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hypergrid"},{"field":"Microsoft.Compute/imageOffer","in":["hyperform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hytrust"},{"field":"Microsoft.Compute/imageOffer","in":["hytrust-keycontrol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ibm"},{"field":"Microsoft.Compute/imageOffer","in":["ibm-security-guardium-multi-cloud","qradar_security_analytics"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"iaansys"},{"field":"Microsoft.Compute/imageOffer","in":["iaansys-magento"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"iboss"},{"field":"Microsoft.Compute/imageOffer","in":["iboss-14600-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"imaginecommunications"},{"field":"Microsoft.Compute/imageOffer","in":["cloudxtream-cdvr","cloudxtream-dai-vms","telurio-aim"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"imperva"},{"field":"Microsoft.Compute/imageOffer","in":["imperva-dam-v13","securesphere-waf","securesphere-waf-for-azr","securesphere-waf-v12","securesphere-waf-v13"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"infoblox"},{"field":"Microsoft.Compute/imageOffer","in":["infoblox-vnios-te-v1420"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"informatica"},{"field":"Microsoft.Compute/imageOffer","in":["bdm10-1-1-u2","big-data-management-10-2","big-data-management-10-2-1","data_accelerator_for_azure_byol","data_quality_10_1_1_rhel_7_3_byol","eic","ics-byol","ics-payg-ubuntu","platform_10_1_1_multi_node_domain_rhel-7-3_byol","platform_10_2_hf1_domain_rhel-7-3_byol","powercenter-v10-domain-image-ubuntu14-04-3","powercenter-v10-update1-domain-image-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"informationbuilders"},{"field":"Microsoft.Compute/imageOffer","in":["iway-big-data-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ingrammicro"},{"field":"Microsoft.Compute/imageOffer","in":["ingrammicroensimcentostrial"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intel"},{"field":"Microsoft.Compute/imageOffer","in":["lustre-cloud-edition-gs-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intel-bigdl"},{"field":"Microsoft.Compute/imageOffer","in":["bigdl-0815","bigdl__vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intel-fpga"},{"field":"Microsoft.Compute/imageOffer","in":["quartus_pro_opencl_sdk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intellicus-technologies-pvt-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["intellicus_bi_server_100_user_linux","intellicus_bi_server_10_user_linux","intellicus_bi_server_25_user_linux","intellicus_bi_server_50_user_linux","intellicus_bi_server_5_user_linux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intersystems"},{"field":"Microsoft.Compute/imageOffer","in":["intersystems-iris-single-node"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intigua"},{"field":"Microsoft.Compute/imageOffer","in":["intigua-agent-manager-3_7_0-trial","intigua-agent-manager-trial"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"iquest"},{"field":"Microsoft.Compute/imageOffer","in":["keyhub"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ishlangu-load-balancer-adc"},{"field":"Microsoft.Compute/imageOffer","in":["ishlangu-load-balancer-byol","ishlangu-load-balancer-is10","ishlangu-load-balancer-is100","ishlangu-load-balancer-is1000","ishlangu-load-balancer-is200","ishlangu-load-balancer-is5000","ishlangu-load-balancer-isbfg"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"issp-corporation"},{"field":"Microsoft.Compute/imageOffer","in":["ispocr"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"itelios"},{"field":"Microsoft.Compute/imageOffer","in":["magento2-on-zendserver"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jamcracker"},{"field":"Microsoft.Compute/imageOffer","in":["4632d5b4-feb0-4332-8452-f2e66133672f","jamcracker-cloudanalytics","jamcracker-cloudanalytics-version4","jamcracker-cloudanalytics-version5","jamcracker-csb-service-provider","jamcracker-csb-serviceprovider","jamcracker-csb-standard","jamcracker-csb-standard-v3","jamcracker-csb-standard-version4","jamcracker-hybrid-cloud-management-version4","jamcracker_cloud_control_appliance_version4","jsdnapp_csb_serviceprovider-version4","jsdnapp_hybrid","jsdnapp_hybrid_v3"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jedox"},{"field":"Microsoft.Compute/imageOffer","in":["jedox-for-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jelastic"},{"field":"Microsoft.Compute/imageOffer","in":["jelastic-hybrid-paas-standard"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jetnexus"},{"field":"Microsoft.Compute/imageOffer","in":["dvwa","jetnexus-application-load-balancer","jetnexus-global-load-balancer","jetnexus-waf","zap"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jetware-srl"},{"field":"Microsoft.Compute/imageOffer","in":["caffe2","caffe_python_cpu","caffe_python_gpu","cockroachdb","lamp_optimized","lemp7_optimized","memcached","mongodb","mxnet_python","mysql","nodejs_nginx","percona_mongodb","percona_mysql","postgresql","pytorch","pytorch_cuda_notebook","pytorch_cuda_production","redis","redmine","tensorflow_cpu_notebook","tensorflow_cpu_production","tensorflow_cuda_notebook","tensorflow_cuda_production","tensorflow_python","theano_python","wordpress4_lemp7"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jitterbit_integration"},{"field":"Microsoft.Compute/imageOffer","in":["jitterbit-harmony-agent"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jm-technology-inc"},{"field":"Microsoft.Compute/imageOffer","in":["smart-gateway"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"juniper-networks"},{"field":"Microsoft.Compute/imageOffer","in":["vmx-services-gateway-byol","vmx-services-gateway-byol-soltemp","vmx-virtual-router","vsrx-next-generation-firewall","vsrx-next-generation-firewall-payg","vsrx-next-generation-firewall-solution-templ-payg","vsrx-next-generation-firewall-solution-template"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kaazing"},{"field":"Microsoft.Compute/imageOffer","in":["kaazing-kwic","kaazing-vpa"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kali-linux"},{"field":"Microsoft.Compute/imageOffer","in":["kali-linux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kemptech"},{"field":"Microsoft.Compute/imageOffer","in":["kemp360central-byol","vlm-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kinetica"},{"field":"Microsoft.Compute/imageOffer","in":["kineticadbbyol","kineticadbpayasyougo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kaspersky_lab"},{"field":"Microsoft.Compute/imageOffer","in":["kaspersky_secure_mail_gateway"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"knime"},{"field":"Microsoft.Compute/imageOffer","in":["knime-server-5-user_4-4-0","knime-server-byol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"krypc-technologies-pvt-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["krypccore"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"leap-orbit"},{"field":"Microsoft.Compute/imageOffer","in":["leaporbitstoragebackedsftp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"leostream-corporation"},{"field":"Microsoft.Compute/imageOffer","in":["connection-broker"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"liquid-files"},{"field":"Microsoft.Compute/imageOffer","in":["liquidfiles"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"liquidware"},{"field":"Microsoft.Compute/imageOffer","in":["stratusphere"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"literatu"},{"field":"Microsoft.Compute/imageOffer","in":["literatu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"loadbalancer"},{"field":"Microsoft.Compute/imageOffer","in":["loadbalancer-org-load-balancer-for-azure","loadbalancer-org-load-balancer-for-azure-byol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"logsign"},{"field":"Microsoft.Compute/imageOffer","in":["logsignfocus"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"logtrust"},{"field":"Microsoft.Compute/imageOffer","in":["logtrust-log-management"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"looker"},{"field":"Microsoft.Compute/imageOffer","in":["looker-analytics-platform","looker-analytics-platform-326","looker-analytics-platform-5_6"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"lti-lt-infotech"},{"field":"Microsoft.Compute/imageOffer","in":["trade-finance-blockchain"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"luminate-security"},{"field":"Microsoft.Compute/imageOffer","in":["luminate-connector"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mapr-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["mapr52-base-dev","mapr60-base","mapr60-sandbox"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mariadb"},{"field":"Microsoft.Compute/imageOffer","in":["mariadb-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"marklogic"},{"field":"Microsoft.Compute/imageOffer","in":["marklogic-9-byol","marklogic-developer-9"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"massiveanalytic-"},{"field":"Microsoft.Compute/imageOffer","in":["oscarap"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mathworks-inc"},{"field":"Microsoft.Compute/imageOffer","in":["matlab-ref-arch-18a-v1-linux-disk","mps-ref-arch-18a-v1-linux-disk2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"matillion"},{"field":"Microsoft.Compute/imageOffer","in":["matillion-etl-snowflake"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mavinglobal"},{"field":"Microsoft.Compute/imageOffer","in":["mavin-business-trial","mavin-enterprise-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"meanio"},{"field":"Microsoft.Compute/imageOffer","in":["gitlab-enterprise-ready","linnovate-open-source-sla-pro","mean-machine-20","openideal3","redash"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"media3-technologies-llc"},{"field":"Microsoft.Compute/imageOffer","in":["cpan1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"memsql"},{"field":"Microsoft.Compute/imageOffer","in":["memsql-community-single-vm","memsql-enterprise-single-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mendix"},{"field":"Microsoft.Compute/imageOffer","in":["mendix-docker","mendix-pro"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mfe_azure"},{"field":"Microsoft.Compute/imageOffer","in":["atd-mcafee","mcafee_vnsp_controller_for_azure","mcafee_vnsp_for_azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm","linux-data-science-vm-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-aks"},{"field":"Microsoft.Compute/imageOffer","in":["aks"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"micro-focus"},{"field":"Microsoft.Compute/imageOffer","in":["replication_environment"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-avere"},{"field":"Microsoft.Compute/imageOffer","in":["vfxt"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-azure-batch"},{"field":"Microsoft.Compute/imageOffer","in":["centos-container","centos-container-rdma","ubuntu-server-container","ubuntu-server-container-rdma"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-azure-compute"},{"field":"Microsoft.Compute/imageOffer","in":["azureconfidentialcompute"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["azureml","linux-data-science-vm-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftAzureSiteRecovery"},{"field":"Microsoft.Compute/imageOffer","in":["ASR-Hydration-VMs"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftOSTC"},{"field":"Microsoft.Compute/imageOffer","in":["FreeBSD"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","in":["MLServer-CentOS","MLServer-RedHat","MLServer-Ubuntu","RServer-CentOS","RServer-Ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"midfin"},{"field":"Microsoft.Compute/imageOffer","in":["mf_neon_cgw"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"midvision"},{"field":"Microsoft.Compute/imageOffer","in":["ibm-datapower-virtual-edition-75","ibm-datapower-virtual-edition-76","ibm-datapower-virtual-edition-77","ibm-http-server","ibm-websphere-portal-server-85","ibm-websphere-portal-server-90","websphere-application-server-be","websphere-application-server-be-80","websphere-application-server-be-85","websphere-application-server-be-90","websphere-application-server-be-and-mq","websphere-application-server-lp","websphere-application-server-lp-16","websphere-application-server-lp-17","websphere-application-server-lp-18","websphere-application-server-nde","websphere-application-server-nde-80","websphere-application-server-nde-85","websphere-application-server-nde-90","websphere-mq","websphere-mq-75","websphere-mq-90","websphere-mq-91"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"miraclelinux"},{"field":"Microsoft.Compute/imageOffer","in":["asianux-server-4-sp5","asianux-server-4-sp6","asianux-server-4-sp7","asianux-server-7-sp1","asianux-server-7-sp2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"miri-infotech-pvt-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["wordpress"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mobilab"},{"field":"Microsoft.Compute/imageOffer","in":["magento-wirecard-checkout"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"moogsoft"},{"field":"Microsoft.Compute/imageOffer","in":["moogsoft-aiops"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"moviemasher"},{"field":"Microsoft.Compute/imageOffer","in":["moviemasher"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","in":["SQL2017-RHEL7","SQL2017-RHEL73","SQL2017-SLES12SP2","SQL2017-Ubuntu1604","SQL2019-RHEL7","SQL2019-Ubuntu1604"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mtnfog"},{"field":"Microsoft.Compute/imageOffer","in":["idyl-e3-entity-extraction-engine","prose-sentence-extraction-engine","renku-language-detection-engine","sonnet-tokenization-engine"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mxhero"},{"field":"Microsoft.Compute/imageOffer","in":["mail2cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"my-com"},{"field":"Microsoft.Compute/imageOffer","in":["tarantool"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"narrativescience"},{"field":"Microsoft.Compute/imageOffer","in":["narratives-for-power-bi"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nasuni"},{"field":"Microsoft.Compute/imageOffer","in":["nasuni-nmc","nasuni_edge_appliance"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ncbi"},{"field":"Microsoft.Compute/imageOffer","in":["ncbi-blast-2-3-0","ncbi-free-2-2-31"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nebbiolo-technologies-inc"},{"field":"Microsoft.Compute/imageOffer","in":["fog-system-manager","fogsm_basic"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"neo4j"},{"field":"Microsoft.Compute/imageOffer","in":["neo4j-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netapp"},{"field":"Microsoft.Compute/imageOffer","in":["netapp-altavault-cloud-integrated-storage-solution","netapp-oncommand-cloud-manager","netapp-ontap-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netgate"},{"field":"Microsoft.Compute/imageOffer","in":["netgate-pfsense-azure-fw-vpn-router"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netiq"},{"field":"Microsoft.Compute/imageOffer","in":["replication_environment"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netscout"},{"field":"Microsoft.Compute/imageOffer","in":["netscout_virtual_ngeniusone_with_vscout","netscout_vstream"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netmail"},{"field":"Microsoft.Compute/imageOffer","in":["netmail-search"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netsweeper"},{"field":"Microsoft.Compute/imageOffer","in":["netsweeper6-0-6"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netx"},{"field":"Microsoft.Compute/imageOffer","in":["simplehelp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"neusoft-neteye"},{"field":"Microsoft.Compute/imageOffer","in":["neusoft-nisg-va-v1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nginxinc"},{"field":"Microsoft.Compute/imageOffer","in":["nginx-plus-v1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nicepeopleatwork"},{"field":"Microsoft.Compute/imageOffer","in":["youzana"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nodejsapi"},{"field":"Microsoft.Compute/imageOffer","in":["node-js-api"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"noobaa"},{"field":"Microsoft.Compute/imageOffer","in":["noobaa-hybrid-s3-archive-05","noobaa-multi-cloud-deduplication"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"northbridge-secure"},{"field":"Microsoft.Compute/imageOffer","in":["netconnect1","netconnectx"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nubeva-inc"},{"field":"Microsoft.Compute/imageOffer","in":["controller","test"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nuco-networks"},{"field":"Microsoft.Compute/imageOffer","in":["aionnode"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nuxeo"},{"field":"Microsoft.Compute/imageOffer","in":["nuxeo-6-lts","nuxeo-lts"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nvidia"},{"field":"Microsoft.Compute/imageOffer","in":["ngc_azure_17_11"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"o2mc-real-time-data-platform"},{"field":"Microsoft.Compute/imageOffer","in":["o2mc-platform-app"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"oceanblue-cloud"},{"field":"Microsoft.Compute/imageOffer","in":["obc-sdwan-solutions"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"omega-software"},{"field":"Microsoft.Compute/imageOffer","in":["ods_datastage"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"onyx-point-inc"},{"field":"Microsoft.Compute/imageOffer","in":["op-bnf-v1","op-bnf1_6-v1","op-bpnifi-v1","op-bpnifi16-v1","op-scc-v1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"onapsis"},{"field":"Microsoft.Compute/imageOffer","in":["osp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"op5"},{"field":"Microsoft.Compute/imageOffer","in":["op5-monitor"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"opencell"},{"field":"Microsoft.Compute/imageOffer","in":["meveo","meveo403sp2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","CentOS-CI","CentOS-HPC","CentOS-LVM","CentOS-SRIOV"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"openvpn"},{"field":"Microsoft.Compute/imageOffer","in":["openvpnas"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","in":["Oracle-Database-Ee","Oracle-Database-Se","Oracle-Linux","Oracle-WebLogic-Server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"orientdb"},{"field":"Microsoft.Compute/imageOffer","in":["orientdb-community-edition","orientdb-community-edition-2_2","orientdb-enterprise-edition-2_2","orientdb-enterprise-edition-2_2_17"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"osirium-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["osirium-pxm-platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"osnexus"},{"field":"Microsoft.Compute/imageOffer","in":["quantastorvsav4"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"paloaltonetworks"},{"field":"Microsoft.Compute/imageOffer","in":["panorama","vmseries1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"panzura-file-system"},{"field":"Microsoft.Compute/imageOffer","in":["azura-freedom-filer-v7110","panzura-cloud-filer","panzura-freedom-filer-7140-13222","panzura-freedom-filer-716-13549","panzura-freedom-filer-v7020"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"parasoft"},{"field":"Microsoft.Compute/imageOffer","in":["parasoft-service-virtualization"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"passlogy"},{"field":"Microsoft.Compute/imageOffer","in":["passlogic"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"penta-security-systems-inc"},{"field":"Microsoft.Compute/imageOffer","in":["wapples"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"percona"},{"field":"Microsoft.Compute/imageOffer","in":["percona-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"postgres-pro"},{"field":"Microsoft.Compute/imageOffer","in":["postgres-pro-enterprise","postgres-pro-enterprise-10","postgres-pro-standard","postgres-pro-standard-10"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"plesk"},{"field":"Microsoft.Compute/imageOffer","in":["plesk-onyx-linux","solution-server-business","solution-server-wordpress"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"prestashop"},{"field":"Microsoft.Compute/imageOffer","in":["prestashop16-lamp","ubuntu-base-for-prestashop"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"prime-strategy"},{"field":"Microsoft.Compute/imageOffer","in":["kusanagi-77"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","in":["pivotal-gpdb-vm","pivotal-greenplum-images","pivotal-ops-manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"process-one"},{"field":"Microsoft.Compute/imageOffer","in":["ejabberd-community-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"profecia"},{"field":"Microsoft.Compute/imageOffer","in":["full_disk_encryption_vm","project_tools_vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"progelspa"},{"field":"Microsoft.Compute/imageOffer","in":["libra-esva-antispam"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ptsecurity"},{"field":"Microsoft.Compute/imageOffer","in":["ptaf-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pulse-secure"},{"field":"Microsoft.Compute/imageOffer","in":["pulse-connect-secure-vm","pulse-virtual-traffic-manager","pulse-virtual-traffic-manager-with-waf","pulse-virtual-traffic-manager-with-waf2","pulse-virtual-traffic-manager2","pulse-virtual-web-application-firewall","pulse-virtual-web-application-firewall2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"PuppetLabs"},{"field":"Microsoft.Compute/imageOffer","in":["PuppetEnterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"puppet"},{"field":"Microsoft.Compute/imageOffer","in":["puppet-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pydio"},{"field":"Microsoft.Compute/imageOffer","in":["pydio-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"qore-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["qorus"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"qualysguard"},{"field":"Microsoft.Compute/imageOffer","in":["qualys-virtual-firewall-appliance","qualys-virtual-scanner-v23b","qualys-virtual-scanner-v24"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"quasardb"},{"field":"Microsoft.Compute/imageOffer","in":["quasardb"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"qubole-inc"},{"field":"Microsoft.Compute/imageOffer","in":["qubole-data-service"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"quest"},{"field":"Microsoft.Compute/imageOffer","in":["fve"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"racknap"},{"field":"Microsoft.Compute/imageOffer","in":["racknap-server","racknap-server-linux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"radware"},{"field":"Microsoft.Compute/imageOffer","in":["radware-alteon-va"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"radiant-logic"},{"field":"Microsoft.Compute/imageOffer","in":["radiantone-vms"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rancher"},{"field":"Microsoft.Compute/imageOffer","in":["rancheros"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rapid7"},{"field":"Microsoft.Compute/imageOffer","in":["nexpose-scan-engine","rapid7-vm-console"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rapidminer"},{"field":"Microsoft.Compute/imageOffer","in":["rapidminer_server_75","rapidminer_server_76","rapidminer_server_80","rapidminer_server_81"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"realm"},{"field":"Microsoft.Compute/imageOffer","in":["realm-mobile-platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"reblaze"},{"field":"Microsoft.Compute/imageOffer","in":["rbzr-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","RHEL","rhel-byos","rhel-ocp-marketplace","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HANA"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"relevance-lab"},{"field":"Microsoft.Compute/imageOffer","in":["rlcatalyst"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"remotelearner"},{"field":"Microsoft.Compute/imageOffer","in":["fully-supported-moodle"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"revolution-analytics"},{"field":"Microsoft.Compute/imageOffer","in":["revolution-r-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RightScaleLinux"},{"field":"Microsoft.Compute/imageOffer","in":["RightImage-CentOS","RightImage-Ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RiverbedTechnology"},{"field":"Microsoft.Compute/imageOffer","in":["steelapp_traffic_manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"riverbed"},{"field":"Microsoft.Compute/imageOffer","in":["riverbed-sccm-5-5-1","riverbed-steelcentral-appinternals","riverbed-steelhead-9-2","riverbed-steelhead-9-5-0","riverbed-steelhead-9-6-0","riverbed_steelconnect_gw","riverbed_steelconnect_sh","steelapp_traffic_manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rocketsoftware"},{"field":"Microsoft.Compute/imageOffer","in":["rocket-discover"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rsa-security-llc"},{"field":"Microsoft.Compute/imageOffer","in":["rsa-nw-azure-arch","rsa-nw-azure-broker","rsa-nw-azure-con","rsa-nw-azure-esa","rsa-nw-azure-ldec","rsa-nw-azure-vlc","rsa-nw-suite-11","rsa-nw-suite-11-1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rsk-labs"},{"field":"Microsoft.Compute/imageOffer","in":["rsk-bamboo-beta-node","rsk-node-orchid"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"saama"},{"field":"Microsoft.Compute/imageOffer","in":["fluidanalyticsengine","insurancefraudanalytics","realworldevidence"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"saltstack"},{"field":"Microsoft.Compute/imageOffer","in":["centos65saltstackenterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"scalearc"},{"field":"Microsoft.Compute/imageOffer","in":["scalearc-for-mysql-paygo","scalearc-for-sql-server-pay-go","scalearc_mysql-server","scalearc_sql_server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"scalegrid"},{"field":"Microsoft.Compute/imageOffer","in":["centos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sap"},{"field":"Microsoft.Compute/imageOffer","in":["hanaexpress"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"scality"},{"field":"Microsoft.Compute/imageOffer","in":["scalityconnecthourly"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"secureworks"},{"field":"Microsoft.Compute/imageOffer","in":["scwx-azure-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"shadow-soft"},{"field":"Microsoft.Compute/imageOffer","in":["icinga","icinga2-5","icinga2-7"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"signal-sciences"},{"field":"Microsoft.Compute/imageOffer","in":["signalscienceswpp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sightapps"},{"field":"Microsoft.Compute/imageOffer","in":["sightapps"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"silver-peak-systems"},{"field":"Microsoft.Compute/imageOffer","in":["silver_peak_edgeconnect","silver_peak_vx"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"simmachinesinc"},{"field":"Microsoft.Compute/imageOffer","in":["simmachines_vm_v2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sinefa"},{"field":"Microsoft.Compute/imageOffer","in":["sinefa-probe"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"skyarc"},{"field":"Microsoft.Compute/imageOffer","in":["mt6","mta"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"smartmessage-autoflow"},{"field":"Microsoft.Compute/imageOffer","in":["martmessage-autoflow"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"snapt-adc"},{"field":"Microsoft.Compute/imageOffer","in":["snaptadc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"soasta"},{"field":"Microsoft.Compute/imageOffer","in":["cloudtest-lite"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"softnas"},{"field":"Microsoft.Compute/imageOffer","in":["cloud_dev","mp_ce","mp_ent","mp_nas_byol","mp_nas_ep","mp_nas_gp","mp_nas_hp","mp_plat","private_offerings","softnas-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"solanolabs"},{"field":"Microsoft.Compute/imageOffer","in":["solano-ci-private-beta"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"soha"},{"field":"Microsoft.Compute/imageOffer","in":["soha-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"solar-security"},{"field":"Microsoft.Compute/imageOffer","in":["solar-incode"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sonicwall-inc"},{"field":"Microsoft.Compute/imageOffer","in":["sonicwall-nsz-azure","waf"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sophos"},{"field":"Microsoft.Compute/imageOffer","in":["sophos-xg"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"spagobi"},{"field":"Microsoft.Compute/imageOffer","in":["spagobi"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"spacecurve"},{"field":"Microsoft.Compute/imageOffer","in":["spacecurve-quickstart"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"splunk"},{"field":"Microsoft.Compute/imageOffer","in":["splunk-enterprise-base-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"src-solution"},{"field":"Microsoft.Compute/imageOffer","in":["pilot-things-onem2m-smart-network"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sqlstream"},{"field":"Microsoft.Compute/imageOffer","in":["com"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sphere3d"},{"field":"Microsoft.Compute/imageOffer","in":["snapcloud-byol","snapcloud-standard"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stackato-platform-as-a-service"},{"field":"Microsoft.Compute/imageOffer","in":["activestate-stackato"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stackstorm"},{"field":"Microsoft.Compute/imageOffer","in":["stackstorm-2015-1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"startekfingerprintmatch"},{"field":"Microsoft.Compute/imageOffer","in":["bioserver"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"steelhive"},{"field":"Microsoft.Compute/imageOffer","in":["steelhive_carbon"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stonefly"},{"field":"Microsoft.Compute/imageOffer","in":["stonefly-cloud-drive"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stormshield"},{"field":"Microsoft.Compute/imageOffer","in":["stormshield-network-security-for-cloud","stormshield-network-security-for-cloud-xl"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"storreduce"},{"field":"Microsoft.Compute/imageOffer","in":["storreduce"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stratumn"},{"field":"Microsoft.Compute/imageOffer","in":["indigo-node"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"streamsets"},{"field":"Microsoft.Compute/imageOffer","in":["streamsets-data-collector"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"striim"},{"field":"Microsoft.Compute/imageOffer","in":["integrationforsqlserveronazure","integrationtoazurestorage","integrationtoeventhub","integrationtohdinsight"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["openSUSE-Leap","SLES","SLES-BYOS","SLES-HPC","SLES-HPC-Priority","SLES-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-SAPCAL","SLES-Standard","SUSE-CaaSP-Admin-BYOS","SUSE-CaaSP-Cluster-BYOS","SUSE-Manager-Proxy-BYOS","SUSE-Manager-Server-BYOS"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"symantectest1"},{"field":"Microsoft.Compute/imageOffer","in":["cwpsazure-beta-01"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"synack-inc"},{"field":"Microsoft.Compute/imageOffer","in":["synack-crowd-security-intelligence"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"synechron-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["blockchain_tradefinance_quorum"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"syte"},{"field":"Microsoft.Compute/imageOffer","in":["syteoffer"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tactic"},{"field":"Microsoft.Compute/imageOffer","in":["tactic-workflow-v001"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"talari-networks"},{"field":"Microsoft.Compute/imageOffer","in":["talari-networks-virtual-appliance"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"talena-inc"},{"field":"Microsoft.Compute/imageOffer","in":["talena_inc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tata_communications"},{"field":"Microsoft.Compute/imageOffer","in":["netfoundry_cloud_gateway"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tavendo"},{"field":"Microsoft.Compute/imageOffer","in":["crossbar_on_azure_ubuntu1404"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"techdivision"},{"field":"Microsoft.Compute/imageOffer","in":["appserver-io-pe"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"techlatest"},{"field":"Microsoft.Compute/imageOffer","in":["ethereumdevkit","rippledevelopersuit"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"telepat"},{"field":"Microsoft.Compute/imageOffer","in":["free"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tenable"},{"field":"Microsoft.Compute/imageOffer","in":["tenable-nessus-6-byol","tenable-nessus-professional","tenablecorenessus","tenablecorewas"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"teradata"},{"field":"Microsoft.Compute/imageOffer","in":["teradata-data-mover","teradata-data-mover-agent","teradata-data-mover-intellisphere","teradata-data-stream-controller","teradata-database-1510","teradata-database-1510-byol","teradata-database-1510-intellisphere","teradata-database-1510-v2","teradata-database-1610-intellisphere","teradata-database-1610-v2","teradata-database-1620","teradata-database-1620-byol","teradata-database-1620-intellisphere","teradata-database-enterprise","teradata-database-v1610","teradata-database-v1610-byol","teradata-ecosystem-manager","teradata-querygrid-manager","teradata-querygrid-manager-intellisphere","teradata-rest-services","teradata-server-management","teradata-viewpoint","teradata-viewpoint-intellisphere"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"thales-vormetric"},{"field":"Microsoft.Compute/imageOffer","in":["ciphertrust-ckm","vormetric-dsm","vormetric-dsm-6-1-0","vormetric-tokenization-server","vts-2_2_0_2604"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"things-board"},{"field":"Microsoft.Compute/imageOffer","in":["tb-pe-cassandra"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"thoughtspot-inc"},{"field":"Microsoft.Compute/imageOffer","in":["thoughtspotvirtualmachine"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tibco-software"},{"field":"Microsoft.Compute/imageOffer","in":["grid-server-engine"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tig"},{"field":"Microsoft.Compute/imageOffer","in":["backup-as-a-service"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tigergraph"},{"field":"Microsoft.Compute/imageOffer","in":["tigergraph"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tmaxsoft"},{"field":"Microsoft.Compute/imageOffer","in":["tmax-jeusee","tmax-jeusse","tmax-webtobse"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tokyosystemhouse"},{"field":"Microsoft.Compute/imageOffer","in":["osscobol151j-pg961-centos72"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"torusware"},{"field":"Microsoft.Compute/imageOffer","in":["speedus-lite-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"totemo"},{"field":"Microsoft.Compute/imageOffer","in":["totemo-azr-tm6"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"townsend-security"},{"field":"Microsoft.Compute/imageOffer","in":["alliance-key-manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"trendmicro"},{"field":"Microsoft.Compute/imageOffer","in":["deep-security-vm","deep-security-vm-byol","iot-security-sdk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"truestack"},{"field":"Microsoft.Compute/imageOffer","in":["tsdc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tsa-public-service"},{"field":"Microsoft.Compute/imageOffer","in":["ckan-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tunnelbiz"},{"field":"Microsoft.Compute/imageOffer","in":["centos70-min","centos7optimizwithwordpress","centos7phpoptimizing","centos7phpoptimizingnginx","centos7phpoptimizwlaravel","centos7phpoptimizwosticket","centos7webserverwithwaf","centos7withaspdotnetcore2apache","centos7withjoomla","debian_web_server","fedora","fusio","linuxwithlimesurvey","networkmonitoringsystem","rimauwaf_cloud","ubuntu_server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"twistlock"},{"field":"Microsoft.Compute/imageOffer","in":["twistlock"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"typesafe"},{"field":"Microsoft.Compute/imageOffer","in":["typesafe-reactive-maps-demo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ubeeko"},{"field":"Microsoft.Compute/imageOffer","in":["hfactory-tools-for-hdinsight","hfactory-tools-sandbox"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ubercloud"},{"field":"Microsoft.Compute/imageOffer","in":["ansys-17-2-fluids-structures","ansys_182_test","comsol-multiphysics-v5-2","openfoam-v2dot3-centos-v6","openfoam-v3dot0","star-ccm-v10-04","star-ccm-v10-06-heeds-mdo-v2015","star-ccm-v12-00"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ulex"},{"field":"Microsoft.Compute/imageOffer","in":["voximal"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"unifi-software"},{"field":"Microsoft.Compute/imageOffer","in":["unifi-data-catalog","unifi-dataplatform-2-3-3-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"unitrends"},{"field":"Microsoft.Compute/imageOffer","in":["unitrends-enterprise-backup-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"usp"},{"field":"Microsoft.Compute/imageOffer","in":["unified-streaming-vod-standard"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"varnish"},{"field":"Microsoft.Compute/imageOffer","in":["varnish-cache_","varnish-custom-statistics","varnish-plus-administration-and-statistics","varnish-plus-caching-engine-4"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vaultive-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cloud-security-platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vbot"},{"field":"Microsoft.Compute/imageOffer","in":["vbot"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"velocloud"},{"field":"Microsoft.Compute/imageOffer","in":["velocloud-virtual-edge","velocloud-virtual-edge-3x"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vidispine"},{"field":"Microsoft.Compute/imageOffer","in":["vidispine-content-management"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"veritas"},{"field":"Microsoft.Compute/imageOffer","in":["cloudpoint-2-0-0","veritas-resiliency-platform-vhd-offer"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"veeam"},{"field":"Microsoft.Compute/imageOffer","in":["veeamhubimage"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vigyanlabs-innovations-pvt-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["ipm-plus-energy-saver"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"viptela"},{"field":"Microsoft.Compute/imageOffer","in":["viptela-vedge-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vizixiotplatformretail001"},{"field":"Microsoft.Compute/imageOffer","in":["vizix-iot-platform-retail-005"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vmturbo"},{"field":"Microsoft.Compute/imageOffer","in":["turbonomic","vmturbo64-opsmgr-5_3"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vte"},{"field":"Microsoft.Compute/imageOffer","in":["slashdb"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vu-llc"},{"field":"Microsoft.Compute/imageOffer","in":["vu-app-server","vu-facerecogn","vu-fraudanalysis","vu-secureonboarding"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"wallarm"},{"field":"Microsoft.Compute/imageOffer","in":["wallarm-ng-waf-offer-1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"wallix"},{"field":"Microsoft.Compute/imageOffer","in":["wallix-wabsuite"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"watchguard-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["vm-firebox-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"waves"},{"field":"Microsoft.Compute/imageOffer","in":["waves"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"websense-apmailpe"},{"field":"Microsoft.Compute/imageOffer","in":["ap-data-email-gateway","forcepoint-email-security-85beta","triton-ap-data"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"wmspanel"},{"field":"Microsoft.Compute/imageOffer","in":["nimble-streamer-centos","nimble-streamer-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"wowza"},{"field":"Microsoft.Compute/imageOffer","in":["wowzastreamingengine"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"xfinityinc"},{"field":"Microsoft.Compute/imageOffer","in":["d3view-v5"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"xtremedata"},{"field":"Microsoft.Compute/imageOffer","in":["dbx"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"yellowfin"},{"field":"Microsoft.Compute/imageOffer","in":["yellowfin-for-azure-byol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"xyzrd-group-ou"},{"field":"Microsoft.Compute/imageOffer","in":["c73-zultys-mxvirtual"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"your-shop-online"},{"field":"Microsoft.Compute/imageOffer","in":["herefordshire-enterprise-platform-drupal-7","xenofile"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"zend"},{"field":"Microsoft.Compute/imageOffer","in":["php-56-zend-server","php-zend-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"z1"},{"field":"Microsoft.Compute/imageOffer","in":["z1-securehub"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"zerodown_software"},{"field":"Microsoft.Compute/imageOffer","in":["bcaasforazure","stackbcaas"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"zoomdata"},{"field":"Microsoft.Compute/imageOffer","in":["zoomdata-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"zscaler"},{"field":"Microsoft.Compute/imageOffer","in":["zscaler-private-access"]}]}]}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/b9c65c79770e8c51","type":"Microsoft.Authorization/policyDefinitions","name":"b9c65c79770e8c51"},{"properties":{"displayName":"nrms-nsg-rule-104_1.3","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:28:20.3270264Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"},"defaultValue":""},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"},"defaultValue":[]},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''tagname'')]]","equals":""},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[resourceGroup().tags[''SkipNRMSAll'']]","equals":""},{"field":"tags[''autopilotcluster'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotcluster'']]","equals":""},{"field":"tags[''autopilotenvironment'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotenvironment'']]","equals":""},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","contains":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","in":["Any","*"]},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/bac0fb65020410a4","type":"Microsoft.Authorization/policyDefinitions","name":"bac0fb65020410a4"},{"properties":{"displayName":"audit - ssh auth on existing vms_1.3","policyType":"Custom","mode":"All","description":"This - policy audits whether any Linux VMs use password-only authentication for SSH - on existing resources.","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-25T22:01:38.4305071Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"resourcetagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name","description":"Rule is not deployed if this tag exists on the Virtual - Machine"}},"resourcegrouptagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name at the resource group level","description":"Rule is not deployed - if this tag exists on the Resource Group"}}},"policyRule":{"if":{"allof":[{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''resourcetagname''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''resourcegrouptagname'')]]","equals":""},{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"True"},{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration.disablePasswordAuthentication","equals":"false"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/c2f5d119c894ce34","type":"Microsoft.Authorization/policyDefinitions","name":"c2f5d119c894ce34"},{"properties":{"displayName":"nrms-nsg-rule-107_1.2","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-07-09T18:15:32.278708Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"},"defaultValue":""},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"},"defaultValue":[]},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"allowedValues":["NA","NRMSException","SkipNRMSCorp","nrmsskipcorpnetsaw","SkipNRMSSAW","SkipNRMSDatabricks","SkipNRMSRDPSSH","SkipNRMSMgmt","SkipNRMSHigh","SkipNRMSVNet","SkipNRMSLoadBal","SkipNRMSDB","SkipNRMSMedium"],"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"[parameters(''sourceValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","contains":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","in":["Any","*"]},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/c4184f404efb2fe5","type":"Microsoft.Authorization/policyDefinitions","name":"c4184f404efb2fe5"},{"properties":{"displayName":"geneva - monitoring extension and azsecpack autoupdate policy for iaas_1.2","policyType":"Custom","mode":"Indexed","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-06-23T19:35:05.015959Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"resourcetagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name","description":"Rule is not deployed if this tag exists on the Virtual - Machine"}},"resourcegrouptagname1":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name at the resource group level","description":"Rule is not deployed - if this tag exists on the Resource Group"}},"resourcegrouptagname2":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name at the resource group level","description":"Rule is not deployed - if this tag exists on the Resource Group"}},"subscriptiontagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name at the subscription level","description":"Rule is not deployed if - this tag exists on the Subscription"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''resourcetagname''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''resourcegrouptagname1'')]]","equals":""},{"value":"[resourceGroup().tags[parameters(''resourcegrouptagname2'')]]","equals":""},{"value":"[subscription().tags[parameters(''subscriptiontagname'')]]","equals":""},{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"}]},{"not":{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration.provisionVMAgent","equals":"false"}}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","name":"Microsoft.Azure.Geneva.GenevaMonitoring","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"GenevaMonitoring"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Geneva"},{"field":"Microsoft.Compute/virtualMachines/extensions/enableAutomaticUpgrade","equals":"true"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"resources":[{"apiVersion":"2018-10-01","name":"[concat(parameters(''vmName''), - ''/Microsoft.Azure.Geneva.GenevaMonitoring'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.Azure.Geneva","type":"GenevaMonitoring","typeHandlerVersion":"2.0","autoUpgradeMinorVersion":true,"enableAutomaticUpgrade":true,"settings":{},"protectedSettings":{}}}]},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/c6cc0ff730a1cb3c","type":"Microsoft.Authorization/policyDefinitions","name":"c6cc0ff730a1cb3c"},{"properties":{"displayName":"audit - ssh auth on new vmss_1.3","policyType":"Custom","mode":"All","description":"This - policy audits whether any Linux VMSSs use password-only authentication for - SSH on new resources.","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-25T22:01:43.9041265Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"resourcetagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name","description":"Rule is not deployed if this tag exists on the Virtual - Machine"}},"resourcegrouptagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name at the resource group level","description":"Rule is not deployed - if this tag exists on the Resource Group"}}},"policyRule":{"if":{"allOf":[{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''resourcetagname''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''resourcegrouptagname'')]]","equals":""},{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"anyof":[{"field":"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.osProfile.linuxConfiguration.disablePasswordAuthentication","exists":"False"},{"field":"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.osProfile.linuxConfiguration.disablePasswordAuthentication","equals":"false"}]},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"7isolutions"},{"field":"Microsoft.Compute/imageOffer","in":["sapp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"128technology"},{"field":"Microsoft.Compute/imageOffer","in":["128t_networking_platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"4psa"},{"field":"Microsoft.Compute/imageOffer","in":["voipnow"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"a10networks"},{"field":"Microsoft.Compute/imageOffer","in":["a10-lightning-adc","a10-vthunder-adc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"accellion"},{"field":"Microsoft.Compute/imageOffer","in":["kiteworks-by-accellion"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"abiquo"},{"field":"Microsoft.Compute/imageOffer","in":["abiquo-hybrid-cloud-34"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"accops"},{"field":"Microsoft.Compute/imageOffer","in":["hysecure5050"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"actian_matrix"},{"field":"Microsoft.Compute/imageOffer","in":["actian_matrix"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"actifio"},{"field":"Microsoft.Compute/imageOffer","in":["actifio-sky"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"actian-corp"},{"field":"Microsoft.Compute/imageOffer","in":["vector-community","vector-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Acronis"},{"field":"Microsoft.Compute/imageOffer","in":["storage"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"activeeon"},{"field":"Microsoft.Compute/imageOffer","in":["activeeon-workload-scheduler"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"aerospike"},{"field":"Microsoft.Compute/imageOffer","in":["aerospike-database-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"affinio"},{"field":"Microsoft.Compute/imageOffer","in":["platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"aiscaler-cache-control-ddos-and-url-rewriting-"},{"field":"Microsoft.Compute/imageOffer","in":["aimobile-site-acceleration","aiprotect-ddos-firewall","aiscaler-traffic-manager-caching","aivideo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"akamai-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["enterprise-application-access"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"alces-flight-limited"},{"field":"Microsoft.Compute/imageOffer","in":["alces-flight-compute-solo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"alertlogic"},{"field":"Microsoft.Compute/imageOffer","in":["alert-logic-tm","alert-logic-wsm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"alienvault"},{"field":"Microsoft.Compute/imageOffer","in":["unified-security-management-anywhere"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"alldigital-brevity"},{"field":"Microsoft.Compute/imageOffer","in":["alldigital-brevity-uploader"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"altair-engineering-inc"},{"field":"Microsoft.Compute/imageOffer","in":["altair_hwulva"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"altamira-corporation"},{"field":"Microsoft.Compute/imageOffer","in":["lumify"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"antmedia"},{"field":"Microsoft.Compute/imageOffer","in":["ams_community_edition","ant_media_server_enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"apigee"},{"field":"Microsoft.Compute/imageOffer","in":["apigee-edge"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appcara"},{"field":"Microsoft.Compute/imageOffer","in":["app360v43-001"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appcelerator"},{"field":"Microsoft.Compute/imageOffer","in":["appcelerator-arrow-azure-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appex-networks"},{"field":"Microsoft.Compute/imageOffer","in":["cloudexpress"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appistry"},{"field":"Microsoft.Compute/imageOffer","in":["genomepilot"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appscale-marketplace"},{"field":"Microsoft.Compute/imageOffer","in":["appscale"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"arangodb"},{"field":"Microsoft.Compute/imageOffer","in":["arangodb"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"arista-networks"},{"field":"Microsoft.Compute/imageOffer","in":["veos-router"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"array_networks"},{"field":"Microsoft.Compute/imageOffer","in":["array-networks-vapv"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"astadia-1148316"},{"field":"Microsoft.Compute/imageOffer","in":["astadia-ui-automation-tee"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"atomicorp"},{"field":"Microsoft.Compute/imageOffer","in":["secure-os","secure-ubuntu-os"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"audiocodes"},{"field":"Microsoft.Compute/imageOffer","in":["mediantsessionbordercontroller"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"auriq-systems"},{"field":"Microsoft.Compute/imageOffer","in":["essentia"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"awingu"},{"field":"Microsoft.Compute/imageOffer","in":["awingu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"aviatrix-systems"},{"field":"Microsoft.Compute/imageOffer","in":["aviatrix-cloud-services","aviatrix-companion-gateway","aviatrix-companion-gateway-v2","aviatrix-vpn-gw","aviatrix_multi_cloud_service","aviatrix_openvpn_service","aviatrix_openvpn_service10","aviatrix_openvpn_service25","aviatrix_openvpn_service50"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"avi-networks"},{"field":"Microsoft.Compute/imageOffer","in":["avi-vantage-adc","internal-avi-vantage-adc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"axway"},{"field":"Microsoft.Compute/imageOffer","in":["axway-mailgate-secure-collaboration-advanced","axway-mailgate-secure-collaboration-premium","axway-mailgate-secure-collaboration-standard"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"azul"},{"field":"Microsoft.Compute/imageOffer","in":["azul-zulu-ubuntu-1804"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"azurecyclecloud"},{"field":"Microsoft.Compute/imageOffer","in":["azure-cyclecloud-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"AzureDatabricks"},{"field":"Microsoft.Compute/imageOffer","in":["Databricks"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"baas-techbureau"},{"field":"Microsoft.Compute/imageOffer","in":["b1327623-d29b-4cc1-b833-85067dcc7bce"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"baffle-io"},{"field":"Microsoft.Compute/imageOffer","in":["baffle-application-data-protection"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"balabit"},{"field":"Microsoft.Compute/imageOffer","in":["balabit-shell-control-box","psm","sps"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"barracudanetworks"},{"field":"Microsoft.Compute/imageOffer","in":["barracuda-app-sec-control-center","barracuda-email-security-gateway","barracuda-ng-cc","barracuda-ng-firewall","waf"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"basho"},{"field":"Microsoft.Compute/imageOffer","in":["riak-2-0-1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","in":["autodesk-maya-arnold-centos73","rendering-centos73"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bdy"},{"field":"Microsoft.Compute/imageOffer","in":["buddy"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Bitnami"},{"field":"Microsoft.Compute/imageOffer","in":["3-4","abantecart","activemq","akeneo","alfrescocommunity","apachesolr","artifactory","canvaslms","cassandra","civicrm","cmsmadesimple","codiad","concrete5","consul","coppermine","couchdb","diaspora","discourse","djangostack","dokuwiki","dolibarr","DreamFactory","drupal","elastic-search","elk","erpnext","espocrm","etcd","eXo-Platform","exoplatform","fatfreecrm","ghost","gitlab","grafana","hadoop","hhvmstack","hordegroupwarewebmail","jasperreports","jenkins","joomla","jrubystack","kafka","kong","kubernetessandbox","lampstack","lappstack","letschat","liferay","limesurvey","livehelperchat","magento","mahara","mantis","mariadb","mattermost","mautic","mean","mediawiki","memcached","modx","mongodb","moodle","multicraft","mybb","mysql","nats","neo4j","neos","nginxstack","noalyss","nodejs","ocportal","odoo","openatrium","opencart","openedx","openfire","openproject","orangehrm","osclass","owncloud","oxid-eshop","parseserver","phabricator","phpbb","phplist","pimcore","piwik","plone","pootle","postgresql","prestashop","processmakerenterprise","processmakeropensourceedition","processwire","publify","rabbitmq","redash","redis","redmine","redmineplusagile","reportserver","reportserverenterprise","resourcespace","reviewboard","reviewboardpowerpack","roundcube","rubystack","seopanel","shopware","silverstripe","simplemachinesforum","sonarqube","spree","subversion","suitecrm","tensorflowserving","testlink","tikiwikicmsgroupware","tinytinyrss","tom-cat","trac","typo3","weblate","webmailpro","wildfly","wordpress","wordpress-multisite","wordpresspro","x2enginesalescrm","xoops","youtrack","zookeeper","zurmo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"black-duck-software"},{"field":"Microsoft.Compute/imageOffer","in":["blackduck_hub_vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"blk-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["blk-io-erc-20-rest-service"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"blockapps"},{"field":"Microsoft.Compute/imageOffer","in":["strato-blockchain-base-template-latest"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"blockstack"},{"field":"Microsoft.Compute/imageOffer","in":["blockstack-core-v14"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"blockchain-foundry"},{"field":"Microsoft.Compute/imageOffer","in":["syscoin-api","syscoin-full-node","syscoin-price-peg"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bloombase"},{"field":"Microsoft.Compute/imageOffer","in":["bloombase-storesafe-3_4_7_0_el7_x86_64"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bluecat"},{"field":"Microsoft.Compute/imageOffer","in":["bluecat-bam-for-azure","bluecat-dns-for-azure","bluecat-edge-service-point-vm-for-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bluetalon"},{"field":"Microsoft.Compute/imageOffer","in":["bluetalon"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"brocade_communications"},{"field":"Microsoft.Compute/imageOffer","in":["brocade-virtual-traffic-manager","brocade-virtual-traffic-manager-with-waf-module","brocade-virtual-web-application-firewall"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bt-americas-inc"},{"field":"Microsoft.Compute/imageOffer","in":["diamondip-sapphire-ev10","diamondip-sapphire-ev20","diamondip-sapphire-v10","diamondip-sapphire-v20","diamondip-sapphire-v5","diamondip-sapphire-vcaa20"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"buddhalabs"},{"field":"Microsoft.Compute/imageOffer","in":["sles_12_pci"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"carto"},{"field":"Microsoft.Compute/imageOffer","in":["cartobuilder2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cask"},{"field":"Microsoft.Compute/imageOffer","in":["cdap-cloud-sandbox"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","in":["UbuntuServer","Ubuntu_Core"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cavirin"},{"field":"Microsoft.Compute/imageOffer","in":["cavirin-platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cautelalabs"},{"field":"Microsoft.Compute/imageOffer","in":["log_management"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"celum-gmbh"},{"field":"Microsoft.Compute/imageOffer","in":["celumdam"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cds"},{"field":"Microsoft.Compute/imageOffer","in":["cds-data-migration-solution-for-legacy-to-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-6-v2-0-2-l1","cis-centos-7-v2-1-1-l1","cis-oracle-linux-6-v1-0-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-rhel-6-v2-0-2-l1","cis-rhel-7-v2-2-0-l1","cis-suse-linux-11-v2-0-0-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1404-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"certivox"},{"field":"Microsoft.Compute/imageOffer","in":["sso-test"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cfd-direct"},{"field":"Microsoft.Compute/imageOffer","in":["cfd-direct-from-the-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"chain"},{"field":"Microsoft.Compute/imageOffer","in":["chain-core-developer-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"checkpoint"},{"field":"Microsoft.Compute/imageOffer","in":["check-point-r77-10","check-point-vsec-r80","check-point-vsec-r80-blink","sg2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"chef-software"},{"field":"Microsoft.Compute/imageOffer","in":["chef-automate-vm-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"circleci"},{"field":"Microsoft.Compute/imageOffer","in":["circleci-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cires21"},{"field":"Microsoft.Compute/imageOffer","in":["c21l-enc","c21l-mos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cisco"},{"field":"Microsoft.Compute/imageOffer","in":["cisco-asav","cisco-csr-1000v","cisco-ftdv","cisco-meraki-vmx100","cisco-ngfwv-vm-test-unsupported","cisco_cloud_vedge_17_2_4","cos65","cos72","cos72_main_dev","uos14","vwaas-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"citrix"},{"field":"Microsoft.Compute/imageOffer","in":["citrix-sd-wan-opt","netscaler-ma-service-agent-120","netscaler-ma-service-agent-121","netscaler-sd-wan","netscaler-vpx","netscalervpx-120","netscalervpx-121","netscalervpx110-6531","netscalervpx111"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"clear-linux-project"},{"field":"Microsoft.Compute/imageOffer","in":["clear-linux-os"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"clouber"},{"field":"Microsoft.Compute/imageOffer","in":["cuber","cws","mcenter"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-cruiser"},{"field":"Microsoft.Compute/imageOffer","in":["cloud-cruiser-16"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudbees"},{"field":"Microsoft.Compute/imageOffer","in":["jenkins-enterprise","jenkins-operations-center"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudbees-enterprise-jenkins"},{"field":"Microsoft.Compute/imageOffer","in":["cloudbees-jenkins-enterprise","cloudbees-jenkins-operations-center"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudbolt-software"},{"field":"Microsoft.Compute/imageOffer","in":["cloudbolt"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudboost"},{"field":"Microsoft.Compute/imageOffer","in":["cloudboost"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudenablers-inc"},{"field":"Microsoft.Compute/imageOffer","in":["corestack"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","in":["squid-proxy"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","in":["cloudera-altus-centos-os","cloudera-centos-6","cloudera-centos-os","test-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudlanes"},{"field":"Microsoft.Compute/imageOffer","in":["cloud-video-accelerator-nfs","cloudlanes-cloud-backup-accelerator-vtl"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudlink"},{"field":"Microsoft.Compute/imageOffer","in":["cloudlink-securevm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudplan-gmbh"},{"field":"Microsoft.Compute/imageOffer","in":["cloudplan_pcn_linux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudsecurity"},{"field":"Microsoft.Compute/imageOffer","in":["paladion_ondemand_nextgen_firewall"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudsoft"},{"field":"Microsoft.Compute/imageOffer","in":["cloudsoft-amp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"clustrix"},{"field":"Microsoft.Compute/imageOffer","in":["clustrixdb"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"codelathe"},{"field":"Microsoft.Compute/imageOffer","in":["codelathe-filecloud-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"codenvy"},{"field":"Microsoft.Compute/imageOffer","in":["codenvy-on-prem"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cognosys"},{"field":"Microsoft.Compute/imageOffer","in":["1-click-secured-joomla-on-centos-7-3","1-click-secured-joomla-on-ubuntu-1404-lts","1-click-secured-joomla-on-ubuntu-1604-lts","1-click-secured-joomla-on-ubuntu-1804-lts","centos-6-9","centos-7-3","centos-7-4","centos-7-5","deploy-a-secured-modx-on-ubuntu-14-04-lts","deploy-a-secured-silverstripe-on-ubuntu-14-04-lts","hardened-mysql-5-6-on-centos-7-3","hardened-mysql-5-6-on-ubu-1404-lts","hardened-mysql-5-7-on-centos-7-3","hardened-mysql-5-7-on-ubu-1404-lts","hardened-postgresql-on-ubu-1404-lts","invoice-ninja-2-5-1-1-on-ubuntu-1404","jruby-on-ubuntu-14-04-lts","low-latency-broadcasting-server-for-live-events","owncloud-9-with-lamp-stack-on-ubuntu-1404","piwigogallerys-ubuntu_14-04_lts","sec1011-dokuwiki-on-ubuntu-1404","sec1013-elasticsearch-on-ubuntu-1404","sec1014-opencart-on-ubuntu-1404","sec1015-orangehrm-on-ubuntu-1404","sec1016-nodejs-server-on-ubuntu-1404","sec1018-haproxy-on-ubuntu-1404","sec1019-secured-tomcat-on-ubuntu-1404","sec1020-phpbb-on-hardened-ubuntu-1404","sec1021-mybb-on-hardened-ubuntu-1404","sec1022-sugarcrm-on-ubuntu-1404","sec1023-moodle-on-ubuntu-1404","sec1024_magento-on-ubuntu-1404","sec1025-secured-drupal-on-ubuntu-1404","sec1027-secured-wordpress-on-ubuntu-1404","sec1028-secured-lamp-sever-on-ubuntu-1404","sec1029-secured-mediawiki-on-ubuntu-1404","sec1030-secured-subversion-on-ubuntu-1404","sec1031-secured-passenger-nginx-on-ubuntu-1404","sec1033-secured-piwik-on-ubuntu-1404","sec1034-secured-pligg-on-ubuntu-1404","sec1035-secured-jenkins-on-ubuntu-1404","sec1036-secured-postgresql-on-ubuntu-1404","secure-cloud-lamp-ubuntu-1404","secured-abantecart-on-centos","secured-abantecart-on-ubuntu-14-04-lts","secured-acquia-drupal-on-centos","secured-acquiadurpal-on-ubuntu-14-04-lts","secured-apachesolr-on-centos","secured-apachesolr-on-ubuntu-14-04-lts","secured-arartifactory-on-centos","secured-artifactory-on-ubuntu-14-04-lts","secured-cakephp-on-centos","secured-cakephp-on-ubuntu-14-04-lts","secured-cms-made-simple-on-centos","secured-cms-made-simple-on-ubuntu-14-04-lts","secured-codiad-on-centos","secured-codiad-on-ubuntu-14-04-lts","secured-cogdam-on-centos","secured-cogdam-on-ubuntu-14-04-lts","secured-concrete5-on-centos","secured-concrete5-on-ubuntu-14-04-lts","secured-coppermine-on-centos","secured-coppermine-on-ubuntu-14-04-lts","secured-crushftp-on-centos","secured-crushftp-on-ubuntu-14-04-lts","secured-django-on-centos","secured-django-on-ubuntu-14-04-lts","secured-dokuwiki-on-centos","secured-dolibarr-on-centos","secured-dolivbarr-on-ubuntu-14-04-lts","secured-drupal-on-centos","secured-elasticsearch-on-centos","secured-enterprise-nginx-varnish-haproxy-php","secured-espocrm-on-centos","secured-espocrm-on-ubuntu-14-04-lts","secured-exoplatform-on-centos","secured-exoplatform-on-ubuntu-14-04-lts","secured-ghost-on-centos","secured-ghost-on-ubuntu-14-04-lts","secured-gradle-on-centos","secured-gradle-on-ubuntu-14-04-lts","secured-haproxy-on-centos","secured-invoice-ninja-on-centos","secured-jboss-as-on-centos","secured-jbossas-on-ubuntu-14-04-lts","secured-jenkins-on-centos","secured-jruby-on-cento","secured-lamp-on-centos","secured-lamp-on-centos-m10","secured-lapp-on-centos","secured-lapp-on-ubuntu-14-04-lts","secured-lemp-sever-on-ubuntu-1404","secured-lime-survey-on-centos","secured-limesurvey-on-ubuntu-1404","secured-live-helper-chat-on-centos","secured-livehelperchat-on-ubuntu-14-04-lts","secured-magento-on-centos","secured-mahara-on-centos","secured-mahara-on-ubuntu-14-04-lts","secured-mantis-on-centos","secured-mantis-on-ubuntu-14-04-lts","secured-mariadb-on-ubuntu-16-04","secured-mautic-on-centos","secured-mautic-on-ubuntu-14-04-lts","secured-media-wiki-on-centos","secured-modx-on-centos","secured-moodle-on-centos","secured-ngnix-on-centos-7-3","secured-ngnix-on-ubuntu-14-04-lts","secured-ngnix-on-ubuntu-16-04-lts","secured-noalyss-on-centos","secured-noalyss-on-ubuntu-14-04-lts","secured-nodejs-on-centos","secured-occlass-on-ubuntu-14-04-lts","secured-ocportal-on-ubuntu-14-04-lts","secured-open-cart-on-centos","secured-orangehrm-on-centos","secured-osclass-on-centos","secured-owncloud-on-centos","secured-oxid-eshop-on-centos","secured-oxideshop-on-ubuntu-14-04-lts","secured-passenger-nginx-on-centos","secured-piwigo-gallery-on-centos","secured-plone-on-centos","secured-plone-on-ubuntu-14-04-lts","secured-prestashop-on-centos","secured-prestashop-on-ubuntu-14-04-lts","secured-railo-on-ubuntu-14-04-lts","secured-redis-on-centos","secured-redis-on-ubuntu-1404","secured-redmine-on-centos","secured-redmine-on-ubuntu-14-04-lts","secured-redmineagile-on-ubuntu-14-04-lts","secured-report-server-on-centos","secured-reportserverent-on-ubuntu-14-04-lts","secured-resource-space-on-centos","secured-resourcespace-on-ubuntu-14-04-lts","secured-round-cube-on-centos","secured-roundcube-on-ubuntu-14-04-lts","secured-ruby-on-centos","secured-ruby-on-ubuntu-14-04-lts","secured-seopanel-on-centos","secured-seopanel-on-ubuntu-14-04-lts","secured-silverstripe-on-centos","secured-simple-invoice-on-centos","secured-simple-machines-on-centos","secured-simple-machines-on-ubuntu-14-04-lts","secured-simpleinvoice-on-ubuntu-14-04-lts","secured-subversion-on-centos","secured-suitecrm-on-centos","secured-suitecrm-on-ubuntu-14-04-lts","secured-test-link-on-centos","secured-testlink-on-ubuntu-14-04-lts","secured-thinkup-on-centos","secured-thinkup-on-ubuntu-14-04-lts","secured-tikiwikicms-on-centos","secured-tikiwikicms-on-ubuntu-14-04-lts","secured-tiny-tiny-rss-on-centos","secured-tinytinyrss-on-ubuntu-14-04-lts","secured-tomcat-on-centos","secured-trac-on-centos","secured-trac-on-ubuntu-14-04-lts","secured-typo3-on-centos","secured-typo3-on-ubuntu-14-04-lts","secured-varnish-on-centos","secured-varnish-on-ubuntu-1404","secured-wildfly-on-centos","secured-wildfly-on-ubuntu-14-04-lts","secured-wordpress-on-centos-7-3","secured-wordpress-on-ubuntu-16-04-lts","secured-x-cart-on-ubuntu-14-04-lts","secured-xoops-on-centos","secured-xoops-on-ubuntu-14-04-lts","secured-zurmo-on-centos","secured-zurmo-on-ubuntu-14-04-lts","suse15","ubuntu-14-04-lts","ubuntu-16-04-lts","ubuntu-17-04-high-performance-hardened-tcp-bbr","ubuntu-18-04","ubuntu-18-04-lts"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cohesity"},{"field":"Microsoft.Compute/imageOffer","in":["cohesity-cloudtd-tool"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cohesive"},{"field":"Microsoft.Compute/imageOffer","in":["vns3_4x_network_security"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"confluentinc"},{"field":"Microsoft.Compute/imageOffer","in":["confluentplatform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"consensys"},{"field":"Microsoft.Compute/imageOffer","in":["truffle"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"convertigo"},{"field":"Microsoft.Compute/imageOffer","in":["convertigo-for-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"corda"},{"field":"Microsoft.Compute/imageOffer","in":["corda"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"CoreOS"},{"field":"Microsoft.Compute/imageOffer","in":["CoreOS"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"couchbase"},{"field":"Microsoft.Compute/imageOffer","in":["couchbase-server-enterprise","couchbase-sync-gateway-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","in":["Debian"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cryptzone"},{"field":"Microsoft.Compute/imageOffer","in":["appgate-appliance-3_2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cybernetica-as"},{"field":"Microsoft.Compute/imageOffer","in":["uxp-securityserver-connector","uxp-securityserver_vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cyxtera"},{"field":"Microsoft.Compute/imageOffer","in":["appgatesdp-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dataart"},{"field":"Microsoft.Compute/imageOffer","in":["devicehive"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"databricks"},{"field":"Microsoft.Compute/imageOffer","in":["spfqogzeculbhdh"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"datalayer"},{"field":"Microsoft.Compute/imageOffer","in":["datalayer-notebook"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"datastax"},{"field":"Microsoft.Compute/imageOffer","in":["datastax-enterprise","datastax-enterprise-non-production-use-only"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"datasunrise"},{"field":"Microsoft.Compute/imageOffer","in":["datasunrise-database-security-suite"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dataiku"},{"field":"Microsoft.Compute/imageOffer","in":["dataiku-data-science-studio"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"datometry"},{"field":"Microsoft.Compute/imageOffer","in":["hyper-q"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dellemc"},{"field":"Microsoft.Compute/imageOffer","in":["dell-emc-avamar-virtual-edition","dell-emc-datadomain-management-center","dell-emc-datadomain-virtual-edition","dell-emc-datadomain-virtual-edition-v4","dell-emc-networker-virtual-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"delphix"},{"field":"Microsoft.Compute/imageOffer","in":["delphix_dynamic_data_platform","omniosce"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"denodo"},{"field":"Microsoft.Compute/imageOffer","in":["denodo-platform","denodo-platform-7_0"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"denyall"},{"field":"Microsoft.Compute/imageOffer","in":["denyall-rweb","denyall-vulnerability-manager","denyall-web-application-firewall"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dgsecure"},{"field":"Microsoft.Compute/imageOffer","in":["dgsecure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"diladele"},{"field":"Microsoft.Compute/imageOffer","in":["websafety"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dimensionalmechanics-inc"},{"field":"Microsoft.Compute/imageOffer","in":["neopulse-ai-studio","neopulse-query-runtime"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"docker"},{"field":"Microsoft.Compute/imageOffer","in":["docker-ce","docker-ce-edge","docker-datacenter-custom","docker-ee","docker-ee-basic","docker4azure","docker4azure-cs"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dome9"},{"field":"Microsoft.Compute/imageOffer","in":["dome9ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"drizti"},{"field":"Microsoft.Compute/imageOffer","in":["hpcbox-ansys-19-cluster-master","hpcbox-cluster-compute-node","hpcbox-cluster-cuda-node","hpcbox-cluster-gpu-node","hpcbox-docker-cluster-master","hpcbox-openfoam-cluster-master","hpcbox-su2-cluster-master"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"drone"},{"field":"Microsoft.Compute/imageOffer","in":["drone"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dyadic_security"},{"field":"Microsoft.Compute/imageOffer","in":["dyadic_sec","ukc_image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dynatrace"},{"field":"Microsoft.Compute/imageOffer","in":["ruxit-managed-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"eastwind-networks-inc"},{"field":"Microsoft.Compute/imageOffer","in":["eastwind-ixia-sensor"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"egnyte"},{"field":"Microsoft.Compute/imageOffer","in":["egnyte-connect"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"elasticbox"},{"field":"Microsoft.Compute/imageOffer","in":["elasticbox-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"electric-cloud"},{"field":"Microsoft.Compute/imageOffer","in":["electricflowce"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"elfiqnetworks"},{"field":"Microsoft.Compute/imageOffer","in":["cloud-connector"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"emercoin"},{"field":"Microsoft.Compute/imageOffer","in":["emercoin"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"enterprise-ethereum-alliance"},{"field":"Microsoft.Compute/imageOffer","in":["quorum-demo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"enterprisedb-corp"},{"field":"Microsoft.Compute/imageOffer","in":["edb-postgres-ark"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"equalum"},{"field":"Microsoft.Compute/imageOffer","in":["equalum-vm-byol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"esdenera"},{"field":"Microsoft.Compute/imageOffer","in":["esdenera-firewall-3"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ethereum"},{"field":"Microsoft.Compute/imageOffer","in":["ethereum-studio"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"evostream-inc"},{"field":"Microsoft.Compute/imageOffer","in":["ems-for-template","ems-test"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"exasol"},{"field":"Microsoft.Compute/imageOffer","in":["exasol-analytics-database-byol","exasolution-analytic-database"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"falconstorsoftware"},{"field":"Microsoft.Compute/imageOffer","in":["fss-v9"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"f5-networks"},{"field":"Microsoft.Compute/imageOffer","in":["f5-big-ip-adc","f5-big-ip-advanced-waf","f5-big-ip-best","f5-big-ip-better","f5-big-ip-byol","f5-big-ip-good","f5-big-ip-per-app-ve","f5-big-iq","f5-web-application-firewall"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"filecatalyst"},{"field":"Microsoft.Compute/imageOffer","in":["filecatalyst-direct-per-hr-billing","filecatalyst-direct-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"firehost"},{"field":"Microsoft.Compute/imageOffer","in":["firehost_armor","firehost_armor_ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"flexify-io"},{"field":"Microsoft.Compute/imageOffer","in":["single-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"flashgrid-inc"},{"field":"Microsoft.Compute/imageOffer","in":["flashgrid-racnode"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"foghorn-systems"},{"field":"Microsoft.Compute/imageOffer","in":["foghorn-edge-device-manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"forcepoint-llc"},{"field":"Microsoft.Compute/imageOffer","in":["forcepoint-ngfw"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"forscene"},{"field":"Microsoft.Compute/imageOffer","in":["forscene-edgeserver"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"fortycloud"},{"field":"Microsoft.Compute/imageOffer","in":["fortycloud-gw"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"fortinet"},{"field":"Microsoft.Compute/imageOffer","in":["fortinet-fortianalyzer","fortinet-fortimanager","fortinet_fortigate-vm_v5","fortinet_fortimail","fortinet_fortivoice","fortinet_fortiweb-vm_v5"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"fujitsu_fast"},{"field":"Microsoft.Compute/imageOffer","in":["fep10-rh7-test","feptest"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"gemalto-safenet"},{"field":"Microsoft.Compute/imageOffer","in":["safenet-keysecure-k170v","safenet-protectv","safenet-protectv-manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"gigamon-inc"},{"field":"Microsoft.Compute/imageOffer","in":["gigamon-fm-5_3_01","gigamon-fm-5_3_01_hourly","gigamon-fm-5_4_00","gigamon-fm-5_4_00_hourly"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"gitlab"},{"field":"Microsoft.Compute/imageOffer","in":["gitlab-ce","gitlab-ee"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"GitHub"},{"field":"Microsoft.Compute/imageOffer","in":["GitHub-Enterprise","githubenterprise-test-publishing"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"great-software-laboratory-private-limited"},{"field":"Microsoft.Compute/imageOffer","in":["xid"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"greensql"},{"field":"Microsoft.Compute/imageOffer","in":["greensql-database-security"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"gridgain"},{"field":"Microsoft.Compute/imageOffer","in":["gridgain-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"guardicore"},{"field":"Microsoft.Compute/imageOffer","in":["guardicorecentra","infection_monkey"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"haivision"},{"field":"Microsoft.Compute/imageOffer","in":["haivision-media-gateway-1-2","haivision-media-gateway-1-5","haivision-media-gateway-1-6-2","media-gateway"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"h2o-ai"},{"field":"Microsoft.Compute/imageOffer","in":["h2o-driverles-ai","h2o-driverless-ai","h2o-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"haproxy-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["hapee-rhel","hapee-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"harpaitalia"},{"field":"Microsoft.Compute/imageOffer","in":["mcuboenergy","yg","yougreen_trial"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hcl-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["hcl17cp1104"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"heimdall-data"},{"field":"Microsoft.Compute/imageOffer","in":["heimdall-data"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"help-systems"},{"field":"Microsoft.Compute/imageOffer","in":["goanywheremftubuntulinux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hewlett-packard"},{"field":"Microsoft.Compute/imageOffer","in":["hpe-helion-stackato"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hillstone-networks"},{"field":"Microsoft.Compute/imageOffer","in":["cloudedge-virtual-ngfw-advanced-edition","cloudedge-virtual-ngfw-standard-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hortonworks"},{"field":"Microsoft.Compute/imageOffer","in":["cloudbreak-for-hortonworks-data-platform","hortonworks-sandbox"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hitachi-solutions"},{"field":"Microsoft.Compute/imageOffer","in":["credeon-sfs-and-kms-for-sharepoint-online","credeonsecurefull-textsearch1_0"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hpe"},{"field":"Microsoft.Compute/imageOffer","in":["storeoncevsa"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"huawei"},{"field":"Microsoft.Compute/imageOffer","in":["euleros-v2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hyperglance"},{"field":"Microsoft.Compute/imageOffer","in":["hyperglance-dynamic-topology"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hypergrid"},{"field":"Microsoft.Compute/imageOffer","in":["hyperform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hytrust"},{"field":"Microsoft.Compute/imageOffer","in":["hytrust-keycontrol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ibm"},{"field":"Microsoft.Compute/imageOffer","in":["ibm-security-guardium-multi-cloud","qradar_security_analytics"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"iaansys"},{"field":"Microsoft.Compute/imageOffer","in":["iaansys-magento"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"iboss"},{"field":"Microsoft.Compute/imageOffer","in":["iboss-14600-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"imaginecommunications"},{"field":"Microsoft.Compute/imageOffer","in":["cloudxtream-cdvr","cloudxtream-dai-vms","telurio-aim"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"imperva"},{"field":"Microsoft.Compute/imageOffer","in":["imperva-dam-v13","securesphere-waf","securesphere-waf-for-azr","securesphere-waf-v12","securesphere-waf-v13"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"infoblox"},{"field":"Microsoft.Compute/imageOffer","in":["infoblox-vnios-te-v1420"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"informatica"},{"field":"Microsoft.Compute/imageOffer","in":["bdm10-1-1-u2","big-data-management-10-2","big-data-management-10-2-1","data_accelerator_for_azure_byol","data_quality_10_1_1_rhel_7_3_byol","eic","ics-byol","ics-payg-ubuntu","platform_10_1_1_multi_node_domain_rhel-7-3_byol","platform_10_2_hf1_domain_rhel-7-3_byol","powercenter-v10-domain-image-ubuntu14-04-3","powercenter-v10-update1-domain-image-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"informationbuilders"},{"field":"Microsoft.Compute/imageOffer","in":["iway-big-data-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ingrammicro"},{"field":"Microsoft.Compute/imageOffer","in":["ingrammicroensimcentostrial"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intel"},{"field":"Microsoft.Compute/imageOffer","in":["lustre-cloud-edition-gs-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intel-bigdl"},{"field":"Microsoft.Compute/imageOffer","in":["bigdl-0815","bigdl__vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intel-fpga"},{"field":"Microsoft.Compute/imageOffer","in":["quartus_pro_opencl_sdk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intellicus-technologies-pvt-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["intellicus_bi_server_100_user_linux","intellicus_bi_server_10_user_linux","intellicus_bi_server_25_user_linux","intellicus_bi_server_50_user_linux","intellicus_bi_server_5_user_linux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intersystems"},{"field":"Microsoft.Compute/imageOffer","in":["intersystems-iris-single-node"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intigua"},{"field":"Microsoft.Compute/imageOffer","in":["intigua-agent-manager-3_7_0-trial","intigua-agent-manager-trial"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"iquest"},{"field":"Microsoft.Compute/imageOffer","in":["keyhub"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ishlangu-load-balancer-adc"},{"field":"Microsoft.Compute/imageOffer","in":["ishlangu-load-balancer-byol","ishlangu-load-balancer-is10","ishlangu-load-balancer-is100","ishlangu-load-balancer-is1000","ishlangu-load-balancer-is200","ishlangu-load-balancer-is5000","ishlangu-load-balancer-isbfg"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"issp-corporation"},{"field":"Microsoft.Compute/imageOffer","in":["ispocr"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"itelios"},{"field":"Microsoft.Compute/imageOffer","in":["magento2-on-zendserver"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jamcracker"},{"field":"Microsoft.Compute/imageOffer","in":["4632d5b4-feb0-4332-8452-f2e66133672f","jamcracker-cloudanalytics","jamcracker-cloudanalytics-version4","jamcracker-cloudanalytics-version5","jamcracker-csb-service-provider","jamcracker-csb-serviceprovider","jamcracker-csb-standard","jamcracker-csb-standard-v3","jamcracker-csb-standard-version4","jamcracker-hybrid-cloud-management-version4","jamcracker_cloud_control_appliance_version4","jsdnapp_csb_serviceprovider-version4","jsdnapp_hybrid","jsdnapp_hybrid_v3"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jedox"},{"field":"Microsoft.Compute/imageOffer","in":["jedox-for-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jelastic"},{"field":"Microsoft.Compute/imageOffer","in":["jelastic-hybrid-paas-standard"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jetnexus"},{"field":"Microsoft.Compute/imageOffer","in":["dvwa","jetnexus-application-load-balancer","jetnexus-global-load-balancer","jetnexus-waf","zap"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jetware-srl"},{"field":"Microsoft.Compute/imageOffer","in":["caffe2","caffe_python_cpu","caffe_python_gpu","cockroachdb","lamp_optimized","lemp7_optimized","memcached","mongodb","mxnet_python","mysql","nodejs_nginx","percona_mongodb","percona_mysql","postgresql","pytorch","pytorch_cuda_notebook","pytorch_cuda_production","redis","redmine","tensorflow_cpu_notebook","tensorflow_cpu_production","tensorflow_cuda_notebook","tensorflow_cuda_production","tensorflow_python","theano_python","wordpress4_lemp7"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jitterbit_integration"},{"field":"Microsoft.Compute/imageOffer","in":["jitterbit-harmony-agent"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jm-technology-inc"},{"field":"Microsoft.Compute/imageOffer","in":["smart-gateway"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"juniper-networks"},{"field":"Microsoft.Compute/imageOffer","in":["vmx-services-gateway-byol","vmx-services-gateway-byol-soltemp","vmx-virtual-router","vsrx-next-generation-firewall","vsrx-next-generation-firewall-payg","vsrx-next-generation-firewall-solution-templ-payg","vsrx-next-generation-firewall-solution-template"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kaazing"},{"field":"Microsoft.Compute/imageOffer","in":["kaazing-kwic","kaazing-vpa"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kali-linux"},{"field":"Microsoft.Compute/imageOffer","in":["kali-linux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kemptech"},{"field":"Microsoft.Compute/imageOffer","in":["kemp360central-byol","vlm-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kinetica"},{"field":"Microsoft.Compute/imageOffer","in":["kineticadbbyol","kineticadbpayasyougo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kaspersky_lab"},{"field":"Microsoft.Compute/imageOffer","in":["kaspersky_secure_mail_gateway"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"knime"},{"field":"Microsoft.Compute/imageOffer","in":["knime-server-5-user_4-4-0","knime-server-byol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"krypc-technologies-pvt-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["krypccore"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"leap-orbit"},{"field":"Microsoft.Compute/imageOffer","in":["leaporbitstoragebackedsftp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"leostream-corporation"},{"field":"Microsoft.Compute/imageOffer","in":["connection-broker"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"liquid-files"},{"field":"Microsoft.Compute/imageOffer","in":["liquidfiles"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"liquidware"},{"field":"Microsoft.Compute/imageOffer","in":["stratusphere"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"literatu"},{"field":"Microsoft.Compute/imageOffer","in":["literatu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"loadbalancer"},{"field":"Microsoft.Compute/imageOffer","in":["loadbalancer-org-load-balancer-for-azure","loadbalancer-org-load-balancer-for-azure-byol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"logsign"},{"field":"Microsoft.Compute/imageOffer","in":["logsignfocus"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"logtrust"},{"field":"Microsoft.Compute/imageOffer","in":["logtrust-log-management"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"looker"},{"field":"Microsoft.Compute/imageOffer","in":["looker-analytics-platform","looker-analytics-platform-326","looker-analytics-platform-5_6"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"lti-lt-infotech"},{"field":"Microsoft.Compute/imageOffer","in":["trade-finance-blockchain"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"luminate-security"},{"field":"Microsoft.Compute/imageOffer","in":["luminate-connector"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mapr-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["mapr52-base-dev","mapr60-base","mapr60-sandbox"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mariadb"},{"field":"Microsoft.Compute/imageOffer","in":["mariadb-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"marklogic"},{"field":"Microsoft.Compute/imageOffer","in":["marklogic-9-byol","marklogic-developer-9"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"massiveanalytic-"},{"field":"Microsoft.Compute/imageOffer","in":["oscarap"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mathworks-inc"},{"field":"Microsoft.Compute/imageOffer","in":["matlab-ref-arch-18a-v1-linux-disk","mps-ref-arch-18a-v1-linux-disk2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"matillion"},{"field":"Microsoft.Compute/imageOffer","in":["matillion-etl-snowflake"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mavinglobal"},{"field":"Microsoft.Compute/imageOffer","in":["mavin-business-trial","mavin-enterprise-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"meanio"},{"field":"Microsoft.Compute/imageOffer","in":["gitlab-enterprise-ready","linnovate-open-source-sla-pro","mean-machine-20","openideal3","redash"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"media3-technologies-llc"},{"field":"Microsoft.Compute/imageOffer","in":["cpan1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"memsql"},{"field":"Microsoft.Compute/imageOffer","in":["memsql-community-single-vm","memsql-enterprise-single-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mendix"},{"field":"Microsoft.Compute/imageOffer","in":["mendix-docker","mendix-pro"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mfe_azure"},{"field":"Microsoft.Compute/imageOffer","in":["atd-mcafee","mcafee_vnsp_controller_for_azure","mcafee_vnsp_for_azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm","linux-data-science-vm-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-aks"},{"field":"Microsoft.Compute/imageOffer","in":["aks"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"micro-focus"},{"field":"Microsoft.Compute/imageOffer","in":["replication_environment"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-avere"},{"field":"Microsoft.Compute/imageOffer","in":["vfxt"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-azure-batch"},{"field":"Microsoft.Compute/imageOffer","in":["centos-container","centos-container-rdma","ubuntu-server-container","ubuntu-server-container-rdma"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-azure-compute"},{"field":"Microsoft.Compute/imageOffer","in":["azureconfidentialcompute"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["azureml","linux-data-science-vm-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftAzureSiteRecovery"},{"field":"Microsoft.Compute/imageOffer","in":["ASR-Hydration-VMs"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftOSTC"},{"field":"Microsoft.Compute/imageOffer","in":["FreeBSD"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","in":["MLServer-CentOS","MLServer-RedHat","MLServer-Ubuntu","RServer-CentOS","RServer-Ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"midfin"},{"field":"Microsoft.Compute/imageOffer","in":["mf_neon_cgw"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"midvision"},{"field":"Microsoft.Compute/imageOffer","in":["ibm-datapower-virtual-edition-75","ibm-datapower-virtual-edition-76","ibm-datapower-virtual-edition-77","ibm-http-server","ibm-websphere-portal-server-85","ibm-websphere-portal-server-90","websphere-application-server-be","websphere-application-server-be-80","websphere-application-server-be-85","websphere-application-server-be-90","websphere-application-server-be-and-mq","websphere-application-server-lp","websphere-application-server-lp-16","websphere-application-server-lp-17","websphere-application-server-lp-18","websphere-application-server-nde","websphere-application-server-nde-80","websphere-application-server-nde-85","websphere-application-server-nde-90","websphere-mq","websphere-mq-75","websphere-mq-90","websphere-mq-91"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"miraclelinux"},{"field":"Microsoft.Compute/imageOffer","in":["asianux-server-4-sp5","asianux-server-4-sp6","asianux-server-4-sp7","asianux-server-7-sp1","asianux-server-7-sp2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"miri-infotech-pvt-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["wordpress"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mobilab"},{"field":"Microsoft.Compute/imageOffer","in":["magento-wirecard-checkout"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"moogsoft"},{"field":"Microsoft.Compute/imageOffer","in":["moogsoft-aiops"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"moviemasher"},{"field":"Microsoft.Compute/imageOffer","in":["moviemasher"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","in":["SQL2017-RHEL7","SQL2017-RHEL73","SQL2017-SLES12SP2","SQL2017-Ubuntu1604","SQL2019-RHEL7","SQL2019-Ubuntu1604"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mtnfog"},{"field":"Microsoft.Compute/imageOffer","in":["idyl-e3-entity-extraction-engine","prose-sentence-extraction-engine","renku-language-detection-engine","sonnet-tokenization-engine"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mxhero"},{"field":"Microsoft.Compute/imageOffer","in":["mail2cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"my-com"},{"field":"Microsoft.Compute/imageOffer","in":["tarantool"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"narrativescience"},{"field":"Microsoft.Compute/imageOffer","in":["narratives-for-power-bi"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nasuni"},{"field":"Microsoft.Compute/imageOffer","in":["nasuni-nmc","nasuni_edge_appliance"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ncbi"},{"field":"Microsoft.Compute/imageOffer","in":["ncbi-blast-2-3-0","ncbi-free-2-2-31"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nebbiolo-technologies-inc"},{"field":"Microsoft.Compute/imageOffer","in":["fog-system-manager","fogsm_basic"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"neo4j"},{"field":"Microsoft.Compute/imageOffer","in":["neo4j-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netapp"},{"field":"Microsoft.Compute/imageOffer","in":["netapp-altavault-cloud-integrated-storage-solution","netapp-oncommand-cloud-manager","netapp-ontap-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netgate"},{"field":"Microsoft.Compute/imageOffer","in":["netgate-pfsense-azure-fw-vpn-router"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netiq"},{"field":"Microsoft.Compute/imageOffer","in":["replication_environment"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netscout"},{"field":"Microsoft.Compute/imageOffer","in":["netscout_virtual_ngeniusone_with_vscout","netscout_vstream"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netmail"},{"field":"Microsoft.Compute/imageOffer","in":["netmail-search"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netsweeper"},{"field":"Microsoft.Compute/imageOffer","in":["netsweeper6-0-6"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netx"},{"field":"Microsoft.Compute/imageOffer","in":["simplehelp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"neusoft-neteye"},{"field":"Microsoft.Compute/imageOffer","in":["neusoft-nisg-va-v1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nginxinc"},{"field":"Microsoft.Compute/imageOffer","in":["nginx-plus-v1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nicepeopleatwork"},{"field":"Microsoft.Compute/imageOffer","in":["youzana"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nodejsapi"},{"field":"Microsoft.Compute/imageOffer","in":["node-js-api"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"noobaa"},{"field":"Microsoft.Compute/imageOffer","in":["noobaa-hybrid-s3-archive-05","noobaa-multi-cloud-deduplication"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"northbridge-secure"},{"field":"Microsoft.Compute/imageOffer","in":["netconnect1","netconnectx"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nubeva-inc"},{"field":"Microsoft.Compute/imageOffer","in":["controller","test"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nuco-networks"},{"field":"Microsoft.Compute/imageOffer","in":["aionnode"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nuxeo"},{"field":"Microsoft.Compute/imageOffer","in":["nuxeo-6-lts","nuxeo-lts"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nvidia"},{"field":"Microsoft.Compute/imageOffer","in":["ngc_azure_17_11"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"o2mc-real-time-data-platform"},{"field":"Microsoft.Compute/imageOffer","in":["o2mc-platform-app"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"oceanblue-cloud"},{"field":"Microsoft.Compute/imageOffer","in":["obc-sdwan-solutions"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"omega-software"},{"field":"Microsoft.Compute/imageOffer","in":["ods_datastage"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"onyx-point-inc"},{"field":"Microsoft.Compute/imageOffer","in":["op-bnf-v1","op-bnf1_6-v1","op-bpnifi-v1","op-bpnifi16-v1","op-scc-v1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"onapsis"},{"field":"Microsoft.Compute/imageOffer","in":["osp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"op5"},{"field":"Microsoft.Compute/imageOffer","in":["op5-monitor"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"opencell"},{"field":"Microsoft.Compute/imageOffer","in":["meveo","meveo403sp2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","CentOS-CI","CentOS-HPC","CentOS-LVM","CentOS-SRIOV"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"openvpn"},{"field":"Microsoft.Compute/imageOffer","in":["openvpnas"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","in":["Oracle-Database-Ee","Oracle-Database-Se","Oracle-Linux","Oracle-WebLogic-Server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"orientdb"},{"field":"Microsoft.Compute/imageOffer","in":["orientdb-community-edition","orientdb-community-edition-2_2","orientdb-enterprise-edition-2_2","orientdb-enterprise-edition-2_2_17"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"osirium-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["osirium-pxm-platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"osnexus"},{"field":"Microsoft.Compute/imageOffer","in":["quantastorvsav4"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"paloaltonetworks"},{"field":"Microsoft.Compute/imageOffer","in":["panorama","vmseries1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"panzura-file-system"},{"field":"Microsoft.Compute/imageOffer","in":["azura-freedom-filer-v7110","panzura-cloud-filer","panzura-freedom-filer-7140-13222","panzura-freedom-filer-716-13549","panzura-freedom-filer-v7020"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"parasoft"},{"field":"Microsoft.Compute/imageOffer","in":["parasoft-service-virtualization"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"passlogy"},{"field":"Microsoft.Compute/imageOffer","in":["passlogic"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"penta-security-systems-inc"},{"field":"Microsoft.Compute/imageOffer","in":["wapples"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"percona"},{"field":"Microsoft.Compute/imageOffer","in":["percona-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"postgres-pro"},{"field":"Microsoft.Compute/imageOffer","in":["postgres-pro-enterprise","postgres-pro-enterprise-10","postgres-pro-standard","postgres-pro-standard-10"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"plesk"},{"field":"Microsoft.Compute/imageOffer","in":["plesk-onyx-linux","solution-server-business","solution-server-wordpress"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"prestashop"},{"field":"Microsoft.Compute/imageOffer","in":["prestashop16-lamp","ubuntu-base-for-prestashop"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"prime-strategy"},{"field":"Microsoft.Compute/imageOffer","in":["kusanagi-77"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","in":["pivotal-gpdb-vm","pivotal-greenplum-images","pivotal-ops-manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"process-one"},{"field":"Microsoft.Compute/imageOffer","in":["ejabberd-community-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"profecia"},{"field":"Microsoft.Compute/imageOffer","in":["full_disk_encryption_vm","project_tools_vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"progelspa"},{"field":"Microsoft.Compute/imageOffer","in":["libra-esva-antispam"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ptsecurity"},{"field":"Microsoft.Compute/imageOffer","in":["ptaf-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pulse-secure"},{"field":"Microsoft.Compute/imageOffer","in":["pulse-connect-secure-vm","pulse-virtual-traffic-manager","pulse-virtual-traffic-manager-with-waf","pulse-virtual-traffic-manager-with-waf2","pulse-virtual-traffic-manager2","pulse-virtual-web-application-firewall","pulse-virtual-web-application-firewall2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"PuppetLabs"},{"field":"Microsoft.Compute/imageOffer","in":["PuppetEnterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"puppet"},{"field":"Microsoft.Compute/imageOffer","in":["puppet-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pydio"},{"field":"Microsoft.Compute/imageOffer","in":["pydio-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"qore-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["qorus"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"qualysguard"},{"field":"Microsoft.Compute/imageOffer","in":["qualys-virtual-firewall-appliance","qualys-virtual-scanner-v23b","qualys-virtual-scanner-v24"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"quasardb"},{"field":"Microsoft.Compute/imageOffer","in":["quasardb"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"qubole-inc"},{"field":"Microsoft.Compute/imageOffer","in":["qubole-data-service"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"quest"},{"field":"Microsoft.Compute/imageOffer","in":["fve"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"racknap"},{"field":"Microsoft.Compute/imageOffer","in":["racknap-server","racknap-server-linux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"radware"},{"field":"Microsoft.Compute/imageOffer","in":["radware-alteon-va"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"radiant-logic"},{"field":"Microsoft.Compute/imageOffer","in":["radiantone-vms"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rancher"},{"field":"Microsoft.Compute/imageOffer","in":["rancheros"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rapid7"},{"field":"Microsoft.Compute/imageOffer","in":["nexpose-scan-engine","rapid7-vm-console"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rapidminer"},{"field":"Microsoft.Compute/imageOffer","in":["rapidminer_server_75","rapidminer_server_76","rapidminer_server_80","rapidminer_server_81"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"realm"},{"field":"Microsoft.Compute/imageOffer","in":["realm-mobile-platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"reblaze"},{"field":"Microsoft.Compute/imageOffer","in":["rbzr-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","RHEL","rhel-byos","rhel-ocp-marketplace","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HANA"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"relevance-lab"},{"field":"Microsoft.Compute/imageOffer","in":["rlcatalyst"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"remotelearner"},{"field":"Microsoft.Compute/imageOffer","in":["fully-supported-moodle"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"revolution-analytics"},{"field":"Microsoft.Compute/imageOffer","in":["revolution-r-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RightScaleLinux"},{"field":"Microsoft.Compute/imageOffer","in":["RightImage-CentOS","RightImage-Ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RiverbedTechnology"},{"field":"Microsoft.Compute/imageOffer","in":["steelapp_traffic_manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"riverbed"},{"field":"Microsoft.Compute/imageOffer","in":["riverbed-sccm-5-5-1","riverbed-steelcentral-appinternals","riverbed-steelhead-9-2","riverbed-steelhead-9-5-0","riverbed-steelhead-9-6-0","riverbed_steelconnect_gw","riverbed_steelconnect_sh","steelapp_traffic_manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rocketsoftware"},{"field":"Microsoft.Compute/imageOffer","in":["rocket-discover"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rsa-security-llc"},{"field":"Microsoft.Compute/imageOffer","in":["rsa-nw-azure-arch","rsa-nw-azure-broker","rsa-nw-azure-con","rsa-nw-azure-esa","rsa-nw-azure-ldec","rsa-nw-azure-vlc","rsa-nw-suite-11","rsa-nw-suite-11-1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rsk-labs"},{"field":"Microsoft.Compute/imageOffer","in":["rsk-bamboo-beta-node","rsk-node-orchid"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"saama"},{"field":"Microsoft.Compute/imageOffer","in":["fluidanalyticsengine","insurancefraudanalytics","realworldevidence"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"saltstack"},{"field":"Microsoft.Compute/imageOffer","in":["centos65saltstackenterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"scalearc"},{"field":"Microsoft.Compute/imageOffer","in":["scalearc-for-mysql-paygo","scalearc-for-sql-server-pay-go","scalearc_mysql-server","scalearc_sql_server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"scalegrid"},{"field":"Microsoft.Compute/imageOffer","in":["centos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sap"},{"field":"Microsoft.Compute/imageOffer","in":["hanaexpress"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"scality"},{"field":"Microsoft.Compute/imageOffer","in":["scalityconnecthourly"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"secureworks"},{"field":"Microsoft.Compute/imageOffer","in":["scwx-azure-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"shadow-soft"},{"field":"Microsoft.Compute/imageOffer","in":["icinga","icinga2-5","icinga2-7"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"signal-sciences"},{"field":"Microsoft.Compute/imageOffer","in":["signalscienceswpp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sightapps"},{"field":"Microsoft.Compute/imageOffer","in":["sightapps"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"silver-peak-systems"},{"field":"Microsoft.Compute/imageOffer","in":["silver_peak_edgeconnect","silver_peak_vx"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"simmachinesinc"},{"field":"Microsoft.Compute/imageOffer","in":["simmachines_vm_v2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sinefa"},{"field":"Microsoft.Compute/imageOffer","in":["sinefa-probe"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"skyarc"},{"field":"Microsoft.Compute/imageOffer","in":["mt6","mta"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"smartmessage-autoflow"},{"field":"Microsoft.Compute/imageOffer","in":["martmessage-autoflow"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"snapt-adc"},{"field":"Microsoft.Compute/imageOffer","in":["snaptadc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"soasta"},{"field":"Microsoft.Compute/imageOffer","in":["cloudtest-lite"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"softnas"},{"field":"Microsoft.Compute/imageOffer","in":["cloud_dev","mp_ce","mp_ent","mp_nas_byol","mp_nas_ep","mp_nas_gp","mp_nas_hp","mp_plat","private_offerings","softnas-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"solanolabs"},{"field":"Microsoft.Compute/imageOffer","in":["solano-ci-private-beta"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"soha"},{"field":"Microsoft.Compute/imageOffer","in":["soha-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"solar-security"},{"field":"Microsoft.Compute/imageOffer","in":["solar-incode"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sonicwall-inc"},{"field":"Microsoft.Compute/imageOffer","in":["sonicwall-nsz-azure","waf"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sophos"},{"field":"Microsoft.Compute/imageOffer","in":["sophos-xg"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"spagobi"},{"field":"Microsoft.Compute/imageOffer","in":["spagobi"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"spacecurve"},{"field":"Microsoft.Compute/imageOffer","in":["spacecurve-quickstart"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"splunk"},{"field":"Microsoft.Compute/imageOffer","in":["splunk-enterprise-base-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"src-solution"},{"field":"Microsoft.Compute/imageOffer","in":["pilot-things-onem2m-smart-network"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sqlstream"},{"field":"Microsoft.Compute/imageOffer","in":["com"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sphere3d"},{"field":"Microsoft.Compute/imageOffer","in":["snapcloud-byol","snapcloud-standard"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stackato-platform-as-a-service"},{"field":"Microsoft.Compute/imageOffer","in":["activestate-stackato"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stackstorm"},{"field":"Microsoft.Compute/imageOffer","in":["stackstorm-2015-1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"startekfingerprintmatch"},{"field":"Microsoft.Compute/imageOffer","in":["bioserver"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"steelhive"},{"field":"Microsoft.Compute/imageOffer","in":["steelhive_carbon"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stonefly"},{"field":"Microsoft.Compute/imageOffer","in":["stonefly-cloud-drive"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stormshield"},{"field":"Microsoft.Compute/imageOffer","in":["stormshield-network-security-for-cloud","stormshield-network-security-for-cloud-xl"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"storreduce"},{"field":"Microsoft.Compute/imageOffer","in":["storreduce"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stratumn"},{"field":"Microsoft.Compute/imageOffer","in":["indigo-node"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"streamsets"},{"field":"Microsoft.Compute/imageOffer","in":["streamsets-data-collector"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"striim"},{"field":"Microsoft.Compute/imageOffer","in":["integrationforsqlserveronazure","integrationtoazurestorage","integrationtoeventhub","integrationtohdinsight"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["openSUSE-Leap","SLES","SLES-BYOS","SLES-HPC","SLES-HPC-Priority","SLES-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-SAPCAL","SLES-Standard","SUSE-CaaSP-Admin-BYOS","SUSE-CaaSP-Cluster-BYOS","SUSE-Manager-Proxy-BYOS","SUSE-Manager-Server-BYOS"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"symantectest1"},{"field":"Microsoft.Compute/imageOffer","in":["cwpsazure-beta-01"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"synack-inc"},{"field":"Microsoft.Compute/imageOffer","in":["synack-crowd-security-intelligence"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"synechron-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["blockchain_tradefinance_quorum"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"syte"},{"field":"Microsoft.Compute/imageOffer","in":["syteoffer"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tactic"},{"field":"Microsoft.Compute/imageOffer","in":["tactic-workflow-v001"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"talari-networks"},{"field":"Microsoft.Compute/imageOffer","in":["talari-networks-virtual-appliance"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"talena-inc"},{"field":"Microsoft.Compute/imageOffer","in":["talena_inc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tata_communications"},{"field":"Microsoft.Compute/imageOffer","in":["netfoundry_cloud_gateway"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tavendo"},{"field":"Microsoft.Compute/imageOffer","in":["crossbar_on_azure_ubuntu1404"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"techdivision"},{"field":"Microsoft.Compute/imageOffer","in":["appserver-io-pe"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"techlatest"},{"field":"Microsoft.Compute/imageOffer","in":["ethereumdevkit","rippledevelopersuit"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"telepat"},{"field":"Microsoft.Compute/imageOffer","in":["free"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tenable"},{"field":"Microsoft.Compute/imageOffer","in":["tenable-nessus-6-byol","tenable-nessus-professional","tenablecorenessus","tenablecorewas"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"teradata"},{"field":"Microsoft.Compute/imageOffer","in":["teradata-data-mover","teradata-data-mover-agent","teradata-data-mover-intellisphere","teradata-data-stream-controller","teradata-database-1510","teradata-database-1510-byol","teradata-database-1510-intellisphere","teradata-database-1510-v2","teradata-database-1610-intellisphere","teradata-database-1610-v2","teradata-database-1620","teradata-database-1620-byol","teradata-database-1620-intellisphere","teradata-database-enterprise","teradata-database-v1610","teradata-database-v1610-byol","teradata-ecosystem-manager","teradata-querygrid-manager","teradata-querygrid-manager-intellisphere","teradata-rest-services","teradata-server-management","teradata-viewpoint","teradata-viewpoint-intellisphere"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"thales-vormetric"},{"field":"Microsoft.Compute/imageOffer","in":["ciphertrust-ckm","vormetric-dsm","vormetric-dsm-6-1-0","vormetric-tokenization-server","vts-2_2_0_2604"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"things-board"},{"field":"Microsoft.Compute/imageOffer","in":["tb-pe-cassandra"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"thoughtspot-inc"},{"field":"Microsoft.Compute/imageOffer","in":["thoughtspotvirtualmachine"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tibco-software"},{"field":"Microsoft.Compute/imageOffer","in":["grid-server-engine"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tig"},{"field":"Microsoft.Compute/imageOffer","in":["backup-as-a-service"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tigergraph"},{"field":"Microsoft.Compute/imageOffer","in":["tigergraph"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tmaxsoft"},{"field":"Microsoft.Compute/imageOffer","in":["tmax-jeusee","tmax-jeusse","tmax-webtobse"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tokyosystemhouse"},{"field":"Microsoft.Compute/imageOffer","in":["osscobol151j-pg961-centos72"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"torusware"},{"field":"Microsoft.Compute/imageOffer","in":["speedus-lite-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"totemo"},{"field":"Microsoft.Compute/imageOffer","in":["totemo-azr-tm6"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"townsend-security"},{"field":"Microsoft.Compute/imageOffer","in":["alliance-key-manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"trendmicro"},{"field":"Microsoft.Compute/imageOffer","in":["deep-security-vm","deep-security-vm-byol","iot-security-sdk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"truestack"},{"field":"Microsoft.Compute/imageOffer","in":["tsdc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tsa-public-service"},{"field":"Microsoft.Compute/imageOffer","in":["ckan-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tunnelbiz"},{"field":"Microsoft.Compute/imageOffer","in":["centos70-min","centos7optimizwithwordpress","centos7phpoptimizing","centos7phpoptimizingnginx","centos7phpoptimizwlaravel","centos7phpoptimizwosticket","centos7webserverwithwaf","centos7withaspdotnetcore2apache","centos7withjoomla","debian_web_server","fedora","fusio","linuxwithlimesurvey","networkmonitoringsystem","rimauwaf_cloud","ubuntu_server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"twistlock"},{"field":"Microsoft.Compute/imageOffer","in":["twistlock"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"typesafe"},{"field":"Microsoft.Compute/imageOffer","in":["typesafe-reactive-maps-demo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ubeeko"},{"field":"Microsoft.Compute/imageOffer","in":["hfactory-tools-for-hdinsight","hfactory-tools-sandbox"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ubercloud"},{"field":"Microsoft.Compute/imageOffer","in":["ansys-17-2-fluids-structures","ansys_182_test","comsol-multiphysics-v5-2","openfoam-v2dot3-centos-v6","openfoam-v3dot0","star-ccm-v10-04","star-ccm-v10-06-heeds-mdo-v2015","star-ccm-v12-00"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ulex"},{"field":"Microsoft.Compute/imageOffer","in":["voximal"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"unifi-software"},{"field":"Microsoft.Compute/imageOffer","in":["unifi-data-catalog","unifi-dataplatform-2-3-3-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"unitrends"},{"field":"Microsoft.Compute/imageOffer","in":["unitrends-enterprise-backup-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"usp"},{"field":"Microsoft.Compute/imageOffer","in":["unified-streaming-vod-standard"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"varnish"},{"field":"Microsoft.Compute/imageOffer","in":["varnish-cache_","varnish-custom-statistics","varnish-plus-administration-and-statistics","varnish-plus-caching-engine-4"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vaultive-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cloud-security-platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vbot"},{"field":"Microsoft.Compute/imageOffer","in":["vbot"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"velocloud"},{"field":"Microsoft.Compute/imageOffer","in":["velocloud-virtual-edge","velocloud-virtual-edge-3x"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vidispine"},{"field":"Microsoft.Compute/imageOffer","in":["vidispine-content-management"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"veritas"},{"field":"Microsoft.Compute/imageOffer","in":["cloudpoint-2-0-0","veritas-resiliency-platform-vhd-offer"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"veeam"},{"field":"Microsoft.Compute/imageOffer","in":["veeamhubimage"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vigyanlabs-innovations-pvt-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["ipm-plus-energy-saver"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"viptela"},{"field":"Microsoft.Compute/imageOffer","in":["viptela-vedge-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vizixiotplatformretail001"},{"field":"Microsoft.Compute/imageOffer","in":["vizix-iot-platform-retail-005"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vmturbo"},{"field":"Microsoft.Compute/imageOffer","in":["turbonomic","vmturbo64-opsmgr-5_3"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vte"},{"field":"Microsoft.Compute/imageOffer","in":["slashdb"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vu-llc"},{"field":"Microsoft.Compute/imageOffer","in":["vu-app-server","vu-facerecogn","vu-fraudanalysis","vu-secureonboarding"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"wallarm"},{"field":"Microsoft.Compute/imageOffer","in":["wallarm-ng-waf-offer-1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"wallix"},{"field":"Microsoft.Compute/imageOffer","in":["wallix-wabsuite"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"watchguard-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["vm-firebox-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"waves"},{"field":"Microsoft.Compute/imageOffer","in":["waves"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"websense-apmailpe"},{"field":"Microsoft.Compute/imageOffer","in":["ap-data-email-gateway","forcepoint-email-security-85beta","triton-ap-data"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"wmspanel"},{"field":"Microsoft.Compute/imageOffer","in":["nimble-streamer-centos","nimble-streamer-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"wowza"},{"field":"Microsoft.Compute/imageOffer","in":["wowzastreamingengine"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"xfinityinc"},{"field":"Microsoft.Compute/imageOffer","in":["d3view-v5"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"xtremedata"},{"field":"Microsoft.Compute/imageOffer","in":["dbx"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"yellowfin"},{"field":"Microsoft.Compute/imageOffer","in":["yellowfin-for-azure-byol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"xyzrd-group-ou"},{"field":"Microsoft.Compute/imageOffer","in":["c73-zultys-mxvirtual"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"your-shop-online"},{"field":"Microsoft.Compute/imageOffer","in":["herefordshire-enterprise-platform-drupal-7","xenofile"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"zend"},{"field":"Microsoft.Compute/imageOffer","in":["php-56-zend-server","php-zend-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"z1"},{"field":"Microsoft.Compute/imageOffer","in":["z1-securehub"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"zerodown_software"},{"field":"Microsoft.Compute/imageOffer","in":["bcaasforazure","stackbcaas"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"zoomdata"},{"field":"Microsoft.Compute/imageOffer","in":["zoomdata-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"zscaler"},{"field":"Microsoft.Compute/imageOffer","in":["zscaler-private-access"]}]}]}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/c901e756f9e2e56e","type":"Microsoft.Authorization/policyDefinitions","name":"c901e756f9e2e56e"},{"properties":{"displayName":"nrms-kubernet-require-azure-networkplugin_1.2","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T19:33:00.4442389Z","updatedBy":null,"updatedOn":null},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"},"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"tags[''NRMSVNetIntException'']","exists":"false"},{"value":"[resourceGroup().tags[''NRMSVNetIntException'']]","equals":""},{"field":"tags[''autopilotcluster'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotcluster'']]","equals":""},{"field":"tags[''autopilotenvironment'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotenvironment'']]","equals":""},{"not":{"field":"Microsoft.ContainerService/managedClusters/networkProfile.networkPlugin","notIn":["null",""]}}]},{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"not":{"field":"Microsoft.ContainerService/managedClusters/networkProfile.networkPlugin","equals":"azure"}}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/cb9c916fd4b6c323","type":"Microsoft.Authorization/policyDefinitions","name":"cb9c916fd4b6c323"},{"properties":{"displayName":"nrms-batch-require-user-subscription-mode_2.0","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-08-08T22:25:06.8419431Z","updatedBy":null,"updatedOn":null},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"},"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts/pools"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"anyOf":[{"field":"Microsoft.Batch/batchAccounts/pools/networkConfiguration.subnetId","exists":"false"},{"field":"Microsoft.Batch/batchAccounts/pools/networkConfiguration.subnetId","in":["null",""]}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/cdd4d274005fb67b","type":"Microsoft.Authorization/policyDefinitions","name":"cdd4d274005fb67b"},{"properties":{"displayName":"nrms-nsg-rule-108_1.1","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-07-08T19:20:25.3178329Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"}},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"}},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"allowedValues":["NA","NRMSException","SkipNRMSCorp","nrmsskipcorpnetsaw","SkipNRMSSAW","SkipNRMSDatabricks","SkipNRMSRDPSSH","SkipNRMSMgmt","SkipNRMSHigh","SkipNRMSVNet","SkipNRMSLoadBal","SkipNRMSDB","SkipNRMSMedium"],"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"[parameters(''sourceValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","equals":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"Any"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/ce4b13eba037b5cc","type":"Microsoft.Authorization/policyDefinitions","name":"ce4b13eba037b5cc"},{"properties":{"displayName":"audit - ssh auth on existing vmss_1.3","policyType":"Custom","mode":"All","description":"This - policy audits whether any Linux VMSSs use password-only authentication for - SSH on existing resources.","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-25T22:01:41.6737137Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"resourcetagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name","description":"Rule is not deployed if this tag exists on the Virtual - Machine"}},"resourcegrouptagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name at the resource group level","description":"Rule is not deployed - if this tag exists on the Resource Group"}}},"policyRule":{"if":{"allof":[{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''resourcetagname''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''resourcegrouptagname'')]]","equals":""},{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"field":"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.osProfile.linuxConfiguration","exists":"True"},{"field":"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.osProfile.linuxConfiguration.disablePasswordAuthentication","equals":"false"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/d950db6f06d4cd0c","type":"Microsoft.Authorization/policyDefinitions","name":"d950db6f06d4cd0c"},{"properties":{"displayName":"audit - ssh auth on new resources_1.1","policyType":"Custom","mode":"All","description":"This - policy audits whether any Linux VMs use password-only authentication for SSH - on new resources.","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-12-06T21:04:41.4948364Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"resourcetagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name","description":"Rule is not deployed if this tag exists on the Virtual - Machine"}},"resourcegrouptagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name at the resource group level","description":"Rule is not deployed - if this tag exists on the Resource Group"}}},"policyRule":{"if":{"allOf":[{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''resourcetagname''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''resourcegrouptagname'')]]","notEquals":""},{"field":"Microsoft.Compute/virtualMachines/osProfile.adminPassword","exists":"True"},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"7isolutions"},{"field":"Microsoft.Compute/imageOffer","in":["sapp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"128technology"},{"field":"Microsoft.Compute/imageOffer","in":["128t_networking_platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"4psa"},{"field":"Microsoft.Compute/imageOffer","in":["voipnow"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"a10networks"},{"field":"Microsoft.Compute/imageOffer","in":["a10-lightning-adc","a10-vthunder-adc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"accellion"},{"field":"Microsoft.Compute/imageOffer","in":["kiteworks-by-accellion"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"abiquo"},{"field":"Microsoft.Compute/imageOffer","in":["abiquo-hybrid-cloud-34"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"accops"},{"field":"Microsoft.Compute/imageOffer","in":["hysecure5050"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"actian_matrix"},{"field":"Microsoft.Compute/imageOffer","in":["actian_matrix"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"actifio"},{"field":"Microsoft.Compute/imageOffer","in":["actifio-sky"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"actian-corp"},{"field":"Microsoft.Compute/imageOffer","in":["vector-community","vector-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Acronis"},{"field":"Microsoft.Compute/imageOffer","in":["storage"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"activeeon"},{"field":"Microsoft.Compute/imageOffer","in":["activeeon-workload-scheduler"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"aerospike"},{"field":"Microsoft.Compute/imageOffer","in":["aerospike-database-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"affinio"},{"field":"Microsoft.Compute/imageOffer","in":["platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"aiscaler-cache-control-ddos-and-url-rewriting-"},{"field":"Microsoft.Compute/imageOffer","in":["aimobile-site-acceleration","aiprotect-ddos-firewall","aiscaler-traffic-manager-caching","aivideo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"akamai-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["enterprise-application-access"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"alces-flight-limited"},{"field":"Microsoft.Compute/imageOffer","in":["alces-flight-compute-solo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"alertlogic"},{"field":"Microsoft.Compute/imageOffer","in":["alert-logic-tm","alert-logic-wsm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"alienvault"},{"field":"Microsoft.Compute/imageOffer","in":["unified-security-management-anywhere"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"alldigital-brevity"},{"field":"Microsoft.Compute/imageOffer","in":["alldigital-brevity-uploader"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"altair-engineering-inc"},{"field":"Microsoft.Compute/imageOffer","in":["altair_hwulva"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"altamira-corporation"},{"field":"Microsoft.Compute/imageOffer","in":["lumify"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"antmedia"},{"field":"Microsoft.Compute/imageOffer","in":["ams_community_edition","ant_media_server_enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"apigee"},{"field":"Microsoft.Compute/imageOffer","in":["apigee-edge"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appcara"},{"field":"Microsoft.Compute/imageOffer","in":["app360v43-001"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appcelerator"},{"field":"Microsoft.Compute/imageOffer","in":["appcelerator-arrow-azure-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appex-networks"},{"field":"Microsoft.Compute/imageOffer","in":["cloudexpress"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appistry"},{"field":"Microsoft.Compute/imageOffer","in":["genomepilot"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"appscale-marketplace"},{"field":"Microsoft.Compute/imageOffer","in":["appscale"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"arangodb"},{"field":"Microsoft.Compute/imageOffer","in":["arangodb"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"arista-networks"},{"field":"Microsoft.Compute/imageOffer","in":["veos-router"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"array_networks"},{"field":"Microsoft.Compute/imageOffer","in":["array-networks-vapv"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"astadia-1148316"},{"field":"Microsoft.Compute/imageOffer","in":["astadia-ui-automation-tee"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"atomicorp"},{"field":"Microsoft.Compute/imageOffer","in":["secure-os","secure-ubuntu-os"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"audiocodes"},{"field":"Microsoft.Compute/imageOffer","in":["mediantsessionbordercontroller"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"auriq-systems"},{"field":"Microsoft.Compute/imageOffer","in":["essentia"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"awingu"},{"field":"Microsoft.Compute/imageOffer","in":["awingu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"aviatrix-systems"},{"field":"Microsoft.Compute/imageOffer","in":["aviatrix-cloud-services","aviatrix-companion-gateway","aviatrix-companion-gateway-v2","aviatrix-vpn-gw","aviatrix_multi_cloud_service","aviatrix_openvpn_service","aviatrix_openvpn_service10","aviatrix_openvpn_service25","aviatrix_openvpn_service50"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"avi-networks"},{"field":"Microsoft.Compute/imageOffer","in":["avi-vantage-adc","internal-avi-vantage-adc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"axway"},{"field":"Microsoft.Compute/imageOffer","in":["axway-mailgate-secure-collaboration-advanced","axway-mailgate-secure-collaboration-premium","axway-mailgate-secure-collaboration-standard"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"azul"},{"field":"Microsoft.Compute/imageOffer","in":["azul-zulu-ubuntu-1804"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"azurecyclecloud"},{"field":"Microsoft.Compute/imageOffer","in":["azure-cyclecloud-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"AzureDatabricks"},{"field":"Microsoft.Compute/imageOffer","in":["Databricks"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"baas-techbureau"},{"field":"Microsoft.Compute/imageOffer","in":["b1327623-d29b-4cc1-b833-85067dcc7bce"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"baffle-io"},{"field":"Microsoft.Compute/imageOffer","in":["baffle-application-data-protection"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"balabit"},{"field":"Microsoft.Compute/imageOffer","in":["balabit-shell-control-box","psm","sps"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"barracudanetworks"},{"field":"Microsoft.Compute/imageOffer","in":["barracuda-app-sec-control-center","barracuda-email-security-gateway","barracuda-ng-cc","barracuda-ng-firewall","waf"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"basho"},{"field":"Microsoft.Compute/imageOffer","in":["riak-2-0-1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","in":["autodesk-maya-arnold-centos73","rendering-centos73"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bdy"},{"field":"Microsoft.Compute/imageOffer","in":["buddy"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Bitnami"},{"field":"Microsoft.Compute/imageOffer","in":["3-4","abantecart","activemq","akeneo","alfrescocommunity","apachesolr","artifactory","canvaslms","cassandra","civicrm","cmsmadesimple","codiad","concrete5","consul","coppermine","couchdb","diaspora","discourse","djangostack","dokuwiki","dolibarr","DreamFactory","drupal","elastic-search","elk","erpnext","espocrm","etcd","eXo-Platform","exoplatform","fatfreecrm","ghost","gitlab","grafana","hadoop","hhvmstack","hordegroupwarewebmail","jasperreports","jenkins","joomla","jrubystack","kafka","kong","kubernetessandbox","lampstack","lappstack","letschat","liferay","limesurvey","livehelperchat","magento","mahara","mantis","mariadb","mattermost","mautic","mean","mediawiki","memcached","modx","mongodb","moodle","multicraft","mybb","mysql","nats","neo4j","neos","nginxstack","noalyss","nodejs","ocportal","odoo","openatrium","opencart","openedx","openfire","openproject","orangehrm","osclass","owncloud","oxid-eshop","parseserver","phabricator","phpbb","phplist","pimcore","piwik","plone","pootle","postgresql","prestashop","processmakerenterprise","processmakeropensourceedition","processwire","publify","rabbitmq","redash","redis","redmine","redmineplusagile","reportserver","reportserverenterprise","resourcespace","reviewboard","reviewboardpowerpack","roundcube","rubystack","seopanel","shopware","silverstripe","simplemachinesforum","sonarqube","spree","subversion","suitecrm","tensorflowserving","testlink","tikiwikicmsgroupware","tinytinyrss","tom-cat","trac","typo3","weblate","webmailpro","wildfly","wordpress","wordpress-multisite","wordpresspro","x2enginesalescrm","xoops","youtrack","zookeeper","zurmo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"black-duck-software"},{"field":"Microsoft.Compute/imageOffer","in":["blackduck_hub_vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"blk-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["blk-io-erc-20-rest-service"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"blockapps"},{"field":"Microsoft.Compute/imageOffer","in":["strato-blockchain-base-template-latest"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"blockstack"},{"field":"Microsoft.Compute/imageOffer","in":["blockstack-core-v14"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"blockchain-foundry"},{"field":"Microsoft.Compute/imageOffer","in":["syscoin-api","syscoin-full-node","syscoin-price-peg"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bloombase"},{"field":"Microsoft.Compute/imageOffer","in":["bloombase-storesafe-3_4_7_0_el7_x86_64"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bluecat"},{"field":"Microsoft.Compute/imageOffer","in":["bluecat-bam-for-azure","bluecat-dns-for-azure","bluecat-edge-service-point-vm-for-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bluetalon"},{"field":"Microsoft.Compute/imageOffer","in":["bluetalon"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"brocade_communications"},{"field":"Microsoft.Compute/imageOffer","in":["brocade-virtual-traffic-manager","brocade-virtual-traffic-manager-with-waf-module","brocade-virtual-web-application-firewall"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"bt-americas-inc"},{"field":"Microsoft.Compute/imageOffer","in":["diamondip-sapphire-ev10","diamondip-sapphire-ev20","diamondip-sapphire-v10","diamondip-sapphire-v20","diamondip-sapphire-v5","diamondip-sapphire-vcaa20"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"buddhalabs"},{"field":"Microsoft.Compute/imageOffer","in":["sles_12_pci"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"carto"},{"field":"Microsoft.Compute/imageOffer","in":["cartobuilder2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cask"},{"field":"Microsoft.Compute/imageOffer","in":["cdap-cloud-sandbox"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","in":["UbuntuServer","Ubuntu_Core"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cavirin"},{"field":"Microsoft.Compute/imageOffer","in":["cavirin-platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cautelalabs"},{"field":"Microsoft.Compute/imageOffer","in":["log_management"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"celum-gmbh"},{"field":"Microsoft.Compute/imageOffer","in":["celumdam"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cds"},{"field":"Microsoft.Compute/imageOffer","in":["cds-data-migration-solution-for-legacy-to-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-6-v2-0-2-l1","cis-centos-7-v2-1-1-l1","cis-oracle-linux-6-v1-0-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-rhel-6-v2-0-2-l1","cis-rhel-7-v2-2-0-l1","cis-suse-linux-11-v2-0-0-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1404-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"certivox"},{"field":"Microsoft.Compute/imageOffer","in":["sso-test"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cfd-direct"},{"field":"Microsoft.Compute/imageOffer","in":["cfd-direct-from-the-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"chain"},{"field":"Microsoft.Compute/imageOffer","in":["chain-core-developer-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"checkpoint"},{"field":"Microsoft.Compute/imageOffer","in":["check-point-r77-10","check-point-vsec-r80","check-point-vsec-r80-blink","sg2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"chef-software"},{"field":"Microsoft.Compute/imageOffer","in":["chef-automate-vm-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"circleci"},{"field":"Microsoft.Compute/imageOffer","in":["circleci-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cires21"},{"field":"Microsoft.Compute/imageOffer","in":["c21l-enc","c21l-mos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cisco"},{"field":"Microsoft.Compute/imageOffer","in":["cisco-asav","cisco-csr-1000v","cisco-ftdv","cisco-meraki-vmx100","cisco-ngfwv-vm-test-unsupported","cisco_cloud_vedge_17_2_4","cos65","cos72","cos72_main_dev","uos14","vwaas-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"citrix"},{"field":"Microsoft.Compute/imageOffer","in":["citrix-sd-wan-opt","netscaler-ma-service-agent-120","netscaler-ma-service-agent-121","netscaler-sd-wan","netscaler-vpx","netscalervpx-120","netscalervpx-121","netscalervpx110-6531","netscalervpx111"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"clear-linux-project"},{"field":"Microsoft.Compute/imageOffer","in":["clear-linux-os"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"clouber"},{"field":"Microsoft.Compute/imageOffer","in":["cuber","cws","mcenter"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-cruiser"},{"field":"Microsoft.Compute/imageOffer","in":["cloud-cruiser-16"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudbees"},{"field":"Microsoft.Compute/imageOffer","in":["jenkins-enterprise","jenkins-operations-center"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudbees-enterprise-jenkins"},{"field":"Microsoft.Compute/imageOffer","in":["cloudbees-jenkins-enterprise","cloudbees-jenkins-operations-center"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudbolt-software"},{"field":"Microsoft.Compute/imageOffer","in":["cloudbolt"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudboost"},{"field":"Microsoft.Compute/imageOffer","in":["cloudboost"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudenablers-inc"},{"field":"Microsoft.Compute/imageOffer","in":["corestack"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","in":["squid-proxy"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","in":["cloudera-altus-centos-os","cloudera-centos-6","cloudera-centos-os","test-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudlanes"},{"field":"Microsoft.Compute/imageOffer","in":["cloud-video-accelerator-nfs","cloudlanes-cloud-backup-accelerator-vtl"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudlink"},{"field":"Microsoft.Compute/imageOffer","in":["cloudlink-securevm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudplan-gmbh"},{"field":"Microsoft.Compute/imageOffer","in":["cloudplan_pcn_linux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudsecurity"},{"field":"Microsoft.Compute/imageOffer","in":["paladion_ondemand_nextgen_firewall"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudsoft"},{"field":"Microsoft.Compute/imageOffer","in":["cloudsoft-amp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"clustrix"},{"field":"Microsoft.Compute/imageOffer","in":["clustrixdb"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"codelathe"},{"field":"Microsoft.Compute/imageOffer","in":["codelathe-filecloud-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"codenvy"},{"field":"Microsoft.Compute/imageOffer","in":["codenvy-on-prem"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cognosys"},{"field":"Microsoft.Compute/imageOffer","in":["1-click-secured-joomla-on-centos-7-3","1-click-secured-joomla-on-ubuntu-1404-lts","1-click-secured-joomla-on-ubuntu-1604-lts","1-click-secured-joomla-on-ubuntu-1804-lts","centos-6-9","centos-7-3","centos-7-4","centos-7-5","deploy-a-secured-modx-on-ubuntu-14-04-lts","deploy-a-secured-silverstripe-on-ubuntu-14-04-lts","hardened-mysql-5-6-on-centos-7-3","hardened-mysql-5-6-on-ubu-1404-lts","hardened-mysql-5-7-on-centos-7-3","hardened-mysql-5-7-on-ubu-1404-lts","hardened-postgresql-on-ubu-1404-lts","invoice-ninja-2-5-1-1-on-ubuntu-1404","jruby-on-ubuntu-14-04-lts","low-latency-broadcasting-server-for-live-events","owncloud-9-with-lamp-stack-on-ubuntu-1404","piwigogallerys-ubuntu_14-04_lts","sec1011-dokuwiki-on-ubuntu-1404","sec1013-elasticsearch-on-ubuntu-1404","sec1014-opencart-on-ubuntu-1404","sec1015-orangehrm-on-ubuntu-1404","sec1016-nodejs-server-on-ubuntu-1404","sec1018-haproxy-on-ubuntu-1404","sec1019-secured-tomcat-on-ubuntu-1404","sec1020-phpbb-on-hardened-ubuntu-1404","sec1021-mybb-on-hardened-ubuntu-1404","sec1022-sugarcrm-on-ubuntu-1404","sec1023-moodle-on-ubuntu-1404","sec1024_magento-on-ubuntu-1404","sec1025-secured-drupal-on-ubuntu-1404","sec1027-secured-wordpress-on-ubuntu-1404","sec1028-secured-lamp-sever-on-ubuntu-1404","sec1029-secured-mediawiki-on-ubuntu-1404","sec1030-secured-subversion-on-ubuntu-1404","sec1031-secured-passenger-nginx-on-ubuntu-1404","sec1033-secured-piwik-on-ubuntu-1404","sec1034-secured-pligg-on-ubuntu-1404","sec1035-secured-jenkins-on-ubuntu-1404","sec1036-secured-postgresql-on-ubuntu-1404","secure-cloud-lamp-ubuntu-1404","secured-abantecart-on-centos","secured-abantecart-on-ubuntu-14-04-lts","secured-acquia-drupal-on-centos","secured-acquiadurpal-on-ubuntu-14-04-lts","secured-apachesolr-on-centos","secured-apachesolr-on-ubuntu-14-04-lts","secured-arartifactory-on-centos","secured-artifactory-on-ubuntu-14-04-lts","secured-cakephp-on-centos","secured-cakephp-on-ubuntu-14-04-lts","secured-cms-made-simple-on-centos","secured-cms-made-simple-on-ubuntu-14-04-lts","secured-codiad-on-centos","secured-codiad-on-ubuntu-14-04-lts","secured-cogdam-on-centos","secured-cogdam-on-ubuntu-14-04-lts","secured-concrete5-on-centos","secured-concrete5-on-ubuntu-14-04-lts","secured-coppermine-on-centos","secured-coppermine-on-ubuntu-14-04-lts","secured-crushftp-on-centos","secured-crushftp-on-ubuntu-14-04-lts","secured-django-on-centos","secured-django-on-ubuntu-14-04-lts","secured-dokuwiki-on-centos","secured-dolibarr-on-centos","secured-dolivbarr-on-ubuntu-14-04-lts","secured-drupal-on-centos","secured-elasticsearch-on-centos","secured-enterprise-nginx-varnish-haproxy-php","secured-espocrm-on-centos","secured-espocrm-on-ubuntu-14-04-lts","secured-exoplatform-on-centos","secured-exoplatform-on-ubuntu-14-04-lts","secured-ghost-on-centos","secured-ghost-on-ubuntu-14-04-lts","secured-gradle-on-centos","secured-gradle-on-ubuntu-14-04-lts","secured-haproxy-on-centos","secured-invoice-ninja-on-centos","secured-jboss-as-on-centos","secured-jbossas-on-ubuntu-14-04-lts","secured-jenkins-on-centos","secured-jruby-on-cento","secured-lamp-on-centos","secured-lamp-on-centos-m10","secured-lapp-on-centos","secured-lapp-on-ubuntu-14-04-lts","secured-lemp-sever-on-ubuntu-1404","secured-lime-survey-on-centos","secured-limesurvey-on-ubuntu-1404","secured-live-helper-chat-on-centos","secured-livehelperchat-on-ubuntu-14-04-lts","secured-magento-on-centos","secured-mahara-on-centos","secured-mahara-on-ubuntu-14-04-lts","secured-mantis-on-centos","secured-mantis-on-ubuntu-14-04-lts","secured-mariadb-on-ubuntu-16-04","secured-mautic-on-centos","secured-mautic-on-ubuntu-14-04-lts","secured-media-wiki-on-centos","secured-modx-on-centos","secured-moodle-on-centos","secured-ngnix-on-centos-7-3","secured-ngnix-on-ubuntu-14-04-lts","secured-ngnix-on-ubuntu-16-04-lts","secured-noalyss-on-centos","secured-noalyss-on-ubuntu-14-04-lts","secured-nodejs-on-centos","secured-occlass-on-ubuntu-14-04-lts","secured-ocportal-on-ubuntu-14-04-lts","secured-open-cart-on-centos","secured-orangehrm-on-centos","secured-osclass-on-centos","secured-owncloud-on-centos","secured-oxid-eshop-on-centos","secured-oxideshop-on-ubuntu-14-04-lts","secured-passenger-nginx-on-centos","secured-piwigo-gallery-on-centos","secured-plone-on-centos","secured-plone-on-ubuntu-14-04-lts","secured-prestashop-on-centos","secured-prestashop-on-ubuntu-14-04-lts","secured-railo-on-ubuntu-14-04-lts","secured-redis-on-centos","secured-redis-on-ubuntu-1404","secured-redmine-on-centos","secured-redmine-on-ubuntu-14-04-lts","secured-redmineagile-on-ubuntu-14-04-lts","secured-report-server-on-centos","secured-reportserverent-on-ubuntu-14-04-lts","secured-resource-space-on-centos","secured-resourcespace-on-ubuntu-14-04-lts","secured-round-cube-on-centos","secured-roundcube-on-ubuntu-14-04-lts","secured-ruby-on-centos","secured-ruby-on-ubuntu-14-04-lts","secured-seopanel-on-centos","secured-seopanel-on-ubuntu-14-04-lts","secured-silverstripe-on-centos","secured-simple-invoice-on-centos","secured-simple-machines-on-centos","secured-simple-machines-on-ubuntu-14-04-lts","secured-simpleinvoice-on-ubuntu-14-04-lts","secured-subversion-on-centos","secured-suitecrm-on-centos","secured-suitecrm-on-ubuntu-14-04-lts","secured-test-link-on-centos","secured-testlink-on-ubuntu-14-04-lts","secured-thinkup-on-centos","secured-thinkup-on-ubuntu-14-04-lts","secured-tikiwikicms-on-centos","secured-tikiwikicms-on-ubuntu-14-04-lts","secured-tiny-tiny-rss-on-centos","secured-tinytinyrss-on-ubuntu-14-04-lts","secured-tomcat-on-centos","secured-trac-on-centos","secured-trac-on-ubuntu-14-04-lts","secured-typo3-on-centos","secured-typo3-on-ubuntu-14-04-lts","secured-varnish-on-centos","secured-varnish-on-ubuntu-1404","secured-wildfly-on-centos","secured-wildfly-on-ubuntu-14-04-lts","secured-wordpress-on-centos-7-3","secured-wordpress-on-ubuntu-16-04-lts","secured-x-cart-on-ubuntu-14-04-lts","secured-xoops-on-centos","secured-xoops-on-ubuntu-14-04-lts","secured-zurmo-on-centos","secured-zurmo-on-ubuntu-14-04-lts","suse15","ubuntu-14-04-lts","ubuntu-16-04-lts","ubuntu-17-04-high-performance-hardened-tcp-bbr","ubuntu-18-04","ubuntu-18-04-lts"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cohesity"},{"field":"Microsoft.Compute/imageOffer","in":["cohesity-cloudtd-tool"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cohesive"},{"field":"Microsoft.Compute/imageOffer","in":["vns3_4x_network_security"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"confluentinc"},{"field":"Microsoft.Compute/imageOffer","in":["confluentplatform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"consensys"},{"field":"Microsoft.Compute/imageOffer","in":["truffle"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"convertigo"},{"field":"Microsoft.Compute/imageOffer","in":["convertigo-for-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"corda"},{"field":"Microsoft.Compute/imageOffer","in":["corda"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"CoreOS"},{"field":"Microsoft.Compute/imageOffer","in":["CoreOS"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"couchbase"},{"field":"Microsoft.Compute/imageOffer","in":["couchbase-server-enterprise","couchbase-sync-gateway-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","in":["Debian"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cryptzone"},{"field":"Microsoft.Compute/imageOffer","in":["appgate-appliance-3_2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cybernetica-as"},{"field":"Microsoft.Compute/imageOffer","in":["uxp-securityserver-connector","uxp-securityserver_vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cyxtera"},{"field":"Microsoft.Compute/imageOffer","in":["appgatesdp-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dataart"},{"field":"Microsoft.Compute/imageOffer","in":["devicehive"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"databricks"},{"field":"Microsoft.Compute/imageOffer","in":["spfqogzeculbhdh"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"datalayer"},{"field":"Microsoft.Compute/imageOffer","in":["datalayer-notebook"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"datastax"},{"field":"Microsoft.Compute/imageOffer","in":["datastax-enterprise","datastax-enterprise-non-production-use-only"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"datasunrise"},{"field":"Microsoft.Compute/imageOffer","in":["datasunrise-database-security-suite"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dataiku"},{"field":"Microsoft.Compute/imageOffer","in":["dataiku-data-science-studio"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"datometry"},{"field":"Microsoft.Compute/imageOffer","in":["hyper-q"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dellemc"},{"field":"Microsoft.Compute/imageOffer","in":["dell-emc-avamar-virtual-edition","dell-emc-datadomain-management-center","dell-emc-datadomain-virtual-edition","dell-emc-datadomain-virtual-edition-v4","dell-emc-networker-virtual-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"delphix"},{"field":"Microsoft.Compute/imageOffer","in":["delphix_dynamic_data_platform","omniosce"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"denodo"},{"field":"Microsoft.Compute/imageOffer","in":["denodo-platform","denodo-platform-7_0"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"denyall"},{"field":"Microsoft.Compute/imageOffer","in":["denyall-rweb","denyall-vulnerability-manager","denyall-web-application-firewall"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dgsecure"},{"field":"Microsoft.Compute/imageOffer","in":["dgsecure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"diladele"},{"field":"Microsoft.Compute/imageOffer","in":["websafety"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dimensionalmechanics-inc"},{"field":"Microsoft.Compute/imageOffer","in":["neopulse-ai-studio","neopulse-query-runtime"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"docker"},{"field":"Microsoft.Compute/imageOffer","in":["docker-ce","docker-ce-edge","docker-datacenter-custom","docker-ee","docker-ee-basic","docker4azure","docker4azure-cs"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dome9"},{"field":"Microsoft.Compute/imageOffer","in":["dome9ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"drizti"},{"field":"Microsoft.Compute/imageOffer","in":["hpcbox-ansys-19-cluster-master","hpcbox-cluster-compute-node","hpcbox-cluster-cuda-node","hpcbox-cluster-gpu-node","hpcbox-docker-cluster-master","hpcbox-openfoam-cluster-master","hpcbox-su2-cluster-master"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"drone"},{"field":"Microsoft.Compute/imageOffer","in":["drone"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dyadic_security"},{"field":"Microsoft.Compute/imageOffer","in":["dyadic_sec","ukc_image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"dynatrace"},{"field":"Microsoft.Compute/imageOffer","in":["ruxit-managed-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"eastwind-networks-inc"},{"field":"Microsoft.Compute/imageOffer","in":["eastwind-ixia-sensor"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"egnyte"},{"field":"Microsoft.Compute/imageOffer","in":["egnyte-connect"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"elasticbox"},{"field":"Microsoft.Compute/imageOffer","in":["elasticbox-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"electric-cloud"},{"field":"Microsoft.Compute/imageOffer","in":["electricflowce"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"elfiqnetworks"},{"field":"Microsoft.Compute/imageOffer","in":["cloud-connector"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"emercoin"},{"field":"Microsoft.Compute/imageOffer","in":["emercoin"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"enterprise-ethereum-alliance"},{"field":"Microsoft.Compute/imageOffer","in":["quorum-demo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"enterprisedb-corp"},{"field":"Microsoft.Compute/imageOffer","in":["edb-postgres-ark"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"equalum"},{"field":"Microsoft.Compute/imageOffer","in":["equalum-vm-byol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"esdenera"},{"field":"Microsoft.Compute/imageOffer","in":["esdenera-firewall-3"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ethereum"},{"field":"Microsoft.Compute/imageOffer","in":["ethereum-studio"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"evostream-inc"},{"field":"Microsoft.Compute/imageOffer","in":["ems-for-template","ems-test"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"exasol"},{"field":"Microsoft.Compute/imageOffer","in":["exasol-analytics-database-byol","exasolution-analytic-database"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"falconstorsoftware"},{"field":"Microsoft.Compute/imageOffer","in":["fss-v9"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"f5-networks"},{"field":"Microsoft.Compute/imageOffer","in":["f5-big-ip-adc","f5-big-ip-advanced-waf","f5-big-ip-best","f5-big-ip-better","f5-big-ip-byol","f5-big-ip-good","f5-big-ip-per-app-ve","f5-big-iq","f5-web-application-firewall"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"filecatalyst"},{"field":"Microsoft.Compute/imageOffer","in":["filecatalyst-direct-per-hr-billing","filecatalyst-direct-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"firehost"},{"field":"Microsoft.Compute/imageOffer","in":["firehost_armor","firehost_armor_ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"flexify-io"},{"field":"Microsoft.Compute/imageOffer","in":["single-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"flashgrid-inc"},{"field":"Microsoft.Compute/imageOffer","in":["flashgrid-racnode"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"foghorn-systems"},{"field":"Microsoft.Compute/imageOffer","in":["foghorn-edge-device-manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"forcepoint-llc"},{"field":"Microsoft.Compute/imageOffer","in":["forcepoint-ngfw"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"forscene"},{"field":"Microsoft.Compute/imageOffer","in":["forscene-edgeserver"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"fortycloud"},{"field":"Microsoft.Compute/imageOffer","in":["fortycloud-gw"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"fortinet"},{"field":"Microsoft.Compute/imageOffer","in":["fortinet-fortianalyzer","fortinet-fortimanager","fortinet_fortigate-vm_v5","fortinet_fortimail","fortinet_fortivoice","fortinet_fortiweb-vm_v5"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"fujitsu_fast"},{"field":"Microsoft.Compute/imageOffer","in":["fep10-rh7-test","feptest"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"gemalto-safenet"},{"field":"Microsoft.Compute/imageOffer","in":["safenet-keysecure-k170v","safenet-protectv","safenet-protectv-manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"gigamon-inc"},{"field":"Microsoft.Compute/imageOffer","in":["gigamon-fm-5_3_01","gigamon-fm-5_3_01_hourly","gigamon-fm-5_4_00","gigamon-fm-5_4_00_hourly"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"gitlab"},{"field":"Microsoft.Compute/imageOffer","in":["gitlab-ce","gitlab-ee"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"GitHub"},{"field":"Microsoft.Compute/imageOffer","in":["GitHub-Enterprise","githubenterprise-test-publishing"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"great-software-laboratory-private-limited"},{"field":"Microsoft.Compute/imageOffer","in":["xid"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"greensql"},{"field":"Microsoft.Compute/imageOffer","in":["greensql-database-security"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"gridgain"},{"field":"Microsoft.Compute/imageOffer","in":["gridgain-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"guardicore"},{"field":"Microsoft.Compute/imageOffer","in":["guardicorecentra","infection_monkey"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"haivision"},{"field":"Microsoft.Compute/imageOffer","in":["haivision-media-gateway-1-2","haivision-media-gateway-1-5","haivision-media-gateway-1-6-2","media-gateway"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"h2o-ai"},{"field":"Microsoft.Compute/imageOffer","in":["h2o-driverles-ai","h2o-driverless-ai","h2o-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"haproxy-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["hapee-rhel","hapee-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"harpaitalia"},{"field":"Microsoft.Compute/imageOffer","in":["mcuboenergy","yg","yougreen_trial"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hcl-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["hcl17cp1104"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"heimdall-data"},{"field":"Microsoft.Compute/imageOffer","in":["heimdall-data"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"help-systems"},{"field":"Microsoft.Compute/imageOffer","in":["goanywheremftubuntulinux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hewlett-packard"},{"field":"Microsoft.Compute/imageOffer","in":["hpe-helion-stackato"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hillstone-networks"},{"field":"Microsoft.Compute/imageOffer","in":["cloudedge-virtual-ngfw-advanced-edition","cloudedge-virtual-ngfw-standard-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hortonworks"},{"field":"Microsoft.Compute/imageOffer","in":["cloudbreak-for-hortonworks-data-platform","hortonworks-sandbox"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hitachi-solutions"},{"field":"Microsoft.Compute/imageOffer","in":["credeon-sfs-and-kms-for-sharepoint-online","credeonsecurefull-textsearch1_0"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hpe"},{"field":"Microsoft.Compute/imageOffer","in":["storeoncevsa"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"huawei"},{"field":"Microsoft.Compute/imageOffer","in":["euleros-v2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hyperglance"},{"field":"Microsoft.Compute/imageOffer","in":["hyperglance-dynamic-topology"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hypergrid"},{"field":"Microsoft.Compute/imageOffer","in":["hyperform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"hytrust"},{"field":"Microsoft.Compute/imageOffer","in":["hytrust-keycontrol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ibm"},{"field":"Microsoft.Compute/imageOffer","in":["ibm-security-guardium-multi-cloud","qradar_security_analytics"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"iaansys"},{"field":"Microsoft.Compute/imageOffer","in":["iaansys-magento"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"iboss"},{"field":"Microsoft.Compute/imageOffer","in":["iboss-14600-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"imaginecommunications"},{"field":"Microsoft.Compute/imageOffer","in":["cloudxtream-cdvr","cloudxtream-dai-vms","telurio-aim"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"imperva"},{"field":"Microsoft.Compute/imageOffer","in":["imperva-dam-v13","securesphere-waf","securesphere-waf-for-azr","securesphere-waf-v12","securesphere-waf-v13"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"infoblox"},{"field":"Microsoft.Compute/imageOffer","in":["infoblox-vnios-te-v1420"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"informatica"},{"field":"Microsoft.Compute/imageOffer","in":["bdm10-1-1-u2","big-data-management-10-2","big-data-management-10-2-1","data_accelerator_for_azure_byol","data_quality_10_1_1_rhel_7_3_byol","eic","ics-byol","ics-payg-ubuntu","platform_10_1_1_multi_node_domain_rhel-7-3_byol","platform_10_2_hf1_domain_rhel-7-3_byol","powercenter-v10-domain-image-ubuntu14-04-3","powercenter-v10-update1-domain-image-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"informationbuilders"},{"field":"Microsoft.Compute/imageOffer","in":["iway-big-data-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ingrammicro"},{"field":"Microsoft.Compute/imageOffer","in":["ingrammicroensimcentostrial"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intel"},{"field":"Microsoft.Compute/imageOffer","in":["lustre-cloud-edition-gs-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intel-bigdl"},{"field":"Microsoft.Compute/imageOffer","in":["bigdl-0815","bigdl__vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intel-fpga"},{"field":"Microsoft.Compute/imageOffer","in":["quartus_pro_opencl_sdk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intellicus-technologies-pvt-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["intellicus_bi_server_100_user_linux","intellicus_bi_server_10_user_linux","intellicus_bi_server_25_user_linux","intellicus_bi_server_50_user_linux","intellicus_bi_server_5_user_linux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intersystems"},{"field":"Microsoft.Compute/imageOffer","in":["intersystems-iris-single-node"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"intigua"},{"field":"Microsoft.Compute/imageOffer","in":["intigua-agent-manager-3_7_0-trial","intigua-agent-manager-trial"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"iquest"},{"field":"Microsoft.Compute/imageOffer","in":["keyhub"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ishlangu-load-balancer-adc"},{"field":"Microsoft.Compute/imageOffer","in":["ishlangu-load-balancer-byol","ishlangu-load-balancer-is10","ishlangu-load-balancer-is100","ishlangu-load-balancer-is1000","ishlangu-load-balancer-is200","ishlangu-load-balancer-is5000","ishlangu-load-balancer-isbfg"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"issp-corporation"},{"field":"Microsoft.Compute/imageOffer","in":["ispocr"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"itelios"},{"field":"Microsoft.Compute/imageOffer","in":["magento2-on-zendserver"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jamcracker"},{"field":"Microsoft.Compute/imageOffer","in":["4632d5b4-feb0-4332-8452-f2e66133672f","jamcracker-cloudanalytics","jamcracker-cloudanalytics-version4","jamcracker-cloudanalytics-version5","jamcracker-csb-service-provider","jamcracker-csb-serviceprovider","jamcracker-csb-standard","jamcracker-csb-standard-v3","jamcracker-csb-standard-version4","jamcracker-hybrid-cloud-management-version4","jamcracker_cloud_control_appliance_version4","jsdnapp_csb_serviceprovider-version4","jsdnapp_hybrid","jsdnapp_hybrid_v3"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jedox"},{"field":"Microsoft.Compute/imageOffer","in":["jedox-for-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jelastic"},{"field":"Microsoft.Compute/imageOffer","in":["jelastic-hybrid-paas-standard"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jetnexus"},{"field":"Microsoft.Compute/imageOffer","in":["dvwa","jetnexus-application-load-balancer","jetnexus-global-load-balancer","jetnexus-waf","zap"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jetware-srl"},{"field":"Microsoft.Compute/imageOffer","in":["caffe2","caffe_python_cpu","caffe_python_gpu","cockroachdb","lamp_optimized","lemp7_optimized","memcached","mongodb","mxnet_python","mysql","nodejs_nginx","percona_mongodb","percona_mysql","postgresql","pytorch","pytorch_cuda_notebook","pytorch_cuda_production","redis","redmine","tensorflow_cpu_notebook","tensorflow_cpu_production","tensorflow_cuda_notebook","tensorflow_cuda_production","tensorflow_python","theano_python","wordpress4_lemp7"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jitterbit_integration"},{"field":"Microsoft.Compute/imageOffer","in":["jitterbit-harmony-agent"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"jm-technology-inc"},{"field":"Microsoft.Compute/imageOffer","in":["smart-gateway"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"juniper-networks"},{"field":"Microsoft.Compute/imageOffer","in":["vmx-services-gateway-byol","vmx-services-gateway-byol-soltemp","vmx-virtual-router","vsrx-next-generation-firewall","vsrx-next-generation-firewall-payg","vsrx-next-generation-firewall-solution-templ-payg","vsrx-next-generation-firewall-solution-template"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kaazing"},{"field":"Microsoft.Compute/imageOffer","in":["kaazing-kwic","kaazing-vpa"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kali-linux"},{"field":"Microsoft.Compute/imageOffer","in":["kali-linux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kemptech"},{"field":"Microsoft.Compute/imageOffer","in":["kemp360central-byol","vlm-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kinetica"},{"field":"Microsoft.Compute/imageOffer","in":["kineticadbbyol","kineticadbpayasyougo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"kaspersky_lab"},{"field":"Microsoft.Compute/imageOffer","in":["kaspersky_secure_mail_gateway"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"knime"},{"field":"Microsoft.Compute/imageOffer","in":["knime-server-5-user_4-4-0","knime-server-byol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"krypc-technologies-pvt-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["krypccore"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"leap-orbit"},{"field":"Microsoft.Compute/imageOffer","in":["leaporbitstoragebackedsftp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"leostream-corporation"},{"field":"Microsoft.Compute/imageOffer","in":["connection-broker"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"liquid-files"},{"field":"Microsoft.Compute/imageOffer","in":["liquidfiles"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"liquidware"},{"field":"Microsoft.Compute/imageOffer","in":["stratusphere"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"literatu"},{"field":"Microsoft.Compute/imageOffer","in":["literatu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"loadbalancer"},{"field":"Microsoft.Compute/imageOffer","in":["loadbalancer-org-load-balancer-for-azure","loadbalancer-org-load-balancer-for-azure-byol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"logsign"},{"field":"Microsoft.Compute/imageOffer","in":["logsignfocus"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"logtrust"},{"field":"Microsoft.Compute/imageOffer","in":["logtrust-log-management"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"looker"},{"field":"Microsoft.Compute/imageOffer","in":["looker-analytics-platform","looker-analytics-platform-326","looker-analytics-platform-5_6"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"lti-lt-infotech"},{"field":"Microsoft.Compute/imageOffer","in":["trade-finance-blockchain"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"luminate-security"},{"field":"Microsoft.Compute/imageOffer","in":["luminate-connector"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mapr-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["mapr52-base-dev","mapr60-base","mapr60-sandbox"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mariadb"},{"field":"Microsoft.Compute/imageOffer","in":["mariadb-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"marklogic"},{"field":"Microsoft.Compute/imageOffer","in":["marklogic-9-byol","marklogic-developer-9"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"massiveanalytic-"},{"field":"Microsoft.Compute/imageOffer","in":["oscarap"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mathworks-inc"},{"field":"Microsoft.Compute/imageOffer","in":["matlab-ref-arch-18a-v1-linux-disk","mps-ref-arch-18a-v1-linux-disk2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"matillion"},{"field":"Microsoft.Compute/imageOffer","in":["matillion-etl-snowflake"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mavinglobal"},{"field":"Microsoft.Compute/imageOffer","in":["mavin-business-trial","mavin-enterprise-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"meanio"},{"field":"Microsoft.Compute/imageOffer","in":["gitlab-enterprise-ready","linnovate-open-source-sla-pro","mean-machine-20","openideal3","redash"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"media3-technologies-llc"},{"field":"Microsoft.Compute/imageOffer","in":["cpan1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"memsql"},{"field":"Microsoft.Compute/imageOffer","in":["memsql-community-single-vm","memsql-enterprise-single-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mendix"},{"field":"Microsoft.Compute/imageOffer","in":["mendix-docker","mendix-pro"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mfe_azure"},{"field":"Microsoft.Compute/imageOffer","in":["atd-mcafee","mcafee_vnsp_controller_for_azure","mcafee_vnsp_for_azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm","linux-data-science-vm-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-aks"},{"field":"Microsoft.Compute/imageOffer","in":["aks"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"micro-focus"},{"field":"Microsoft.Compute/imageOffer","in":["replication_environment"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-avere"},{"field":"Microsoft.Compute/imageOffer","in":["vfxt"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-azure-batch"},{"field":"Microsoft.Compute/imageOffer","in":["centos-container","centos-container-rdma","ubuntu-server-container","ubuntu-server-container-rdma"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-azure-compute"},{"field":"Microsoft.Compute/imageOffer","in":["azureconfidentialcompute"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["azureml","linux-data-science-vm-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftAzureSiteRecovery"},{"field":"Microsoft.Compute/imageOffer","in":["ASR-Hydration-VMs"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftOSTC"},{"field":"Microsoft.Compute/imageOffer","in":["FreeBSD"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","in":["MLServer-CentOS","MLServer-RedHat","MLServer-Ubuntu","RServer-CentOS","RServer-Ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"midfin"},{"field":"Microsoft.Compute/imageOffer","in":["mf_neon_cgw"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"midvision"},{"field":"Microsoft.Compute/imageOffer","in":["ibm-datapower-virtual-edition-75","ibm-datapower-virtual-edition-76","ibm-datapower-virtual-edition-77","ibm-http-server","ibm-websphere-portal-server-85","ibm-websphere-portal-server-90","websphere-application-server-be","websphere-application-server-be-80","websphere-application-server-be-85","websphere-application-server-be-90","websphere-application-server-be-and-mq","websphere-application-server-lp","websphere-application-server-lp-16","websphere-application-server-lp-17","websphere-application-server-lp-18","websphere-application-server-nde","websphere-application-server-nde-80","websphere-application-server-nde-85","websphere-application-server-nde-90","websphere-mq","websphere-mq-75","websphere-mq-90","websphere-mq-91"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"miraclelinux"},{"field":"Microsoft.Compute/imageOffer","in":["asianux-server-4-sp5","asianux-server-4-sp6","asianux-server-4-sp7","asianux-server-7-sp1","asianux-server-7-sp2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"miri-infotech-pvt-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["wordpress"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mobilab"},{"field":"Microsoft.Compute/imageOffer","in":["magento-wirecard-checkout"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"moogsoft"},{"field":"Microsoft.Compute/imageOffer","in":["moogsoft-aiops"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"moviemasher"},{"field":"Microsoft.Compute/imageOffer","in":["moviemasher"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","in":["SQL2017-RHEL7","SQL2017-RHEL73","SQL2017-SLES12SP2","SQL2017-Ubuntu1604","SQL2019-RHEL7","SQL2019-Ubuntu1604"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mtnfog"},{"field":"Microsoft.Compute/imageOffer","in":["idyl-e3-entity-extraction-engine","prose-sentence-extraction-engine","renku-language-detection-engine","sonnet-tokenization-engine"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"mxhero"},{"field":"Microsoft.Compute/imageOffer","in":["mail2cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"my-com"},{"field":"Microsoft.Compute/imageOffer","in":["tarantool"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"narrativescience"},{"field":"Microsoft.Compute/imageOffer","in":["narratives-for-power-bi"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nasuni"},{"field":"Microsoft.Compute/imageOffer","in":["nasuni-nmc","nasuni_edge_appliance"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ncbi"},{"field":"Microsoft.Compute/imageOffer","in":["ncbi-blast-2-3-0","ncbi-free-2-2-31"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nebbiolo-technologies-inc"},{"field":"Microsoft.Compute/imageOffer","in":["fog-system-manager","fogsm_basic"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"neo4j"},{"field":"Microsoft.Compute/imageOffer","in":["neo4j-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netapp"},{"field":"Microsoft.Compute/imageOffer","in":["netapp-altavault-cloud-integrated-storage-solution","netapp-oncommand-cloud-manager","netapp-ontap-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netgate"},{"field":"Microsoft.Compute/imageOffer","in":["netgate-pfsense-azure-fw-vpn-router"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netiq"},{"field":"Microsoft.Compute/imageOffer","in":["replication_environment"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netscout"},{"field":"Microsoft.Compute/imageOffer","in":["netscout_virtual_ngeniusone_with_vscout","netscout_vstream"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netmail"},{"field":"Microsoft.Compute/imageOffer","in":["netmail-search"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netsweeper"},{"field":"Microsoft.Compute/imageOffer","in":["netsweeper6-0-6"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"netx"},{"field":"Microsoft.Compute/imageOffer","in":["simplehelp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"neusoft-neteye"},{"field":"Microsoft.Compute/imageOffer","in":["neusoft-nisg-va-v1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nginxinc"},{"field":"Microsoft.Compute/imageOffer","in":["nginx-plus-v1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nicepeopleatwork"},{"field":"Microsoft.Compute/imageOffer","in":["youzana"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nodejsapi"},{"field":"Microsoft.Compute/imageOffer","in":["node-js-api"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"noobaa"},{"field":"Microsoft.Compute/imageOffer","in":["noobaa-hybrid-s3-archive-05","noobaa-multi-cloud-deduplication"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"northbridge-secure"},{"field":"Microsoft.Compute/imageOffer","in":["netconnect1","netconnectx"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nubeva-inc"},{"field":"Microsoft.Compute/imageOffer","in":["controller","test"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nuco-networks"},{"field":"Microsoft.Compute/imageOffer","in":["aionnode"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nuxeo"},{"field":"Microsoft.Compute/imageOffer","in":["nuxeo-6-lts","nuxeo-lts"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"nvidia"},{"field":"Microsoft.Compute/imageOffer","in":["ngc_azure_17_11"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"o2mc-real-time-data-platform"},{"field":"Microsoft.Compute/imageOffer","in":["o2mc-platform-app"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"oceanblue-cloud"},{"field":"Microsoft.Compute/imageOffer","in":["obc-sdwan-solutions"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"omega-software"},{"field":"Microsoft.Compute/imageOffer","in":["ods_datastage"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"onyx-point-inc"},{"field":"Microsoft.Compute/imageOffer","in":["op-bnf-v1","op-bnf1_6-v1","op-bpnifi-v1","op-bpnifi16-v1","op-scc-v1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"onapsis"},{"field":"Microsoft.Compute/imageOffer","in":["osp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"op5"},{"field":"Microsoft.Compute/imageOffer","in":["op5-monitor"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"opencell"},{"field":"Microsoft.Compute/imageOffer","in":["meveo","meveo403sp2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","CentOS-CI","CentOS-HPC","CentOS-LVM","CentOS-SRIOV"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"openvpn"},{"field":"Microsoft.Compute/imageOffer","in":["openvpnas"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","in":["Oracle-Database-Ee","Oracle-Database-Se","Oracle-Linux","Oracle-WebLogic-Server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"orientdb"},{"field":"Microsoft.Compute/imageOffer","in":["orientdb-community-edition","orientdb-community-edition-2_2","orientdb-enterprise-edition-2_2","orientdb-enterprise-edition-2_2_17"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"osirium-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["osirium-pxm-platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"osnexus"},{"field":"Microsoft.Compute/imageOffer","in":["quantastorvsav4"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"paloaltonetworks"},{"field":"Microsoft.Compute/imageOffer","in":["panorama","vmseries1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"panzura-file-system"},{"field":"Microsoft.Compute/imageOffer","in":["azura-freedom-filer-v7110","panzura-cloud-filer","panzura-freedom-filer-7140-13222","panzura-freedom-filer-716-13549","panzura-freedom-filer-v7020"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"parasoft"},{"field":"Microsoft.Compute/imageOffer","in":["parasoft-service-virtualization"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"passlogy"},{"field":"Microsoft.Compute/imageOffer","in":["passlogic"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"penta-security-systems-inc"},{"field":"Microsoft.Compute/imageOffer","in":["wapples"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"percona"},{"field":"Microsoft.Compute/imageOffer","in":["percona-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"postgres-pro"},{"field":"Microsoft.Compute/imageOffer","in":["postgres-pro-enterprise","postgres-pro-enterprise-10","postgres-pro-standard","postgres-pro-standard-10"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"plesk"},{"field":"Microsoft.Compute/imageOffer","in":["plesk-onyx-linux","solution-server-business","solution-server-wordpress"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"prestashop"},{"field":"Microsoft.Compute/imageOffer","in":["prestashop16-lamp","ubuntu-base-for-prestashop"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"prime-strategy"},{"field":"Microsoft.Compute/imageOffer","in":["kusanagi-77"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","in":["pivotal-gpdb-vm","pivotal-greenplum-images","pivotal-ops-manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"process-one"},{"field":"Microsoft.Compute/imageOffer","in":["ejabberd-community-edition"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"profecia"},{"field":"Microsoft.Compute/imageOffer","in":["full_disk_encryption_vm","project_tools_vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"progelspa"},{"field":"Microsoft.Compute/imageOffer","in":["libra-esva-antispam"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ptsecurity"},{"field":"Microsoft.Compute/imageOffer","in":["ptaf-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pulse-secure"},{"field":"Microsoft.Compute/imageOffer","in":["pulse-connect-secure-vm","pulse-virtual-traffic-manager","pulse-virtual-traffic-manager-with-waf","pulse-virtual-traffic-manager-with-waf2","pulse-virtual-traffic-manager2","pulse-virtual-web-application-firewall","pulse-virtual-web-application-firewall2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"PuppetLabs"},{"field":"Microsoft.Compute/imageOffer","in":["PuppetEnterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"puppet"},{"field":"Microsoft.Compute/imageOffer","in":["puppet-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pydio"},{"field":"Microsoft.Compute/imageOffer","in":["pydio-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"qore-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["qorus"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"qualysguard"},{"field":"Microsoft.Compute/imageOffer","in":["qualys-virtual-firewall-appliance","qualys-virtual-scanner-v23b","qualys-virtual-scanner-v24"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"quasardb"},{"field":"Microsoft.Compute/imageOffer","in":["quasardb"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"qubole-inc"},{"field":"Microsoft.Compute/imageOffer","in":["qubole-data-service"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"quest"},{"field":"Microsoft.Compute/imageOffer","in":["fve"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"racknap"},{"field":"Microsoft.Compute/imageOffer","in":["racknap-server","racknap-server-linux"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"radware"},{"field":"Microsoft.Compute/imageOffer","in":["radware-alteon-va"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"radiant-logic"},{"field":"Microsoft.Compute/imageOffer","in":["radiantone-vms"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rancher"},{"field":"Microsoft.Compute/imageOffer","in":["rancheros"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rapid7"},{"field":"Microsoft.Compute/imageOffer","in":["nexpose-scan-engine","rapid7-vm-console"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rapidminer"},{"field":"Microsoft.Compute/imageOffer","in":["rapidminer_server_75","rapidminer_server_76","rapidminer_server_80","rapidminer_server_81"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"realm"},{"field":"Microsoft.Compute/imageOffer","in":["realm-mobile-platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"reblaze"},{"field":"Microsoft.Compute/imageOffer","in":["rbzr-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","RHEL","rhel-byos","rhel-ocp-marketplace","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HANA"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"relevance-lab"},{"field":"Microsoft.Compute/imageOffer","in":["rlcatalyst"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"remotelearner"},{"field":"Microsoft.Compute/imageOffer","in":["fully-supported-moodle"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"revolution-analytics"},{"field":"Microsoft.Compute/imageOffer","in":["revolution-r-enterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RightScaleLinux"},{"field":"Microsoft.Compute/imageOffer","in":["RightImage-CentOS","RightImage-Ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RiverbedTechnology"},{"field":"Microsoft.Compute/imageOffer","in":["steelapp_traffic_manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"riverbed"},{"field":"Microsoft.Compute/imageOffer","in":["riverbed-sccm-5-5-1","riverbed-steelcentral-appinternals","riverbed-steelhead-9-2","riverbed-steelhead-9-5-0","riverbed-steelhead-9-6-0","riverbed_steelconnect_gw","riverbed_steelconnect_sh","steelapp_traffic_manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rocketsoftware"},{"field":"Microsoft.Compute/imageOffer","in":["rocket-discover"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rsa-security-llc"},{"field":"Microsoft.Compute/imageOffer","in":["rsa-nw-azure-arch","rsa-nw-azure-broker","rsa-nw-azure-con","rsa-nw-azure-esa","rsa-nw-azure-ldec","rsa-nw-azure-vlc","rsa-nw-suite-11","rsa-nw-suite-11-1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"rsk-labs"},{"field":"Microsoft.Compute/imageOffer","in":["rsk-bamboo-beta-node","rsk-node-orchid"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"saama"},{"field":"Microsoft.Compute/imageOffer","in":["fluidanalyticsengine","insurancefraudanalytics","realworldevidence"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"saltstack"},{"field":"Microsoft.Compute/imageOffer","in":["centos65saltstackenterprise"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"scalearc"},{"field":"Microsoft.Compute/imageOffer","in":["scalearc-for-mysql-paygo","scalearc-for-sql-server-pay-go","scalearc_mysql-server","scalearc_sql_server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"scalegrid"},{"field":"Microsoft.Compute/imageOffer","in":["centos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sap"},{"field":"Microsoft.Compute/imageOffer","in":["hanaexpress"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"scality"},{"field":"Microsoft.Compute/imageOffer","in":["scalityconnecthourly"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"secureworks"},{"field":"Microsoft.Compute/imageOffer","in":["scwx-azure-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"shadow-soft"},{"field":"Microsoft.Compute/imageOffer","in":["icinga","icinga2-5","icinga2-7"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"signal-sciences"},{"field":"Microsoft.Compute/imageOffer","in":["signalscienceswpp"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sightapps"},{"field":"Microsoft.Compute/imageOffer","in":["sightapps"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"silver-peak-systems"},{"field":"Microsoft.Compute/imageOffer","in":["silver_peak_edgeconnect","silver_peak_vx"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"simmachinesinc"},{"field":"Microsoft.Compute/imageOffer","in":["simmachines_vm_v2"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sinefa"},{"field":"Microsoft.Compute/imageOffer","in":["sinefa-probe"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"skyarc"},{"field":"Microsoft.Compute/imageOffer","in":["mt6","mta"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"smartmessage-autoflow"},{"field":"Microsoft.Compute/imageOffer","in":["martmessage-autoflow"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"snapt-adc"},{"field":"Microsoft.Compute/imageOffer","in":["snaptadc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"soasta"},{"field":"Microsoft.Compute/imageOffer","in":["cloudtest-lite"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"softnas"},{"field":"Microsoft.Compute/imageOffer","in":["cloud_dev","mp_ce","mp_ent","mp_nas_byol","mp_nas_ep","mp_nas_gp","mp_nas_hp","mp_plat","private_offerings","softnas-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"solanolabs"},{"field":"Microsoft.Compute/imageOffer","in":["solano-ci-private-beta"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"soha"},{"field":"Microsoft.Compute/imageOffer","in":["soha-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"solar-security"},{"field":"Microsoft.Compute/imageOffer","in":["solar-incode"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sonicwall-inc"},{"field":"Microsoft.Compute/imageOffer","in":["sonicwall-nsz-azure","waf"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sophos"},{"field":"Microsoft.Compute/imageOffer","in":["sophos-xg"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"spagobi"},{"field":"Microsoft.Compute/imageOffer","in":["spagobi"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"spacecurve"},{"field":"Microsoft.Compute/imageOffer","in":["spacecurve-quickstart"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"splunk"},{"field":"Microsoft.Compute/imageOffer","in":["splunk-enterprise-base-image"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"src-solution"},{"field":"Microsoft.Compute/imageOffer","in":["pilot-things-onem2m-smart-network"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sqlstream"},{"field":"Microsoft.Compute/imageOffer","in":["com"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"sphere3d"},{"field":"Microsoft.Compute/imageOffer","in":["snapcloud-byol","snapcloud-standard"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stackato-platform-as-a-service"},{"field":"Microsoft.Compute/imageOffer","in":["activestate-stackato"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stackstorm"},{"field":"Microsoft.Compute/imageOffer","in":["stackstorm-2015-1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"startekfingerprintmatch"},{"field":"Microsoft.Compute/imageOffer","in":["bioserver"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"steelhive"},{"field":"Microsoft.Compute/imageOffer","in":["steelhive_carbon"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stonefly"},{"field":"Microsoft.Compute/imageOffer","in":["stonefly-cloud-drive"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stormshield"},{"field":"Microsoft.Compute/imageOffer","in":["stormshield-network-security-for-cloud","stormshield-network-security-for-cloud-xl"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"storreduce"},{"field":"Microsoft.Compute/imageOffer","in":["storreduce"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"stratumn"},{"field":"Microsoft.Compute/imageOffer","in":["indigo-node"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"streamsets"},{"field":"Microsoft.Compute/imageOffer","in":["streamsets-data-collector"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"striim"},{"field":"Microsoft.Compute/imageOffer","in":["integrationforsqlserveronazure","integrationtoazurestorage","integrationtoeventhub","integrationtohdinsight"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["openSUSE-Leap","SLES","SLES-BYOS","SLES-HPC","SLES-HPC-Priority","SLES-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-SAPCAL","SLES-Standard","SUSE-CaaSP-Admin-BYOS","SUSE-CaaSP-Cluster-BYOS","SUSE-Manager-Proxy-BYOS","SUSE-Manager-Server-BYOS"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"symantectest1"},{"field":"Microsoft.Compute/imageOffer","in":["cwpsazure-beta-01"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"synack-inc"},{"field":"Microsoft.Compute/imageOffer","in":["synack-crowd-security-intelligence"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"synechron-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["blockchain_tradefinance_quorum"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"syte"},{"field":"Microsoft.Compute/imageOffer","in":["syteoffer"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tactic"},{"field":"Microsoft.Compute/imageOffer","in":["tactic-workflow-v001"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"talari-networks"},{"field":"Microsoft.Compute/imageOffer","in":["talari-networks-virtual-appliance"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"talena-inc"},{"field":"Microsoft.Compute/imageOffer","in":["talena_inc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tata_communications"},{"field":"Microsoft.Compute/imageOffer","in":["netfoundry_cloud_gateway"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tavendo"},{"field":"Microsoft.Compute/imageOffer","in":["crossbar_on_azure_ubuntu1404"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"techdivision"},{"field":"Microsoft.Compute/imageOffer","in":["appserver-io-pe"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"techlatest"},{"field":"Microsoft.Compute/imageOffer","in":["ethereumdevkit","rippledevelopersuit"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"telepat"},{"field":"Microsoft.Compute/imageOffer","in":["free"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tenable"},{"field":"Microsoft.Compute/imageOffer","in":["tenable-nessus-6-byol","tenable-nessus-professional","tenablecorenessus","tenablecorewas"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"teradata"},{"field":"Microsoft.Compute/imageOffer","in":["teradata-data-mover","teradata-data-mover-agent","teradata-data-mover-intellisphere","teradata-data-stream-controller","teradata-database-1510","teradata-database-1510-byol","teradata-database-1510-intellisphere","teradata-database-1510-v2","teradata-database-1610-intellisphere","teradata-database-1610-v2","teradata-database-1620","teradata-database-1620-byol","teradata-database-1620-intellisphere","teradata-database-enterprise","teradata-database-v1610","teradata-database-v1610-byol","teradata-ecosystem-manager","teradata-querygrid-manager","teradata-querygrid-manager-intellisphere","teradata-rest-services","teradata-server-management","teradata-viewpoint","teradata-viewpoint-intellisphere"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"thales-vormetric"},{"field":"Microsoft.Compute/imageOffer","in":["ciphertrust-ckm","vormetric-dsm","vormetric-dsm-6-1-0","vormetric-tokenization-server","vts-2_2_0_2604"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"things-board"},{"field":"Microsoft.Compute/imageOffer","in":["tb-pe-cassandra"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"thoughtspot-inc"},{"field":"Microsoft.Compute/imageOffer","in":["thoughtspotvirtualmachine"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tibco-software"},{"field":"Microsoft.Compute/imageOffer","in":["grid-server-engine"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tig"},{"field":"Microsoft.Compute/imageOffer","in":["backup-as-a-service"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tigergraph"},{"field":"Microsoft.Compute/imageOffer","in":["tigergraph"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tmaxsoft"},{"field":"Microsoft.Compute/imageOffer","in":["tmax-jeusee","tmax-jeusse","tmax-webtobse"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tokyosystemhouse"},{"field":"Microsoft.Compute/imageOffer","in":["osscobol151j-pg961-centos72"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"torusware"},{"field":"Microsoft.Compute/imageOffer","in":["speedus-lite-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"totemo"},{"field":"Microsoft.Compute/imageOffer","in":["totemo-azr-tm6"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"townsend-security"},{"field":"Microsoft.Compute/imageOffer","in":["alliance-key-manager"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"trendmicro"},{"field":"Microsoft.Compute/imageOffer","in":["deep-security-vm","deep-security-vm-byol","iot-security-sdk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"truestack"},{"field":"Microsoft.Compute/imageOffer","in":["tsdc"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tsa-public-service"},{"field":"Microsoft.Compute/imageOffer","in":["ckan-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"tunnelbiz"},{"field":"Microsoft.Compute/imageOffer","in":["centos70-min","centos7optimizwithwordpress","centos7phpoptimizing","centos7phpoptimizingnginx","centos7phpoptimizwlaravel","centos7phpoptimizwosticket","centos7webserverwithwaf","centos7withaspdotnetcore2apache","centos7withjoomla","debian_web_server","fedora","fusio","linuxwithlimesurvey","networkmonitoringsystem","rimauwaf_cloud","ubuntu_server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"twistlock"},{"field":"Microsoft.Compute/imageOffer","in":["twistlock"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"typesafe"},{"field":"Microsoft.Compute/imageOffer","in":["typesafe-reactive-maps-demo"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ubeeko"},{"field":"Microsoft.Compute/imageOffer","in":["hfactory-tools-for-hdinsight","hfactory-tools-sandbox"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ubercloud"},{"field":"Microsoft.Compute/imageOffer","in":["ansys-17-2-fluids-structures","ansys_182_test","comsol-multiphysics-v5-2","openfoam-v2dot3-centos-v6","openfoam-v3dot0","star-ccm-v10-04","star-ccm-v10-06-heeds-mdo-v2015","star-ccm-v12-00"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"ulex"},{"field":"Microsoft.Compute/imageOffer","in":["voximal"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"unifi-software"},{"field":"Microsoft.Compute/imageOffer","in":["unifi-data-catalog","unifi-dataplatform-2-3-3-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"unitrends"},{"field":"Microsoft.Compute/imageOffer","in":["unitrends-enterprise-backup-azure"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"usp"},{"field":"Microsoft.Compute/imageOffer","in":["unified-streaming-vod-standard"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"varnish"},{"field":"Microsoft.Compute/imageOffer","in":["varnish-cache_","varnish-custom-statistics","varnish-plus-administration-and-statistics","varnish-plus-caching-engine-4"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vaultive-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cloud-security-platform"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vbot"},{"field":"Microsoft.Compute/imageOffer","in":["vbot"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"velocloud"},{"field":"Microsoft.Compute/imageOffer","in":["velocloud-virtual-edge","velocloud-virtual-edge-3x"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vidispine"},{"field":"Microsoft.Compute/imageOffer","in":["vidispine-content-management"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"veritas"},{"field":"Microsoft.Compute/imageOffer","in":["cloudpoint-2-0-0","veritas-resiliency-platform-vhd-offer"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"veeam"},{"field":"Microsoft.Compute/imageOffer","in":["veeamhubimage"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vigyanlabs-innovations-pvt-ltd"},{"field":"Microsoft.Compute/imageOffer","in":["ipm-plus-energy-saver"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"viptela"},{"field":"Microsoft.Compute/imageOffer","in":["viptela-vedge-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vizixiotplatformretail001"},{"field":"Microsoft.Compute/imageOffer","in":["vizix-iot-platform-retail-005"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vmturbo"},{"field":"Microsoft.Compute/imageOffer","in":["turbonomic","vmturbo64-opsmgr-5_3"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vte"},{"field":"Microsoft.Compute/imageOffer","in":["slashdb"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"vu-llc"},{"field":"Microsoft.Compute/imageOffer","in":["vu-app-server","vu-facerecogn","vu-fraudanalysis","vu-secureonboarding"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"wallarm"},{"field":"Microsoft.Compute/imageOffer","in":["wallarm-ng-waf-offer-1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"wallix"},{"field":"Microsoft.Compute/imageOffer","in":["wallix-wabsuite"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"watchguard-technologies"},{"field":"Microsoft.Compute/imageOffer","in":["vm-firebox-cloud"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"waves"},{"field":"Microsoft.Compute/imageOffer","in":["waves"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"websense-apmailpe"},{"field":"Microsoft.Compute/imageOffer","in":["ap-data-email-gateway","forcepoint-email-security-85beta","triton-ap-data"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"wmspanel"},{"field":"Microsoft.Compute/imageOffer","in":["nimble-streamer-centos","nimble-streamer-ubuntu"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"wowza"},{"field":"Microsoft.Compute/imageOffer","in":["wowzastreamingengine"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"xfinityinc"},{"field":"Microsoft.Compute/imageOffer","in":["d3view-v5"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"xtremedata"},{"field":"Microsoft.Compute/imageOffer","in":["dbx"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"yellowfin"},{"field":"Microsoft.Compute/imageOffer","in":["yellowfin-for-azure-byol"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"xyzrd-group-ou"},{"field":"Microsoft.Compute/imageOffer","in":["c73-zultys-mxvirtual"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"your-shop-online"},{"field":"Microsoft.Compute/imageOffer","in":["herefordshire-enterprise-platform-drupal-7","xenofile"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"zend"},{"field":"Microsoft.Compute/imageOffer","in":["php-56-zend-server","php-zend-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"z1"},{"field":"Microsoft.Compute/imageOffer","in":["z1-securehub"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"zerodown_software"},{"field":"Microsoft.Compute/imageOffer","in":["bcaasforazure","stackbcaas"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"zoomdata"},{"field":"Microsoft.Compute/imageOffer","in":["zoomdata-server"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"zscaler"},{"field":"Microsoft.Compute/imageOffer","in":["zscaler-private-access"]}]}]}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/d974fab8daefe230","type":"Microsoft.Authorization/policyDefinitions","name":"d974fab8daefe230"},{"properties":{"displayName":"geneva - monitoring extension and azsecpack autoupdate policy for vmss_2.0","policyType":"Custom","mode":"Indexed","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-07-12T00:29:56.9604539Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"anyOf":[{"field":"Microsoft.Compute/VirtualMachineScaleSets/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","name":"Microsoft.Azure.Geneva.GenevaMonitoring","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/type","equals":"GenevaMonitoring"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.Azure.Geneva"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/enableAutomaticUpgrade","equals":"true"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmssName":{"type":"string"},"location":{"type":"string"}},"resources":[{"apiVersion":"2018-10-01","name":"[concat(parameters(''vmssName''), - ''/Microsoft.Azure.Geneva.GenevaMonitoring'')]","type":"Microsoft.Compute/virtualMachineScaleSets/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.Azure.Geneva","type":"GenevaMonitoring","typeHandlerVersion":"2.0","autoUpgradeMinorVersion":true,"enableAutomaticUpgrade":true,"settings":{}}}]},"parameters":{"vmssName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/dac4e4f8ad529fe5","type":"Microsoft.Authorization/policyDefinitions","name":"dac4e4f8ad529fe5"},{"properties":{"displayName":"nrms-nsg-rule-109_1.3","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:28:52.5486159Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"},"defaultValue":""},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"},"defaultValue":[]},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''tagname'')]]","equals":""},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[resourceGroup().tags[''SkipNRMSAll'']]","equals":""},{"field":"tags[''autopilotcluster'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotcluster'']]","equals":""},{"field":"tags[''autopilotenvironment'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotenvironment'']]","equals":""},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","contains":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","in":["Any","*"]},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/e0bc08af3bd773ff","type":"Microsoft.Authorization/policyDefinitions","name":"e0bc08af3bd773ff"},{"properties":{"displayName":"nrms-nsg-rule-103_1.2","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-07-09T18:15:24.0068177Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"},"defaultValue":""},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"},"defaultValue":[]},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"allowedValues":["NA","NRMSException","SkipNRMSCorp","nrmsskipcorpnetsaw","SkipNRMSSAW","SkipNRMSDatabricks","SkipNRMSRDPSSH","SkipNRMSMgmt","SkipNRMSHigh","SkipNRMSVNet","SkipNRMSLoadBal","SkipNRMSDB","SkipNRMSMedium"],"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"[parameters(''sourceValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","contains":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","in":["Any","*"]},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/e24b2791c9576d86","type":"Microsoft.Authorization/policyDefinitions","name":"e24b2791c9576d86"},{"properties":{"displayName":"sqlads-auditifnotexists-advanced - data security should be enabled on your sql servers_1.0","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-06-10T02:12:35.0244464Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"tagname":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name","description":"Rule is not deployed if this tag exists on the SQL - Server"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagname''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''tagname'')]]","equals":""},{"value":"[subscription().tags[parameters(''tagname'')]]","equals":""}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/securityAlertPolicies","name":"Default","existenceCondition":{"field":"Microsoft.Sql/servers/securityAlertPolicies/state","equals":"Enabled"}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/e3cff6e23ce4018a","type":"Microsoft.Authorization/policyDefinitions","name":"e3cff6e23ce4018a"},{"properties":{"displayName":"nrms-warning-non-c+ai-security-rules_1.0","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-04-01T22:23:58.9310187Z","updatedBy":null,"updatedOn":null},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"},"priorities":{"type":"Array","metadata":{"displayName":"Rule - Priority","description":"List of Rule Priority Numbers reserved for Security"}},"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups/securityRules"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","In":"[parameters(''priorities'')]"},{"field":"location","In":"[parameters(''allowedLocations'')]"},{"allOf":[{"not":{"field":"name","contains":"Cleanuptool"}},{"not":{"field":"name","contains":"NRMS-Rule-"}}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/e695de0794b757d","type":"Microsoft.Authorization/policyDefinitions","name":"e695de0794b757d"},{"properties":{"displayName":"nrms-nsg-rule-102_1.1","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-07-08T19:20:16.2005161Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"}},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"}},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"allowedValues":["NA","NRMSException","SkipNRMSCorp","nrmsskipcorpnetsaw","SkipNRMSSAW","SkipNRMSDatabricks","SkipNRMSRDPSSH","SkipNRMSMgmt","SkipNRMSHigh","SkipNRMSVNet","SkipNRMSLoadBal","SkipNRMSDB","SkipNRMSMedium"],"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"[parameters(''sourceValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","equals":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"Any"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/e788a85b5ac6ce0f","type":"Microsoft.Authorization/policyDefinitions","name":"e788a85b5ac6ce0f"},{"properties":{"displayName":"nrms-nsg-rule-109_1.2","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-07-09T18:15:36.1193587Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"},"defaultValue":""},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"},"defaultValue":[]},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"allowedValues":["NA","NRMSException","SkipNRMSCorp","nrmsskipcorpnetsaw","SkipNRMSSAW","SkipNRMSDatabricks","SkipNRMSRDPSSH","SkipNRMSMgmt","SkipNRMSHigh","SkipNRMSVNet","SkipNRMSLoadBal","SkipNRMSDB","SkipNRMSMedium"],"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"[parameters(''sourceValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","contains":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","in":["Any","*"]},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/eb9b3ba85853f934","type":"Microsoft.Authorization/policyDefinitions","name":"eb9b3ba85853f934"},{"properties":{"displayName":"nrms-nsg-rule-104_1.2","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-07-09T18:15:24.2401173Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"},"defaultValue":""},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"},"defaultValue":[]},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"allowedValues":["NA","NRMSException","SkipNRMSCorp","nrmsskipcorpnetsaw","SkipNRMSSAW","SkipNRMSDatabricks","SkipNRMSRDPSSH","SkipNRMSMgmt","SkipNRMSHigh","SkipNRMSVNet","SkipNRMSLoadBal","SkipNRMSDB","SkipNRMSMedium"],"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"[parameters(''sourceValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","contains":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","in":["Any","*"]},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/eed6a81371f5e28b","type":"Microsoft.Authorization/policyDefinitions","name":"eed6a81371f5e28b"},{"properties":{"displayName":"nrms-nsg-rule-107_1.1","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-07-08T19:20:24.6068273Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"}},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"}},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"allowedValues":["NA","NRMSException","SkipNRMSCorp","nrmsskipcorpnetsaw","SkipNRMSSAW","SkipNRMSDatabricks","SkipNRMSRDPSSH","SkipNRMSMgmt","SkipNRMSHigh","SkipNRMSVNet","SkipNRMSLoadBal","SkipNRMSDB","SkipNRMSMedium"],"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"[parameters(''sourceValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","equals":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"Any"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/f0e3de3e84e21226","type":"Microsoft.Authorization/policyDefinitions","name":"f0e3de3e84e21226"},{"properties":{"displayName":"nrms-subnet-require-nsg_1.0","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-06-26T21:23:26.5935651Z","updatedBy":null,"updatedOn":null},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"},"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}}},"policyRule":{"if":{"allOf":[{"field":"location","in":"[parameters(''allowedLocations'')]"},{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Network/virtualNetworks/subnets"},{"not":{"field":"Microsoft.Network/virtualNetworks/subnets/networkSecurityGroup.id","notIn":["null",""]}}]},{"allOf":[{"field":"type","equals":"Microsoft.Network/virtualNetworks/subnets"},{"field":"Microsoft.Network/virtualNetworks/subnets/networkSecurityGroup.id","exists":"false"}]}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/f828e370e4aad7e8","type":"Microsoft.Authorization/policyDefinitions","name":"f828e370e4aad7e8"},{"properties":{"displayName":"nrms-nsg-rule-107_1.3","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:29:08.0100184Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"},"defaultValue":""},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"},"defaultValue":[]},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''tagname'')]]","equals":""},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[resourceGroup().tags[''SkipNRMSAll'']]","equals":""},{"field":"tags[''autopilotcluster'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotcluster'']]","equals":""},{"field":"tags[''autopilotenvironment'']","exists":"false"},{"value":"[resourceGroup().tags[''autopilotenvironment'']]","equals":""},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","contains":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","in":["Any","*"]},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/fb6de85c9e746cf1","type":"Microsoft.Authorization/policyDefinitions","name":"fb6de85c9e746cf1"},{"properties":{"displayName":"nrms-nsg-rule-108_1.2","policyType":"Custom","mode":"All","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-07-09T18:15:32.8982907Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources.","strongType":"location"}},"ruleNo":{"type":"String","metadata":{"displayName":"Priority","description":"The - priority slot for the new rule"},"allowedValues":["100","101","102","103","104","105","106","107","108","109"]},"info":{"type":"String","metadata":{"displayName":"Description","description":"A - description"},"defaultValue":""},"destinationPortRanges":{"type":"Array","metadata":{"displayName":"Port - Number","description":"Security rule port numbers must match these numbers"}},"subscriptionExclusions":{"type":"Array","metadata":{"displayName":"Subscriptions - Excluded","description":"Subscriptions excluded from policy due to security - exceptions"},"defaultValue":[]},"protocol":{"type":"String","metadata":{"displayName":"protocol","description":"Protocol - for the rule"},"allowedValues":["*","Tcp","Udp"]},"sourceType":{"type":"String","metadata":{"displayName":"sourceType","description":null},"allowedValues":["IP - Addresses","Service Tag","App Security Group"]},"sourceValue":{"type":"String","metadata":{"displayName":"sourceValue","description":null}},"actionValue":{"type":"String","metadata":{"displayName":"actionValue","description":null},"allowedValues":["Allow","Deny"]},"direction":{"type":"String","metadata":{"displayName":"direction","description":null},"allowedValues":["Inbound","Outbound"]},"tagname":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Rule is not deployed if this tag exists on the NSG"},"allowedValues":["NA","NRMSException","SkipNRMSCorp","nrmsskipcorpnetsaw","SkipNRMSSAW","SkipNRMSDatabricks","SkipNRMSRDPSSH","SkipNRMSMgmt","SkipNRMSHigh","SkipNRMSVNet","SkipNRMSLoadBal","SkipNRMSDB","SkipNRMSMedium"],"defaultValue":"NA"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","in":"[parameters(''allowedLocations'')]"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"field":"tags[''SkipNRMSAll'']","exists":"false"},{"value":"[subscription().subscriptionId]","notIn":"[parameters(''subscriptionExclusions'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkSecurityGroups/securityRules","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"existenceCondition":{"anyOf":[{"allOf":[{"field":"fullName","equals":"[concat(field(''name''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"[parameters(''ruleno'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"[parameters(''sourceValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"[parameters(''actionValue'')]"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"[parameters(''direction'')]"}]},{"allOf":[{"field":"fullName","contains":"Cleanuptool-Deny-103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/priority","equals":"103"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","in":["Any","*"]},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Deny"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"ruleNo":{"type":"String"},"destinationPortRanges":{"type":"Array"},"protocol":{"type":"String"},"sourceType":{"type":"String"},"sourceValue":{"type":"String"},"actionValue":{"type":"String"},"direction":{"type":"String"},"info":{"type":"String"}},"variables":{"SourceArr":"[split(parameters(''sourceValue''),'','')]","appSecGroups":{"copy":[{"name":"values","count":"[length(variables(''SourceArr''))]","input":{"id":"[if(equals(parameters(''sourceType''),''App - Security Group''),if(contains(variables(''SourceArr'')[copyindex(''values'')],''subscriptions''), - variables(''SourceArr'')[copyindex(''values'')],resourceId(''Microsoft.Network/applicationSecurityGroups'', - variables(''SourceArr'')[copyindex(''values'')])), '''')]"}}]}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/securityRules","name":"[concat(parameters(''fullName''),''/'',''NRMS-Rule-'', - parameters(''ruleNo''))]","apiVersion":"2017-10-01","scale":null,"properties":{"protocol":"[parameters(''protocol'')]","description":"[parameters(''info'')]","sourcePortRange":"*","sourceAddressPrefix":"[if(equals(parameters(''sourceType''),''Service - Tag''),parameters(''sourceValue''),json(''null''))]","sourceAddressPrefixes":"[if(equals(parameters(''sourceType''),''IP - Addresses''),variables(''SourceArr''),json(''null''))]","sourceApplicationSecurityGroups":"[if(equals(parameters(''sourceType''),''App - Security Group''),variables(''appSecGroups'').values,json(''null''))]","destinationPortRanges":"[if - (equals(1,length(parameters(''destinationPortRanges''))), json(''null''), - parameters(''destinationPortRanges''))]","destinationPortRange":"[if (equals(1,length(parameters(''destinationPortRanges''))), - parameters(''destinationPortRanges'')[0], json(''null''))]","destinationAddressPrefix":"*","destinationApplicationSecurityGroups":[],"access":"[parameters(''actionValue'')]","priority":"[parameters(''ruleNo'')]","direction":"[parameters(''direction'')]"}}]},"parameters":{"fullName":{"value":"[field(''fullName'')]"},"ruleNo":{"value":"[parameters(''ruleNo'')]"},"destinationPortRanges":{"value":"[parameters(''destinationPortRanges'')]"},"protocol":{"value":"[parameters(''protocol'')]"},"sourceType":{"value":"[parameters(''sourceType'')]"},"sourceValue":{"value":"[parameters(''sourceValue'')]"},"actionValue":{"value":"[parameters(''actionValue'')]"},"direction":{"value":"[parameters(''direction'')]"},"info":{"value":"[parameters(''info'')]"}}}}}}}},"id":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/fc84f507da5fe442","type":"Microsoft.Authorization/policyDefinitions","name":"fc84f507da5fe442"}]}' + string: "{\"value\":[{\"properties\":{\"displayName\":\"Microsoft Managed Control\ + \ 1599 - Developer Configuration Management | Software / Firmware Integrity\ + \ Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Services Acquisition control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1599\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0004bbf0-5099-4179-869e-e9ffe5fb0945\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0004bbf0-5099-4179-869e-e9ffe5fb0945\"\ + },{\"properties\":{\"displayName\":\"Audit virtual machines without disaster\ + \ recovery configured\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"Audit virtual machines which do not have disaster recovery configured.\ + \ To learn more about disaster recovery, visit https://aka.ms/asr-doc.\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\"\ + :{},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\"\ + ,\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"auditIfNotExists\"\ + ,\"details\":{\"type\":\"Microsoft.Resources/links\",\"existenceCondition\"\ + :{\"field\":\"name\",\"like\":\"ASR-Protect-*\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Audit Web Sockets state\ + \ for a Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"The Web Sockets protocol is vulnerable to different types of security threats.\ + \ Use of Web Sockets within an Function app must be carefully reviewed.\"\ + ,\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security Center\"\ + ,\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Deprecated]: Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\"\ + :{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\"\ + :[{\"field\":\"kind\",\"equals\":\"functionapp\"},{\"field\":\"kind\",\"equals\"\ + :\"functionapp,linux\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux,container\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.Security/complianceResults\",\"name\":\"DisableWebSockets\",\"\ + existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\"\ + ,\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/001802d1-4969-4c82-a700-c29c6c6f9bbd\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"001802d1-4969-4c82-a700-c29c6c6f9bbd\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1375 - Incident\ + \ Response Assistance | Automation Support For Availability Of Information\ + \ / Support\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Incident Response control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1375\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/00379355-8932-4b52-b63a-3bc6daf3451a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"00379355-8932-4b52-b63a-3bc6daf3451a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1605 - Developer\ + \ Security Testing And Evaluation | Static Code Analysis\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1605\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0062eb8b-dc75-4718-8ea5-9bb4a9606655\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0062eb8b-dc75-4718-8ea5-9bb4a9606655\"\ + },{\"properties\":{\"displayName\":\"Azure Backup should be enabled for Virtual\ + \ Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Ensure protection of your Azure Virtual Machines by enabling Azure Backup.\ + \ Azure Backup is a secure and cost effective data protection solution for\ + \ Azure.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Backup\"},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\"\ + }}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"013e242c-8828-4970-87b3-ab247555486d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1142 - Security\ + \ Assessment And Authorization Policy And Procedures\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Security\ + \ Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1142\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/01524fa8-4555-48ce-ba5f-c3b8dcef5147\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"01524fa8-4555-48ce-ba5f-c3b8dcef5147\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1099 - Security\ + \ Training Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Awareness and Training control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1099\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/01910bab-8639-4bd0-84ef-cc53b24d79ba\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"01910bab-8639-4bd0-84ef-cc53b24d79ba\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1285 - Telecommunications\ + \ Services | Provider Contingency Plan\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Contingency Planning\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1285\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/01f7726b-db54-45c2-bcb5-9bd7a43796ee\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"01f7726b-db54-45c2-bcb5-9bd7a43796ee\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1709 - Security\ + \ Function Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this System and Information Integrity\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1709\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/025992d6-7fee-4137-9bbf-2ffc39c0686c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"025992d6-7fee-4137-9bbf-2ffc39c0686c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1052 - Session\ + \ Lock\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"\ + Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1052\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/027cae1c-ec3e-4492-9036-4168d540c42a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"027cae1c-ec3e-4492-9036-4168d540c42a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1034 - Least\ + \ Privilege\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1034\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/02a5ed00-6d2e-4e97-9a98-46c32c057329\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"02a5ed00-6d2e-4e97-9a98-46c32c057329\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs on which the remote connection status does not match the specified\ + \ one\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This\ + \ policy should only be used along with its corresponding deploy policy in\ + \ an initiative. This definition allows Azure Policy to process the results\ + \ of auditing Windows virtual machines on which the remote host connection\ + \ status does not match the specified one. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"deprecated\"\ + :true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsRemoteConnection\",\"existenceCondition\":{\"field\":\"\ + Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/02a84be7-c304-421f-9bb7-5d2c26af54ad\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"02a84be7-c304-421f-9bb7-5d2c26af54ad\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1623 - Boundary\ + \ Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Communications Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1623\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/02ce1b22-412a-4528-8630-c42146f917ed\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"02ce1b22-412a-4528-8630-c42146f917ed\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1515 - Personnel\ + \ Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1515\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/02dd141a-a2b2-49a7-bcbd-ca31142f6211\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"02dd141a-a2b2-49a7-bcbd-ca31142f6211\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1327 - Authenticator\ + \ Management | Password-Based Authentication\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Identification\ + \ and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1327\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03188d8f-1ae5-4fe1-974d-2d7d32ef937d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03188d8f-1ae5-4fe1-974d-2d7d32ef937d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1229 - Information\ + \ System Component Inventory | No Duplicate Accounting Of Components\",\"\ + policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements\ + \ this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1229\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03752212-103c-4ab8-a306-7e813022ca9d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03752212-103c-4ab8-a306-7e813022ca9d\"\ + },{\"properties\":{\"displayName\":\"Cognitive Services accounts should restrict\ + \ network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Network access to Cognitive Services accounts should be restricted. Configure\ + \ network rules so only applications from allowed networks can access the\ + \ Cognitive Services account. To allow connections from specific internet\ + \ or on-premises clients, access can be granted to traffic from specific Azure\ + \ virtual networks or to public internet IP address ranges.\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Cognitive Services\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"The effect determines what happens when the policy rule\ + \ is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"\ + ],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\"\ + :\"Microsoft.CognitiveServices/accounts/networkAcls.defaultAction\",\"notEquals\"\ + :\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"\ + /providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"037eea7a-bd0a-46c5-9a66-03aea78705d3\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1123 - Audit\ + \ Review, Analysis, And Reporting | Audit Level Adjustment\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1123\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03996055-37a4-45a5-8b70-3f1caa45f87d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03996055-37a4-45a5-8b70-3f1caa45f87d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1474 - Emergency\ + \ Power | Long-Term Alternate Power Supply - Minimal Operational Capability\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Physical and Environmental Protection control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1474\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03ad326e-d7a1-44b1-9a76-e17492efc9e4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03ad326e-d7a1-44b1-9a76-e17492efc9e4\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1227 - Information\ + \ System Component Inventory | Automated Unauthorized Component Detection\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Configuration Management control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1227\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03b78f5e-4877-4303-b0f4-eb6583f25768\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03b78f5e-4877-4303-b0f4-eb6583f25768\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1361 - Incident\ + \ Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Incident Response control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1361\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03ed3be1-7276-4452-9a5d-e4168565ac67\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03ed3be1-7276-4452-9a5d-e4168565ac67\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1594 - Developer\ + \ Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this System and Services Acquisition\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1594\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/042ba2a1-8bb8-45f4-b080-c78cf62b90e9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"042ba2a1-8bb8-45f4-b080-c78cf62b90e9\"\ + },{\"properties\":{\"displayName\":\"Audit Linux machines that have the specified\ + \ applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Requires that prerequisites are deployed to the policy\ + \ assignment scope. For details, visit https://aka.ms/gcpol. Machines are\ + \ non-compliant if the Chef InSpec resource indicates that one or more of\ + \ the packages provided by the parameter are installed.\",\"metadata\":{\"\ + category\":\"Guest Configuration\",\"version\":\"3.0.0\",\"requiredProviders\"\ + :[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"not_installed_application_linux\"\ + ,\"version\":\"1.*\",\"configurationParameter\":{\"ApplicationName\":\"[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent\"\ + }}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"ApplicationName\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application names\"\ + ,\"description\":\"A semicolon-separated list of the names of the applications\ + \ that should not be installed. e.g. 'python; powershell'\"}}},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\"\ + ,\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"\ + paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"\ + like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\"\ + ,\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"\ + ]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"\ + field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\"\ + ,\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\"\ + ,\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\"\ + ,\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"\ + cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\"\ + ,\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\"\ + ,\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"\ + ]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"\ + equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"\ + then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"not_installed_application_linux\",\"existenceCondition\":{\"allOf\"\ + :[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent',\ + \ '=', parameters('ApplicationName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0447bc18-e2f7-4c0d-aa20-bff034275be1\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0447bc18-e2f7-4c0d-aa20-bff034275be1\"\ + },{\"properties\":{\"displayName\":\"Azure Cosmos DB allowed locations\",\"\ + policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ enables you to restrict the locations your organization can specify when\ + \ deploying Azure Cosmos DB resources. Use to enforce your geo-compliance\ + \ requirements.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos\ + \ DB\"},\"parameters\":{\"listOfAllowedLocations\":{\"type\":\"Array\",\"\ + metadata\":{\"displayName\":\"Allowed locations\",\"description\":\"The list\ + \ of locations that can be specified when deploying Azure Cosmos DB resources.\"\ + ,\"strongType\":\"location\"}},\"policyEffect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Policy Effect\",\"description\":\"The desired effect of\ + \ the policy.\"},\"allowedValues\":[\"deny\",\"audit\",\"disabled\"],\"defaultValue\"\ + :\"deny\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.DocumentDB/databaseAccounts\"},{\"count\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/Locations[*]\"\ + ,\"where\":{\"value\":\"[replace(toLower(first(field('Microsoft.DocumentDB/databaseAccounts/Locations[*].locationName'))),\ + \ ' ', '')]\",\"in\":\"[parameters('listOfAllowedLocations')]\"}},\"notEquals\"\ + :\"[length(field('Microsoft.DocumentDB/databaseAccounts/Locations[*]'))]\"\ + }]},\"then\":{\"effect\":\"[parameters('policyEffect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0473574d-2d43-4217-aefe-941fcdf7e684\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0473574d-2d43-4217-aefe-941fcdf7e684\"\ + },{\"properties\":{\"displayName\":\"SQL Managed Instance TDE protector should\ + \ be encrypted with your own key\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"Transparent Data Encryption (TDE) with your own\ + \ key support provides increased transparency and control over the TDE Protector,\ + \ increased security with an HSM-backed external service, and promotion of\ + \ separation of duties.\",\"metadata\":{\"version\":\"1.0.1\",\"category\"\ + :\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/encryptionProtector\"\ + ,\"name\":\"current\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/managedInstances/encryptionProtector/serverKeyType\"\ + ,\"equals\":\"AzureKeyVault\"},{\"field\":\"Microsoft.Sql/managedInstances/encryptionProtector/uri\"\ + ,\"notEquals\":\"\"},{\"field\":\"Microsoft.Sql/managedInstances/encryptionProtector/uri\"\ + ,\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"048248b0-55cd-46da-b1ff-39efd52db260\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Network traffic data collection\ + \ agent should be installed on Linux virtual machines\",\"policyType\":\"\ + BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Security Center uses the\ + \ Microsoft Dependency agent to collect network traffic data from your Azure\ + \ virtual machines to enable advanced network protection features such as\ + \ traffic visualization on the network map, network hardening recommendations\ + \ and specific network threats.\",\"metadata\":{\"version\":\"1.0.1-preview\"\ + ,\"category\":\"Monitoring\",\"preview\":\"true\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: Effect\"\ + ,\"description\":\"Enable or disable Dependency Agent for Linux VMs monitoring\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\"\ + ,\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\"\ + :[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"\ + SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\"\ + ,\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\"\ + ,\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\"\ + :{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\"\ + ,\"equals\":\"DependencyAgentLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\"\ + ,\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"\ + Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\"\ + :\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04c4380f-3fae-46e8-96c9-30193528f602\"\ + },{\"properties\":{\"displayName\":\"Deploy Diagnostic Settings for Service\ + \ Bus to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"Deploys the diagnostic settings for Service Bus\ + \ to stream to a regional Log Analytics workspace when any Service Bus which\ + \ is missing this diagnostic settings is created or updated.\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"},\"\ + profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile\ + \ name\",\"description\":\"The diagnostic settings profile name\"},\"defaultValue\"\ + :\"setbypolicy_logAnalytics\"},\"logAnalytics\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Log Analytics workspace\",\"description\":\"Select Log\ + \ Analytics workspace from dropdown list. If this workspace is outside of\ + \ the scope of the assignment you must manually grant 'Log Analytics Contributor'\ + \ permissions (or similar) to the policy assignment's principal ID.\",\"strongType\"\ + :\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Enable metrics\",\"description\"\ + :\"Whether to enable metrics stream to the Log Analytics workspace - True\ + \ or False\"},\"allowedValues\":[\"True\",\"False\"],\"defaultValue\":\"False\"\ + },\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable\ + \ logs\",\"description\":\"Whether to enable logs stream to the Log Analytics\ + \ workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"],\"defaultValue\"\ + :\"True\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\"\ + ,\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"\ + /providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\"\ + ,\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\"\ + :\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\"\ + :\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"\ + type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"\ + resources\":[{\"type\":\"Microsoft.ServiceBus/namespaces/providers/diagnosticSettings\"\ + ,\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'),\ + \ '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"\ + [parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\"\ + :\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\"\ + ,\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\"\ + :false,\"days\":0}}],\"logs\":[{\"category\":\"OperationalLogs\",\"enabled\"\ + :\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\"\ + :{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"\ + },\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\"\ + :{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\"\ + :\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"\ + }}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/04d53d87-841c-4f23-8a5b-21564380b55e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04d53d87-841c-4f23-8a5b-21564380b55e\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1572 - Acquisition\ + \ Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Services Acquisition control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1572\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/04f5fb00-80bb-48a9-a75b-4cb4d4c97c36\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04f5fb00-80bb-48a9-a75b-4cb4d4c97c36\"\ + },{\"properties\":{\"displayName\":\"Azure API for FHIR should use a customer-managed\ + \ key (CMK) to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Use a customer-managed key to control the encryption\ + \ at rest of the data stored in Azure API for FHIR when this is a regulatory\ + \ or compliance requirement. Customer-managed keys also deliver double encryption\ + \ by adding a second layer of encryption on top of the default one done with\ + \ service-managed keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"API for FHIR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"audit\",\"disabled\"],\"defaultValue\"\ + :\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.HealthcareApis/services\"},{\"field\":\"Microsoft.HealthcareApis/services/cosmosDbConfiguration.keyVaultKeyUri\"\ + ,\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/051cba44-2429-45b9-9649-46cec11c7119\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"051cba44-2429-45b9-9649-46cec11c7119\"\ + },{\"properties\":{\"displayName\":\"Deploy Log Analytics agent for Linux\ + \ VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"\ + Deploy Log Analytics agent for Linux VMs if the VM Image (OS) is in the list\ + \ defined and the agent is not installed.\",\"metadata\":{\"version\":\"1.2.0\"\ + ,\"category\":\"Monitoring\"},\"parameters\":{\"logAnalytics\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Log Analytics workspace\",\"description\"\ + :\"Select Log Analytics workspace from dropdown list. If this workspace is\ + \ outside of the scope of the assignment you must manually grant 'Log Analytics\ + \ Contributor' permissions (or similar) to the policy assignment's principal\ + \ ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"listOfImageIdToInclude\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: List of VM\ + \ images that have supported Linux OS to add to scope\",\"description\":\"\ + Example value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"\ + },\"defaultValue\":[]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"\ + },{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"\ + RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"\ + RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"\ + SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\"\ + ,\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\"\ + :[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\"\ + ,\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\"\ + :{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\"\ + ,\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\ + ],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\"\ + ,\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\"\ + ,\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\"\ + ,\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\"\ + ,\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"\ + }},\"variables\":{\"vmExtensionName\":\"OMSAgentForLinux\",\"vmExtensionPublisher\"\ + :\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"OmsAgentForLinux\"\ + ,\"vmExtensionTypeHandlerVersion\":\"1.13\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'),\ + \ '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\"\ + ,\"location\":\"[parameters('location')]\",\"apiVersion\":\"2018-06-01\",\"\ + properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\"\ + :\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\"\ + ,\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'),\ + \ '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\"\ + :{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), '2015-03-20').primarySharedKey]\"\ + }}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled\ + \ extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"\ + vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/053d3325-282c-4e5c-b944-24faffd30d77\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"053d3325-282c-4e5c-b944-24faffd30d77\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1331 - Authenticator\ + \ Management | Password-Based Authentication\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Identification\ + \ and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1331\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05460fe2-301f-4ed1-8174-d62c8bb92ff4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05460fe2-301f-4ed1-8174-d62c8bb92ff4\"\ + },{\"properties\":{\"displayName\":\"Web Application Firewall (WAF) should\ + \ be enabled for Azure Front Door Service\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"Indexed\",\"description\":\"Requires Web Application Firewall (WAF)\ + \ on any Azure Front Door Service. A Web Application Firewall provides greater\ + \ security for your other Azure resources.\",\"metadata\":{\"version\":\"\ + 1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"\ + Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/frontdoors\"},{\"\ + field\":\"Microsoft.Network/frontdoors/frontendEndpoints[*].webApplicationFirewallPolicyLink.id\"\ + ,\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"055aa869-bc98-4af8-bafc-23f1ab6ffe2c\"\ + },{\"properties\":{\"displayName\":\"Private endpoint should be enabled for\ + \ PostgreSQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"\ + description\":\"Private endpoint connections enforce secure communication\ + \ by enabling private connectivity to Azure Database for PostgreSQL. Configure\ + \ a private endpoint connection to enable access to traffic coming only from\ + \ known networks and prevent access from all other IP addresses, including\ + \ within Azure.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"\ + },\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\"\ + :\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/privateEndpointConnections\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/privateEndpointConnections/privateLinkServiceConnectionState.status\"\ + ,\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0564d078-92f5-4f97-8398-b9f58a51f70b\"\ + },{\"properties\":{\"displayName\":\"Vulnerability Assessment settings for\ + \ SQL server should contain an email address to receive scan reports\",\"\ + policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure that\ + \ an email address is provided for the 'Send scan reports to' field in the\ + \ Vulnerability Assessment settings. This email address receives scan result\ + \ summary after a periodic scan runs on SQL servers.\",\"metadata\":{\"version\"\ + :\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\"\ + :{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/vulnerabilityAssessments\"\ + ,\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/servers/vulnerabilityAssessments/default.recurringScans.emails[*]\"\ + ,\"notEquals\":\"\"},{\"count\":{\"field\":\"Microsoft.Sql/servers/vulnerabilityAssessments/default.recurringScans.emails[*]\"\ + },\"notEquals\":0}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/057d6cfe-9c4f-4a6d-bc60-14420ea1f1a9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"057d6cfe-9c4f-4a6d-bc60-14420ea1f1a9\"\ + },{\"properties\":{\"displayName\":\"Diagnostic logs in Azure Data Lake Store\ + \ should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Audit enabling of diagnostic logs. This enables you to recreate activity\ + \ trails to use for investigation purposes; when a security incident occurs\ + \ or when your network is compromised\",\"metadata\":{\"version\":\"3.0.0\"\ + ,\"category\":\"Data Lake\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"},\"requiredRetentionDays\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required retention (days)\"\ + ,\"description\":\"The required diagnostic logs retention in days\"},\"defaultValue\"\ + :\"365\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeStore/accounts\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\"\ + :{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"\ + anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\"\ + ,\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\"\ + ,\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\"\ + ,\"equals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\"\ + ,\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\"\ + ,\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"057ef27e-665e-4328-8ea3-04b3122bd9fb\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1132 - Protection\ + \ Of Audit Information | Audit Backup On Separate Physical Systems / Components\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Audit and Accountability control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1132\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05938e10-cdbd-4a54-9b2b-1cbcfc141ad0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05938e10-cdbd-4a54-9b2b-1cbcfc141ad0\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1223 - Information\ + \ System Component Inventory\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Configuration Management control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1223\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05a1bb01-ad5a-49c1-aad3-b0c893b2ec3a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05a1bb01-ad5a-49c1-aad3-b0c893b2ec3a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1640 - Transmission\ + \ Confidentiality And Integrity\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this System and Communications Protection\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1640\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05a289ce-6a20-4b75-a0f3-dc8601b6acd0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05a289ce-6a20-4b75-a0f3-dc8601b6acd0\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1420 - Maintenance\ + \ Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Maintenance control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1420\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05ae08cc-a282-413b-90c7-21a2c60b8404\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05ae08cc-a282-413b-90c7-21a2c60b8404\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1658 - Secure\ + \ Name / Address Resolution Service (Recursive Or Caching Resolver)\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ System and Communications Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1658\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/063b540e-4bdc-4e7a-a569-3a42ddf22098\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"063b540e-4bdc-4e7a-a569-3a42ddf22098\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1688 - Information\ + \ System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Information Integrity control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1688\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/063c3f09-e0f0-4587-8fd5-f4276fae675f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"063c3f09-e0f0-4587-8fd5-f4276fae675f\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1332 - Authenticator\ + \ Management | Password-Based Authentication\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Identification\ + \ and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1332\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/068260be-a5e6-4b0a-a430-cd27071c226a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"068260be-a5e6-4b0a-a430-cd27071c226a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1455 - Physical\ + \ Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Physical and Environmental Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1455\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/068a88d4-e520-434e-baf0-9005a8164e6a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"068a88d4-e520-434e-baf0-9005a8164e6a\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Audit SQL DB Level Audit\ + \ Setting\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"\ + Audit DB level audit setting for SQL databases\",\"metadata\":{\"version\"\ + :\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\"\ + :{\"setting\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:\ + \ Audit Setting\"},\"allowedValues\":[\"enabled\",\"disabled\"]}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"\ + },{\"field\":\"name\",\"notEquals\":\"master\"}]},\"then\":{\"effect\":\"\ + AuditIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/databases/auditingSettings\"\ + ,\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/auditingSettings.state\"\ + ,\"equals\":\"[parameters('setting')]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a12\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"06a78e20-9358-41c9-923c-fb736d382a12\"\ + },{\"properties\":{\"displayName\":\"Audit VMs that do not use managed disks\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy\ + \ audits VMs that do not use managed disks\",\"metadata\":{\"version\":\"\ + 1.0.0\",\"category\":\"Compute\"},\"parameters\":{},\"policyRule\":{\"if\"\ + :{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"field\":\"Microsoft.Compute/virtualMachines/osDisk.uri\",\"exists\":\"\ + True\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/VirtualMachineScaleSets\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/VirtualMachineScaleSets/osDisk.vhdContainers\"\ + ,\"exists\":\"True\"},{\"field\":\"Microsoft.Compute/VirtualMachineScaleSets/osdisk.imageUrl\"\ + ,\"exists\":\"True\"}]}]}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a4d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"06a78e20-9358-41c9-923c-fb736d382a4d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1366 - Incident\ + \ Handling | Information Correlation\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Incident Response\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1366\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/06c45c30-ae44-4f0f-82be-41331da911cc\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"06c45c30-ae44-4f0f-82be-41331da911cc\"\ + },{\"properties\":{\"displayName\":\"Public network access should be disabled\ + \ for Cognitive Services accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"This policy audits any Cognitive Services account\ + \ in your environment with public network access enabled. Public network access\ + \ should be disabled so that only connections from private endpoints are allowed.\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive Services\"},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"The effect determines what happens when the\ + \ policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\"\ + ,\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"\ + },{\"field\":\"Microsoft.CognitiveServices/accounts/publicNetworkAccess\"\ + ,\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0725b4dd-7e76-479c-a735-68e7ee23d5ca\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1633 - Boundary\ + \ Protection | Route Traffic To Authenticated Proxy Servers\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ System and Communications Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1633\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/07557aa0-e02f-4460-9a81-8ecd2fed601a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"07557aa0-e02f-4460-9a81-8ecd2fed601a\"\ + },{\"properties\":{\"displayName\":\"CORS should not allow every resource\ + \ to access your Function Apps\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Cross-Origin Resource Sharing (CORS) should not allow all\ + \ domains to access your Function app. Allow only required domains to interact\ + \ with your Function app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"\ + field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"\ + like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Web/sites/config/web.cors.allowedOrigins[*]\",\"notEquals\"\ + :\"*\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0820b7b9-23aa-4725-a1ce-ae4558f718e5\"\ + },{\"properties\":{\"displayName\":\"Deploy Log Analytics agent for Windows\ + \ VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"\ + Deploy Log Analytics agent for Windows VMs if the VM Image (OS) is in the\ + \ list defined and the agent is not installed. The list of OS images will\ + \ be updated over time as support is updated.\",\"metadata\":{\"version\"\ + :\"1.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalytics\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Log Analytics workspace\"\ + ,\"description\":\"Select Log Analytics workspace from dropdown list. If this\ + \ workspace is outside of the scope of the assignment you must manually grant\ + \ 'Log Analytics Contributor' permissions (or similar) to the policy assignment's\ + \ principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"\ + listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\"\ + :\"Optional: List of VM images that have supported Windows OS to add to scope\"\ + ,\"description\":\"Example values: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"\ + },\"defaultValue\":[]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"\ + },{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"\ + MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\"\ + ,\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\"\ + ,\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\"\ + ,\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\"\ + ,\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\"\ + ,\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\"\ + ,\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\"\ + ,\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\"\ + ,\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\"\ + ,\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"\ + *-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\"\ + :\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\"\ + ,\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"\ + roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\ + ],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\"\ + ,\"equals\":\"MicrosoftMonitoringAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\"\ + ,\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\"\ + ,\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\"\ + ,\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"\ + }},\"variables\":{\"vmExtensionName\":\"MicrosoftMonitoringAgent\",\"vmExtensionPublisher\"\ + :\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"MicrosoftMonitoringAgent\"\ + ,\"vmExtensionTypeHandlerVersion\":\"1.0\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'),\ + \ '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\"\ + ,\"location\":\"[parameters('location')]\",\"apiVersion\":\"2018-06-01\",\"\ + properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\"\ + :\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\"\ + ,\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'),\ + \ '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\"\ + :{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), '2015-03-20').primarySharedKey]\"\ + }}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled\ + \ extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"\ + vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/0868462e-646c-4fe3-9ced-a733534b6a2c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0868462e-646c-4fe3-9ced-a733534b6a2c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1583 - Information\ + \ System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this System and Services Acquisition\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1583\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0882d488-8e80-4466-bc0f-0cd15b6cb66d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0882d488-8e80-4466-bc0f-0cd15b6cb66d\"\ + },{\"properties\":{\"displayName\":\"Audit Windows machines on which the DSC\ + \ configuration is not compliant\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"Requires that prerequisites are deployed to the\ + \ policy assignment scope. For details, visit https://aka.ms/gcpol. Machines\ + \ are non-compliant if the Windows PowerShell command Get-DSCConfigurationStatus\ + \ returns that the DSC configuration for the machine is not compliant.\",\"\ + metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"\ + requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"WindowsDscConfiguration\",\"version\":\"1.*\"}},\"parameters\"\ + :{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Include Arc connected servers\",\"description\":\"By selecting this option,\ + \ you agree to be charged monthly per Arc connected machine.\"},\"allowedValues\"\ + :[\"true\",\"false\"],\"defaultValue\":\"false\"}},\"policyRule\":{\"if\"\ + :{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsDscConfiguration\",\"existenceCondition\":{\"field\":\"\ + Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Audit Web Applications\ + \ that are not using latest supported PHP Framework\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"All\",\"description\":\"Use the latest supported PHP version for\ + \ the latest security classes. Using older classes and types can make your\ + \ application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Security Center\",\"deprecated\":true},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:\ + \ Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\"\ + ,\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\"\ + :\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"\ + equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestPHP\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\"\ + :[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b17839-76c6-4015-90e0-33d9d54d219c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b17839-76c6-4015-90e0-33d9d54d219c\"\ + },{\"properties\":{\"displayName\":\"Deploy Diagnostic Settings for Search\ + \ Services to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Deploys the diagnostic settings for Search\ + \ Services to stream to a regional Log Analytics workspace when any Search\ + \ Services which is missing this diagnostic settings is created or updated.\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"\ + },\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile\ + \ name\",\"description\":\"The diagnostic settings profile name\"},\"defaultValue\"\ + :\"setbypolicy_logAnalytics\"},\"logAnalytics\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Log Analytics workspace\",\"description\":\"Select Log\ + \ Analytics workspace from dropdown list. If this workspace is outside of\ + \ the scope of the assignment you must manually grant 'Log Analytics Contributor'\ + \ permissions (or similar) to the policy assignment's principal ID.\",\"strongType\"\ + :\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Enable metrics\",\"description\"\ + :\"Whether to enable metrics stream to the Log Analytics workspace - True\ + \ or False\"},\"allowedValues\":[\"True\",\"False\"],\"defaultValue\":\"False\"\ + },\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable\ + \ logs\",\"description\":\"Whether to enable logs stream to the Log Analytics\ + \ workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"],\"defaultValue\"\ + :\"True\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\"\ + ,\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"\ + /providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\"\ + ,\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\"\ + :\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\"\ + :\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"\ + type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"\ + resources\":[{\"type\":\"Microsoft.Search/searchServices/providers/diagnosticSettings\"\ + ,\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'),\ + \ '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"\ + [parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\"\ + :\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\"\ + ,\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\"\ + :false,\"days\":0}}],\"logs\":[{\"category\":\"OperationLogs\",\"enabled\"\ + :\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\"\ + :{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"\ + },\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\"\ + :{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\"\ + :\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"\ + }}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08ba64b8-738f-4918-9686-730d2ed79c7d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08ba64b8-738f-4918-9686-730d2ed79c7d\"\ + },{\"properties\":{\"displayName\":\"Adaptive Network Hardening recommendations\ + \ should be applied on internet facing virtual machines\",\"policyType\":\"\ + BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure Security Center analyzes\ + \ the traffic patterns of Internet facing virtual machines and provides Network\ + \ Security Group rule recommendations that reduce the potential attack surface\"\ + ,\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security Center\"},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"f9f0eed0-f143-47bf-b856-671ea2eeed62\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08e6af2d-db70-460a-bfe9-d5bd474ba9d6\"\ + },{\"properties\":{\"displayName\":\"There should be more than one owner assigned\ + \ to your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"It is recommended to designate more than one subscription owner in order\ + \ to have administrator access redundancy.\",\"metadata\":{\"version\":\"\ + 2.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/assessments\",\"name\":\"2c79b4af-f830-b61e-92b9-63dfa30f16e4\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"09024ccc-0c5f-475e-9457-b7c0d9ed487b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1159 - Security\ + \ Authorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Security Assessment and Authorization control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1159\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0925f098-7877-450b-8ba4-d1e55f2d8795\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0925f098-7877-450b-8ba4-d1e55f2d8795\"\ + },{\"properties\":{\"displayName\":\"Disk encryption should be applied on\ + \ virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"Virtual machines without an enabled disk encryption will be monitored by\ + \ Azure Security Center as recommendations.\",\"metadata\":{\"version\":\"\ + 2.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/virtualMachines\"\ + ,\"Microsoft.Compute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"d57a4221-a804-52ca-3dea-768284f06bb7\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0961003e-5a0a-4549-abde-af6a37f2724d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1302 - Identification\ + \ And Authentication (Org. Users) | Network Access To Non-Privileged Accounts\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Identification and Authentication control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1302\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/09828c65-e323-422b-9774-9d5c646124da\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"09828c65-e323-422b-9774-9d5c646124da\"\ + },{\"properties\":{\"displayName\":\"Configure backup on VMs of a location\ + \ to an existing central Vault in the same location\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"This policy configures Azure Backup\ + \ protection on VMs in a given location to an existing central vault in the\ + \ same location. It applies to only those VMs that are not already configured\ + \ for backup. It is recommended that this policy is assigned to not more than\ + \ 200 VMs. If the policy is assigned for more than 200 VMs, it can result\ + \ in the backup getting triggered a few hours beyond the defined schedule.\ + \ This policy will be enhanced to support more VM images.\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Backup\"},\"parameters\":{\"vaultLocation\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Location (Specify the\ + \ location of the VMs that you want to protect)\",\"description\":\"Specify\ + \ the location of the VMs that you want to protect. VMs should be backed up\ + \ to a vault in the same location.\\nFor example - southeastasia\",\"strongType\"\ + :\"location\"}},\"backupPolicyId\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Backup Policy (of type Azure VM from a vault in the location chosen above)\"\ + ,\"description\":\"Specify the id of the Azure backup policy to configure\ + \ backup of the virtual machines. The selected Azure backup policy should\ + \ be of type Azure virtual machine. This policy needs to be in a vault that\ + \ is present in the location chosen above.\\nFor example - /subscriptions//resourceGroups//providers/Microsoft.RecoveryServices/vaults//backupPolicies/\"\ + ,\"strongType\":\"Microsoft.RecoveryServices/vaults/backupPolicies\"}},\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"\ + description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"],\"defaultValue\"\ + :\"deployIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"\ + type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\"\ + ,\"equals\":\"[parameters('vaultLocation')]\"},{\"anyOf\":[{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\"\ + ,\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\"\ + ,\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\"\ + ,\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"\ + 2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\"\ + ,\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\"\ + ,\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\"\ + ,\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\"\ + ,\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\"\ + ,\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"\ + *-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\"\ + :\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"Windows-10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\"\ + :[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"\ + SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\"\ + ,\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\"\ + :[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\"\ + ,\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\"\ + :{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"\ + ,\"/providers/microsoft.authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\"\ + ],\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\",\"deployment\"\ + :{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"backupPolicyId\":{\"type\"\ + :\"String\"},\"fabricName\":{\"type\":\"String\"},\"protectionContainers\"\ + :{\"type\":\"String\"},\"protectedItems\":{\"type\":\"String\"},\"sourceResourceId\"\ + :{\"type\":\"String\"}},\"resources\":[{\"apiVersion\":\"2017-05-10\",\"name\"\ + :\"[concat('DeployProtection-',uniqueString(parameters('protectedItems')))]\"\ + ,\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[first(skip(split(parameters('backupPolicyId'),\ + \ '/'), 4))]\",\"subscriptionId\":\"[first(skip(split(parameters('backupPolicyId'),\ + \ '/'), 2))]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\"\ + :\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"backupPolicyId\":{\"type\"\ + :\"String\"},\"fabricName\":{\"type\":\"String\"},\"protectionContainers\"\ + :{\"type\":\"String\"},\"protectedItems\":{\"type\":\"String\"},\"sourceResourceId\"\ + :{\"type\":\"String\"}},\"resources\":[{\"type\":\"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems\"\ + ,\"name\":\"[concat(first(skip(split(parameters('backupPolicyId'), '/'), 8)),\ + \ '/', parameters('fabricName'), '/',parameters('protectionContainers'), '/',\ + \ parameters('protectedItems'))]\",\"apiVersion\":\"2016-06-01\",\"properties\"\ + :{\"protectedItemType\":\"Microsoft.Compute/virtualMachines\",\"policyId\"\ + :\"[parameters('backupPolicyId')]\",\"sourceResourceId\":\"[parameters('sourceResourceId')]\"\ + }}]},\"parameters\":{\"backupPolicyId\":{\"value\":\"[parameters('backupPolicyId')]\"\ + },\"fabricName\":{\"value\":\"[parameters('fabricName')]\"},\"protectionContainers\"\ + :{\"value\":\"[parameters('protectionContainers')]\"},\"protectedItems\":{\"\ + value\":\"[parameters('protectedItems')]\"},\"sourceResourceId\":{\"value\"\ + :\"[parameters('sourceResourceId')]\"}}}}]},\"parameters\":{\"backupPolicyId\"\ + :{\"value\":\"[parameters('backupPolicyId')]\"},\"fabricName\":{\"value\"\ + :\"Azure\"},\"protectionContainers\":{\"value\":\"[concat('iaasvmcontainer;iaasvmcontainerv2;',\ + \ resourceGroup().name, ';' ,field('name'))]\"},\"protectedItems\":{\"value\"\ + :\"[concat('vm;iaasvmcontainerv2;', resourceGroup().name, ';' ,field('name'))]\"\ + },\"sourceResourceId\":{\"value\":\"[concat('/subscriptions/', subscription().subscriptionId,\ + \ '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Compute/virtualMachines/',field('name'))]\"\ + }}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/09ce66bc-1220-4153-8104-e3f51c936913\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"09ce66bc-1220-4153-8104-e3f51c936913\"\ + },{\"properties\":{\"displayName\":\"Private endpoint should be enabled for\ + \ MariaDB servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Private endpoint connections enforce secure communication by enabling private\ + \ connectivity to Azure Database for MariaDB. Configure a private endpoint\ + \ connection to enable access to traffic coming only from known networks and\ + \ prevent access from all other IP addresses, including within Azure.\",\"\ + metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"\ + description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMariaDB/servers\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.DBforMariaDB/servers/privateEndpointConnections\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.DBforMariaDB/servers/privateEndpointConnections/privateLinkServiceConnectionState.status\"\ + ,\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a1302fb-a631-4106-9753-f3d494733990\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Azure Policy Add-on for Kubernetes\ + \ service (AKS) should be installed and enabled on your clusters\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure Policy Add-on for\ + \ Kubernetes service (AKS) extends Gatekeeper v3, an admission controller\ + \ webhook for Open Policy Agent (OPA), to apply at-scale enforcements and\ + \ safeguards on your clusters in a centralized, consistent manner.\",\"metadata\"\ + :{\"version\":\"1.0.1-preview\",\"category\":\"Kubernetes\",\"preview\":true},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Preview]: Effect\",\"description\":\"Enable or disable the execution of\ + \ the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\"\ + :\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"\ + Microsoft.ContainerService/managedClusters/addonProfiles.azurePolicy.enabled\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerService/managedClusters/addonProfiles.azurePolicy.enabled\"\ + ,\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a15ec92-a229-4763-bb14-0ea34a568f8d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1654 - Voice\ + \ Over Internet Protocol\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this System and Communications Protection\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1654\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a2ee16e-ab1f-414a-800b-d1608835862b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a2ee16e-ab1f-414a-800b-d1608835862b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1402 - Controlled\ + \ Maintenance | Automated Maintenance Activities\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Maintenance\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1402\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a560d32-8075-4fec-9615-9f7c853f4ea9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a560d32-8075-4fec-9615-9f7c853f4ea9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1428 - Media\ + \ Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Media Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1428\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a77fcc7-b8d8-451a-ab52-56197913c0c7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a77fcc7-b8d8-451a-ab52-56197913c0c7\"\ + },{\"properties\":{\"displayName\":\"Audit resource location matches resource\ + \ group location\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Audit that the resource location matches its resource group location\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"General\"},\"policyRule\"\ + :{\"if\":{\"field\":\"location\",\"notIn\":[\"[resourcegroup().location]\"\ + ,\"global\"]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a914e76-4921-4c19-b460-a2d36003525a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a914e76-4921-4c19-b460-a2d36003525a\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'System Audit Policies - Account Management'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'System Audit Policies\ + \ - Account Management'. It also creates a system-assigned managed identity\ + \ and deploys the VM extension for Guest Configuration. This policy should\ + \ only be used along with its corresponding audit policy in an initiative.\ + \ For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\",\"deployment\"\ + :{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"\ + value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\"\ + :\"AzureBaseline_SystemAuditPoliciesAccountManagement\"}},\"template\":{\"\ + $schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a9991e6-21be-49f9-8916-a06d934bcf29\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a9991e6-21be-49f9-8916-a06d934bcf29\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1044 - Unsuccessful\ + \ Logon Attempts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1044\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0abbac52-57cf-450d-8408-1208d0dd9e90\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0abbac52-57cf-450d-8408-1208d0dd9e90\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1253 - Contingency\ + \ Plan | Resume Essential Missions / Business Functions\",\"policyType\":\"\ + Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1253\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0afce0b3-dd9f-42bb-af28-1e4284ba8311\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0afce0b3-dd9f-42bb-af28-1e4284ba8311\"\ + },{\"properties\":{\"displayName\":\"Email notification to subscription owner\ + \ for high severity alerts should be enabled\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"All\",\"description\":\"Enable emailing security alerts to the\ + \ subscription owner, in order to have them receive security alert emails\ + \ from Microsoft. This ensures that they are aware of any potential security\ + \ issues and can mitigate the risk in a timely fashion\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/securityContacts\",\"existenceCondition\":{\"field\":\"\ + Microsoft.Security/securityContacts/alertsToAdmins\",\"notEquals\":\"Off\"\ + }}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b15565f-aa9e-48ba-8619-45960f2c314d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1046 - Automatic\ + \ Account Lock | Purge / Wipe Mobile Device\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Access Control\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1046\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b1aa965-7502-41f9-92be-3e2fe7cc392a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b1aa965-7502-41f9-92be-3e2fe7cc392a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1020 - Account\ + \ Management | Role-Based Schemes\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Access Control control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1020\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b291ee8-3140-4cad-beb7-568c077c78ce\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b291ee8-3140-4cad-beb7-568c077c78ce\"\ + },{\"properties\":{\"displayName\":\"Key Vault objects should be recoverable\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ audits if key vault objects are not recoverable. Soft Delete feature helps\ + \ to effectively hold the resources for a given retention period (90 days)\ + \ even after a DELETE operation, while giving the appearance that the object\ + \ is deleted. When 'Purge protection' is on, a vault or an object in deleted\ + \ state cannot be purged until the retention period of 90 days has passed.\ + \ These vaults and objects can still be recovered, assuring customers that\ + \ the retention policy will be followed.\",\"metadata\":{\"version\":\"1.1.0\"\ + ,\"category\":\"Key Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"\ + Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\"\ + :[{\"field\":\"Microsoft.KeyVault/vaults/enableSoftDelete\",\"exists\":\"\ + false\"},{\"field\":\"Microsoft.KeyVault/vaults/enablePurgeProtection\",\"\ + exists\":\"false\"},{\"field\":\"Microsoft.KeyVault/vaults/enableSoftDelete\"\ + ,\"equals\":\"false\"},{\"field\":\"Microsoft.KeyVault/vaults/enablePurgeProtection\"\ + ,\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b60c0b2-2dc2-4e1c-b5c9-abbed971de53\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1115 - Audit\ + \ Review, Analysis, And Reporting\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Audit and Accountability\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1115\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b653845-2ad9-4e09-a4f3-5a7c1d78353d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b653845-2ad9-4e09-a4f3-5a7c1d78353d\"\ + },{\"properties\":{\"displayName\":\"Azure Cosmos DB throughput should be\ + \ limited\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"\ + This policy enables you to restrict the maximum throughput your organization\ + \ can specify when creating Azure Cosmos DB databases and containers through\ + \ the resource provider. It blocks the creation of autoscale resources.\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos DB\"},\"parameters\"\ + :{\"throughputMax\":{\"type\":\"Integer\",\"metadata\":{\"displayName\":\"\ + Max RUs\",\"description\":\"The maximum throughput (RU/s) that can be assigned\ + \ to a container via the Resource Provider during create or update.\"}},\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Policy Effect\"\ + ,\"description\":\"The desired effect of the policy.\"},\"allowedValues\"\ + :[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"deny\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"anyOf\":[{\"field\":\"type\",\"like\":\"Microsoft.DocumentDB/databaseAccounts/*/throughputSettings\"\ + },{\"field\":\"type\",\"in\":[\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases\"\ + ,\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers\",\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases\"\ + ,\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections\",\"\ + Microsoft.DocumentDB/databaseAccounts/gremlinDatabases\",\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs\"\ + ,\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces\",\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables\"\ + ,\"Microsoft.DocumentDB/databaseAccounts/tables\"]}]},{\"anyOf\":[{\"value\"\ + :\"[requestContext().apiVersion]\",\"less\":\"2019-08-01\"},{\"value\":\"\ + [if(equals(field('Microsoft.DocumentDB/databaseAccounts/sqlDatabases/options.throughput'),\ + \ ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/sqlDatabases/options.throughput')))]\"\ + ,\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/options\"\ + ,\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/throughputSettings/default.resource.throughput\"\ + ,\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/throughputSettings/default.resource.provisionedThroughputSettings\"\ + ,\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/options.throughput'),\ + \ ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/options.throughput')))]\"\ + ,\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/options\"\ + ,\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/throughputSettings/default.resource.throughput\"\ + ,\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/throughputSettings/default.resource.provisionedThroughputSettings\"\ + ,\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/options.throughput'),\ + \ ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/options.throughput')))]\"\ + ,\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/options\"\ + ,\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/throughputSettings/default.resource.throughput\"\ + ,\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/throughputSettings/default.resource.provisionedThroughputSettings\"\ + ,\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/options.throughput'),\ + \ ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/options.throughput')))]\"\ + ,\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/options\"\ + ,\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/throughputSettings/default.resource.throughput\"\ + ,\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/throughputSettings/default.resource.provisionedThroughputSettings\"\ + ,\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/options.throughput'),\ + \ ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/options.throughput')))]\"\ + ,\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/options\"\ + ,\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/throughputSettings/default.resource.throughput\"\ + ,\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/throughputSettings/default.resource.provisionedThroughputSettings\"\ + ,\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/options.throughput'),\ + \ ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/options.throughput')))]\"\ + ,\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/options\"\ + ,\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/throughputSettings/default.resource.throughput\"\ + ,\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/throughputSettings/default.resource.provisionedThroughputSettings\"\ + ,\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/options.throughput'),\ + \ ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/options.throughput')))]\"\ + ,\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/options\"\ + ,\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/throughputSettings/default.resource.throughput\"\ + ,\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/throughputSettings/default.resource.provisionedThroughputSettings\"\ + ,\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/options.throughput'),\ + \ ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/options.throughput')))]\"\ + ,\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/options\"\ + ,\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/throughputSettings/default.resource.throughput\"\ + ,\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/throughputSettings/default.resource.provisionedThroughputSettings\"\ + ,\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/tables/options.throughput'),\ + \ ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/tables/options.throughput')))]\"\ + ,\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/tables/options\"\ + ,\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/tables/throughputSettings/default.resource.throughput\"\ + ,\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/tables/throughputSettings/default.resource.provisionedThroughputSettings\"\ + ,\"exists\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b7ef78e-a035-4f23-b9bd-aff122a1b1cf\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b7ef78e-a035-4f23-b9bd-aff122a1b1cf\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1239 - User-Installed\ + \ Software\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1239\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0be51298-f643-4556-88af-d7db90794879\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0be51298-f643-4556-88af-d7db90794879\"\ + },{\"properties\":{\"displayName\":\"Ensure API app has 'Client Certificates\ + \ (Incoming client certificates)' set to 'On'\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Client certificates allow for the\ + \ app to request a certificate for incoming requests. Only clients that have\ + \ a valid certificate will be able to reach the app.\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"\ + Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\"\ + ,\"like\":\"*api\"},{\"field\":\"Microsoft.Web/sites/clientCertEnabled\",\"\ + equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c192fe8-9cbb-4516-85b3-0ade8bd03886\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1496 - System\ + \ Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Planning control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1496\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ca96127-2f87-46ab-a4fc-0d2a786df1c8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ca96127-2f87-46ab-a4fc-0d2a786df1c8\"\ + },{\"properties\":{\"displayName\":\"SQL server TDE protector should be encrypted\ + \ with your own key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Transparent Data Encryption (TDE) with your own key support provides increased\ + \ transparency and control over the TDE Protector, increased security with\ + \ an HSM-backed external service, and promotion of separation of duties.\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Sql/servers/encryptionProtector\",\"name\":\"current\",\"existenceCondition\"\ + :{\"allOf\":[{\"field\":\"Microsoft.Sql/servers/encryptionProtector/serverKeyType\"\ + ,\"equals\":\"AzureKeyVault\"},{\"field\":\"Microsoft.Sql/servers/encryptionProtector/uri\"\ + ,\"notEquals\":\"\"},{\"field\":\"Microsoft.Sql/servers/encryptionProtector/uri\"\ + ,\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d134df8-db83-46fb-ad72-fe0c9428c8dd\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1518 - Personnel\ + \ Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1518\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d58f734-c052-40e9-8b2f-a1c2bff0b815\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d58f734-c052-40e9-8b2f-a1c2bff0b815\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1713 - Software,\ + \ Firmware, And Information Integrity | Integrity Checks\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ System and Information Integrity control\",\"metadata\":{\"version\":\"\ + 1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"\ + /providers/Microsoft.PolicyInsights/policyMetadata/ACF1713\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d87c70b-5012-48e9-994b-e70dd4b8def0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d87c70b-5012-48e9-994b-e70dd4b8def0\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1466 - Visitor\ + \ Access Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Physical and Environmental Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1466\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d943a9c-a6f1-401f-a792-740cdb09c451\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d943a9c-a6f1-401f-a792-740cdb09c451\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs on which Windows Defender Exploit Guard is not enabled\",\"\ + policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should\ + \ only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines on which Windows Defender Exploit Guard is not enabled.\ + \ For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsDefenderExploitGuard\",\"existenceCondition\":{\"field\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d9b45ff-9ddd-43fc-bf59-fbd1c8423053\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d9b45ff-9ddd-43fc-bf59-fbd1c8423053\"\ + },{\"properties\":{\"displayName\":\"Managed identity should be used in your\ + \ Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Use a managed identity for enhanced authentication security\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"\ + },{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"\ + [parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\"\ + ,\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/managedServiceIdentityId\"\ + ,\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0da106f2-4ca3-48e8-bc85-c638fe6aea8f\"\ + },{\"properties\":{\"displayName\":\"Deploy a flow log resource with target\ + \ network security group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Configures flow log for specific network security group.\ + \ It will allow to log information about IP traffic flowing through an network\ + \ security group. Flow log helps to identify unknown or undesired traffic,\ + \ verify network isolation and compliance with enterprise access rules, analyze\ + \ network flows from compromised IPs and network interfaces.\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"nsgRegion\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"NSG Region\",\"description\"\ + :\"This Policy will review NSGs only in the selected region. You can create\ + \ other assignments to include other regions.\",\"strongType\":\"location\"\ + }},\"storageId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Storage\ + \ id\",\"description\":\"A string with the storage id for the flowlogs to\ + \ be sent to. It will be used for deployment purposes only. Make sure this\ + \ storage account is located in the same region as the NSG. The format must\ + \ be: '/subscriptions/{subscription id}/resourceGroups/{resourceGroup name}/providers/Microsoft.Storage/storageAccounts/{storage\ + \ account name}\",\"assignPermissions\":\"true\"}},\"networkWatcherRG\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Network Watchers RG\",\"\ + description\":\"The name of the resource group where the flowLog resources\ + \ will be created. This will be used only if a deployment is required. This\ + \ is the resource group where the Network Watchers are located.\",\"strongType\"\ + :\"existingResourceGroups\"}},\"networkWatcherName\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Network Watcher name\",\"description\":\"\ + The name of the network watcher under which the flowLog resources will be\ + \ created. Make sure it belongs to the same region as the NSG.\"}}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups\"\ + },{\"field\":\"location\",\"equals\":\"[parameters('nsgRegion')]\"}]},\"then\"\ + :{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Network/networkWatchers/flowlogs\"\ + ,\"resourceGroupName\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs'))),\ + \ parameters('networkWatcherRG'), split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')),\ + \ '/')[4])]\",\"name\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id'))),\ + \ 'null/null', concat(split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')),\ + \ '/')[8], '/', split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')),\ + \ '/')[10]))]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Network/networkWatchers/flowLogs/enabled\"\ + ,\"equals\":\"true\"},{\"field\":\"Microsoft.Network/networkWatchers/flowLogs/storageId\"\ + ,\"equals\":\"[parameters('storageId')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"storageId\":{\"type\":\"\ + String\"},\"networkWatcherRG\":{\"type\":\"String\"},\"networkWatcherName\"\ + :{\"type\":\"String\"},\"flowlogName\":{\"type\":\"String\"},\"location\"\ + :{\"type\":\"String\"},\"targetResource\":{\"type\":\"string\"}},\"resources\"\ + :[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[concat('flowlogDeployment-',\ + \ uniqueString(parameters('flowlogName')))]\",\"apiVersion\":\"2019-10-01\"\ + ,\"resourceGroup\":\"[parameters('networkWatcherRG')]\",\"properties\":{\"\ + mode\":\"incremental\",\"parameters\":{},\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"resources\":[{\"type\"\ + :\"Microsoft.Network/networkWatchers/flowLogs\",\"name\":\"[concat(parameters('networkWatcherName'),\ + \ '/', parameters('flowlogName'))]\",\"apiVersion\":\"2019-11-01\",\"location\"\ + :\"[parameters('location')]\",\"properties\":{\"targetResourceId\":\"[parameters('targetResource')]\"\ + ,\"storageId\":\"[parameters('storageId')]\",\"enabled\":\"true\",\"retentionPolicy\"\ + :{\"days\":\"0\",\"enabled\":\"false\"}}}]}}}]},\"parameters\":{\"storageId\"\ + :{\"value\":\"[parameters('storageId')]\"},\"networkWatcherRG\":{\"value\"\ + :\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs'))),\ + \ parameters('networkWatcherRG'), split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')),\ + \ '/')[4])]\"},\"networkWatcherName\":{\"value\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs'))),\ + \ parameters('networkWatcherName'), split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')),\ + \ '/')[8])]\"},\"flowlogName\":{\"value\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs'))),\ + \ concat(field('name'), '-', resourceGroup().name, '-', 'flowlog'), split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')),\ + \ '/')[10])]\"},\"location\":{\"value\":\"[field('location')]\"},\"targetResource\"\ + :{\"value\":\"[concat(resourceGroup().id, '/providers/Microsoft.Network/networkSecurityGroups/',\ + \ field('name'))]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0db34a60-64f4-4bf6-bd44-f95c16cf34b9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0db34a60-64f4-4bf6-bd44-f95c16cf34b9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1718 - Software,\ + \ Firmware, And Information Integrity | Binary Or Machine Executable Code\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this System and Information Integrity control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1718\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0dced7ab-9ce5-4137-93aa-14c13e06ab17\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0dced7ab-9ce5-4137-93aa-14c13e06ab17\"\ + },{\"properties\":{\"displayName\":\"Authorized IP ranges should be defined\ + \ on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"\ + description\":\"Restrict access to the Kubernetes Service Management API by\ + \ granting API access only to IP addresses in specific ranges. It is recommended\ + \ to limit access to authorized IP ranges to ensure that only applications\ + \ from allowed networks can access the cluster.\",\"metadata\":{\"version\"\ + :\"2.0.1\",\"category\":\"Security Center\"},\"parameters\":{\"effect\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"\ + },{\"field\":\"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.authorizedIPRanges\"\ + ,\"exists\":\"false\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.enablePrivateCluster\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.enablePrivateCluster\"\ + ,\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e246bcf-5f6f-4f87-bc6f-775d4712c7ea\"\ + },{\"properties\":{\"displayName\":\"Remote debugging should be turned off\ + \ for Function Apps\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Remote debugging requires inbound ports to be opened on function apps.\ + \ Remote debugging should be turned off.\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\"\ + :\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Web/sites/config/web.remoteDebuggingEnabled\",\"equals\"\ + :\"false\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e60b895-3786-45da-8377-9c6b4b6ac5f9\"\ + },{\"properties\":{\"displayName\":\"Azure Defender for Key Vault should be\ + \ enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"\ + Azure Defender for Key Vault provides an additional layer of protection and\ + \ security intelligence by detecting unusual and potentially harmful attempts\ + \ to access or exploit key vault accounts.\",\"metadata\":{\"version\":\"\ + 1.0.3\",\"category\":\"Security Center\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/pricings\",\"name\":\"KeyVaults\",\"existenceScope\":\"\ + subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\"\ + ,\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e6763cc-5078-4e64-889d-ff4d9a839047\"\ + },{\"properties\":{\"displayName\":\"Geo-redundant backup should be enabled\ + \ for Azure Database for MariaDB\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"Azure Database for MariaDB allows you to choose\ + \ the redundancy option for your database server. It can be set to a geo-redundant\ + \ backup storage in which the data is not only stored within the region in\ + \ which your server is hosted, but is also replicated to a paired region to\ + \ provide recovery option in case of a region failure. Configuring geo-redundant\ + \ storage for backup is only allowed during server create.\",\"metadata\"\ + :{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMariaDB/servers\"\ + },{\"field\":\"Microsoft.DBforMariaDB/servers/storageProfile.geoRedundantBackup\"\ + ,\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ec47710-77ff-4a3d-9181-6aa50af424d0\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ enable Guest Configuration Policy on Windows VMs.\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"This policy creates a system-assigned\ + \ managed identity and deploys the VM extension for Guest Configuration on\ + \ Windows VMs. This is a prerequisite for Guest Configuration Policy and must\ + \ be assigned to the scope before using any Guest Configuration policy. For\ + \ more information on Guest Configuration policies, please visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\"\ + :{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforWindows\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\"\ + ,\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\"\ + ,\"equals\":\"ConfigurationforWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\"\ + ,\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\"\ + ,\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"\ + value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'),\ + \ '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\"\ + ,\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"\ + Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\"\ + :\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\"\ + :{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ecd903d-91e7-4726-83d3-a229d7f2e293\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ecd903d-91e7-4726-83d3-a229d7f2e293\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1601 - Developer\ + \ Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this System and Services\ + \ Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1601\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ee79a0c-addf-4ce9-9b3c-d9576ed5e20e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ee79a0c-addf-4ce9-9b3c-d9576ed5e20e\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Audit Azure Spring Cloud instances\ + \ where distributed tracing is not enabled\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"Indexed\",\"description\":\"Distributed tracing tools in Azure Spring\ + \ Cloud allow debugging and monitoring the complex interconnections between\ + \ microservices in an application. Distributed tracing tools should be enabled\ + \ and in a healthy state.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"\ + category\":\"App Platform\",\"preview\":true},\"parameters\":{\"effect\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppPlatform/Spring\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.AppPlatform/Spring/trace.enabled\",\"\ + notEquals\":\"true\"},{\"field\":\"Microsoft.AppPlatform/Spring/trace.state\"\ + ,\"notEquals\":\"Succeeded\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f2d8593-4667-4932-acca-6a9f187af109\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f2d8593-4667-4932-acca-6a9f187af109\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1476 - Fire\ + \ Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Physical and Environmental Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1476\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f3c4ac2-3e35-4906-a80b-473b12a622d7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f3c4ac2-3e35-4906-a80b-473b12a622d7\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1204 - Access\ + \ Restrictions For Change | Review System Changes\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Configuration\ + \ Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1204\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f4f6750-d1ab-4a4c-8dfd-af3237682665\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f4f6750-d1ab-4a4c-8dfd-af3237682665\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1430 - Media\ + \ Marking\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Media Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1430\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f559588-5e53-4b14-a7c4-85d28ebc2234\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f559588-5e53-4b14-a7c4-85d28ebc2234\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1574 - Acquisition\ + \ Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Services Acquisition control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1574\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f935dab-83d6-47b8-85ef-68b8584161b9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f935dab-83d6-47b8-85ef-68b8584161b9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1164 - Continuous\ + \ Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Security Assessment and Authorization control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1164\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fb8d3ce-9e96-481c-9c68-88d4e3019310\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fb8d3ce-9e96-481c-9c68-88d4e3019310\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1017 - Account\ + \ Management | Inactivity Logout\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Access Control control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1017\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fc3db37-e59a-48c1-84e9-1780cedb409e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fc3db37-e59a-48c1-84e9-1780cedb409e\"\ + },{\"properties\":{\"displayName\":\"CORS should not allow every domain to\ + \ access your API for FHIR\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Cross-Origin Resource Sharing (CORS) should not allow all\ + \ domains to access your API for FHIR. To protect your API for FHIR, remove\ + \ access for all domains and explicitly define the domains allowed to connect.\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"API for FHIR\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"audit\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"\ + if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HealthcareApis/services\"\ + },{\"not\":{\"field\":\"Microsoft.HealthcareApis/services/corsConfiguration.origins[*]\"\ + ,\"notEquals\":\"*\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fea8f8a-4169-495d-8307-30ec335f387d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fea8f8a-4169-495d-8307-30ec335f387d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1087 - Security\ + \ Awareness And Training Policy And Procedures\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Awareness\ + \ and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1087\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/100c82ba-42e9-4d44-a2ba-94b209248583\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"100c82ba-42e9-4d44-a2ba-94b209248583\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs that do not contain the specified certificates in Trusted\ + \ Root\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"\ + This policy creates a Guest Configuration assignment to audit Windows VMs\ + \ that do not contain the specified certificates in the Trusted Root Certification\ + \ Authorities certificate store (Cert:\\\\LocalMachine\\\\Root). It also creates\ + \ a system-assigned managed identity and deploys the VM extension for Guest\ + \ Configuration. This policy should only be used along with its corresponding\ + \ audit policy in an initiative. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.2.0-deprecated\",\"category\":\"Guest Configuration\",\"requiredProviders\"\ + :[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"\ + CertificateThumbprints\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Certificate thumbprints\",\"description\":\"A semicolon-separated\ + \ list of certificate thumbprints that should exist under the Trusted Root\ + \ certificate store (Cert:\\\\LocalMachine\\\\Root). e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"\ + }}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"\ + equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"\ + Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\"\ + ,\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\"\ + ,\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsCertificateInTrustedRoot\",\"existenceCondition\":{\"field\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude',\ + \ '=', parameters('CertificateThumbprints')))]\"},\"deployment\":{\"properties\"\ + :{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"WindowsCertificateInTrustedRoot\"\ + },\"CertificateThumbprints\":{\"value\":\"[parameters('CertificateThumbprints')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"CertificateThumbprints\":{\"type\":\"string\"}},\"\ + resources\":[{\"condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\"\ + ,\"value\":\"[parameters('CertificateThumbprints')]\"}]}}},{\"condition\"\ + :\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\"\ + ,\"value\":\"[parameters('CertificateThumbprints')]\"}]}}},{\"condition\"\ + :\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\"\ + ,\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\"\ + ,\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/106ccbe4-a791-4f33-a44a-06796944b8d5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"106ccbe4-a791-4f33-a44a-06796944b8d5\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1554 - Vulnerability\ + \ Scanning | Discoverable Information\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Risk Assessment control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1554\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/10984b4e-c93e-48d7-bf20-9c03b04e9eca\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"10984b4e-c93e-48d7-bf20-9c03b04e9eca\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Ensure that '.NET Framework'\ + \ version is the latest, if used as a part of the Function App\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy is not required\ + \ since Azure App Service automatically updates and maintains the .NET Framework\ + \ versions installed on the platform.\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"App Service\",\"deprecated\":true},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"\ + },{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"\ + [parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\"\ + ,\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.netFrameworkVersion\"\ + ,\"in\":[\"v3.0\",\"v4.0\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/10c1859c-e1a7-4df3-ab97-a487fa8059f6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"10c1859c-e1a7-4df3-ab97-a487fa8059f6\"\ + },{\"properties\":{\"displayName\":\"Custom subscription owner roles should\ + \ not exist\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"This policy ensures that no custom subscription owner roles exist.\",\"\ + metadata\":{\"version\":\"2.0.0\",\"category\":\"General\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"\ + if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Authorization/roleDefinitions\"\ + },{\"field\":\"Microsoft.Authorization/roleDefinitions/type\",\"equals\":\"\ + CustomRole\"},{\"anyOf\":[{\"not\":{\"field\":\"Microsoft.Authorization/roleDefinitions/permissions[*].actions[*]\"\ + ,\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Authorization/roleDefinitions/permissions.actions[*]\"\ + ,\"notEquals\":\"*\"}}]},{\"anyOf\":[{\"not\":{\"field\":\"Microsoft.Authorization/roleDefinitions/assignableScopes[*]\"\ + ,\"notIn\":[\"[concat(subscription().id,'/')]\",\"[subscription().id]\",\"\ + /\"]}},{\"not\":{\"field\":\"Microsoft.Authorization/roleDefinitions/assignableScopes[*]\"\ + ,\"notLike\":\"/providers/Microsoft.Management/*\"}}]}]},\"then\":{\"effect\"\ + :\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/10ee2ea2-fb4d-45b8-a7e9-a2e770044cd9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"10ee2ea2-fb4d-45b8-a7e9-a2e770044cd9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1230 - Configuration\ + \ Management Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1230\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/11158848-f679-4e9b-aa7b-9fb07d945071\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"11158848-f679-4e9b-aa7b-9fb07d945071\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1432 - Media\ + \ Storage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Media Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1432\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1140e542-b80d-4048-af45-3f7245be274b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1140e542-b80d-4048-af45-3f7245be274b\"\ + },{\"properties\":{\"displayName\":\"Cognitive Services accounts should use\ + \ customer owned storage or enable data encryption.\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"This policy audits any Cognitive Services\ + \ account not using customer owned storage nor data encryption. For each Cognitive\ + \ Services account with storage, use either customer owned storage or enable\ + \ data encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive\ + \ Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"The effect determines what\ + \ happens when the policy rule is evaluated to match\"},\"allowedValues\"\ + :[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"\ + },{\"count\":{\"field\":\"Microsoft.CognitiveServices/accounts/userOwnedStorage[*]\"\ + },\"less\":1},{\"field\":\"Microsoft.CognitiveServices/accounts/encryption.keySource\"\ + ,\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/11566b39-f7f7-4b82-ab06-68d8700eb0a4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"11566b39-f7f7-4b82-ab06-68d8700eb0a4\"\ + },{\"properties\":{\"displayName\":\"Audit Dependency agent deployment - VM\ + \ Image (OS) unlisted\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"\ + description\":\"Reports VMs as non-compliant if the VM Image (OS) is not in\ + \ the list defined and the agent is not installed. The list of OS images will\ + \ be updated over time as support is updated.\",\"metadata\":{\"version\"\ + :\"1.0.1\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude_windows\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: List of VM\ + \ images that have supported Windows OS to add to scope\",\"description\"\ + :\"Example value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"\ + },\"defaultValue\":[]},\"listOfImageIdToInclude_linux\":{\"type\":\"Array\"\ + ,\"metadata\":{\"displayName\":\"Optional: List of VM images that have supported\ + \ Linux OS to add to scope\",\"description\":\"Example value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"\ + },\"defaultValue\":[]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_windows')]\"\ + },{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_linux')]\"\ + },{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\"\ + ,\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\"\ + ,\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\"\ + ,\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\"\ + ,\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\"\ + ,\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\"\ + ,\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\"\ + ,\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\"\ + ,\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"\ + *-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\"\ + :\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"Windows-10\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\"\ + :[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"\ + SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\"\ + ,\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\"\ + ,\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"\ + in\":[\"Centos\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\"\ + :\"7*\"}]}]}}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"\ + equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/11ac78e3-31bc-4f0c-8434-37ab963cea07\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"11ac78e3-31bc-4f0c-8434-37ab963cea07\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'Security Options - System settings'\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'Security Options - System settings'\ + \ for certificate rules on executables for SRP and optional subsystems. This\ + \ policy requires that the Guest Configuration prerequisites have been deployed\ + \ to the policy assignment scope. For details, visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"AzureBaseline_SecurityOptionsSystemsettings\",\"version\":\"\ + 1.*\",\"configurationParameter\":{\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\"\ + :\"System settings: Use Certificate Rules on Windows Executables for Software\ + \ Restriction Policies;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include Arc connected\ + \ servers\",\"description\":\"By selecting this option, you agree to be charged\ + \ monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"\ + ],\"defaultValue\":\"false\"},\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"System settings: Use\ + \ Certificate Rules on Windows Executables for Software Restriction Policies\"\ + ,\"description\":\"Specifies whether digital certificates are processed when\ + \ software restriction policies are enabled and a user or process attempts\ + \ to run software with an .exe file name extension. It enables or disables\ + \ certificate rules (a type of software restriction policies rule). For certificate\ + \ rules to take effect in software restriction policies, you must enable this\ + \ policy setting.\"},\"defaultValue\":\"1\"},\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_SecurityOptionsSystemsettings\",\"existenceCondition\":{\"allOf\"\ + :[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('System settings: Use Certificate Rules on Windows\ + \ Executables for Software Restriction Policies;ExpectedValue', '=', parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')))]\"\ + }]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12017595-5a75-4bb1-9d97-4c2c939ea3c3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12017595-5a75-4bb1-9d97-4c2c939ea3c3\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1655 - Voice\ + \ Over Internet Protocol\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this System and Communications Protection\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1655\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/121eab72-390e-4629-a7e2-6d6184f57c6b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"121eab72-390e-4629-a7e2-6d6184f57c6b\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'Security Options - Network Security'\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'Security Options - Network Security'\ + \ for including Local System behavior, PKU2U, LAN Manager, LDAP client, and\ + \ NTLM SSP. This policy requires that the Guest Configuration prerequisites\ + \ have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"AzureBaseline_SecurityOptionsNetworkSecurity\",\"version\":\"\ + 1.*\",\"configurationParameter\":{\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\"\ + :\"Network Security: Configure encryption types allowed for Kerberos;ExpectedValue\"\ + ,\"NetworkSecurityLANManagerAuthenticationLevel\":\"Network security: LAN\ + \ Manager authentication level;ExpectedValue\",\"NetworkSecurityLDAPClientSigningRequirements\"\ + :\"Network security: LDAP client signing requirements;ExpectedValue\",\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\"\ + :\"Network security: Minimum session security for NTLM SSP based (including\ + \ secure RPC) clients;ExpectedValue\",\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\"\ + :\"Network security: Minimum session security for NTLM SSP based (including\ + \ secure RPC) servers;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include Arc connected\ + \ servers\",\"description\":\"By selecting this option, you agree to be charged\ + \ monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"\ + ],\"defaultValue\":\"false\"},\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network Security: Configure\ + \ encryption types allowed for Kerberos\",\"description\":\"Specifies the\ + \ encryption types that Kerberos is allowed to use.\"},\"defaultValue\":\"\ + 2147483644\"},\"NetworkSecurityLANManagerAuthenticationLevel\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Network security: LAN Manager authentication\ + \ level\",\"description\":\"Specify which challenge-response authentication\ + \ protocol is used for network logons. This choice affects the level of authentication\ + \ protocol used by clients, the level of session security negotiated, and\ + \ the level of authentication accepted by servers.\"},\"defaultValue\":\"\ + 5\"},\"NetworkSecurityLDAPClientSigningRequirements\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Network security: LDAP client signing requirements\"\ + ,\"description\":\"Specify the level of data signing that is requested on\ + \ behalf of clients that issue LDAP BIND requests.\"},\"defaultValue\":\"\ + 1\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network security: Minimum\ + \ session security for NTLM SSP based (including secure RPC) clients\",\"\ + description\":\"Specifies which behaviors are allowed by clients for applications\ + \ using the NTLM Security Support Provider (SSP). The SSP Interface (SSPI)\ + \ is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers\ + \ for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network security: Minimum\ + \ session security for NTLM SSP based (including secure RPC) servers\",\"\ + description\":\"Specifies which behaviors are allowed by servers for applications\ + \ using the NTLM Security Support Provider (SSP). The SSP Interface (SSPI)\ + \ is used by applications that need authentication services.\"},\"defaultValue\"\ + :\"537395200\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of this policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_SecurityOptionsNetworkSecurity\",\"existenceCondition\":{\"\ + allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Network Security: Configure encryption types\ + \ allowed for Kerberos;ExpectedValue', '=', parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos'),\ + \ ',', 'Network security: LAN Manager authentication level;ExpectedValue',\ + \ '=', parameters('NetworkSecurityLANManagerAuthenticationLevel'), ',', 'Network\ + \ security: LDAP client signing requirements;ExpectedValue', '=', parameters('NetworkSecurityLDAPClientSigningRequirements'),\ + \ ',', 'Network security: Minimum session security for NTLM SSP based (including\ + \ secure RPC) clients;ExpectedValue', '=', parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients'),\ + \ ',', 'Network security: Minimum session security for NTLM SSP based (including\ + \ secure RPC) servers;ExpectedValue', '=', parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')))]\"\ + }]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1221c620-d201-468c-81e7-2817e6107e84\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1221c620-d201-468c-81e7-2817e6107e84\"\ + },{\"properties\":{\"displayName\":\"Allowlist rules in your adaptive application\ + \ control policy should be updated\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + All\",\"description\":\"Monitor for changes in behavior on groups of machines\ + \ configured for auditing by Azure Security Center's adaptive application\ + \ controls. Security Center uses machine learning to analyze the running processes\ + \ on your machines and suggest a list of known-safe applications. These are\ + \ presented as recommended apps to allow in adaptive application control policies.\"\ + ,\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security Center\"},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"\ + Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"\ + ]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/assessments\",\"name\":\"1234abcd-1b53-4fd4-9835-2c2fa3935313\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"123a3936-f020-408a-ba0c-47873faf1534\"\ + },{\"properties\":{\"displayName\":\"Web Application Firewall (WAF) should\ + \ use the specified mode for Application Gateway\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Mandates the use of 'Detection' or\ + \ 'Prevention' mode to be active on all Web Application Firewall policies\ + \ for Application Gateway.\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"\ + defaultValue\":\"Audit\"},\"modeRequirement\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Mode Requirement\",\"description\":\"Mode required for\ + \ all WAF policies\"},\"allowedValues\":[\"Prevention\",\"Detection\"],\"\ + defaultValue\":\"Detection\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies\"\ + },{\"field\":\"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/policySettings.mode\"\ + ,\"notEquals\":\"[parameters('modeRequirement')]\"}]},\"then\":{\"effect\"\ + :\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12430be1-6cc8-4527-a9a8-e3d38f250096\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12430be1-6cc8-4527-a9a8-e3d38f250096\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1681 - Malicious\ + \ Code Protection | Automatic Updates\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this System and Information\ + \ Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1681\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12623e7e-4736-4b2e-b776-c1600f35f93a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12623e7e-4736-4b2e-b776-c1600f35f93a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1240 - User-Installed\ + \ Software\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1240\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/129eb39f-d79a-4503-84cd-92f036b5e429\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"129eb39f-d79a-4503-84cd-92f036b5e429\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'Security Options - System objects'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'Security Options\ + \ - System objects'. It also creates a system-assigned managed identity and\ + \ deploys the VM extension for Guest Configuration. This policy should only\ + \ be used along with its corresponding audit policy in an initiative. For\ + \ more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsSystemobjects\",\"deployment\":{\"\ + properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\"\ + :\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"\ + type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"\ + AzureBaseline_SecurityOptionsSystemobjects\"}},\"template\":{\"$schema\":\"\ + https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12ae2d24-3805-4b37-9fa9-465968bfbcfa\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12ae2d24-3805-4b37-9fa9-465968bfbcfa\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1666 - System\ + \ And Information Integrity Policy And Procedures\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this System and\ + \ Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1666\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12e30ee3-61e6-4509-8302-a871e8ebb91e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12e30ee3-61e6-4509-8302-a871e8ebb91e\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs that do not have the specified applications installed\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ that do not have the specified applications installed. It also creates a\ + \ system-assigned managed identity and deploys the VM extension for Guest\ + \ Configuration. This policy should only be used along with its corresponding\ + \ audit policy in an initiative. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.2.0-deprecated\",\"category\":\"Guest Configuration\",\"requiredProviders\"\ + :[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"\ + installedApplication\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Application names (supports wildcards)\",\"description\"\ + :\"A semicolon-separated list of the names of the applications that should\ + \ be installed. e.g. 'Microsoft SQL Server 2014 (64-bit); Microsoft Visual\ + \ Studio Code' or 'Microsoft SQL Server 2014*' (to match any application starting\ + \ with 'Microsoft SQL Server 2014')\"}}},\"policyRule\":{\"if\":{\"anyOf\"\ + :[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WhitelistedApplication\",\"existenceCondition\":{\"field\":\"\ + Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[InstalledApplication]bwhitelistedapp;Name',\ + \ '=', parameters('installedApplication')))]\"},\"deployment\":{\"properties\"\ + :{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"WhitelistedApplication\"\ + },\"installedApplication\":{\"value\":\"[parameters('installedApplication')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"installedApplication\":{\"type\":\"string\"}},\"\ + resources\":[{\"condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[InstalledApplication]bwhitelistedapp;Name\"\ + ,\"value\":\"[parameters('installedApplication')]\"}]}}},{\"condition\":\"\ + [equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[InstalledApplication]bwhitelistedapp;Name\"\ + ,\"value\":\"[parameters('installedApplication')]\"}]}}},{\"condition\":\"\ + [equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\"\ + ,\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\"\ + ,\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12f7e5d0-42a7-4630-80d8-54fb7cff9bd6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12f7e5d0-42a7-4630-80d8-54fb7cff9bd6\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1347 - Identification\ + \ And Authentication (Non-Org. Users) | Acceptance Of PIV Creds. From Other\ + \ Agys.\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"\ + Microsoft implements this Identification and Authentication control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1347\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/131a2706-61e9-4916-a164-00e052056462\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"131a2706-61e9-4916-a164-00e052056462\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1450 - Physical\ + \ Access Authorizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this Physical and Environmental Protection\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1450\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/134d7a13-ba3e-41e2-b236-91bfcfa24e01\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"134d7a13-ba3e-41e2-b236-91bfcfa24e01\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1184 - Configuration\ + \ Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1184\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13579d0e-0ab0-4b26-b0fb-d586f6d7ed20\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13579d0e-0ab0-4b26-b0fb-d586f6d7ed20\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1085 - Publicly\ + \ Accessible Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1085\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13d117e0-38b0-4bbb-aaab-563be5dd10ba\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13d117e0-38b0-4bbb-aaab-563be5dd10ba\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1404 - Maintenance\ + \ Tools\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"\ + Microsoft implements this Maintenance control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1404\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13d8f903-0cd6-449f-a172-50f6579c182b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13d8f903-0cd6-449f-a172-50f6579c182b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1695 - Information\ + \ System Monitoring | Wireless Intrusion Detection\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this System and\ + \ Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1695\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13fcf812-ec82-4eda-9b89-498de9efd620\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13fcf812-ec82-4eda-9b89-498de9efd620\"\ + },{\"properties\":{\"displayName\":\"Audit Windows machines that contain certificates\ + \ expiring within the specified number of days\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Requires that prerequisites are deployed\ + \ to the policy assignment scope. For details, visit https://aka.ms/gcpol.\ + \ Machines are non-compliant if certificates in the specified store have an\ + \ expiration date out of range for the number of days given as parameter.\ + \ The policy also provides the option to only check for specific certificates\ + \ or exclude specific certificates, and whether to report on expired certificates.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"CertificateExpiration\",\"version\":\"1.*\",\"configurationParameter\"\ + :{\"CertificateStorePath\":\"[CertificateStore]CertificateStore1;CertificateStorePath\"\ + ,\"ExpirationLimitInDays\":\"[CertificateStore]CertificateStore1;ExpirationLimitInDays\"\ + ,\"CertificateThumbprintsToInclude\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\"\ + ,\"CertificateThumbprintsToExclude\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude\"\ + ,\"IncludeExpiredCertificates\":\"[CertificateStore]CertificateStore1;IncludeExpiredCertificates\"\ + }}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"CertificateStorePath\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Certificate store path\"\ + ,\"description\":\"The path to the certificate store containing the certificates\ + \ to check the expiration dates of. Default value is 'Cert:' which is the\ + \ root certificate store path, so all certificates on the machine will be\ + \ checked. Other example paths: 'Cert:\\\\LocalMachine', 'Cert:\\\\LocalMachine\\\ + \\TrustedPublisher', 'Cert:\\\\CurrentUser'\"},\"defaultValue\":\"Cert:\"\ + },\"ExpirationLimitInDays\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Expiration limit in days\",\"description\":\"An integer indicating the\ + \ number of days within which to check for certificates that are expiring.\ + \ For example, if this value is 30, any certificate expiring within the next\ + \ 30 days will cause this policy to be non-compliant.\"},\"defaultValue\"\ + :\"30\"},\"CertificateThumbprintsToInclude\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Certificate thumbprints to include\",\"description\":\"\ + A semicolon-separated list of certificate thumbprints to check under the specified\ + \ path. If a value is not specified, all certificates under the certificate\ + \ store path will be checked. If a value is specified, no certificates other\ + \ than those with the thumbprints specified will be checked. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"\ + },\"defaultValue\":\"\"},\"CertificateThumbprintsToExclude\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Certificate thumbprints to exclude\"\ + ,\"description\":\"A semicolon-separated list of certificate thumbprints to\ + \ ignore. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"},\"defaultValue\":\"\"\ + },\"IncludeExpiredCertificates\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Include expired certificates\",\"description\":\"Must be 'true' or 'false'.\ + \ True indicates that any found certificates that have already expired will\ + \ also make this policy non-compliant. False indicates that certificates that\ + \ have expired will be be ignored.\"},\"allowedValues\":[\"true\",\"false\"\ + ],\"defaultValue\":\"false\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"\ + anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"CertificateExpiration\",\"existenceCondition\":{\"allOf\":[{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[CertificateStore]CertificateStore1;CertificateStorePath',\ + \ '=', parameters('CertificateStorePath'), ',', '[CertificateStore]CertificateStore1;ExpirationLimitInDays',\ + \ '=', parameters('ExpirationLimitInDays'), ',', '[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude',\ + \ '=', parameters('CertificateThumbprintsToInclude'), ',', '[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude',\ + \ '=', parameters('CertificateThumbprintsToExclude'), ',', '[CertificateStore]CertificateStore1;IncludeExpiredCertificates',\ + \ '=', parameters('IncludeExpiredCertificates')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1417908b-4bff-46ee-a2a6-4acc899320ab\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1417908b-4bff-46ee-a2a6-4acc899320ab\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs if the Administrators group contains any of the specified\ + \ members\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy creates a Guest Configuration assignment to audit Windows virtual\ + \ machines in which the Administrators group contains any of the specified\ + \ members. It also creates a system-assigned managed identity and deploys\ + \ the VM extension for Guest Configuration. This policy should only be used\ + \ along with its corresponding audit policy in an initiative. For more information\ + \ on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"\ + metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"MembersToExclude\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Members to exclude\",\"description\":\"A semicolon-separated\ + \ list of members that should be excluded in the Administrators local group.\ + \ Ex: Administrator; myUser1; myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\"\ + :[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AdministratorsGroupMembersToExclude\",\"existenceCondition\":{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;MembersToExclude',\ + \ '=', parameters('MembersToExclude')))]\"},\"deployment\":{\"properties\"\ + :{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"AdministratorsGroupMembersToExclude\"\ + },\"MembersToExclude\":{\"value\":\"[parameters('MembersToExclude')]\"}},\"\ + template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"MembersToExclude\":{\"type\":\"string\"}},\"resources\"\ + :[{\"condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;MembersToExclude\"\ + ,\"value\":\"[parameters('MembersToExclude')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;MembersToExclude\"\ + ,\"value\":\"[parameters('MembersToExclude')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/144f1397-32f9-4598-8c88-118decc3ccba\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"144f1397-32f9-4598-8c88-118decc3ccba\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1157 - Plan\ + \ Of Action And Milestones\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Security Assessment and Authorization\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1157\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/15495367-cf68-464c-bbc3-f53ca5227b7a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"15495367-cf68-464c-bbc3-f53ca5227b7a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1491 - Security\ + \ Planning Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Planning control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1491\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1571dd40-dafc-4ef4-8f55-16eba27efc7b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1571dd40-dafc-4ef4-8f55-16eba27efc7b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1564 - System\ + \ Development Life Cycle\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this System and Services Acquisition\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1564\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/157f0ef9-143f-496d-b8f9-f8c8eeaad801\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"157f0ef9-143f-496d-b8f9-f8c8eeaad801\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs that do not have a minimum password age of 1 day\",\"\ + policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ that do not have a minimum password age of 1 day. It also creates a system-assigned\ + \ managed identity and deploys the VM extension for Guest Configuration. This\ + \ policy should only be used along with its corresponding audit policy in\ + \ an initiative. For more information on Guest Configuration policies, please\ + \ visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\"\ + ,\"category\":\"Guest Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"\ + ],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"\ + field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"MinimumPasswordAge\",\"deployment\":{\"properties\":{\"mode\"\ + :\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"MinimumPasswordAge\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16390df4-2f73-4b42-af13-c801066763df\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16390df4-2f73-4b42-af13-c801066763df\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1662 - Fail\ + \ In Known State\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Communications Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1662\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/165cb91f-7ea8-4ab7-beaf-8636b98c9d15\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"165cb91f-7ea8-4ab7-beaf-8636b98c9d15\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1684 - Information\ + \ System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Information Integrity control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1684\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16bfdb59-db38-47a5-88a9-2e9371a638cf\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16bfdb59-db38-47a5-88a9-2e9371a638cf\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs that do not have the specified Windows PowerShell modules installed\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy\ + \ should only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines that do not have the specified Windows PowerShell modules\ + \ installed. For more information on Guest Configuration policies, please\ + \ visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Guest Configuration\",\"deprecated\":true},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsPowerShellModules\",\"existenceCondition\":{\"field\":\"\ + Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16f9b37c-4408-4c30-bc17-254958f2e2d6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16f9b37c-4408-4c30-bc17-254958f2e2d6\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1103 - Audit\ + \ Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Audit and Accountability control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1103\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16feeb31-6377-437e-bbab-d7f73911896d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16feeb31-6377-437e-bbab-d7f73911896d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1007 - Account\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1007\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17200329-bf6c-46d8-ac6d-abf4641c2add\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17200329-bf6c-46d8-ac6d-abf4641c2add\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1349 - Identification\ + \ And Authentication (Non-Org. Users) | Use Of FICAM-Approved Products\",\"\ + policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements\ + \ this Identification and Authentication control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1349\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17641f70-94cd-4a5d-a613-3d1143e20e34\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17641f70-94cd-4a5d-a613-3d1143e20e34\"\ + },{\"properties\":{\"displayName\":\"Deploy associations for a managed application\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys\ + \ an association resource that associates selected resource types to the specified\ + \ managed application. This policy deployment does not support nested resource\ + \ types.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Managed Application\"\ + },\"parameters\":{\"targetManagedApplicationId\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Managed application ID\",\"description\":\"Resource ID\ + \ of the managed application to which resources need to be associated.\"}},\"\ + resourceTypesToAssociate\":{\"type\":\"Array\",\"metadata\":{\"displayName\"\ + :\"Resource types to associate\",\"description\":\"The list of resource types\ + \ to be associated to the managed application.\",\"strongType\":\"resourceTypes\"\ + }},\"associationNamePrefix\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Association name prefix\",\"description\":\"Prefix to be added to the name\ + \ of the association resource being created.\"},\"defaultValue\":\"DeployedByPolicy\"\ + }},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":\"[parameters('resourceTypesToAssociate')]\"\ + },\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.CustomProviders/Associations\"\ + ,\"name\":\"[concat(parameters('associationNamePrefix'), '-', uniqueString(parameters('targetManagedApplicationId')))]\"\ + ,\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"associatedResourceName\"\ + :{\"type\":\"string\"},\"resourceTypesToAssociate\":{\"type\":\"string\"},\"\ + targetManagedApplicationId\":{\"type\":\"string\"},\"associationNamePrefix\"\ + :{\"type\":\"string\"}},\"variables\":{\"resourceType\":\"[concat(parameters('resourceTypesToAssociate'),\ + \ '/providers/associations')]\",\"resourceName\":\"[concat(parameters('associatedResourceName'),\ + \ '/microsoft.customproviders/', parameters('associationNamePrefix'), '-',\ + \ uniqueString(parameters('targetManagedApplicationId')))]\"},\"resources\"\ + :[{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2017-05-10\"\ + ,\"name\":\"[concat(deployment().Name, '-2')]\",\"properties\":{\"mode\":\"\ + Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"resources\":[{\"type\":\"[variables('resourceType')]\"\ + ,\"name\":\"[variables('resourceName')]\",\"apiVersion\":\"2018-09-01-preview\"\ + ,\"properties\":{\"targetResourceId\":\"[parameters('targetManagedApplicationId')]\"\ + }}]}}}]},\"parameters\":{\"resourceTypesToAssociate\":{\"value\":\"[field('type')]\"\ + },\"associatedResourceName\":{\"value\":\"[field('name')]\"},\"targetManagedApplicationId\"\ + :{\"value\":\"[parameters('targetManagedApplicationId')]\"},\"associationNamePrefix\"\ + :{\"value\":\"[parameters('associationNamePrefix')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17763ad9-70c0-4794-9397-53d765932634\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17763ad9-70c0-4794-9397-53d765932634\"\ + },{\"properties\":{\"displayName\":\"Transparent Data Encryption on SQL databases\ + \ should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Transparent data encryption should be enabled to protect data-at-rest and\ + \ meet compliance requirements\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"\ + field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\"\ + :\"name\",\"notEquals\":\"master\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Sql/servers/databases/transparentDataEncryption\"\ + ,\"name\":\"current\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/transparentDataEncryption.status\"\ + ,\"equals\":\"enabled\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17k78e20-9358-41c9-923c-fb736d382a12\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1325 - Authenticator\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Identification and Authentication control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1325\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1845796a-7581-49b2-ae20-443121538e19\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1845796a-7581-49b2-ae20-443121538e19\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1480 - Temperature\ + \ And Humidity Controls\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this Physical and Environmental Protection\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1480\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/18a767cc-1947-4338-a240-bc058c81164f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"18a767cc-1947-4338-a240-bc058c81164f\"\ + },{\"properties\":{\"displayName\":\"Bring your own key data protection should\ + \ be enabled for PostgreSQL servers\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Using customer-managed keys for encrypting\ + \ data at rest in your Azure Database for PostgreSQL database servers enables\ + \ implementing a separation of duties in the management of keys and data.\ + \ When you configure a customer-managed key, the key is used to protect and\ + \ control access to the key that encrypts your data. You have full control\ + \ and responsibility for the key lifecycle, including rotation and management.\ + \ The use of customer-managed keys is sometimes required for compliance purposes.\"\ + ,\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.DBforPostgreSQL/servers/keys\",\"existenceCondition\":{\"allOf\"\ + :[{\"field\":\"Microsoft.DBforPostgreSQL/servers/keys/serverKeyType\",\"equals\"\ + :\"AzureKeyVault\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/keys/uri\"\ + ,\"notEquals\":\"\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/keys/uri\"\ + ,\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"18adea5e-f416-4d0f-8aa8-d24321e3e274\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1369 - Incident\ + \ Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Incident Response control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1369\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/18cc35ed-a429-486d-8d59-cb47e87304ed\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"18cc35ed-a429-486d-8d59-cb47e87304ed\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1269 - Alternate\ + \ Storage Site | Separation From Primary Site\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Contingency\ + \ Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1269\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19b9439d-865d-4474-b17d-97d2702fdb66\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19b9439d-865d-4474-b17d-97d2702fdb66\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'System Audit Policies - Logon-Logoff'\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'System Audit Policies - Logon-Logoff'\ + \ for auditing IPSec, network policy, claims, account lockout, group membership,\ + \ and logon/logoff events. This policy requires that the Guest Configuration\ + \ prerequisites have been deployed to the policy assignment scope. For details,\ + \ visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\"\ + ,\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"\ + ],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\"\ + ,\"version\":\"1.*\",\"configurationParameter\":{\"AuditGroupMembership\"\ + :\"Audit Group Membership;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include Arc connected\ + \ servers\",\"description\":\"By selecting this option, you agree to be charged\ + \ monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"\ + ],\"defaultValue\":\"false\"},\"AuditGroupMembership\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Audit Group Membership\",\"description\"\ + :\"Specifies whether audit events are generated when group memberships are\ + \ enumerated on the client computer.\"},\"allowedValues\":[\"No Auditing\"\ + ,\"Success\",\"Failure\",\"Success and Failure\"],\"defaultValue\":\"Success\"\ + },\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of this policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_SystemAuditPoliciesLogonLogoff\",\"existenceCondition\":{\"\ + allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Audit Group Membership;ExpectedValue', '=',\ + \ parameters('AuditGroupMembership')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19be9779-c776-4dfa-8a15-a2fd5dc843d6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19be9779-c776-4dfa-8a15-a2fd5dc843d6\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1071 - Wireless\ + \ Access | Restrict Configurations By Users\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Access Control\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1071\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1a437f5b-9ad6-4f28-8861-de404d511ae4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1a437f5b-9ad6-4f28-8861-de404d511ae4\"\ + },{\"properties\":{\"displayName\":\"Azure Monitor log profile should collect\ + \ logs for categories 'write,' 'delete,' and 'action'\",\"policyType\":\"\ + BuiltIn\",\"mode\":\"All\",\"description\":\"This policy ensures that a log\ + \ profile collects logs for categories 'write,' 'delete,' and 'action'\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Insights/logprofiles\",\"existenceCondition\":{\"allOf\":[{\"not\"\ + :{\"field\":\"Microsoft.Insights/logProfiles/categories[*]\",\"notEquals\"\ + :\"Write\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/categories[*]\"\ + ,\"notEquals\":\"Delete\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/categories[*]\"\ + ,\"notEquals\":\"Action\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1a4e592a-6a6e-44a5-9814-e36264ca96e7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1a4e592a-6a6e-44a5-9814-e36264ca96e7\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Access to App Services\ + \ should be restricted\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"Azure security center has discovered that the networking configuration\ + \ of some of your app services are overly permissive and allow inbound traffic\ + \ from ranges that are too broad\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Security Center\",\"deprecated\":true},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:\ + \ Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + Disabled\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/complianceResults\",\"name\":\"restrictAccessToAppServices\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\"\ + ,\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1a833ff1-d297-4a0f-9944-888428f8e0ff\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1a833ff1-d297-4a0f-9944-888428f8e0ff\"\ + },{\"properties\":{\"displayName\":\"Vulnerability assessment should be enabled\ + \ on SQL Managed Instance\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Audit each SQL Managed Instance which doesn't have recurring\ + \ vulnerability assessment scans enabled. Vulnerability assessment can discover,\ + \ track, and help you remediate potential database vulnerabilities.\",\"metadata\"\ + :{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Sql/managedInstances/vulnerabilityAssessments\",\"name\":\"default\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Sql/managedInstances/vulnerabilityAssessments/recurringScans.isEnabled\"\ + ,\"equals\":\"True\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1b7aa243-30e4-4c9e-bca8-d0d3022b634a\"\ + },{\"properties\":{\"displayName\":\"Public network access on Azure SQL Database\ + \ should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"\ + description\":\"Disabling the public network access property improves security\ + \ by ensuring your Azure SQL Database can only be accessed from a private\ + \ endpoint. This configuration denies all logins that match IP or virtual\ + \ network based firewall rules.\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"SQL\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"Microsoft.Sql/servers/publicNetworkAccess\"\ + ,\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"\ + /providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1b8ca024-1d5c-4dec-8995-b1a932b41780\"\ + },{\"properties\":{\"displayName\":\"Ensure that 'PHP version' is the latest,\ + \ if used as a part of the Api app\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"Periodically, newer versions are released for\ + \ PHP software either due to security flaws or to include additional functionality.\ + \ Using the latest PHP version for API apps is recommended in order to take\ + \ advantage of security fixes, if any, and/or new functionalities of the latest\ + \ version.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App Service\"\ + },\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"},\"PHPLatestVersion\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Latest PHP version\",\"description\":\"Latest supported\ + \ PHP version for App Services\"},\"defaultValue\":\"7.3\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"\ + },{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"kind\",\"contains\"\ + :\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\"\ + :{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\"\ + :{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\"\ + ,\"notContains\":\"PHP\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\"\ + ,\"equals\":\"[concat('PHP|', parameters('PHPLatestVersion'))]\"}]}}}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba\"\ + },{\"properties\":{\"displayName\":\"Deploy Dependency agent for Windows virtual\ + \ machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Deploy Dependency agent for Windows virtual machines if the VM Image (OS)\ + \ is in the list defined and the agent is not installed. The list of OS images\ + \ will be updated over time as support is updated.\",\"metadata\":{\"version\"\ + :\"1.3.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: List of VM\ + \ images that have supported Windows OS to add to scope\",\"description\"\ + :\"Example value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"\ + },\"defaultValue\":[]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"\ + },{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"\ + MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\"\ + ,\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\"\ + ,\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\"\ + ,\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\"\ + ,\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\"\ + ,\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\"\ + ,\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\"\ + ,\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\"\ + ,\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\"\ + ,\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"\ + *-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\"\ + :\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\"\ + ,\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"\ + roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\ + ],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\"\ + ,\"equals\":\"DependencyAgentWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\"\ + ,\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"\ + Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\"\ + :\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\"\ + ,\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"\ + DependencyAgentWindows\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\"\ + ,\"vmExtensionType\":\"DependencyAgentWindows\",\"vmExtensionTypeHandlerVersion\"\ + :\"9.6\"},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\"\ + ,\"name\":\"[concat(parameters('vmName'), '/', variables('vmExtensionName'))]\"\ + ,\"apiVersion\":\"2018-06-01\",\"location\":\"[parameters('location')]\",\"\ + properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\"\ + :\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\"\ + ,\"autoUpgradeMinorVersion\":true}}],\"outputs\":{\"policy\":{\"type\":\"\ + string\",\"value\":\"[concat('Enabled extension for VM', ': ', parameters('vmName'))]\"\ + }}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\"\ + :{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c210e94-a481-4beb-95fa-1571b434fb04\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c210e94-a481-4beb-95fa-1571b434fb04\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1072 - Wireless\ + \ Access | Antennas / Transmission Power Levels\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Access Control\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1072\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1ca29e41-34ec-4e70-aba9-6248aca18c31\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1ca29e41-34ec-4e70-aba9-6248aca18c31\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1656 - Secure\ + \ Name / Address Resolution Service (Authoritative Source)\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ System and Communications Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1656\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1cb067d5-c8b5-4113-a7ee-0a493633924b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1cb067d5-c8b5-4113-a7ee-0a493633924b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1592 - External\ + \ Information System Services | Consistent Interests Of Consumers And Providers\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this System and Services Acquisition control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1592\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d01ba6c-289f-42fd-a408-494b355b6222\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d01ba6c-289f-42fd-a408-494b355b6222\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1088 - Security\ + \ Awareness And Training Policy And Procedures\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Awareness\ + \ and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1088\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d50f99d-1356-49c0-934a-45f742ba7783\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d50f99d-1356-49c0-934a-45f742ba7783\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Deploy GitOps to Kubernetes\ + \ cluster\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"\ + This policy deploys a 'sourceControlConfiguration' to Kubernetes clusters\ + \ to assure that the clusters get their source of truth from the defined git\ + \ repo. For instructions on using this policy, visit https://aka.ms/K8sGitOpsPolicy.\"\ + ,\"metadata\":{\"preview\":true,\"version\":\"1.0.0-preview\",\"category\"\ + :\"Kubernetes\"},\"parameters\":{\"configurationResourceName\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"[Preview]: Configuration resource\ + \ name\",\"description\":\"The name for the sourceControlConfiguration. Learn\ + \ more about setting up GitOps configuration: https://aka.ms/AzureArcK8sUsingGitOps.\"\ + }},\"operatorInstanceName\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Preview]: Operator instance name\",\"description\":\"The name of the operator\ + \ associated with this configuration. The instance name can contain up to\ + \ 353 lower-case alphanumeric characters, hyphen, or period. If enableHelmOperator\ + \ is true, then operatorInstanceName + operatorNamespace strings cannot exceed\ + \ 47 characters combined.\"}},\"operatorNamespace\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"[Preview]: Operator namespace\",\"description\"\ + :\"The namespace to use for the configuration operator. The namespace can\ + \ contain up to 353 lower-case alphanumeric characters, hyphen, or period.\ + \ If enableHelmOperator is true, then operatorInstanceName + operatorNamespace\ + \ strings cannot exceed 47 characters combined.\"}},\"operatorScope\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: Operator scope\"\ + ,\"description\":\"The permission scope for the operator. Possible values\ + \ are 'cluster' (full access) or 'namespace' (restricted access).\"},\"allowedValues\"\ + :[\"cluster\",\"namespace\"],\"defaultValue\":\"namespace\"},\"operatorType\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: Operator\ + \ type\",\"description\":\"The type of operator to install. Currently, 'Flux'\ + \ is supported.\"},\"allowedValues\":[\"Flux\"],\"defaultValue\":\"Flux\"\ + },\"operatorParams\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"\ + [Preview]: Operator parameters\",\"description\":\"Parameters to set on the\ + \ Flux operator, separated by spaces. For example, --git-readonly --git-path=namespaces,workloads.\ + \ Learn more: http://aka.ms/AzureArcK8sFluxOperatorParams.\"},\"defaultValue\"\ + :\"\"},\"repositoryUrl\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Preview]: Repository Url\",\"description\":\"The URL for the source control\ + \ repository. Private repo: git@github.com:Contoso/cluster-config\"}},\"enableHelmOperator\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: Enable Helm\"\ + ,\"description\":\"Indicate whether to enable Helm for this instance of Flux.\ + \ Learn more: http://aka.ms/AzureArcK8sGitOpsWithHelm.\"},\"allowedValues\"\ + :[\"true\",\"false\"],\"defaultValue\":\"true\"},\"chartVersion\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"[Preview]: Helm chart version\ + \ for installing Flux Helm\",\"description\":\"The version of the Helm chart\ + \ for installing Flux Helm. For example, 0.6.0\"},\"defaultValue\":\"0.6.0\"\ + },\"chartValues\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]:\ + \ Helm chart parameters for installing Flux Helm\",\"description\":\"Parameters\ + \ for the Helm chart for installing Flux Helm, separated by spaces.\"},\"\ + defaultValue\":\"\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"\ + Microsoft.Kubernetes/connectedClusters\",\"Microsoft.ContainerService/managedClusters\"\ + ]},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations\"\ + ,\"name\":\"[parameters('configurationResourceName')]\",\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"deploymentScope\":\"ResourceGroup\",\"existenceCondition\":{\"allOf\"\ + :[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/operatorParams\"\ + ,\"in\":[\"--git-readonly\",\"[parameters('operatorParams')]\",\"[concat('--git-readonly\ + \ ',parameters('operatorParams'))]\"]},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/repositoryUrl\"\ + ,\"equals\":\"[parameters('repositoryUrl')]\"},{\"anyOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\"\ + ,\"equals\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\"\ + ,\"equals\":\"true\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartVersion\"\ + ,\"equals\":\"[parameters('chartVersion')]\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartValues\"\ + ,\"equals\":\"[parameters('chartValues')]\"}]}]}]},\"deployment\":{\"properties\"\ + :{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"configurationResourceName\"\ + :{\"type\":\"string\"},\"clusterLocation\":{\"type\":\"string\"},\"clusterName\"\ + :{\"type\":\"string\"},\"operatorInstanceName\":{\"type\":\"string\"},\"operatorNamespace\"\ + :{\"type\":\"string\"},\"operatorScope\":{\"type\":\"string\"},\"operatorType\"\ + :{\"type\":\"string\"},\"operatorParams\":{\"type\":\"string\"},\"repositoryUrl\"\ + :{\"type\":\"string\"},\"enableHelmOperator\":{\"type\":\"string\"},\"chartVersion\"\ + :{\"type\":\"string\"},\"chartValues\":{\"type\":\"string\"},\"clusterResourceType\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[contains(parameters('clusterResourceType'),\ + \ 'connectedclusters')]\",\"type\":\"Microsoft.Kubernetes/connectedClusters/providers/sourceControlConfigurations\"\ + ,\"name\":\"[concat(parameters('clusterName'), '/Microsoft.KubernetesConfiguration/',\ + \ parameters('configurationResourceName'))]\",\"apiVersion\":\"2019-11-01-preview\"\ + ,\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\"\ + ,\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\"\ + :\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\"\ + ,\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"\ + [parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\"\ + ,\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\"\ + ,\"chartValues\":\"[parameters('chartValues')]\"}}},{\"condition\":\"[contains(parameters('clusterResourceType'),\ + \ 'managedclusters')]\",\"type\":\"Microsoft.ContainerService/managedClusters/providers/sourceControlConfigurations\"\ + ,\"name\":\"[concat(parameters('clusterName'), '/Microsoft.KubernetesConfiguration/',\ + \ parameters('configurationResourceName'))]\",\"apiVersion\":\"2019-11-01-preview\"\ + ,\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\"\ + ,\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\"\ + :\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\"\ + ,\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"\ + [parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\"\ + ,\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\"\ + ,\"chartValues\":\"[parameters('chartValues')]\"}}}]},\"parameters\":{\"clusterLocation\"\ + :{\"value\":\"[field('location')]\"},\"clusterName\":{\"value\":\"[field('name')]\"\ + },\"configurationResourceName\":{\"value\":\"[parameters('configurationResourceName')]\"\ + },\"operatorInstanceName\":{\"value\":\"[parameters('operatorInstanceName')]\"\ + },\"operatorNamespace\":{\"value\":\"[parameters('operatorNamespace')]\"},\"\ + operatorScope\":{\"value\":\"[parameters('operatorScope')]\"},\"operatorType\"\ + :{\"value\":\"[parameters('operatorType')]\"},\"operatorParams\":{\"value\"\ + :\"[parameters('operatorParams')]\"},\"repositoryUrl\":{\"value\":\"[parameters('repositoryUrl')]\"\ + },\"enableHelmOperator\":{\"value\":\"[parameters('enableHelmOperator')]\"\ + },\"chartVersion\":{\"value\":\"[parameters('chartVersion')]\"},\"chartValues\"\ + :{\"value\":\"[parameters('chartValues')]\"},\"clusterResourceType\":{\"value\"\ + :\"[field('type')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d61c4d2-aef2-432b-87fc-7f96b019b7e1\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d61c4d2-aef2-432b-87fc-7f96b019b7e1\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1538 - Security\ + \ Categorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Risk Assessment control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1538\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d7658b2-e827-49c3-a2ae-6d2bd0b45874\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d7658b2-e827-49c3-a2ae-6d2bd0b45874\"\ + },{\"properties\":{\"displayName\":\"Virtual machines should be migrated to\ + \ new Azure Resource Manager resources\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"All\",\"description\":\"Use new Azure Resource Manager for your virtual\ + \ machines to provide security enhancements such as: stronger access control\ + \ (RBAC), better auditing, Azure Resource Manager based deployment and governance,\ + \ access to managed identities, access to key vault for secrets, Azure AD-based\ + \ authentication and support for tags and resource groups for easier security\ + \ management\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"\ + },\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"The effect determines what happens when the\ + \ policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\"\ + ,\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/virtualMachines\"\ + ,\"Microsoft.Compute/virtualMachines\"]},{\"value\":\"[field('type')]\",\"\ + equals\":\"Microsoft.ClassicCompute/virtualMachines\"}]},\"then\":{\"effect\"\ + :\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d84d5fb-01f6-4d12-ba4f-4a26081d403d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1298 - Identification\ + \ And Authentication Policy And Procedures\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Identification\ + \ and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1298\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1dc784b5-4895-4d27-9d40-a06b032bd1ee\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1dc784b5-4895-4d27-9d40-a06b032bd1ee\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Audit API Applications\ + \ that are not using latest supported .NET Framework\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"All\",\"description\":\"Use the latest supported .NET Framework\ + \ version for the latest security classes. Using older classes and types can\ + \ make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Security Center\",\"deprecated\":true},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:\ + \ Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\"\ + ,\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\"\ + :\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\"\ + ,\"name\":\"UseLatestDotNet\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\"\ + ,\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1de7b11d-1870-41a5-8181-507e7c663cfb\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1de7b11d-1870-41a5-8181-507e7c663cfb\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1595 - Developer\ + \ Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this System and Services Acquisition\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1595\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e0414e7-6ef5-4182-8076-aa82fbb53341\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1e0414e7-6ef5-4182-8076-aa82fbb53341\"\ + },{\"properties\":{\"displayName\":\"Require a tag and its value on resources\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforces\ + \ a required tag and its value. Does not apply to resource groups.\",\"metadata\"\ + :{\"version\":\"1.0.1\",\"category\":\"Tags\"},\"parameters\":{\"tagName\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag Name\",\"description\"\ + :\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Tag Value\",\"description\":\"Value of the\ + \ tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\"\ + :\"[concat('tags[', parameters('tagName'), ']')]\",\"equals\":\"[parameters('tagValue')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e30110a-5ceb-460c-a204-c1c3969c6d62\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1e30110a-5ceb-460c-a204-c1c3969c6d62\"\ + },{\"properties\":{\"displayName\":\"Key vault should have soft delete enabled\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deleting\ + \ a key vault without soft delete enabled permanently deletes all secrets,\ + \ keys, and certificates stored in the key vault. Accidental deletion of a\ + \ key vault can lead to permanent data loss. Soft delete allows you to recover\ + \ an accidently deleted key vault for a configurable retention period.\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Key Vault\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/vaults/enableSoftDelete\",\"\ + exists\":\"false\"},{\"field\":\"Microsoft.KeyVault/vaults/enableSoftDelete\"\ + ,\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d\"\ + },{\"properties\":{\"displayName\":\"An Azure Active Directory administrator\ + \ should be provisioned for SQL servers\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Audit provisioning of an Azure Active Directory\ + \ administrator for your SQL server to enable Azure AD authentication. Azure\ + \ AD authentication enables simplified permission management and centralized\ + \ identity management of database users and other Microsoft services\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"\ + description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Sql/servers/administrators\"}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f314764-cb73-4fc9-b863-8eca98ac36e9\"\ + },{\"properties\":{\"displayName\":\"Deploy Diagnostic Settings for Event\ + \ Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"Deploys the diagnostic settings for Event Hub\ + \ to stream to a regional Log Analytics workspace when any Event Hub which\ + \ is missing this diagnostic settings is created or updated.\",\"metadata\"\ + :{\"version\":\"1.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"},\"\ + profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile\ + \ name\",\"description\":\"The diagnostic settings profile name\"},\"defaultValue\"\ + :\"setbypolicy_logAnalytics\"},\"logAnalytics\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Log Analytics workspace\",\"description\":\"Select Log\ + \ Analytics workspace from dropdown list. If this workspace is outside of\ + \ the scope of the assignment you must manually grant 'Log Analytics Contributor'\ + \ permissions (or similar) to the policy assignment's principal ID.\",\"strongType\"\ + :\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Enable metrics\",\"description\"\ + :\"Whether to enable metrics stream to the Log Analytics workspace - True\ + \ or False\"},\"allowedValues\":[\"True\",\"False\"],\"defaultValue\":\"False\"\ + },\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable\ + \ logs\",\"description\":\"Whether to enable logs stream to the Log Analytics\ + \ workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"],\"defaultValue\"\ + :\"True\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\"\ + ,\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"\ + /providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\"\ + ,\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\"\ + :\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\"\ + :\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"\ + type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"\ + resources\":[{\"type\":\"Microsoft.EventHub/namespaces/providers/diagnosticSettings\"\ + ,\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'),\ + \ '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"\ + [parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\"\ + :\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\"\ + ,\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\"\ + :false,\"days\":0}}],\"logs\":[{\"category\":\"ArchiveLogs\",\"enabled\":true,\"\ + retentionPolicy\":{\"enabled\":false,\"days\":0}},{\"category\":\"OperationalLogs\"\ + ,\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"AutoScaleLogs\"\ + ,\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"KafkaCoordinatorLogs\"\ + ,\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"KafkaUserErrorLogs\"\ + ,\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"EventHubVNetConnectionEvent\"\ + ,\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"CustomerManagedKeyUserLogs\"\ + ,\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\"\ + :{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\"\ + :\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"\ + },\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\"\ + :{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"\ + [parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f6e93e8-6b31-41b1-83f6-36e449a42579\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f6e93e8-6b31-41b1-83f6-36e449a42579\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'Security Options - Shutdown'\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy creates a\ + \ Guest Configuration assignment to audit Windows virtual machines with non-compliant\ + \ settings in Group Policy category: 'Security Options - Shutdown'. It also\ + \ creates a system-assigned managed identity and deploys the VM extension\ + \ for Guest Configuration. This policy should only be used along with its\ + \ corresponding audit policy in an initiative. For more information on Guest\ + \ Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\"\ + :{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\",\"\ + requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Shutdown:\ + \ Allow system to be shut down without having to log on\",\"description\"\ + :\"Specifies whether a computer can be shut down when a user is not logged\ + \ on. If this policy setting is enabled, the shutdown command is available\ + \ on the Windows logon screen.\"},\"defaultValue\":\"0\"},\"ShutdownClearVirtualMemoryPagefile\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Shutdown:\ + \ Clear virtual memory pagefile\",\"description\":\"Specifies whether the\ + \ virtual memory pagefile is cleared when the system is shut down. When this\ + \ policy setting is enabled, the system pagefile is cleared each time that\ + \ the system shuts down properly. For systems with large amounts of RAM, this\ + \ could result in substantial time needed to complete the shutdown.\"},\"\ + defaultValue\":\"0\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"\ + field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsShutdown\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Shutdown: Allow system to be shut down without\ + \ having to log on;ExpectedValue', '=', parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn'),\ + \ ',', 'Shutdown: Clear virtual memory pagefile;ExpectedValue', '=', parameters('ShutdownClearVirtualMemoryPagefile')))]\"\ + },\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\"\ + :{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\"\ + :\"AzureBaseline_SecurityOptionsShutdown\"},\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\"\ + :{\"value\":\"[parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn')]\"\ + },\"ShutdownClearVirtualMemoryPagefile\":{\"value\":\"[parameters('ShutdownClearVirtualMemoryPagefile')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\"\ + :{\"type\":\"string\"},\"ShutdownClearVirtualMemoryPagefile\":{\"type\":\"\ + string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Shutdown: Allow\ + \ system to be shut down without having to log on;ExpectedValue\",\"value\"\ + :\"[parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn')]\"},{\"\ + name\":\"Shutdown: Clear virtual memory pagefile;ExpectedValue\",\"value\"\ + :\"[parameters('ShutdownClearVirtualMemoryPagefile')]\"}]}}},{\"condition\"\ + :\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Shutdown: Allow\ + \ system to be shut down without having to log on;ExpectedValue\",\"value\"\ + :\"[parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn')]\"},{\"\ + name\":\"Shutdown: Clear virtual memory pagefile;ExpectedValue\",\"value\"\ + :\"[parameters('ShutdownClearVirtualMemoryPagefile')]\"}]}}},{\"condition\"\ + :\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\"\ + ,\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\"\ + ,\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f8c20ce-3414-4496-8b26-0e902a1541da\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f8c20ce-3414-4496-8b26-0e902a1541da\"\ + },{\"properties\":{\"displayName\":\"Azure Cosmos DB account should use customer-managed\ + \ keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Use customer-managed keys to control the encryption at\ + \ rest of the data stored in Azure Cosmos DB when this is a regulatory or\ + \ compliance requirement. Customer-managed keys also deliver double encryption\ + \ by adding a second layer of encryption on top of the default one done with\ + \ service-managed keys. See https://aka.ms/cosmosdb-cmk\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Cosmos DB\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"The desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\"\ + ,\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/keyVaultKeyUri\",\"exists\"\ + :false},{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"\ + }]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f905d99-2ab7-462c-a6b0-f709acca6c8f\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1616 - System\ + \ And Communications Protection Policy And Procedures\",\"policyType\":\"\ + Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ System and Communications Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1616\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2006457a-48b3-4f7b-8d2e-1532287f9929\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2006457a-48b3-4f7b-8d2e-1532287f9929\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1650 - Public\ + \ Key Infrastructure Certificates\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this System and Communications\ + \ Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1650\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/201d3740-bd16-4baf-b4b8-7cda352228b7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"201d3740-bd16-4baf-b4b8-7cda352228b7\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Web ports should be restricted\ + \ on Network Security Groups associated to your VM\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"All\",\"description\":\"Azure security center has discovered that\ + \ some of your virtual machines are running web applications, and the NSGs\ + \ associated to these virtual machines are overly permissive with regards\ + \ to the web application ports\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Security Center\",\"deprecated\":true},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:\ + \ Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + Disabled\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\"\ + ,\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"\ + unprotectedWebApplication\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\"\ + ,\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/201ea587-7c90-41c3-910f-c280ae01cfd6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"201ea587-7c90-41c3-910f-c280ae01cfd6\"\ + },{\"properties\":{\"displayName\":\"VM Image Builder templates should use\ + \ private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Audit VM Image Builder templates that do not have a virtual network configured.\ + \ When a virtual network is not configured, a public IP is created and used\ + \ instead which may expose resources directly to the internet and increase\ + \ the potential attack surface.\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"VM Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"\ + ],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"\ + field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\"\ + ,\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1181 - Baseline\ + \ Configuration | Retention Of Previous Configurations\",\"policyType\":\"\ + Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1181\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21839937-d241-4fa5-95c6-b669253d9ab9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21839937-d241-4fa5-95c6-b669253d9ab9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1111 - Response\ + \ To Audit Processing Failures\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Audit and Accountability control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1111\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21de687c-f15e-4e51-bf8d-f35c8619965b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21de687c-f15e-4e51-bf8d-f35c8619965b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1596 - Developer\ + \ Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this System and Services Acquisition\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1596\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21e25e01-0ae0-41be-919e-04ce92b8e8b8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21e25e01-0ae0-41be-919e-04ce92b8e8b8\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'Security Options - Audit'\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should only be\ + \ used along with its corresponding deploy policy in an initiative. This definition\ + \ allows Azure Policy to process the results of auditing Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'Security Options\ + \ - Audit'. For more information on Guest Configuration policies, please visit\ + \ https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"\ + category\":\"Guest Configuration\",\"deprecated\":true},\"policyRule\":{\"\ + if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsAudit\",\"existenceCondition\":{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21e2995e-683e-497a-9e81-2f42ad07050a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21e2995e-683e-497a-9e81-2f42ad07050a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1426 - Media\ + \ Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Media Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1426\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21f639bc-f42b-46b1-8f40-7a2a389c291a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21f639bc-f42b-46b1-8f40-7a2a389c291a\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Audit API Apps that are\ + \ not using custom domains\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"\ + description\":\"Use of custom domains protects a API app from common attacks\ + \ such as phishing and other DNS-related attacks.\",\"metadata\":{\"version\"\ + :\"1.0.0-deprecated\",\"category\":\"Security Center\",\"deprecated\":true},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allof\":[{\"\ + field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\"\ + :\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"\ + then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\"\ + ,\"name\":\"UsedCustomDomains\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\"\ + ,\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/224da9fe-0d38-4e79-adb3-0a6e2af942ac\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"224da9fe-0d38-4e79-adb3-0a6e2af942ac\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1399 - Controlled\ + \ Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Maintenance control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1399\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2256e638-eb23-480f-9e15-6cf1af0a76b3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2256e638-eb23-480f-9e15-6cf1af0a76b3\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1221 - Least\ + \ Functionality | Authorized Software / Whitelisting\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Configuration\ + \ Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1221\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/22589a07-0007-486a-86ca-95355081ae2a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"22589a07-0007-486a-86ca-95355081ae2a\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'System Audit Policies - Account Management'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy\ + \ should only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines with non-compliant settings in Group Policy category: 'System\ + \ Audit Policies - Account Management'. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"deprecated\"\ + :true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/225e937e-d32e-4713-ab74-13ce95b3519a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"225e937e-d32e-4713-ab74-13ce95b3519a\"\ + },{\"properties\":{\"displayName\":\"Management ports should be closed on\ + \ your virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"Open remote management ports are exposing your VM to a high level of risk\ + \ from Internet-based attacks. These attacks attempt to brute force credentials\ + \ to gain admin access to the machine.\",\"metadata\":{\"version\":\"2.0.0\"\ + ,\"category\":\"Security Center\"},\"parameters\":{\"effect\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"\ + Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"bc303248-3d14-44c2-96a0-55f5c326b5fe\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"22730e10-96f6-4aac-ad84-9383d35b5917\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1493 - System\ + \ Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Planning control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1493\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/22b469b3-fccf-42da-aa3b-a28e6fb113ce\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"22b469b3-fccf-42da-aa3b-a28e6fb113ce\"\ + },{\"properties\":{\"displayName\":\"Only secure connections to your Azure\ + \ Cache for Redis should be enabled\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Audit enabling of only connections via SSL\ + \ to Azure Cache for Redis. Use of secure connections ensures authentication\ + \ between the server and the service and protects data in transit from network\ + \ layer attacks such as man-in-the-middle, eavesdropping, and session-hijacking\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"The effect determines what happens when the policy rule\ + \ is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"\ + ],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Cache/redis\"},{\"field\":\"Microsoft.Cache/Redis/enableNonSslPort\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"22bee202-a82f-4305-9a2a-6d7f44d4dedb\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs that do not restrict the minimum password length to 14\ + \ characters\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy creates a Guest Configuration assignment to audit Windows virtual\ + \ machines that do not restrict the minimum password length to 14 characters.\ + \ It also creates a system-assigned managed identity and deploys the VM extension\ + \ for Guest Configuration. This policy should only be used along with its\ + \ corresponding audit policy in an initiative. For more information on Guest\ + \ Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\"\ + :{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest Configuration\",\"\ + requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"MinimumPasswordLength\",\"deployment\":{\"properties\":{\"mode\"\ + :\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"MinimumPasswordLength\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/23020aa6-1135-4be2-bae2-149982b06eca\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"23020aa6-1135-4be2-bae2-149982b06eca\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1256 - Contingency\ + \ Plan | Identify Critical Assets\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Contingency Planning\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1256\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/232ab24b-810b-4640-9019-74a7d0d6a980\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"232ab24b-810b-4640-9019-74a7d0d6a980\"\ + },{\"properties\":{\"displayName\":\"Service Bus should use a virtual network\ + \ service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy audits any Service Bus not configured to use a virtual network\ + \ service endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/virtualNetworkRules\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/virtualNetworkRules/virtualNetworkSubnetId\"\ + ,\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/235359c5-7c52-4b82-9055-01c75cf9f60e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"235359c5-7c52-4b82-9055-01c75cf9f60e\"\ + },{\"properties\":{\"displayName\":\"Audit Windows machines that do not have\ + \ a minimum password age of 1 day\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"Requires that prerequisites are deployed to the\ + \ policy assignment scope. For details, visit https://aka.ms/gcpol. Machines\ + \ are non-compliant if Windows machines that do not have a minimum password\ + \ age of 1 day\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\"\ + :\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"MinimumPasswordAge\",\"version\":\"1.*\"}},\"parameters\":{\"\ + IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"\ + Include Arc connected servers\",\"description\":\"By selecting this option,\ + \ you agree to be charged monthly per Arc connected machine.\"},\"allowedValues\"\ + :[\"true\",\"false\"],\"defaultValue\":\"false\"},\"effect\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + MinimumPasswordAge\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/237b38db-ca4d-4259-9e47-7882441ca2c0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"237b38db-ca4d-4259-9e47-7882441ca2c0\"\ + },{\"properties\":{\"displayName\":\"Deploy Diagnostic Settings for Stream\ + \ Analytics to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Deploys the diagnostic settings for Stream\ + \ Analytics to stream to a regional Log Analytics workspace when any Stream\ + \ Analytics which is missing this diagnostic settings is created or updated.\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"\ + },\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile\ + \ name\",\"description\":\"The diagnostic settings profile name\"},\"defaultValue\"\ + :\"setbypolicy_logAnalytics\"},\"logAnalytics\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Log Analytics workspace\",\"description\":\"Select Log\ + \ Analytics workspace from dropdown list. If this workspace is outside of\ + \ the scope of the assignment you must manually grant 'Log Analytics Contributor'\ + \ permissions (or similar) to the policy assignment's principal ID.\",\"strongType\"\ + :\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Enable metrics\",\"description\"\ + :\"Whether to enable metrics stream to the Log Analytics workspace - True\ + \ or False\"},\"allowedValues\":[\"True\",\"False\"],\"defaultValue\":\"False\"\ + },\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable\ + \ logs\",\"description\":\"Whether to enable logs stream to the Log Analytics\ + \ workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"],\"defaultValue\"\ + :\"True\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.StreamAnalytics/streamingjobs\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\"\ + ,\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"\ + /providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\"\ + ,\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\"\ + :\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\"\ + :\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"\ + type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"\ + resources\":[{\"type\":\"Microsoft.StreamAnalytics/streamingjobs/providers/diagnosticSettings\"\ + ,\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'),\ + \ '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"\ + [parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\"\ + :\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\"\ + ,\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\"\ + :false,\"days\":0}}],\"logs\":[{\"category\":\"Execution\",\"enabled\":\"\ + [parameters('logsEnabled')]\"},{\"category\":\"Authoring\",\"enabled\":\"\ + [parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\"\ + :{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"\ + },\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\"\ + :{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\"\ + :\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"\ + }}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/237e0f7e-b0e8-4ec4-ad46-8c12cb66d673\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"237e0f7e-b0e8-4ec4-ad46-8c12cb66d673\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1268 - Alternate\ + \ Storage Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Contingency Planning control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1268\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/23f6e984-3053-4dfc-ab48-543b764781f5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"23f6e984-3053-4dfc-ab48-543b764781f5\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1122 - Audit\ + \ Review, Analysis, And Reporting | Permitted Actions\",\"policyType\":\"\ + Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1122\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/243ec95e-800c-49d4-ba52-1fdd9f6b8b57\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"243ec95e-800c-49d4-ba52-1fdd9f6b8b57\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1231 - Configuration\ + \ Management Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1231\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/244e0c05-cc45-4fe7-bf36-42dcf01f457d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"244e0c05-cc45-4fe7-bf36-42dcf01f457d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1082 - Information\ + \ Sharing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1082\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/24d480ef-11a0-4b1b-8e70-4e023bf2be23\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"24d480ef-11a0-4b1b-8e70-4e023bf2be23\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs that do not have a maximum password age of 70 days\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should only be\ + \ used along with its corresponding deploy policy in an initiative. This definition\ + \ allows Azure Policy to process the results of auditing Windows virtual machines\ + \ that do not have a maximum password age of 70 days. For more information\ + \ on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"\ + metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"MaximumPasswordAge\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/24dde96d-f0b1-425e-884f-4a1421e2dcdc\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"24dde96d-f0b1-425e-884f-4a1421e2dcdc\"\ + },{\"properties\":{\"displayName\":\"Infrastructure encryption should be enabled\ + \ for Azure Database for PostgreSQL servers\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"Indexed\",\"description\":\"Enable infrastructure encryption for\ + \ Azure Database for PostgreSQL servers to have higher level of assurance\ + \ that the data is secure. When infrastructure encryption is enabled, the\ + \ data at rest is encrypted twice using FIPS 140-2 compliant Microsoft managed\ + \ keys\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"\ + },{\"field\":\"Microsoft.DBforPostgreSQL/servers/infrastructureEncryption\"\ + ,\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/24fba194-95d6-48c0-aea7-f65bf859c598\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"24fba194-95d6-48c0-aea7-f65bf859c598\"\ + },{\"properties\":{\"displayName\":\"Deploy Diagnostic Settings for Data Lake\ + \ Storage Gen1 to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"Indexed\",\"description\":\"Deploys the diagnostic settings for Data\ + \ Lake Storage Gen1 to stream to a regional Log Analytics workspace when any\ + \ Data Lake Storage Gen1 which is missing this diagnostic settings is created\ + \ or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"\ + },\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\"\ + :\"DeployIfNotExists\"},\"profileName\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Profile name\",\"description\":\"The diagnostic settings\ + \ profile name\"},\"defaultValue\":\"setbypolicy_logAnalytics\"},\"logAnalytics\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log Analytics workspace\"\ + ,\"description\":\"Select Log Analytics workspace from dropdown list. If this\ + \ workspace is outside of the scope of the assignment you must manually grant\ + \ 'Log Analytics Contributor' permissions (or similar) to the policy assignment's\ + \ principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"\ + metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable\ + \ metrics\",\"description\":\"Whether to enable metrics stream to the Log\ + \ Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"\ + ],\"defaultValue\":\"False\"},\"logsEnabled\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Enable logs\",\"description\":\"Whether to enable logs\ + \ stream to the Log Analytics workspace - True or False\"},\"allowedValues\"\ + :[\"True\",\"False\"],\"defaultValue\":\"True\"}},\"policyRule\":{\"if\":{\"\ + field\":\"type\",\"equals\":\"Microsoft.DataLakeStore/accounts\"},\"then\"\ + :{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\"\ + ,\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\"\ + :[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\"\ + :\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\"\ + ,\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"\ + /providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\"\ + ,\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\"\ + :\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\"\ + :\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"\ + type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"\ + resources\":[{\"type\":\"Microsoft.DataLakeStore/accounts/providers/diagnosticSettings\"\ + ,\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'),\ + \ '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"\ + [parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\"\ + :\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\"\ + ,\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\"\ + :false,\"days\":0}}],\"logs\":[{\"category\":\"Audit\",\"enabled\":\"[parameters('logsEnabled')]\"\ + },{\"category\":\"Requests\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"\ + outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"\ + },\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\"\ + :\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"\ + },\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\"\ + :{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/25763a0a-5783-4f14-969e-79d4933eb74b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"25763a0a-5783-4f14-969e-79d4933eb74b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1372 - Incident\ + \ Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Incident Response control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1372\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/25b96717-c912-4c00-9143-4e487f411726\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"25b96717-c912-4c00-9143-4e487f411726\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1038 - Least\ + \ Privilege | Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Access Control control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1038\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/26692e88-71b7-4a5f-a8ac-9f31dd05bd8e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"26692e88-71b7-4a5f-a8ac-9f31dd05bd8e\"\ + },{\"properties\":{\"displayName\":\"Endpoint protection solution should be\ + \ installed on virtual machine scale sets\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"Indexed\",\"description\":\"Audit the existence and health of an\ + \ endpoint protection solution on your virtual machines scale sets, to protect\ + \ them from threats and vulnerabilities.\",\"metadata\":{\"version\":\"2.0.0\"\ + ,\"category\":\"Security Center\"},\"parameters\":{\"effect\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/assessments\",\"name\":\"e71020c2-860c-3235-cd39-04f3f8c936d2\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"26a828e1-e88f-464e-bbb3-c134a282b9de\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1649 - Collaborative\ + \ Computing Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Communications Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1649\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/26d292cc-b0b8-4c29-9337-68abc758bf7b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"26d292cc-b0b8-4c29-9337-68abc758bf7b\"\ + },{\"properties\":{\"displayName\":\"Metric alert rules should be configured\ + \ on Batch accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Audit configuration of metric alert rules on Batch account to enable the\ + \ required metric\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"\ + },\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"},\"metricName\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Metric name\",\"description\":\"The metric name that an alert rule must\ + \ be enabled on\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Insights/alertRules\",\"existenceScope\"\ + :\"Subscription\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/alertRules/isEnabled\"\ + ,\"equals\":\"true\"},{\"field\":\"Microsoft.Insights/alertRules/condition.dataSource.metricName\"\ + ,\"equals\":\"[parameters('metricName')]\"},{\"field\":\"Microsoft.Insights/alertRules/condition.dataSource.resourceUri\"\ + ,\"equals\":\"[concat('/subscriptions/', subscription().subscriptionId, '/resourcegroups/',\ + \ resourceGroup().name, '/providers/Microsoft.Batch/batchAccounts/', field('name'))]\"\ + }]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/26ee67a2-f81a-4ba8-b9ce-8550bd5ee1a7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"26ee67a2-f81a-4ba8-b9ce-8550bd5ee1a7\"\ + },{\"properties\":{\"displayName\":\"Enable Automanage - Azure virtual machine\ + \ best practices\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Automanage enrolls, configures, and monitors virtual machines with Azure\ + \ VM best practice services. Use this policy to apply Automanage to your selected\ + \ scope.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automanage\"\ + },\"parameters\":{\"automanageAccount\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Automanage account\",\"description\":\"Select Automanage\ + \ account from dropdown list. If this account is outside of the scope of the\ + \ assignment you must manually grant 'Contributor' permissions (or similar)\ + \ on the account to the policy assignment's principal ID.\",\"strongType\"\ + :\"Microsoft.Automanage/accounts\",\"assignPermissions\":true}},\"configurationProfileAssignment\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configuration profile\"\ + ,\"description\":\"The management services provided are based on whether the\ + \ machine is intended to be used in a dev/test environment or production.\"\ + },\"allowedValues\":[\"Azure virtual machine best practices \u2013 Production\"\ + ,\"Azure virtual machine best practices \u2013 Dev/test\"],\"defaultValue\"\ + :\"Azure virtual machine best practices \u2013 Production\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"location\",\"in\":[\"eastus\",\"westus2\"\ + ,\"westcentralus\",\"westeurope\",\"canadacentral\"]},{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\"\ + :{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.Automanage/configurationProfileAssignments\",\"name\"\ + :\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Automanage/configurationProfileAssignments/configurationProfile\"\ + ,\"equals\":\"[parameters('configurationProfileAssignment')]\"},{\"field\"\ + :\"Microsoft.Automanage/configurationProfileAssignments/accountId\",\"equals\"\ + :\"[parameters('automanageAccount')]\"}]},\"deployment\":{\"properties\":{\"\ + mode\":\"incremental\",\"parameters\":{\"machineName\":{\"value\":\"[field('Name')]\"\ + },\"automanageAccount\":{\"value\":\"[parameters('automanageAccount')]\"},\"\ + configurationProfileAssignment\":{\"value\":\"[parameters('configurationProfileAssignment')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"machineName\":{\"type\"\ + :\"String\"},\"automanageAccount\":{\"type\":\"string\"},\"configurationProfileAssignment\"\ + :{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/providers/configurationProfileAssignments\"\ + ,\"apiVersion\":\"2020-06-30-preview\",\"name\":\"[concat(parameters('machineName'),\ + \ '/Microsoft.Automanage/', 'default')]\",\"properties\":{\"configurationProfile\"\ + :\"[parameters('configurationProfileAssignment')]\",\"accountId\":\"[parameters('automanageAccount')]\"\ + }}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/270610db-8c04-438a-a739-e8e6745b22d3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"270610db-8c04-438a-a739-e8e6745b22d3\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1396 - Controlled\ + \ Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Maintenance control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1396\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/276af98f-4ff9-4e69-99fb-c9b2452fb85f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"276af98f-4ff9-4e69-99fb-c9b2452fb85f\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1074 - Access\ + \ Control For Mobile Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Access Control control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1074\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/27a69937-af92-4198-9b86-08d355c7e59a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"27a69937-af92-4198-9b86-08d355c7e59a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1527 - Access\ + \ Agreements\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1527\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2823de66-332f-4bfd-94a3-3eb036cd3b67\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2823de66-332f-4bfd-94a3-3eb036cd3b67\"\ + },{\"properties\":{\"displayName\":\"Deploy default Microsoft IaaSAntimalware\ + \ extension for Windows Server\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"This policy deploys a Microsoft IaaSAntimalware extension\ + \ with a default configuration when a VM is not configured with the antimalware\ + \ extension.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"\ + },\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\"\ + ,\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\"\ + ,\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\"\ + ,\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\"\ + ,\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\"\ + ,\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\"\ + ,\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\"\ + ]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\"\ + ,\"equals\":\"IaaSAntimalware\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\"\ + ,\"equals\":\"Microsoft.Azure.Security\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"ExclusionsPaths\":{\"type\":\"string\"\ + ,\"defaultValue\":\"\",\"metadata\":{\"description\":\"Semicolon delimited\ + \ list of file paths or locations to exclude from scanning\"}},\"ExclusionsExtensions\"\ + :{\"type\":\"string\",\"defaultValue\":\"\",\"metadata\":{\"description\"\ + :\"Semicolon delimited list of file extensions to exclude from scanning\"\ + }},\"ExclusionsProcesses\":{\"type\":\"string\",\"defaultValue\":\"\",\"metadata\"\ + :{\"description\":\"Semicolon delimited list of process names to exclude from\ + \ scanning\"}},\"RealtimeProtectionEnabled\":{\"type\":\"string\",\"defaultValue\"\ + :\"true\",\"metadata\":{\"description\":\"Indicates whether or not real time\ + \ protection is enabled (default is true)\"}},\"ScheduledScanSettingsIsEnabled\"\ + :{\"type\":\"string\",\"defaultValue\":\"false\",\"metadata\":{\"description\"\ + :\"Indicates whether or not custom scheduled scan settings are enabled (default\ + \ is false)\"}},\"ScheduledScanSettingsScanType\":{\"type\":\"string\",\"\ + defaultValue\":\"Quick\",\"metadata\":{\"description\":\"Indicates whether\ + \ scheduled scan setting type is set to Quick or Full (default is Quick)\"\ + }},\"ScheduledScanSettingsDay\":{\"type\":\"string\",\"defaultValue\":\"7\"\ + ,\"metadata\":{\"description\":\"Day of the week for scheduled scan (1-Sunday,\ + \ 2-Monday, ..., 7-Saturday)\"}},\"ScheduledScanSettingsTime\":{\"type\":\"\ + string\",\"defaultValue\":\"120\",\"metadata\":{\"description\":\"When to\ + \ perform the scheduled scan, measured in minutes from midnight (0-1440).\ + \ For example: 0 = 12AM, 60 = 1AM, 120 = 2AM.\"}}},\"resources\":[{\"name\"\ + :\"[concat(parameters('vmName'),'/IaaSAntimalware')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\"\ + ,\"location\":\"[parameters('location')]\",\"apiVersion\":\"2017-12-01\",\"\ + properties\":{\"publisher\":\"Microsoft.Azure.Security\",\"type\":\"IaaSAntimalware\"\ + ,\"typeHandlerVersion\":\"1.3\",\"autoUpgradeMinorVersion\":true,\"settings\"\ + :{\"AntimalwareEnabled\":true,\"RealtimeProtectionEnabled\":\"[parameters('RealtimeProtectionEnabled')]\"\ + ,\"ScheduledScanSettings\":{\"isEnabled\":\"[parameters('ScheduledScanSettingsIsEnabled')]\"\ + ,\"day\":\"[parameters('ScheduledScanSettingsDay')]\",\"time\":\"[parameters('ScheduledScanSettingsTime')]\"\ + ,\"scanType\":\"[parameters('ScheduledScanSettingsScanType')]\"},\"Exclusions\"\ + :{\"Extensions\":\"[parameters('ExclusionsExtensions')]\",\"Paths\":\"[parameters('ExclusionsPaths')]\"\ + ,\"Processes\":\"[parameters('ExclusionsProcesses')]\"}}}}]},\"parameters\"\ + :{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"RealtimeProtectionEnabled\":{\"value\":\"true\"},\"ScheduledScanSettingsIsEnabled\"\ + :{\"value\":\"true\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2835b622-407b-4114-9198-6f7064cbe0dc\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2835b622-407b-4114-9198-6f7064cbe0dc\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1342 - Authenticator\ + \ Management | Hardware Token-Based Authentication\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Identification\ + \ and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1342\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/283a4e29-69d5-4c94-b99e-29acf003c899\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"283a4e29-69d5-4c94-b99e-29acf003c899\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1436 - Media\ + \ Transport\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Media Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1436\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28aab8b4-74fd-4b7c-9080-5a7be525d574\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28aab8b4-74fd-4b7c-9080-5a7be525d574\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1224 - Information\ + \ System Component Inventory | Updates During Installations / Removals\",\"\ + policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements\ + \ this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1224\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28cfa30b-7f72-47ce-ba3b-eed26c8d2c82\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28cfa30b-7f72-47ce-ba3b-eed26c8d2c82\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1148 - Security\ + \ Assessments | Independent Assessors\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Security Assessment\ + \ and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1148\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28e62650-c7c2-4786-bdfa-17edc1673902\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28e62650-c7c2-4786-bdfa-17edc1673902\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1418 - Nonlocal\ + \ Maintenance | Comparable Security / Sanitization\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Maintenance\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1418\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28e633fd-284e-4ea7-88b4-02ca157ed713\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28e633fd-284e-4ea7-88b4-02ca157ed713\"\ + },{\"properties\":{\"displayName\":\"Azure Defender for App Service should\ + \ be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"Azure Defender for App Service leverages the scale of the cloud, and the\ + \ visibility that Azure has as a cloud provider, to monitor for common web\ + \ app attacks.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security\ + \ Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\"\ + ,\"name\":\"AppServices\",\"existenceScope\":\"subscription\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"\ + }}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2913021d-f2fd-4f3d-b958-22354e2bdbcb\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1634 - Boundary\ + \ Protection | Prevent Unauthorized Exfiltration\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this System and\ + \ Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1634\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/292a7c44-37fa-4c68-af7c-9d836955ded2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"292a7c44-37fa-4c68-af7c-9d836955ded2\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'Security Options - User Account Control'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy\ + \ should only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines with non-compliant settings in Group Policy category: 'Security\ + \ Options - User Account Control'. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"deprecated\"\ + :true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsUserAccountControl\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/29829ec2-489d-4925-81b7-bda06b1718e0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"29829ec2-489d-4925-81b7-bda06b1718e0\"\ + },{\"properties\":{\"displayName\":\"Append a tag and its value to resources\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Appends\ + \ the specified tag and value when any resource which is missing this tag\ + \ is created or updated. Does not modify the tags of resources created before\ + \ this policy was applied until those resources are changed. Does not apply\ + \ to resource groups. New 'modify' effect policies are available that support\ + \ remediation of tags on existing resources (see https://aka.ms/modifydoc).\"\ + ,\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Tags\"},\"parameters\"\ + :{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag Name\"\ + ,\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag Value\",\"description\"\ + :\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"\ + field\":\"[concat('tags[', parameters('tagName'), ']')]\",\"exists\":\"false\"\ + },\"then\":{\"effect\":\"append\",\"details\":[{\"field\":\"[concat('tags[',\ + \ parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/2a0e14a6-b0a6-4fab-991a-187a4f81c498\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2a0e14a6-b0a6-4fab-991a-187a4f81c498\"\ + },{\"properties\":{\"displayName\":\"Storage accounts should restrict network\ + \ access using virtual network rules\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Protect your storage accounts from potential\ + \ threats using virtual network rules as a preferred method to IP-based filtering.\ + \ Disallowing IP-based filtering prevents public IPs from accessing your storage\ + \ accounts.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"\ + },\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the audit\ + \ policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\"\ + :\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Storage/storageAccounts\"},{\"anyOf\":[{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.defaultAction\"\ + ,\"notEquals\":\"Deny\"},{\"count\":{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.ipRules[*]\"\ + },\"greaterOrEquals\":1}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2a1a9cdf-e04d-429a-8416-3bfb72a1b26f\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1219 - Least\ + \ Functionality | Authorized Software / Whitelisting\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Configuration\ + \ Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1219\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2a39ac75-622b-4c88-9a3f-45b7373f7ef7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2a39ac75-622b-4c88-9a3f-45b7373f7ef7\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'System Audit Policies - Policy Change'\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'System Audit Policies - Policy Change'\ + \ for auditing changes to system audit policies. This policy requires that\ + \ the Guest Configuration prerequisites have been deployed to the policy assignment\ + \ scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\"\ + :\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"\ + ],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\"\ + ,\"version\":\"1.*\",\"configurationParameter\":{\"AuditAuthenticationPolicyChange\"\ + :\"Audit Authentication Policy Change;ExpectedValue\",\"AuditAuthorizationPolicyChange\"\ + :\"Audit Authorization Policy Change;ExpectedValue\"}}},\"parameters\":{\"\ + IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"\ + Include Arc connected servers\",\"description\":\"By selecting this option,\ + \ you agree to be charged monthly per Arc connected machine.\"},\"allowedValues\"\ + :[\"true\",\"false\"],\"defaultValue\":\"false\"},\"AuditAuthenticationPolicyChange\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit Authentication\ + \ Policy Change\",\"description\":\"Specifies whether audit events are generated\ + \ when changes are made to authentication policy. This setting is useful for\ + \ tracking changes in domain-level and forest-level trust and privileges that\ + \ are granted to user accounts or groups.\"},\"allowedValues\":[\"No Auditing\"\ + ,\"Success\",\"Failure\",\"Success and Failure\"],\"defaultValue\":\"Success\"\ + },\"AuditAuthorizationPolicyChange\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Audit Authorization Policy Change\",\"description\":\"Specifies\ + \ whether audit events are generated for assignment and removal of user rights\ + \ in user right policies, changes in security token object permission, resource\ + \ attributes changes and Central Access Policy changes for file system objects.\"\ + },\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success and\ + \ Failure\"],\"defaultValue\":\"No Auditing\"},\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_SystemAuditPoliciesPolicyChange\",\"existenceCondition\":{\"\ + allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Audit Authentication Policy Change;ExpectedValue',\ + \ '=', parameters('AuditAuthenticationPolicyChange'), ',', 'Audit Authorization\ + \ Policy Change;ExpectedValue', '=', parameters('AuditAuthorizationPolicyChange')))]\"\ + }]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2a7a701e-dff3-4da9-9ec5-42cb98594c0b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2a7a701e-dff3-4da9-9ec5-42cb98594c0b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1274 - Alternate\ + \ Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Contingency Planning control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1274\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2aee175f-cd16-4825-939a-a85349d96210\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2aee175f-cd16-4825-939a-a85349d96210\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1603 - Developer\ + \ Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this System and Services\ + \ Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1603\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2b909c26-162f-47ce-8e15-0c1f55632eac\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2b909c26-162f-47ce-8e15-0c1f55632eac\"\ + },{\"properties\":{\"displayName\":\"Managed identity should be used in your\ + \ Web App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Use a managed identity for enhanced authentication security\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"\ + },{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"\ + existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/managedServiceIdentityId\"\ + ,\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2b9ad585-36bc-4615-b300-fd4435808332\"\ + },{\"properties\":{\"displayName\":\"Cognitive Services accounts should enable\ + \ data encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy audits any Cognitive Services account not using data encryption.\ + \ For each Cognitive Services account with storage, should enable data encryption\ + \ with either customer managed or Microsoft managed key.\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Cognitive Services\"},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"\ + description\":\"The effect determines what happens when the policy rule is\ + \ evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"\ + ],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\"\ + :\"Microsoft.CognitiveServices/accounts/encryption.keySource\",\"exists\"\ + :\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"\ + /providers/Microsoft.Authorization/policyDefinitions/2bdd0062-9d75-436e-89df-487dd8e4b3c7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2bdd0062-9d75-436e-89df-487dd8e4b3c7\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1434 - Media\ + \ Transport\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Media Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1434\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c18f06b-a68d-41c3-8863-b8cd3acb5f8f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c18f06b-a68d-41c3-8863-b8cd3acb5f8f\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1343 - Authenticator\ + \ Management | Expiration Of Cached Authenticators\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Identification\ + \ and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1343\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c251a55-31eb-4e53-99c6-e9c43c393ac2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c251a55-31eb-4e53-99c6-e9c43c393ac2\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1388 - Information\ + \ Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Incident Response control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1388\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c7c575a-d4c5-4f6f-bd49-dee97a8cba55\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c7c575a-d4c5-4f6f-bd49-dee97a8cba55\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1344 - Authenticator\ + \ Feedback\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Identification and Authentication control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1344\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c895fe7-2d8e-43a2-838c-3a533a5b355e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c895fe7-2d8e-43a2-838c-3a533a5b355e\"\ + },{\"properties\":{\"displayName\":\"SSH access from the Internet should be\ + \ blocked\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"\ + This policy audits any network security rule that allows SSH access from Internet\"\ + ,\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Network\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"\ + if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups/securityRules\"\ + },{\"allOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/access\"\ + ,\"equals\":\"Allow\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/direction\"\ + ,\"equals\":\"Inbound\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange\"\ + ,\"equals\":\"*\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange\"\ + ,\"equals\":\"22\"},{\"value\":\"[if(and(not(empty(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'))),\ + \ contains(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'),'-')),\ + \ and(lessOrEquals(int(first(split(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'),\ + \ '-'))),22),greaterOrEquals(int(last(split(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'),\ + \ '-'))),22)), 'false')]\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\"\ + ,\"where\":{\"value\":\"[if(and(not(empty(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')))),\ + \ contains(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')),'-')),\ + \ and(lessOrEquals(int(first(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')),\ + \ '-'))),22),greaterOrEquals(int(last(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')),\ + \ '-'))),22)) , 'false')]\",\"equals\":\"true\"}},\"greater\":0},{\"not\"\ + :{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\"\ + ,\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\"\ + ,\"notEquals\":\"22\"}}]},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\"\ + ,\"equals\":\"*\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\"\ + ,\"equals\":\"Internet\"},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\"\ + ,\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\"\ + ,\"notEquals\":\"Internet\"}}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c89a2e5-7285-40fe-afe0-ae8654b92fab\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c89a2e5-7285-40fe-afe0-ae8654b92fab\"\ + },{\"properties\":{\"displayName\":\"Unattached disks should be encrypted\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ audits any unattached disk without encryption enabled.\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"\ + field\":\"Microsoft.Compute/disks/diskState\",\"equals\":\"Unattached\"},{\"\ + anyOf\":[{\"field\":\"Microsoft.Compute/disks/encryptionSettingsCollection.enabled\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/disks/encryptionSettingsCollection.enabled\"\ + ,\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c89a2e5-7285-40fe-afe0-ae8654b92fb2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c89a2e5-7285-40fe-afe0-ae8654b92fb2\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1593 - External\ + \ Information System Services | Processing, Storage, And Service Location\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this System and Services Acquisition control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1593\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2cd0a426-b5f5-4fe0-9539-a6043cdbc6fa\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2cd0a426-b5f5-4fe0-9539-a6043cdbc6fa\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1546 - Vulnerability\ + \ Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Risk Assessment control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1546\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2ce1ea7e-4038-4e53-82f4-63e8859333c1\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2ce1ea7e-4038-4e53-82f4-63e8859333c1\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1414 - Nonlocal\ + \ Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Maintenance control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1414\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2ce63a52-e47b-4ae2-adbb-6e40d967f9e6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2ce63a52-e47b-4ae2-adbb-6e40d967f9e6\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1679 - Malicious\ + \ Code Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Information Integrity control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1679\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2cf42a28-193e-41c5-98df-7688e7ef0a88\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2cf42a28-193e-41c5-98df-7688e7ef0a88\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1068 - Wireless\ + \ Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1068\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d045bca-a0fd-452e-9f41-4ec33769717c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d045bca-a0fd-452e-9f41-4ec33769717c\"\ + },{\"properties\":{\"displayName\":\"App Service should use a virtual network\ + \ service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy audits any App Service not configured to use a virtual network\ + \ service endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"\ + field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"\ + like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\"\ + :{\"type\":\"Microsoft.Web/sites/virtualNetworkConnections\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Web/sites/virtualnetworkconnections/vnetResourceId\"\ + ,\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d21331d-a4c2-4def-a9ad-ee4e1e023beb\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d21331d-a4c2-4def-a9ad-ee4e1e023beb\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1704 - Security\ + \ Alerts, Advisories, And Directives\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this System and Information\ + \ Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1704\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d44b6fa-1134-4ea6-ad4e-9edb68f65429\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d44b6fa-1134-4ea6-ad4e-9edb68f65429\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs that do not store passwords using reversible encryption\",\"\ + policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should\ + \ only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines that do not store passwords using reversible encryption.\ + \ For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"StorePasswordsUsingReversibleEncryption\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d60d3b7-aa10-454c-88a8-de39d99d17c6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d60d3b7-aa10-454c-88a8-de39d99d17c6\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Linux VMs that allow remote connections from accounts without passwords\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy\ + \ should only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Linux\ + \ virtual machines that allow remote connections from accounts without passwords.\ + \ For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"\ + qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\"\ + ,\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"\ + like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\"\ + ,\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"\ + ]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"\ + field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\"\ + ,\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\"\ + ,\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\"\ + ,\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"\ + cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\"\ + ,\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\"\ + ,\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"\ + ]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"\ + then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"PasswordPolicy_msid110\",\"existenceCondition\":{\"field\":\"\ + Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d67222d-05fd-4526-a171-2ee132ad9e83\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d67222d-05fd-4526-a171-2ee132ad9e83\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1077 - Use\ + \ Of External Information Systems\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Access Control control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1077\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2dad3668-797a-412e-a798-07d3849a7a79\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2dad3668-797a-412e-a798-07d3849a7a79\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1149 - Security\ + \ Assessments | Specialized Assessments\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Security Assessment\ + \ and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1149\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2e1b855b-a013-481a-aeeb-2bcb129fd35d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2e1b855b-a013-481a-aeeb-2bcb129fd35d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1497 - System\ + \ Security Plan | Plan / Coordinate With Other Organizational Entities\",\"\ + policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements\ + \ this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1497\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2e3c5583-1729-4d36-8771-59c32f090a22\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2e3c5583-1729-4d36-8771-59c32f090a22\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1000 - Access\ + \ Control Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Access Control control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1000\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2ef3cc79-733e-48ed-ab6f-7bf439e9b406\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2ef3cc79-733e-48ed-ab6f-7bf439e9b406\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1519 - Personnel\ + \ Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1519\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2f13915a-324c-4ab8-b45c-2eefeeefb098\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2f13915a-324c-4ab8-b45c-2eefeeefb098\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'Security Options - System objects'\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'Security Options - System objects'\ + \ for case insensitivity for non-Windows subsystems and permissions of internal\ + \ system objects. This policy requires that the Guest Configuration prerequisites\ + \ have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"AzureBaseline_SecurityOptionsSystemobjects\",\"version\":\"1.*\"\ + }},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of this policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_SecurityOptionsSystemobjects\",\"existenceCondition\":{\"field\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2f262ace-812a-4fd0-b731-b38ba9e9708d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2f262ace-812a-4fd0-b731-b38ba9e9708d\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Network traffic data collection\ + \ agent should be installed on Windows virtual machines\",\"policyType\":\"\ + BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Security Center uses the\ + \ Microsoft Dependency agent to collect network traffic data from your Azure\ + \ virtual machines to enable advanced network protection features such as\ + \ traffic visualization on the network map, network hardening recommendations\ + \ and specific network threats.\",\"metadata\":{\"version\":\"1.0.1-preview\"\ + ,\"category\":\"Monitoring\",\"preview\":\"true\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: Effect\"\ + ,\"description\":\"Enable or disable Dependency Agent for Windows VMs monitoring\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\"\ + ,\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\"\ + ,\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\"\ + ,\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"\ + 2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\"\ + ,\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\"\ + ,\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\"\ + ,\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\"\ + ,\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\"\ + ,\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"\ + *-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\"\ + :\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"\ + existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\"\ + ,\"equals\":\"DependencyAgentWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\"\ + ,\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"\ + Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\"\ + :\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2f2ee1de-44aa-4762-b6bd-0893fc3f306d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1144 - Security\ + \ Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Security Assessment and Authorization control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1144\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2fa15ff1-a693-4ee4-b094-324818dc9a51\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2fa15ff1-a693-4ee4-b094-324818dc9a51\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1090 - Security\ + \ Awareness Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Awareness and Training control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1090\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2fb740e5-cbc7-4d10-8686-d1bf826652b1\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2fb740e5-cbc7-4d10-8686-d1bf826652b1\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Web Application should\ + \ only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"All\"\ + ,\"description\":\"Use of HTTPS ensures server/service authentication and\ + \ protects data in transit from network layer eavesdropping attacks.\",\"\ + metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security Center\"\ + ,\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Deprecated]: Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\"\ + :{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\"\ + :[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"\ + WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\"\ + ,\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"\ + OnlyHttpsForWebApplication\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\"\ + ,\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2fde8a98-6892-426a-83ba-050e640c0ce0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2fde8a98-6892-426a-83ba-050e640c0ce0\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'Security Options - Network Access'\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should only be\ + \ used along with its corresponding deploy policy in an initiative. This definition\ + \ allows Azure Policy to process the results of auditing Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'Security Options\ + \ - Network Access'. For more information on Guest Configuration policies,\ + \ please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Guest Configuration\",\"deprecated\":true},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsNetworkAccess\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/30040dab-4e75-4456-8273-14b8f75d91d9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"30040dab-4e75-4456-8273-14b8f75d91d9\"\ + },{\"properties\":{\"displayName\":\"Azure Defender for Storage should be\ + \ enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"\ + Azure Defender for Storage provides detections of unusual and potentially\ + \ harmful attempts to access or exploit storage accounts.\",\"metadata\":{\"\ + version\":\"1.0.3\",\"category\":\"Security Center\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/pricings\",\"name\":\"StorageAccounts\",\"existenceScope\"\ + :\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\"\ + ,\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"308fbb08-4ab8-4e67-9b29-592e93fb94fa\"\ + },{\"properties\":{\"displayName\":\"Audit Windows machines missing any of\ + \ specified members in the Administrators group\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Requires that prerequisites are deployed\ + \ to the policy assignment scope. For details, visit https://aka.ms/gcpol.\ + \ Machines are non-compliant if the local Administrators group does not contain\ + \ one or more members that are listed in the policy parameter.\",\"metadata\"\ + :{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\"\ + :[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AdministratorsGroupMembersToInclude\"\ + ,\"version\":\"1.*\",\"configurationParameter\":{\"MembersToInclude\":\"[LocalGroup]AdministratorsGroup;MembersToInclude\"\ + }}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"MembersToInclude\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Members to include\"\ + ,\"description\":\"A semicolon-separated list of members that should be included\ + \ in the Administrators local group. Ex: Administrator; myUser1; myUser2\"\ + }}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"\ + equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"\ + Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\"\ + ,\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\"\ + ,\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AdministratorsGroupMembersToInclude\",\"existenceCondition\":{\"\ + allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;MembersToInclude',\ + \ '=', parameters('MembersToInclude')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs that are not joined to the specified domain\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy creates a\ + \ Guest Configuration assignment to audit Windows virtual machines that are\ + \ not joined to the specified domain. It also creates a system-assigned managed\ + \ identity and deploys the VM extension for Guest Configuration. This policy\ + \ should only be used along with its corresponding audit policy in an initiative.\ + \ For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"DomainName\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Domain Name (FQDN)\",\"description\":\"The fully qualified\ + \ domain name (FQDN) that the Windows VMs should be joined to\"}}},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsDomainMembership\",\"existenceCondition\":{\"field\":\"\ + Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[DomainMembership]WindowsDomainMembership;DomainName',\ + \ '=', parameters('DomainName')))]\"},\"deployment\":{\"properties\":{\"mode\"\ + :\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"WindowsDomainMembership\"\ + },\"DomainName\":{\"value\":\"[parameters('DomainName')]\"}},\"template\"\ + :{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"DomainName\":{\"type\":\"string\"}},\"resources\"\ + :[{\"condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[DomainMembership]WindowsDomainMembership;DomainName\"\ + ,\"value\":\"[parameters('DomainName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[DomainMembership]WindowsDomainMembership;DomainName\"\ + ,\"value\":\"[parameters('DomainName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/315c850a-272d-4502-8935-b79010405970\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"315c850a-272d-4502-8935-b79010405970\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1042 - Least\ + \ Privilege | Auditing Use Of Privileged Functions\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Access Control\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1042\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/319dc4f0-0fed-4ac9-8fc3-7aeddee82c07\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"319dc4f0-0fed-4ac9-8fc3-7aeddee82c07\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1698 - Information\ + \ System Monitoring | Individuals Posing Greater Risk\",\"policyType\":\"\ + Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ System and Information Integrity control\",\"metadata\":{\"version\":\"\ + 1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"\ + /providers/Microsoft.PolicyInsights/policyMetadata/ACF1698\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/31b752c1-05a9-432a-8fce-c39b56550119\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"31b752c1-05a9-432a-8fce-c39b56550119\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Audit Log Analytics Agent\ + \ Deployment - VM Image (OS) unlisted\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Reports VMs as non-compliant if the VM Image\ + \ (OS) is not in the list defined and the agent is not installed. The list\ + \ of OS images will be updated over time as support is updated.\",\"metadata\"\ + :{\"version\":\"1.0.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"\ + parameters\":{\"listOfImageIdToInclude_windows\":{\"type\":\"Array\",\"metadata\"\ + :{\"displayName\":\"[Preview]: Optional: List of VM images that have supported\ + \ Windows OS to add to scope\",\"description\":\"Example value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"\ + },\"defaultValue\":[]},\"listOfImageIdToInclude_linux\":{\"type\":\"Array\"\ + ,\"metadata\":{\"displayName\":\"[Preview]: Optional: List of VM images that\ + \ have supported Linux OS to add to scope\",\"description\":\"Example value:\ + \ '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"\ + },\"defaultValue\":[]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"anyOf\":[{\"\ + anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_windows')]\"\ + },{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_linux')]\"\ + },{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"\ + MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\"\ + ,\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\"\ + ,\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\"\ + ,\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\"\ + ,\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\"\ + ,\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\"\ + ,\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\"\ + ,\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\"\ + ,\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\"\ + ,\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"\ + *-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\"\ + :\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"Windows-10\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\"\ + :[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"\ + SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\"\ + ,\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\"\ + :[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\"\ + ,\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}}]},\"then\"\ + :{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\"\ + ,\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32133ab0-ee4b-4b44-98d6-042180979d50\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32133ab0-ee4b-4b44-98d6-042180979d50\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1587 - External\ + \ Information System Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this System and Services Acquisition\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1587\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32820956-9c6d-4376-934c-05cd8525be7c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32820956-9c6d-4376-934c-05cd8525be7c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1333 - Authenticator\ + \ Management | Pki-Based Authentication\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Identification and\ + \ Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1333\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3298d6bf-4bc6-4278-a95d-f7ef3ac6e594\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3298d6bf-4bc6-4278-a95d-f7ef3ac6e594\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs on which the specified services are not installed and\ + \ 'Running'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy creates a Guest Configuration assignment to audit Windows virtual\ + \ machines on which the specified services are not installed and 'Running'.\ + \ It also creates a system-assigned managed identity and deploys the VM extension\ + \ for Guest Configuration. This policy should only be used along with its\ + \ corresponding audit policy in an initiative. For more information on Guest\ + \ Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\"\ + :{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\",\"\ + requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"ServiceName\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Service names (supports wildcards)\",\"description\":\"A\ + \ semicolon-separated list of the names of the services that should be installed\ + \ and 'Running'. e.g. 'WinRm;Wi*'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsServiceStatus\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[WindowsServiceStatus]WindowsServiceStatus1;ServiceName',\ + \ '=', parameters('ServiceName')))]\"},\"deployment\":{\"properties\":{\"\ + mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"WindowsServiceStatus\"\ + },\"ServiceName\":{\"value\":\"[parameters('ServiceName')]\"}},\"template\"\ + :{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"ServiceName\":{\"type\":\"string\"}},\"resources\"\ + :[{\"condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsServiceStatus]WindowsServiceStatus1;ServiceName\"\ + ,\"value\":\"[parameters('ServiceName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsServiceStatus]WindowsServiceStatus1;ServiceName\"\ + ,\"value\":\"[parameters('ServiceName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32b1e4d4-6cd5-47b4-a935-169da8a5c262\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32b1e4d4-6cd5-47b4-a935-169da8a5c262\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1445 - Physical\ + \ And Environmental Protection Policy And Procedures\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Physical\ + \ and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1445\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32d07d59-2716-4972-b37b-214a67ac4a37\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32d07d59-2716-4972-b37b-214a67ac4a37\"\ + },{\"properties\":{\"displayName\":\"Azure SQL Database should have the minimal\ + \ TLS version of 1.2\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"\ + description\":\"Setting minimal TLS version to 1.2 improves security by ensuring\ + \ your Azure SQL Database can only be accessed from clients using TLS 1.2.\ + \ Using versions of TLS less than 1.2 is not reccomended since they have well\ + \ documented security vunerabilities.\",\"metadata\":{\"version\":\"1.0.1\"\ + ,\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"\ + ],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"anyOf\":[{\"field\":\"\ + Microsoft.Sql/servers/minimalTlsVersion\",\"exists\":false},{\"field\":\"\ + Microsoft.Sql/servers/minimalTlsVersion\",\"notEquals\":\"1.2\"}]}]},\"then\"\ + :{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32e6bbec-16b6-44c2-be37-c5b672d103cf\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32e6bbec-16b6-44c2-be37-c5b672d103cf\"\ + },{\"properties\":{\"displayName\":\"Deploy the Linux Guest Configuration\ + \ extension to enable Guest Configuration assignments on Linux VMs\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy deploys the\ + \ Linux Guest Configuration extension to Linux virtual machines hosted in\ + \ Azure that are supported by Guest Configuration. The Linux Guest Configuration\ + \ extension is a prerequisite for all Linux Guest Configuration assignments\ + \ and must deployed to machines before using any Linux Guest Configuration\ + \ policy definition. For more information on Guest Configuration, visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\"\ + ,\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"\ + paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"\ + like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\"\ + ,\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"\ + ]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"\ + field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\"\ + ,\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\"\ + ,\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\"\ + ,\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"\ + cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\"\ + ,\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\"\ + ,\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"\ + ]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforLinux\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\"\ + ,\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\"\ + ,\"equals\":\"ConfigurationforLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\"\ + ,\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\"\ + ,\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"\ + value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforLinux')]\",\"type\"\ + :\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/331e8ea8-378a-410f-a2e5-ae22f38bb0da\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"331e8ea8-378a-410f-a2e5-ae22f38bb0da\"\ + },{\"properties\":{\"displayName\":\"MySQL server should use a virtual network\ + \ service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Virtual network based firewall rules are used to enable traffic from a\ + \ specific subnet to Azure Database for MySQL while ensuring the traffic stays\ + \ within the Azure boundary. This policy provides a way to audit if the Azure\ + \ Database for MySQL has virtual network service endpoint being used.\",\"\ + metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"\ + description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.DBforMySQL/servers/virtualNetworkRules\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.DBforMySQL/servers/virtualNetworkRules/virtualNetworkSubnetId\"\ + ,\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3375856c-3824-4e0e-ae6a-79e011dd4c47\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3375856c-3824-4e0e-ae6a-79e011dd4c47\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'Security Options - Audit'\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"Windows machines should have the specified Group\ + \ Policy settings in the category 'Security Options - Audit' for forcing audit\ + \ policy subcategory and shutting down if unable to log security audits. This\ + \ policy requires that the Guest Configuration prerequisites have been deployed\ + \ to the policy assignment scope. For details, visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"AzureBaseline_SecurityOptionsAudit\",\"version\":\"1.*\",\"configurationParameter\"\ + :{\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":\"Audit: Shut\ + \ down system immediately if unable to log security audits;ExpectedValue\"\ + }}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit: Shut down system\ + \ immediately if unable to log security audits\",\"description\":\"Audits\ + \ if the system will shut down when unable to log Security events.\"},\"defaultValue\"\ + :\"0\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of this policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_SecurityOptionsAudit\",\"existenceCondition\":{\"allOf\":[{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Audit: Shut down system immediately if unable\ + \ to log security audits;ExpectedValue', '=', parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')))]\"\ + }]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/33936777-f2ac-45aa-82ec-07958ec9ade4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"33936777-f2ac-45aa-82ec-07958ec9ade4\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1282 - Telecommunications\ + \ Services | Single Points Of Failure\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Contingency Planning\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1282\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34042a97-ec6d-4263-93d2-8c1c46823b2a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34042a97-ec6d-4263-93d2-8c1c46823b2a\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Linux VMs that have accounts without passwords\",\"policyType\":\"\ + BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy creates a Guest\ + \ Configuration assignment to audit Linux virtual machines that have accounts\ + \ without passwords. It also creates a system-assigned managed identity and\ + \ deploys the VM extension for Guest Configuration. This policy should only\ + \ be used along with its corresponding audit policy in an initiative. For\ + \ more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\"\ + ,\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"\ + Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"\ + Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\"\ + ,\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"\ + ]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"\ + field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\"\ + ,\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\"\ + ,\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\"\ + ,\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"\ + cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\"\ + ,\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\"\ + ,\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"\ + ]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"\ + then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"PasswordPolicy_msid232\",\"deployment\":{\"properties\":{\"mode\"\ + :\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"PasswordPolicy_msid232\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforLinux')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3470477a-b35a-49db-aca5-1073d04524fe\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3470477a-b35a-49db-aca5-1073d04524fe\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1151 - System\ + \ Interconnections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Security Assessment and Authorization control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1151\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/347e3b69-7fb7-47df-a8ef-71a1a7b44bca\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"347e3b69-7fb7-47df-a8ef-71a1a7b44bca\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1412 - Nonlocal\ + \ Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Maintenance control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1412\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3492d949-0dbb-4589-88b3-7b59601cc764\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3492d949-0dbb-4589-88b3-7b59601cc764\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1475 - Emergency\ + \ Lighting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Physical and Environmental Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1475\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34a63848-30cf-4081-937e-ce1a1c885501\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34a63848-30cf-4081-937e-ce1a1c885501\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1060 - Remote\ + \ Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1060\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34a987fd-2003-45de-a120-014956581f2b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34a987fd-2003-45de-a120-014956581f2b\"\ + },{\"properties\":{\"displayName\":\"Storage accounts should restrict network\ + \ access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Network access to storage accounts should be restricted. Configure network\ + \ rules so only applications from allowed networks can access the storage\ + \ account. To allow connections from specific internet or on-premise clients,\ + \ access can be granted to traffic from specific Azure virtual networks or\ + \ to public internet IP address ranges\",\"metadata\":{\"version\":\"1.1.0\"\ + ,\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The effect determines\ + \ what happens when the policy rule is evaluated to match\"},\"allowedValues\"\ + :[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"\ + },{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.defaultAction\"\ + ,\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34c877ad-507e-4c82-993e-3452a6e0ad3c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1341 - Authenticator\ + \ Management | Multiple Information System Accounts\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Identification\ + \ and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1341\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34cb7e92-fe4c-4826-b51e-8cd203fa5d35\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34cb7e92-fe4c-4826-b51e-8cd203fa5d35\"\ + },{\"properties\":{\"displayName\":\"Diagnostic logs in Logic Apps should\ + \ be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Audit enabling of diagnostic logs. This enables you to recreate activity\ + \ trails to use for investigation purposes; when a security incident occurs\ + \ or when your network is compromised\",\"metadata\":{\"version\":\"3.0.0\"\ + ,\"category\":\"Logic Apps\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"},\"requiredRetentionDays\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required retention (days)\"\ + ,\"description\":\"The required diagnostic logs retention in days\"},\"defaultValue\"\ + :\"365\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Logic/workflows\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\"\ + :{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"\ + anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\"\ + ,\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\"\ + ,\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\"\ + ,\"equals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\"\ + ,\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\"\ + ,\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34f95f76-5386-4de7-b824-0d8478470c9d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1210 - Configuration\ + \ Settings\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1210\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3502c968-c490-4570-8167-1476f955e9b8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3502c968-c490-4570-8167-1476f955e9b8\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs that do not have a maximum password age of 70 days\",\"\ + policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ that do not have a maximum password age of 70 days. It also creates a system-assigned\ + \ managed identity and deploys the VM extension for Guest Configuration. This\ + \ policy should only be used along with its corresponding audit policy in\ + \ an initiative. For more information on Guest Configuration policies, please\ + \ visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\"\ + ,\"category\":\"Guest Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"\ + ],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"\ + field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"MaximumPasswordAge\",\"deployment\":{\"properties\":{\"mode\"\ + :\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"MaximumPasswordAge\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/356a906e-05e5-4625-8729-90771e0ee934\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"356a906e-05e5-4625-8729-90771e0ee934\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'System Audit Policies - Object Access'\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'System Audit Policies - Object Access'\ + \ for auditing file, registry, SAM, storage, filtering, kernel, and other\ + \ system types. This policy requires that the Guest Configuration prerequisites\ + \ have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\",\"version\":\"\ + 1.*\",\"configurationParameter\":{\"AuditDetailedFileShare\":\"Audit Detailed\ + \ File Share;ExpectedValue\",\"AuditFileShare\":\"Audit File Share;ExpectedValue\"\ + ,\"AuditFileSystem\":\"Audit File System;ExpectedValue\"}}},\"parameters\"\ + :{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Include Arc connected servers\",\"description\":\"By selecting this option,\ + \ you agree to be charged monthly per Arc connected machine.\"},\"allowedValues\"\ + :[\"true\",\"false\"],\"defaultValue\":\"false\"},\"AuditDetailedFileShare\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit Detailed File\ + \ Share\",\"description\":\"If this policy setting is enabled, access to all\ + \ shared files and folders on the system is audited. Auditing for Success\ + \ can lead to very high volumes of events.\"},\"allowedValues\":[\"No Auditing\"\ + ,\"Success\",\"Failure\",\"Success and Failure\"],\"defaultValue\":\"No Auditing\"\ + },\"AuditFileShare\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"\ + Audit File Share\",\"description\":\"Specifies whether to audit events related\ + \ to file shares: creation, deletion, modification, and access attempts. Also,\ + \ it shows failed SMB SPN checks. Event volumes can be high on DCs and File\ + \ Servers.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"\ + Success and Failure\"],\"defaultValue\":\"No Auditing\"},\"AuditFileSystem\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit File System\"\ + ,\"description\":\"Specifies whether audit events are generated when users\ + \ attempt to access file system objects. Audit events are generated only for\ + \ objects that have configured system access control lists (SACLs).\"},\"\ + allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success and Failure\"\ + ],\"defaultValue\":\"No Auditing\"},\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_SystemAuditPoliciesObjectAccess\",\"existenceCondition\":{\"\ + allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Audit Detailed File Share;ExpectedValue', '=',\ + \ parameters('AuditDetailedFileShare'), ',', 'Audit File Share;ExpectedValue',\ + \ '=', parameters('AuditFileShare'), ',', 'Audit File System;ExpectedValue',\ + \ '=', parameters('AuditFileSystem')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/35781875-8026-4628-b19b-f6efb4d88a1d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"35781875-8026-4628-b19b-f6efb4d88a1d\"\ + },{\"properties\":{\"displayName\":\"CORS should not allow every resource\ + \ to access your API App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Cross-Origin Resource Sharing (CORS) should not allow all\ + \ domains to access your API app. Allow only required domains to interact\ + \ with your API app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"\ + field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"\ + like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\"\ + :{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\"\ + :\"Microsoft.Web/sites/config/web.cors.allowedOrigins[*]\",\"notEquals\":\"\ + *\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"358c20a6-3f9e-4f0e-97ff-c6ce485e2aac\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1659 - Architecture\ + \ And Provisioning For Name / Address Resolution Service\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ System and Communications Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1659\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/35a4102f-a778-4a2e-98c2-971056288df8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"35a4102f-a778-4a2e-98c2-971056288df8\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'Windows Firewall Properties'\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'Windows Firewall Properties' for\ + \ firewall state, connections, rule management, and notifications. This policy\ + \ requires that the Guest Configuration prerequisites have been deployed to\ + \ the policy assignment scope. For details, visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"AzureBaseline_WindowsFirewallProperties\",\"version\":\"1.*\"\ + ,\"configurationParameter\":{\"WindowsFirewallDomainUseProfileSettings\":\"\ + Windows Firewall: Domain: Firewall state;ExpectedValue\",\"WindowsFirewallDomainBehaviorForOutboundConnections\"\ + :\"Windows Firewall: Domain: Outbound connections;ExpectedValue\",\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\"\ + :\"Windows Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue\"\ + ,\"WindowsFirewallDomainApplyLocalFirewallRules\":\"Windows Firewall: Domain:\ + \ Settings: Apply local firewall rules;ExpectedValue\",\"WindowsFirewallDomainDisplayNotifications\"\ + :\"Windows Firewall: Domain: Settings: Display a notification;ExpectedValue\"\ + ,\"WindowsFirewallPrivateUseProfileSettings\":\"Windows Firewall: Private:\ + \ Firewall state;ExpectedValue\",\"WindowsFirewallPrivateBehaviorForOutboundConnections\"\ + :\"Windows Firewall: Private: Outbound connections;ExpectedValue\",\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\"\ + :\"Windows Firewall: Private: Settings: Apply local connection security rules;ExpectedValue\"\ + ,\"WindowsFirewallPrivateApplyLocalFirewallRules\":\"Windows Firewall: Private:\ + \ Settings: Apply local firewall rules;ExpectedValue\",\"WindowsFirewallPrivateDisplayNotifications\"\ + :\"Windows Firewall: Private: Settings: Display a notification;ExpectedValue\"\ + ,\"WindowsFirewallPublicUseProfileSettings\":\"Windows Firewall: Public: Firewall\ + \ state;ExpectedValue\",\"WindowsFirewallPublicBehaviorForOutboundConnections\"\ + :\"Windows Firewall: Public: Outbound connections;ExpectedValue\",\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\"\ + :\"Windows Firewall: Public: Settings: Apply local connection security rules;ExpectedValue\"\ + ,\"WindowsFirewallPublicApplyLocalFirewallRules\":\"Windows Firewall: Public:\ + \ Settings: Apply local firewall rules;ExpectedValue\",\"WindowsFirewallPublicDisplayNotifications\"\ + :\"Windows Firewall: Public: Settings: Display a notification;ExpectedValue\"\ + ,\"WindowsFirewallDomainAllowUnicastResponse\":\"Windows Firewall: Domain:\ + \ Allow unicast response;ExpectedValue\",\"WindowsFirewallPrivateAllowUnicastResponse\"\ + :\"Windows Firewall: Private: Allow unicast response;ExpectedValue\",\"WindowsFirewallPublicAllowUnicastResponse\"\ + :\"Windows Firewall: Public: Allow unicast response;ExpectedValue\"}}},\"\ + parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"WindowsFirewallDomainUseProfileSettings\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows Firewall (Domain):\ + \ Use profile settings\",\"description\":\"Specifies whether Windows Firewall\ + \ with Advanced Security uses the settings for the Domain profile to filter\ + \ network traffic. If you select Off, Windows Firewall with Advanced Security\ + \ will not use any of the firewall rules or connection security rules for\ + \ this profile.\"},\"defaultValue\":\"1\"},\"WindowsFirewallDomainBehaviorForOutboundConnections\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows Firewall (Domain):\ + \ Behavior for outbound connections\",\"description\":\"Specifies the behavior\ + \ for outbound connections for the Domain profile that do not match an outbound\ + \ firewall rule. The default value of 0 means to allow connections, and a\ + \ value of 1 means to block connections.\"},\"defaultValue\":\"0\"},\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows Firewall (Domain):\ + \ Apply local connection security rules\",\"description\":\"Specifies whether\ + \ local administrators are allowed to create connection security rules that\ + \ apply together with connection security rules configured by Group Policy\ + \ for the Domain profile.\"},\"defaultValue\":\"1\"},\"WindowsFirewallDomainApplyLocalFirewallRules\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows Firewall (Domain):\ + \ Apply local firewall rules\",\"description\":\"Specifies whether local administrators\ + \ are allowed to create local firewall rules that apply together with firewall\ + \ rules configured by Group Policy for the Domain profile.\"},\"defaultValue\"\ + :\"1\"},\"WindowsFirewallDomainDisplayNotifications\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Windows Firewall (Domain): Display notifications\"\ + ,\"description\":\"Specifies whether Windows Firewall with Advanced Security\ + \ displays notifications to the user when a program is blocked from receiving\ + \ inbound connections, for the Domain profile.\"},\"defaultValue\":\"1\"},\"\ + WindowsFirewallPrivateUseProfileSettings\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Windows Firewall (Private): Use profile settings\",\"\ + description\":\"Specifies whether Windows Firewall with Advanced Security\ + \ uses the settings for the Private profile to filter network traffic. If\ + \ you select Off, Windows Firewall with Advanced Security will not use any\ + \ of the firewall rules or connection security rules for this profile.\"},\"\ + defaultValue\":\"1\"},\"WindowsFirewallPrivateBehaviorForOutboundConnections\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows Firewall (Private):\ + \ Behavior for outbound connections\",\"description\":\"Specifies the behavior\ + \ for outbound connections for the Private profile that do not match an outbound\ + \ firewall rule. The default value of 0 means to allow connections, and a\ + \ value of 1 means to block connections.\"},\"defaultValue\":\"0\"},\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows Firewall (Private):\ + \ Apply local connection security rules\",\"description\":\"Specifies whether\ + \ local administrators are allowed to create connection security rules that\ + \ apply together with connection security rules configured by Group Policy\ + \ for the Private profile.\"},\"defaultValue\":\"1\"},\"WindowsFirewallPrivateApplyLocalFirewallRules\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows Firewall (Private):\ + \ Apply local firewall rules\",\"description\":\"Specifies whether local administrators\ + \ are allowed to create local firewall rules that apply together with firewall\ + \ rules configured by Group Policy for the Private profile.\"},\"defaultValue\"\ + :\"1\"},\"WindowsFirewallPrivateDisplayNotifications\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Windows Firewall (Private): Display notifications\"\ + ,\"description\":\"Specifies whether Windows Firewall with Advanced Security\ + \ displays notifications to the user when a program is blocked from receiving\ + \ inbound connections, for the Private profile.\"},\"defaultValue\":\"1\"\ + },\"WindowsFirewallPublicUseProfileSettings\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Windows Firewall (Public): Use profile settings\",\"description\"\ + :\"Specifies whether Windows Firewall with Advanced Security uses the settings\ + \ for the Public profile to filter network traffic. If you select Off, Windows\ + \ Firewall with Advanced Security will not use any of the firewall rules or\ + \ connection security rules for this profile.\"},\"defaultValue\":\"1\"},\"\ + WindowsFirewallPublicBehaviorForOutboundConnections\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Windows Firewall (Public): Behavior for outbound\ + \ connections\",\"description\":\"Specifies the behavior for outbound connections\ + \ for the Public profile that do not match an outbound firewall rule. The\ + \ default value of 0 means to allow connections, and a value of 1 means to\ + \ block connections.\"},\"defaultValue\":\"0\"},\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows Firewall (Public):\ + \ Apply local connection security rules\",\"description\":\"Specifies whether\ + \ local administrators are allowed to create connection security rules that\ + \ apply together with connection security rules configured by Group Policy\ + \ for the Public profile.\"},\"defaultValue\":\"1\"},\"WindowsFirewallPublicApplyLocalFirewallRules\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows Firewall (Public):\ + \ Apply local firewall rules\",\"description\":\"Specifies whether local administrators\ + \ are allowed to create local firewall rules that apply together with firewall\ + \ rules configured by Group Policy for the Public profile.\"},\"defaultValue\"\ + :\"1\"},\"WindowsFirewallPublicDisplayNotifications\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Windows Firewall (Public): Display notifications\"\ + ,\"description\":\"Specifies whether Windows Firewall with Advanced Security\ + \ displays notifications to the user when a program is blocked from receiving\ + \ inbound connections, for the Public profile.\"},\"defaultValue\":\"1\"},\"\ + WindowsFirewallDomainAllowUnicastResponse\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Windows Firewall: Domain: Allow unicast response\",\"\ + description\":\"Specifies whether Windows Firewall with Advanced Security\ + \ permits the local computer to receive unicast responses to its outgoing\ + \ multicast or broadcast messages; for the Domain profile.\"},\"defaultValue\"\ + :\"0\"},\"WindowsFirewallPrivateAllowUnicastResponse\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Windows Firewall: Private: Allow unicast\ + \ response\",\"description\":\"Specifies whether Windows Firewall with Advanced\ + \ Security permits the local computer to receive unicast responses to its\ + \ outgoing multicast or broadcast messages; for the Private profile.\"},\"\ + defaultValue\":\"0\"},\"WindowsFirewallPublicAllowUnicastResponse\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Windows Firewall: Public: Allow\ + \ unicast response\",\"description\":\"Specifies whether Windows Firewall\ + \ with Advanced Security permits the local computer to receive unicast responses\ + \ to its outgoing multicast or broadcast messages; for the Public profile.\"\ + },\"defaultValue\":\"1\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_WindowsFirewallProperties\",\"existenceCondition\":{\"allOf\"\ + :[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Windows Firewall: Domain: Firewall state;ExpectedValue',\ + \ '=', parameters('WindowsFirewallDomainUseProfileSettings'), ',', 'Windows\ + \ Firewall: Domain: Outbound connections;ExpectedValue', '=', parameters('WindowsFirewallDomainBehaviorForOutboundConnections'),\ + \ ',', 'Windows Firewall: Domain: Settings: Apply local connection security\ + \ rules;ExpectedValue', '=', parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules'),\ + \ ',', 'Windows Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue',\ + \ '=', parameters('WindowsFirewallDomainApplyLocalFirewallRules'), ',', 'Windows\ + \ Firewall: Domain: Settings: Display a notification;ExpectedValue', '=',\ + \ parameters('WindowsFirewallDomainDisplayNotifications'), ',', 'Windows Firewall:\ + \ Private: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallPrivateUseProfileSettings'),\ + \ ',', 'Windows Firewall: Private: Outbound connections;ExpectedValue', '=',\ + \ parameters('WindowsFirewallPrivateBehaviorForOutboundConnections'), ',',\ + \ 'Windows Firewall: Private: Settings: Apply local connection security rules;ExpectedValue',\ + \ '=', parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules'),\ + \ ',', 'Windows Firewall: Private: Settings: Apply local firewall rules;ExpectedValue',\ + \ '=', parameters('WindowsFirewallPrivateApplyLocalFirewallRules'), ',', 'Windows\ + \ Firewall: Private: Settings: Display a notification;ExpectedValue', '=',\ + \ parameters('WindowsFirewallPrivateDisplayNotifications'), ',', 'Windows\ + \ Firewall: Public: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallPublicUseProfileSettings'),\ + \ ',', 'Windows Firewall: Public: Outbound connections;ExpectedValue', '=',\ + \ parameters('WindowsFirewallPublicBehaviorForOutboundConnections'), ',',\ + \ 'Windows Firewall: Public: Settings: Apply local connection security rules;ExpectedValue',\ + \ '=', parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules'),\ + \ ',', 'Windows Firewall: Public: Settings: Apply local firewall rules;ExpectedValue',\ + \ '=', parameters('WindowsFirewallPublicApplyLocalFirewallRules'), ',', 'Windows\ + \ Firewall: Public: Settings: Display a notification;ExpectedValue', '=',\ + \ parameters('WindowsFirewallPublicDisplayNotifications'), ',', 'Windows Firewall:\ + \ Domain: Allow unicast response;ExpectedValue', '=', parameters('WindowsFirewallDomainAllowUnicastResponse'),\ + \ ',', 'Windows Firewall: Private: Allow unicast response;ExpectedValue',\ + \ '=', parameters('WindowsFirewallPrivateAllowUnicastResponse'), ',', 'Windows\ + \ Firewall: Public: Allow unicast response;ExpectedValue', '=', parameters('WindowsFirewallPublicAllowUnicastResponse')))]\"\ + }]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/35d9882c-993d-44e6-87d2-db66ce21b636\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"35d9882c-993d-44e6-87d2-db66ce21b636\"\ + },{\"properties\":{\"displayName\":\"Gateway subnets should not be configured\ + \ with a network security group\",\"policyType\":\"BuiltIn\",\"mode\":\"All\"\ + ,\"description\":\"This policy denies if a gateway subnet is configured with\ + \ a network security group. Assigning a network security group to a gateway\ + \ subnet will cause the gateway to stop functioning.\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Network\"},\"parameters\":{},\"policyRule\":{\"\ + if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks/subnets\"\ + },{\"field\":\"name\",\"equals\":\"GatewaySubnet\"},{\"field\":\"Microsoft.Network/virtualNetworks/subnets/networkSecurityGroup.id\"\ + ,\"exists\":\"true\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/35f9c03a-cc27-418e-9c0c-539ff999d010\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"35f9c03a-cc27-418e-9c0c-539ff999d010\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1043 - Least\ + \ Privilege | Prohibit Non-Privileged Users From Executing Privileged Functions\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1043\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/361a77f6-0f9c-4748-8eec-bc13aaaa2455\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"361a77f6-0f9c-4748-8eec-bc13aaaa2455\"\ + },{\"properties\":{\"displayName\":\"Deploy Advanced Threat Protection on\ + \ Storage Accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy enables Advanced Threat Protection on Storage Accounts.\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/advancedThreatProtectionSettings\",\"name\":\"current\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/advancedThreatProtectionSettings/isEnabled\"\ + ,\"equals\":\"true\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"storageAccountName\":{\"\ + type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-01-01\",\"type\"\ + :\"Microsoft.Storage/storageAccounts/providers/advancedThreatProtectionSettings\"\ + ,\"name\":\"[concat(parameters('storageAccountName'), '/Microsoft.Security/current')]\"\ + ,\"properties\":{\"isEnabled\":true}}]},\"parameters\":{\"storageAccountName\"\ + :{\"value\":\"[field('name')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/361c2074-3595-4e5d-8cab-4f21dffc835c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"361c2074-3595-4e5d-8cab-4f21dffc835c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1313 - Identifier\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Identification and Authentication control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1313\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36220f5b-79a1-4cdb-8c74-2d2449f9a510\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36220f5b-79a1-4cdb-8c74-2d2449f9a510\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1630 - Boundary\ + \ Protection | External Telecommunications Services\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this System and\ + \ Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1630\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3643717a-3897-4bfd-8530-c7c96b26b2a0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3643717a-3897-4bfd-8530-c7c96b26b2a0\"\ + },{\"properties\":{\"displayName\":\"Automation account variables should be\ + \ encrypted\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"It is important to enable encryption of Automation account variable assets\ + \ when storing sensitive data\",\"metadata\":{\"version\":\"1.1.0\",\"category\"\ + :\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"The effect determines what\ + \ happens when the policy rule is evaluated to match\"},\"allowedValues\"\ + :[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts/variables\"\ + },{\"field\":\"Microsoft.Automation/automationAccounts/variables/isEncrypted\"\ + ,\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3657f5a0-770e-44a3-b44e-9431ba1e9735\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1339 - Authenticator\ + \ Management | Protection Of Authenticators\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Identification\ + \ and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1339\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/367ae386-db7f-4167-b672-984ff86277c0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"367ae386-db7f-4167-b672-984ff86277c0\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1685 - Information\ + \ System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Information Integrity control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1685\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36b0ef30-366f-4b1b-8652-a3511df11f53\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36b0ef30-366f-4b1b-8652-a3511df11f53\"\ + },{\"properties\":{\"displayName\":\"Deploy Threat Detection on SQL servers\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ ensures that Threat Detection is enabled on SQL Servers.\",\"metadata\"\ + :{\"version\":\"1.1.0\",\"category\":\"SQL\"},\"parameters\":{},\"policyRule\"\ + :{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\"\ + :{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\"\ + ,\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/securityAlertPolicies.state\"\ + ,\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serverName\":{\"type\":\"\ + string\"}},\"variables\":{},\"resources\":[{\"name\":\"[concat(parameters('serverName'),\ + \ '/Default')]\",\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\"\ + ,\"apiVersion\":\"2017-03-01-preview\",\"properties\":{\"state\":\"Enabled\"\ + ,\"emailAccountAdmins\":false}}]},\"parameters\":{\"serverName\":{\"value\"\ + :\"[field('name')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36d49e87-48c4-4f2e-beed-ba4ed02b71f5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36d49e87-48c4-4f2e-beed-ba4ed02b71f5\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'Security Options - Network Security'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'Security Options\ + \ - Network Security'. It also creates a system-assigned managed identity\ + \ and deploys the VM extension for Guest Configuration. This policy should\ + \ only be used along with its corresponding audit policy in an initiative.\ + \ For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Network\ + \ Security: Configure encryption types allowed for Kerberos\",\"description\"\ + :\"Specifies the encryption types that Kerberos is allowed to use.\"},\"defaultValue\"\ + :\"2147483644\"},\"NetworkSecurityLANManagerAuthenticationLevel\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Network security:\ + \ LAN Manager authentication level\",\"description\":\"Specify which challenge-response\ + \ authentication protocol is used for network logons. This choice affects\ + \ the level of authentication protocol used by clients, the level of session\ + \ security negotiated, and the level of authentication accepted by servers.\"\ + },\"defaultValue\":\"5\"},\"NetworkSecurityLDAPClientSigningRequirements\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Network\ + \ security: LDAP client signing requirements\",\"description\":\"Specify the\ + \ level of data signing that is requested on behalf of clients that issue\ + \ LDAP BIND requests.\"},\"defaultValue\":\"1\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Network\ + \ security: Minimum session security for NTLM SSP based (including secure\ + \ RPC) clients\",\"description\":\"Specifies which behaviors are allowed by\ + \ clients for applications using the NTLM Security Support Provider (SSP).\ + \ The SSP Interface (SSPI) is used by applications that need authentication\ + \ services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers\ + \ for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Network\ + \ security: Minimum session security for NTLM SSP based (including secure\ + \ RPC) servers\",\"description\":\"Specifies which behaviors are allowed by\ + \ servers for applications using the NTLM Security Support Provider (SSP).\ + \ The SSP Interface (SSPI) is used by applications that need authentication\ + \ services.\"},\"defaultValue\":\"537395200\"}},\"policyRule\":{\"if\":{\"\ + anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsNetworkSecurity\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Network Security: Configure encryption types\ + \ allowed for Kerberos;ExpectedValue', '=', parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos'),\ + \ ',', 'Network security: LAN Manager authentication level;ExpectedValue',\ + \ '=', parameters('NetworkSecurityLANManagerAuthenticationLevel'), ',', 'Network\ + \ security: LDAP client signing requirements;ExpectedValue', '=', parameters('NetworkSecurityLDAPClientSigningRequirements'),\ + \ ',', 'Network security: Minimum session security for NTLM SSP based (including\ + \ secure RPC) clients;ExpectedValue', '=', parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients'),\ + \ ',', 'Network security: Minimum session security for NTLM SSP based (including\ + \ secure RPC) servers;ExpectedValue', '=', parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')))]\"\ + },\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\"\ + :{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\"\ + :\"AzureBaseline_SecurityOptionsNetworkSecurity\"},\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\"\ + :{\"value\":\"[parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos')]\"\ + },\"NetworkSecurityLANManagerAuthenticationLevel\":{\"value\":\"[parameters('NetworkSecurityLANManagerAuthenticationLevel')]\"\ + },\"NetworkSecurityLDAPClientSigningRequirements\":{\"value\":\"[parameters('NetworkSecurityLDAPClientSigningRequirements')]\"\ + },\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\"\ + :{\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients')]\"\ + },\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\"\ + :{\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\"\ + :{\"type\":\"string\"},\"NetworkSecurityLANManagerAuthenticationLevel\":{\"\ + type\":\"string\"},\"NetworkSecurityLDAPClientSigningRequirements\":{\"type\"\ + :\"string\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\"\ + :{\"type\":\"string\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Network Security:\ + \ Configure encryption types allowed for Kerberos;ExpectedValue\",\"value\"\ + :\"[parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos')]\"\ + },{\"name\":\"Network security: LAN Manager authentication level;ExpectedValue\"\ + ,\"value\":\"[parameters('NetworkSecurityLANManagerAuthenticationLevel')]\"\ + },{\"name\":\"Network security: LDAP client signing requirements;ExpectedValue\"\ + ,\"value\":\"[parameters('NetworkSecurityLDAPClientSigningRequirements')]\"\ + },{\"name\":\"Network security: Minimum session security for NTLM SSP based\ + \ (including secure RPC) clients;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients')]\"\ + },{\"name\":\"Network security: Minimum session security for NTLM SSP based\ + \ (including secure RPC) servers;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Network Security:\ + \ Configure encryption types allowed for Kerberos;ExpectedValue\",\"value\"\ + :\"[parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos')]\"\ + },{\"name\":\"Network security: LAN Manager authentication level;ExpectedValue\"\ + ,\"value\":\"[parameters('NetworkSecurityLANManagerAuthenticationLevel')]\"\ + },{\"name\":\"Network security: LDAP client signing requirements;ExpectedValue\"\ + ,\"value\":\"[parameters('NetworkSecurityLDAPClientSigningRequirements')]\"\ + },{\"name\":\"Network security: Minimum session security for NTLM SSP based\ + \ (including secure RPC) clients;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients')]\"\ + },{\"name\":\"Network security: Minimum session security for NTLM SSP based\ + \ (including secure RPC) servers;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\"\ + ,\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\"\ + ,\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36e17963-7202-494a-80c3-f508211c826b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36e17963-7202-494a-80c3-f508211c826b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1557 - Vulnerability\ + \ Scanning | Review Historic Audit Logs\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Risk Assessment control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1557\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36fbe499-f2f2-41b6-880e-52d7ea1d94a5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36fbe499-f2f2-41b6-880e-52d7ea1d94a5\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'Security Options - Interactive Logon'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'Security Options\ + \ - Interactive Logon'. It also creates a system-assigned managed identity\ + \ and deploys the VM extension for Guest Configuration. This policy should\ + \ only be used along with its corresponding audit policy in an initiative.\ + \ For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsInteractiveLogon\",\"deployment\"\ + :{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"\ + value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\"\ + :\"AzureBaseline_SecurityOptionsInteractiveLogon\"}},\"template\":{\"$schema\"\ + :\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3750712b-43d0-478e-9966-d2c26f6141b9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3750712b-43d0-478e-9966-d2c26f6141b9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1624 - Boundary\ + \ Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Communications Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1624\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/37d079e3-d6aa-4263-a069-dd7ac6dd9684\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"37d079e3-d6aa-4263-a069-dd7ac6dd9684\"\ + },{\"properties\":{\"displayName\":\"Storage accounts should be migrated to\ + \ new Azure Resource Manager resources\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"All\",\"description\":\"Use new Azure Resource Manager for your storage\ + \ accounts to provide security enhancements such as: stronger access control\ + \ (RBAC), better auditing, Azure Resource Manager based deployment and governance,\ + \ access to managed identities, access to key vault for secrets, Azure AD-based\ + \ authentication and support for tags and resource groups for easier security\ + \ management\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"\ + },\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"The effect determines what happens when the\ + \ policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\"\ + ,\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"in\":[\"Microsoft.ClassicStorage/storageAccounts\"\ + ,\"Microsoft.Storage/StorageAccounts\"]},{\"value\":\"[field('type')]\",\"\ + equals\":\"Microsoft.ClassicStorage/storageAccounts\"}]},\"then\":{\"effect\"\ + :\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"37e0d2fe-28a5-43d6-a273-67d37d1f5606\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1335 - Authenticator\ + \ Management | Pki-Based Authentication\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Identification and\ + \ Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1335\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/382016f3-d4ba-4e15-9716-55077ec4dc2a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"382016f3-d4ba-4e15-9716-55077ec4dc2a\"\ + },{\"properties\":{\"displayName\":\"Diagnostic logs in IoT Hub should be\ + \ enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Audit enabling of diagnostic logs. This enables you to recreate activity\ + \ trails to use for investigation purposes; when a security incident occurs\ + \ or when your network is compromised\",\"metadata\":{\"version\":\"2.0.0\"\ + ,\"category\":\"Internet of Things\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"},\"requiredRetentionDays\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required retention (days)\"\ + ,\"description\":\"The required diagnostic logs retention in days\"},\"defaultValue\"\ + :\"365\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\"\ + :{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"\ + anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\"\ + ,\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\"\ + ,\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\"\ + ,\"equals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"true\"}]},{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\"\ + ,\"equals\":\"true\"}},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"true\"}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"383856f8-de7f-44a2-81fc-e5135b5c2aa4\"\ + },{\"properties\":{\"displayName\":\"Deploy the Windows Guest Configuration\ + \ extension to enable Guest Configuration assignments on Windows VMs\",\"\ + policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ deploys the Windows Guest Configuration extension to Windows virtual machines\ + \ hosted in Azure that are supported by Guest Configuration. The Windows Guest\ + \ Configuration extension is a prerequisite for all Windows Guest Configuration\ + \ assignments and must deployed to machines before using any Windows Guest\ + \ Configuration policy definition. For more information on Guest Configuration,\ + \ visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\"\ + ,\"version\":\"1.0.0\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\"\ + :{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforWindows\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\"\ + ,\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\"\ + ,\"equals\":\"ConfigurationforWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\"\ + ,\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\"\ + ,\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"\ + value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/385f5831-96d4-41db-9a3c-cd3af78aaae6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"385f5831-96d4-41db-9a3c-cd3af78aaae6\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1081 - Information\ + \ Sharing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1081\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3867f2a9-23bb-4729-851f-c3ad98580caf\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3867f2a9-23bb-4729-851f-c3ad98580caf\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1522 - Personnel\ + \ Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1522\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38b470cc-f939-4a15-80e0-9f0c74f2e2c9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38b470cc-f939-4a15-80e0-9f0c74f2e2c9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1416 - Nonlocal\ + \ Maintenance | Document Nonlocal Maintenance\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Maintenance\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1416\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38dfd8a3-5290-4099-88b7-4081f4c4d8ae\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38dfd8a3-5290-4099-88b7-4081f4c4d8ae\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1397 - Controlled\ + \ Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Maintenance control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1397\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/391af4ab-1117-46b9-b2c7-78bbd5cd995b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"391af4ab-1117-46b9-b2c7-78bbd5cd995b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1556 - Vulnerability\ + \ Scanning | Automated Trend Analyses\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Risk Assessment control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1556\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/391ff8b3-afed-405e-9f7d-ef2f8168d5da\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"391ff8b3-afed-405e-9f7d-ef2f8168d5da\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Advanced data security\ + \ settings for SQL Managed Instance should contain an email address for security\ + \ alerts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Ensure that an email address is provided for the 'Send alerts to' field\ + \ in the advanced data security settings. This email address receives alert\ + \ notifications when anomalous activities are detected on SQL Managed Instance.\"\ + ,\"metadata\":{\"version\":\"1.0.1-deprecated\",\"category\":\"SQL\",\"deprecated\"\ + :true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"Disabled\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"\ + equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Sql/managedInstances/securityAlertPolicies\"\ + ,\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/emailAddresses[*]\"\ + ,\"notEquals\":\"\"},{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/emailAddresses[*]\"\ + ,\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3965c43d-b5f4-482e-b74a-d89ee0e0b3a8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3965c43d-b5f4-482e-b74a-d89ee0e0b3a8\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1232 - Configuration\ + \ Management Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1232\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/396ba986-eac1-4d6d-85c4-d3fda6b78272\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"396ba986-eac1-4d6d-85c4-d3fda6b78272\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1246 - Contingency\ + \ Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"\ + Microsoft implements this Contingency Planning control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1246\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/398eb61e-8111-40d5-a0c9-003df28f1753\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"398eb61e-8111-40d5-a0c9-003df28f1753\"\ + },{\"properties\":{\"displayName\":\"FTPS only should be required in your\ + \ Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Enable FTPS enforcement for enhanced security\",\"metadata\":{\"version\"\ + :\"2.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"\ + field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"\ + existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/ftpsState\",\"\ + in\":[\"FtpsOnly\",\"Disabled\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"399b2637-a50f-4f95-96f8-3a145476eb15\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1680 - Malicious\ + \ Code Protection | Central Management\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this System and Information\ + \ Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1680\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/399cd6ee-0e18-41db-9dea-cde3bd712f38\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"399cd6ee-0e18-41db-9dea-cde3bd712f38\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1228 - Information\ + \ System Component Inventory | Accountability Information\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1228\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/39c54140-5902-4079-8bb5-ad31936fe764\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"39c54140-5902-4079-8bb5-ad31936fe764\"\ + },{\"properties\":{\"displayName\":\"Infrastructure encryption should be enabled\ + \ for Azure Database for MySQL servers\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Enable infrastructure encryption for Azure\ + \ Database for MySQL servers to have higher level of assurance that the data\ + \ is secure. When infrastructure encryption is enabled, the data at rest is\ + \ encrypted twice using FIPS 140-2 compliant Microsoft managed keys.\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"\ + description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"\ + },{\"field\":\"Microsoft.DBforMySQL/servers/infrastructureEncryption\",\"\ + notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3a58212a-c829-4f13-9872-6371df2fd0b4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3a58212a-c829-4f13-9872-6371df2fd0b4\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1039 - Least\ + \ Privilege | Review Of User Privileges\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Access Control control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1039\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3a7b9de4-a8a2-4672-914d-c5f6752aa7f9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3a7b9de4-a8a2-4672-914d-c5f6752aa7f9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1648 - Collaborative\ + \ Computing Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Communications Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1648\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3a9eb14b-495a-4ebb-933c-ce4ef5264e32\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3a9eb14b-495a-4ebb-933c-ce4ef5264e32\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'Administrative Templates - Control Panel'\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'Administrative Templates - Control\ + \ Panel' for input personalization and prevention of enabling lock screens.\ + \ This policy requires that the Guest Configuration prerequisites have been\ + \ deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"AzureBaseline_AdministrativeTemplatesControlPanel\",\"version\"\ + :\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"Include Arc connected servers\",\"description\"\ + :\"By selecting this option, you agree to be charged monthly per Arc connected\ + \ machine.\"},\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"\ + },\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of this policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_AdministrativeTemplatesControlPanel\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa2661b-02d7-4ba6-99bc-dc36b10489fd\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa2661b-02d7-4ba6-99bc-dc36b10489fd\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1315 - Identifier\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Identification and Authentication control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1315\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa87116-f1a1-4edb-bfbf-14e036f8d454\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa87116-f1a1-4edb-bfbf-14e036f8d454\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Pod Security Policies should\ + \ be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"All\",\"description\":\"Define Pod Security Policies to reduce the attack\ + \ vector by removing unnecessary application privileges. It is recommended\ + \ to configure Pod Security Policies to only allow pods to access the resources\ + \ which they have permissions to access.\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Security Center\",\"deprecated\":true},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:\ + \ Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Disabled\"\ + }},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/enablePodSecurityPolicy\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerService/managedClusters/enablePodSecurityPolicy\"\ + ,\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3abeb944-26af-43ee-b83d-32aaf060fb94\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3abeb944-26af-43ee-b83d-32aaf060fb94\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1548 - Vulnerability\ + \ Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Risk Assessment control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1548\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3afe6c78-6124-4d95-b85c-eb8c0c9539cb\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3afe6c78-6124-4d95-b85c-eb8c0c9539cb\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1266 - Contingency\ + \ Plan Testing | Alternate Processing Site\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Contingency\ + \ Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1266\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3b4a3eb2-c25d-40bf-ad41-5094b6f59cee\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3b4a3eb2-c25d-40bf-ad41-5094b6f59cee\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1003 - Account\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1003\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3b68b179-3704-4ff7-b51d-7d65374d165d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3b68b179-3704-4ff7-b51d-7d65374d165d\"\ + },{\"properties\":{\"displayName\":\"An activity log alert should exist for\ + \ specific Security operations\",\"policyType\":\"BuiltIn\",\"mode\":\"All\"\ + ,\"description\":\"This policy audits specific Security operations with no\ + \ activity log alerts configured.\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"},\"operationName\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Operation Name\",\"description\"\ + :\"Security Operation name for which activity log alert should exist\"},\"\ + allowedValues\":[\"Microsoft.Security/policies/write\",\"Microsoft.Security/securitySolutions/write\"\ + ,\"Microsoft.Security/securitySolutions/delete\"]}},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"\ + }]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.Insights/ActivityLogAlerts\",\"existenceCondition\":{\"allOf\"\ + :[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/enabled\",\"equals\":\"\ + true\"},{\"count\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]\"\ + ,\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\"\ + ,\"equals\":\"category\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\"\ + ,\"equals\":\"Security\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\"\ + ,\"equals\":\"operationName\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\"\ + ,\"equals\":\"[parameters('operationName')]\"}]}]}},\"equals\":2},{\"not\"\ + :{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\"\ + ,\"equals\":\"category\"}},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\"\ + ,\"equals\":\"operationName\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3b980d31-7904-4bb7-8575-5665739a8052\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3b980d31-7904-4bb7-8575-5665739a8052\"\ + },{\"properties\":{\"displayName\":\"Deploy Dependency agent for Windows virtual\ + \ machine scale sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"\ + description\":\"Deploy Dependency agent for Windows virtual machine scale\ + \ sets if the VM Image (OS) is in the list defined and the agent is not installed.\ + \ The list of OS images will be updated over time as support is updated. Note:\ + \ if your scale set upgradePolicy is set to Manual, you need to apply the\ + \ extension to the all virtual machines in the set by calling upgrade on them.\ + \ In CLI this would be az vmss update-instances.\",\"metadata\":{\"version\"\ + :\"1.3.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: List of VM\ + \ images that have supported Windows OS to add to scope\",\"description\"\ + :\"Example value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"\ + },\"defaultValue\":[]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"\ + },{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"\ + MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\"\ + ,\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\"\ + ,\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\"\ + ,\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\"\ + ,\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\"\ + ,\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\"\ + ,\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\"\ + ,\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\"\ + ,\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\"\ + ,\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"\ + *-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\"\ + :\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\"\ + ,\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\"\ + ,\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"\ + ],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\"\ + ,\"equals\":\"DependencyAgentWindows\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\"\ + ,\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"}]},\"deployment\"\ + :{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"\ + DependencyAgentWindows\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\"\ + ,\"vmExtensionType\":\"DependencyAgentWindows\",\"vmExtensionTypeHandlerVersion\"\ + :\"9.7\"},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\"\ + ,\"name\":\"[concat(parameters('vmName'), '/', variables('vmExtensionName'))]\"\ + ,\"apiVersion\":\"2018-06-01\",\"location\":\"[parameters('location')]\",\"\ + properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\"\ + :\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\"\ + ,\"autoUpgradeMinorVersion\":true}}],\"outputs\":{\"policy\":{\"type\":\"\ + string\",\"value\":\"[concat('Enabled extension for: ', parameters('vmName'))]\"\ + }}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\"\ + :{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3be22e3b-d919-47aa-805e-8985dbeb0ad9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3be22e3b-d919-47aa-805e-8985dbeb0ad9\"\ + },{\"properties\":{\"displayName\":\"PostgreSQL server should use a virtual\ + \ network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Virtual network based firewall rules are used to enable\ + \ traffic from a specific subnet to Azure Database for PostgreSQL while ensuring\ + \ the traffic stays within the Azure boundary. This policy provides a way\ + \ to audit if the Azure Database for PostgreSQL has virtual network service\ + \ endpoint being used.\",\"metadata\":{\"version\":\"1.0.2\",\"category\"\ + :\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/virtualNetworkRules\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/virtualNetworkRules/virtualNetworkSubnetId\"\ + ,\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3c14b034-bcb6-4905-94e7-5b8e98a47b65\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3c14b034-bcb6-4905-94e7-5b8e98a47b65\"\ + },{\"properties\":{\"displayName\":\"Deploy Log Analytics agent for Windows\ + \ virtual machine scale sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Deploy Log Analytics agent for Windows virtual machine\ + \ scale sets if the VM Image (OS) is in the list defined and the agent is\ + \ not installed. The list of OS images will be updated over time as support\ + \ is updated. Note: if your scale set upgradePolicy is set to Manual, you\ + \ need to apply the extension to the all VMs in the set by calling upgrade\ + \ on them. In CLI this would be az vmss update-instances.\",\"metadata\":{\"\ + version\":\"1.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalytics\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log Analytics workspace\"\ + ,\"description\":\"Select Log Analytics workspace from dropdown list. If this\ + \ workspace is outside of the scope of the assignment you must manually grant\ + \ 'Log Analytics Contributor' permissions (or similar) to the policy assignment's\ + \ principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"\ + listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\"\ + :\"Optional: List of VM images that have supported Windows OS to add to scope\"\ + ,\"description\":\"Example value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"\ + },\"defaultValue\":[]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"\ + },{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"\ + MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\"\ + ,\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\"\ + ,\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\"\ + ,\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\"\ + ,\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\"\ + ,\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\"\ + ,\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\"\ + ,\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\"\ + ,\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\"\ + ,\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"\ + *-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\"\ + :\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\"\ + ,\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\"\ + ,\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\ + ,\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"\ + ],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\"\ + ,\"equals\":\"MicrosoftMonitoringAgent\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\"\ + ,\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}]},\"deployment\":{\"\ + properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"\ + }},\"variables\":{\"vmExtensionName\":\"MicrosoftMonitoringAgent\",\"vmExtensionPublisher\"\ + :\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"MicrosoftMonitoringAgent\"\ + ,\"vmExtensionTypeHandlerVersion\":\"1.0\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'),\ + \ '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\"\ + ,\"location\":\"[parameters('location')]\",\"apiVersion\":\"2018-06-01\",\"\ + properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\"\ + :\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\"\ + ,\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'),\ + \ '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\"\ + :{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), '2015-03-20').primarySharedKey]\"\ + }}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled\ + \ extension for: ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\"\ + :{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/3c1b3629-c8f8-4bf6-862c-037cb9094038\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3c1b3629-c8f8-4bf6-862c-037cb9094038\"\ + },{\"properties\":{\"displayName\":\"Vulnerabilities in security configuration\ + \ on your virtual machine scale sets should be remediated\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit the OS vulnerabilities\ + \ on your virtual machine scale sets to protect them from attacks.\",\"metadata\"\ + :{\"version\":\"2.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"\ + description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/assessments\",\"name\":\"8941d121-f740-35f6-952c-6561d2b38d36\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1621 - Resource\ + \ Availability\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Communications Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1621\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3cb9f731-744a-4691-a481-ca77b0411538\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3cb9f731-744a-4691-a481-ca77b0411538\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1521 - Personnel\ + \ Termination | Automated Notification\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Personnel Security\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1521\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3cbddf9c-a3aa-4330-a0f5-4c0c1f1862e5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3cbddf9c-a3aa-4330-a0f5-4c0c1f1862e5\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1127 - Time\ + \ Stamps\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Audit and Accountability control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1127\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3ce328db-aef3-48ed-9f81-2ab7cf839c66\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3ce328db-aef3-48ed-9f81-2ab7cf839c66\"\ + },{\"properties\":{\"displayName\":\"Add system-assigned managed identity\ + \ to enable Guest Configuration assignments on virtual machines with no identities\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ adds a system-assigned managed identity to virtual machines hosted in Azure\ + \ that are supported by Guest Configuration but do not have any managed identities.\ + \ A system-assigned managed identity is a prerequisite for all Guest Configuration\ + \ assignments and must be added to machines before using any Guest Configuration\ + \ policy definitions. For more information on Guest Configuration, visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\"\ + ,\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"\ + Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"\ + Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\"\ + ,\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"\ + ]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"\ + field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\"\ + ,\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\"\ + ,\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\"\ + ,\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"\ + cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\"\ + ,\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\"\ + ,\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"\ + ]}]}]}]}]},{\"value\":\"[requestContext().apiVersion]\",\"greaterOrEquals\"\ + :\"2018-10-01\"},{\"anyOf\":[{\"field\":\"identity.type\",\"exists\":\"false\"\ + },{\"field\":\"identity.type\",\"equals\":\"None\"}]}]},\"then\":{\"effect\"\ + :\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"identity.type\"\ + ,\"value\":\"SystemAssigned\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3cf2ab00-13f1-4d0c-8971-2ac904541a7e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3cf2ab00-13f1-4d0c-8971-2ac904541a7e\"\ + },{\"properties\":{\"displayName\":\"Audit Windows machines that have extra\ + \ accounts in the Administrators group\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Requires that prerequisites are deployed to\ + \ the policy assignment scope. For details, visit https://aka.ms/gcpol. Machines\ + \ are non-compliant if the local Administrators group contains members that\ + \ are not listed in the policy parameter.\",\"metadata\":{\"category\":\"\ + Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"\ + ],\"guestConfiguration\":{\"name\":\"AdministratorsGroupMembers\",\"version\"\ + :\"1.*\",\"configurationParameter\":{\"Members\":\"[LocalGroup]AdministratorsGroup;Members\"\ + }}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"Members\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Members\",\"description\"\ + :\"A semicolon-separated list of all the expected members of the Administrators\ + \ local group. Ex: Administrator; myUser1; myUser2\"},\"allowedValues\":[],\"\ + defaultValue\":\"Administrator\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AdministratorsGroupMembers\",\"existenceCondition\":{\"allOf\"\ + :[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;Members', '=',\ + \ parameters('Members')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d2a3320-2a72-4c67-ac5f-caa40fbee2b2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d2a3320-2a72-4c67-ac5f-caa40fbee2b2\"\ + },{\"properties\":{\"displayName\":\"Deploy Diagnostic Settings for Search\ + \ Services to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Deploys the diagnostic settings for Search Services to\ + \ stream to a regional Event Hub when any Search Services which is missing\ + \ this diagnostic settings is created or updated.\",\"metadata\":{\"version\"\ + :\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"},\"profileName\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Profile name\",\"description\"\ + :\"The diagnostic settings profile name\"},\"defaultValue\":\"setbypolicy_eventHub\"\ + },\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"\ + Event Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization\ + \ rule Id for Azure Diagnostics. The authorization rule needs to be at Event\ + \ Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource\ + \ group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization\ + \ rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\"\ + ,\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"Event Hub Location\",\"description\":\"The location\ + \ the Event Hub resides in. Only Search Services in this location will be\ + \ linked to this Event Hub.\",\"strongType\":\"location\"},\"defaultValue\"\ + :\"\"},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Enable metrics\",\"description\":\"Whether to enable metrics stream to\ + \ the Event Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"],\"\ + defaultValue\":\"False\"},\"logsEnabled\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Enable logs\",\"description\":\"Whether to enable logs\ + \ stream to the Event Hub - True or False\"},\"allowedValues\":[\"True\"\ + ,\"False\"],\"defaultValue\":\"True\"}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"\ + anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"\ + field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"\ + then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\"\ + ,\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\"\ + :[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\"\ + :\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\"\ + ,\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"\ + /providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\"\ + :\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\"\ + :\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"\ + type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"\ + resources\":[{\"type\":\"Microsoft.Search/searchServices/providers/diagnosticSettings\"\ + ,\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'),\ + \ '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"\ + [parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\"\ + :\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\"\ + ,\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\"\ + :false,\"days\":0}}],\"logs\":[{\"category\":\"OperationLogs\",\"enabled\"\ + :\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\"\ + :{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"\ + },\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\"\ + :{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\"\ + :\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"\ + }}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d5da587-71bd-41f5-ac95-dd3330c2d58d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d5da587-71bd-41f5-ac95-dd3330c2d58d\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'Security Options - Devices'\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should only be\ + \ used along with its corresponding deploy policy in an initiative. This definition\ + \ allows Azure Policy to process the results of auditing Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'Security Options\ + \ - Devices'. For more information on Guest Configuration policies, please\ + \ visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Guest Configuration\",\"deprecated\":true},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsDevices\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d7b154e-2700-4c8c-9e46-cb65ac1578c2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d7b154e-2700-4c8c-9e46-cb65ac1578c2\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy default Log Analytics\ + \ Agent for Ubuntu VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"\ + description\":\"This policy deploys the Log Analytics Agent on Ubuntu VMs,\ + \ and connects to the selected Log Analytics workspace\",\"metadata\":{\"\ + version\":\"1.0.0-deprecated\",\"category\":\"Compute\",\"deprecated\":true},\"\ + parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Log Analytics workspace\",\"description\":\"Select Log Analytics\ + \ workspace from dropdown list. If this workspace is outside of the scope\ + \ of the assignment you must manually grant 'Log Analytics Contributor' permissions\ + \ (or similar) to the policy assignment's principal ID.\",\"strongType\":\"\ + omsWorkspace\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"\ + equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"\ + equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\"\ + :[\"18.04-LTS\",\"16.04-LTS\",\"16.04.0-LTS\",\"14.04.2-LTS\",\"12.04.5-LTS\"\ + ]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\"\ + ,\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\"\ + ,\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}]},\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"\ + }},\"resources\":[{\"name\":\"[concat(parameters('vmName'),'/omsPolicy')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"apiVersion\":\"2017-12-01\",\"properties\":{\"\ + publisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"type\":\"OmsAgentForLinux\"\ + ,\"typeHandlerVersion\":\"1.4\",\"autoUpgradeMinorVersion\":true,\"settings\"\ + :{\"workspaceId\":\"[reference(parameters('logAnalytics'), '2015-03-20').customerId]\"\ + },\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'),\ + \ '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\"\ + :\"string\",\"value\":\"[concat('Enabled monitoring for Linux VM', ': ', parameters('vmName'))]\"\ + }}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\"\ + :{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"\ + }}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d8640fc-63f6-4734-8dcb-cfd3d8c78f38\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d8640fc-63f6-4734-8dcb-cfd3d8c78f38\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1385 - Information\ + \ Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Incident Response control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1385\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3e495e65-8663-49ca-9b38-9f45e800bc58\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3e495e65-8663-49ca-9b38-9f45e800bc58\"\ + },{\"properties\":{\"displayName\":\"Audit Windows machines that do not have\ + \ the specified Windows PowerShell modules installed\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Requires that prerequisites are deployed\ + \ to the policy assignment scope. For details, visit https://aka.ms/gcpol.\ + \ Machines are non-compliant if a module isn't available in a location specified\ + \ by the environment variable PSModulePath.\",\"metadata\":{\"category\":\"\ + Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"\ + ],\"guestConfiguration\":{\"name\":\"WindowsPowerShellModules\",\"version\"\ + :\"1.*\",\"configurationParameter\":{\"Modules\":\"[PowerShellModules]PowerShellModules1;Modules\"\ + }}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"Modules\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"PowerShell Modules\"\ + ,\"description\":\"A semicolon-separated list of the names of the PowerShell\ + \ modules that should be installed. You may also specify a specific version\ + \ of a module that should be installed by including a comma after the module\ + \ name, followed by the desired version. Example: PSDscResources; SqlServerDsc,\ + \ 12.0.0.0; ComputerManagementDsc, 6.1.0.0\"}},\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + WindowsPowerShellModules\",\"existenceCondition\":{\"allOf\":[{\"field\":\"\ + Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[PowerShellModules]PowerShellModules1;Modules',\ + \ '=', parameters('Modules')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3e4e2bd5-15a2-4628-b3e1-58977e9793f3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3e4e2bd5-15a2-4628-b3e1-58977e9793f3\"\ + },{\"properties\":{\"displayName\":\"Azure Monitor solution 'Security and\ + \ Audit' must be deployed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"\ + description\":\"This policy ensures that Security and Audit is deployed.\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.OperationsManagement/solutions\",\"existenceCondition\":{\"allOf\"\ + :[{\"field\":\"Microsoft.OperationsManagement/solutions/provisioningState\"\ + ,\"equals\":\"Succeeded\"},{\"field\":\"name\",\"like\":\"Security(*)\"}]}}}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/3e596b57-105f-48a6-be97-03e9243bad6e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3e596b57-105f-48a6-be97-03e9243bad6e\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1160 - Security\ + \ Authorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Security Assessment and Authorization control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1160\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3e797ca6-2aa8-4333-b335-7036f1110c05\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3e797ca6-2aa8-4333-b335-7036f1110c05\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1545 - Risk\ + \ Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Risk Assessment control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1545\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3f4b171a-a56b-4328-8112-32cf7f947ee1\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3f4b171a-a56b-4328-8112-32cf7f947ee1\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1179 - Baseline\ + \ Configuration | Reviews And Updates\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Configuration Management\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1179\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3f9ce557-c8ab-4e6c-bb2c-9b8ed002c46c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3f9ce557-c8ab-4e6c-bb2c-9b8ed002c46c\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Audit API Applications\ + \ that are not using latest supported PHP Framework\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"All\",\"description\":\"Use the latest supported PHP version for\ + \ the latest security classes. Using older classes and types can make your\ + \ application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Security Center\",\"deprecated\":true},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:\ + \ Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\"\ + ,\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\"\ + :\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\"\ + ,\"name\":\"UseLatestPHP\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\"\ + ,\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3fe37002-5d00-4b37-a301-da09e3a0ca66\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3fe37002-5d00-4b37-a301-da09e3a0ca66\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'Security Options - Network Access'\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'Security Options - Network Access'\ + \ for including access for anonymous users, local accounts, and remote access\ + \ to the registry. This policy requires that the Guest Configuration prerequisites\ + \ have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"AzureBaseline_SecurityOptionsNetworkAccess\",\"version\":\"1.*\"\ + ,\"configurationParameter\":{\"NetworkAccessRemotelyAccessibleRegistryPaths\"\ + :\"Network access: Remotely accessible registry paths;ExpectedValue\",\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\"\ + :\"Network access: Remotely accessible registry paths and sub-paths;ExpectedValue\"\ + ,\"NetworkAccessSharesThatCanBeAccessedAnonymously\":\"Network access: Shares\ + \ that can be accessed anonymously;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include Arc connected\ + \ servers\",\"description\":\"By selecting this option, you agree to be charged\ + \ monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"\ + ],\"defaultValue\":\"false\"},\"NetworkAccessRemotelyAccessibleRegistryPaths\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network access: Remotely\ + \ accessible registry paths\",\"description\":\"Specifies which registry paths\ + \ will be accessible over the network, regardless of the users or groups listed\ + \ in the access control list (ACL) of the `winreg` registry key.\"},\"defaultValue\"\ + :\"System\\\\CurrentControlSet\\\\Control\\\\ProductOptions|#|System\\\\CurrentControlSet\\\ + \\Control\\\\Server Applications|#|Software\\\\Microsoft\\\\Windows NT\\\\\ + CurrentVersion\"},\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network access: Remotely\ + \ accessible registry paths and sub-paths\",\"description\":\"Specifies which\ + \ registry paths and sub-paths will be accessible over the network, regardless\ + \ of the users or groups listed in the access control list (ACL) of the `winreg`\ + \ registry key.\"},\"defaultValue\":\"System\\\\CurrentControlSet\\\\Control\\\ + \\Print\\\\Printers|#|System\\\\CurrentControlSet\\\\Services\\\\Eventlog|#|Software\\\ + \\Microsoft\\\\OLAP Server|#|Software\\\\Microsoft\\\\Windows NT\\\\CurrentVersion\\\ + \\Print|#|Software\\\\Microsoft\\\\Windows NT\\\\CurrentVersion\\\\Windows|#|System\\\ + \\CurrentControlSet\\\\Control\\\\ContentIndex|#|System\\\\CurrentControlSet\\\ + \\Control\\\\Terminal Server|#|System\\\\CurrentControlSet\\\\Control\\\\\ + Terminal Server\\\\UserConfig|#|System\\\\CurrentControlSet\\\\Control\\\\\ + Terminal Server\\\\DefaultUserConfiguration|#|Software\\\\Microsoft\\\\Windows\ + \ NT\\\\CurrentVersion\\\\Perflib|#|System\\\\CurrentControlSet\\\\Services\\\ + \\SysmonLog\"},\"NetworkAccessSharesThatCanBeAccessedAnonymously\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Network access: Shares that can\ + \ be accessed anonymously\",\"description\":\"Specifies which network shares\ + \ can be accessed by anonymous users. The default configuration for this policy\ + \ setting has little effect because all users have to be authenticated before\ + \ they can access shared resources on the server.\"},\"defaultValue\":\"0\"\ + },\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of this policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_SecurityOptionsNetworkAccess\",\"existenceCondition\":{\"allOf\"\ + :[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Network access: Remotely accessible registry\ + \ paths;ExpectedValue', '=', parameters('NetworkAccessRemotelyAccessibleRegistryPaths'),\ + \ ',', 'Network access: Remotely accessible registry paths and sub-paths;ExpectedValue',\ + \ '=', parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths'),\ + \ ',', 'Network access: Shares that can be accessed anonymously;ExpectedValue',\ + \ '=', parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')))]\"\ + }]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1561 - Allocation\ + \ Of Resources\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Services Acquisition control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1561\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40364c3f-c331-4e29-b1e3-2fbe998ba2f5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40364c3f-c331-4e29-b1e3-2fbe998ba2f5\"\ + },{\"properties\":{\"displayName\":\"Secure transfer to storage accounts should\ + \ be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Audit requirement of Secure transfer in your storage account. Secure transfer\ + \ is an option that forces your storage account to accept requests only from\ + \ secure connections (HTTPS). Use of HTTPS ensures authentication between\ + \ the server and the service and protects data in transit from network layer\ + \ attacks such as man-in-the-middle, eavesdropping, and session-hijacking\"\ + ,\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Storage\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"The effect determines what happens when the policy rule\ + \ is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"\ + ],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"anyOf\":[{\"\ + allOf\":[{\"value\":\"[requestContext().apiVersion]\",\"less\":\"2019-04-01\"\ + },{\"field\":\"Microsoft.Storage/storageAccounts/supportsHttpsTrafficOnly\"\ + ,\"exists\":\"false\"}]},{\"field\":\"Microsoft.Storage/storageAccounts/supportsHttpsTrafficOnly\"\ + ,\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"404c3081-a854-4457-ae30-26a93ef643f9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1100 - Audit\ + \ And Accountability Policy And Procedures\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Audit and Accountability\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1100\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4057863c-ca7d-47eb-b1e0-503580cba8a4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4057863c-ca7d-47eb-b1e0-503580cba8a4\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1637 - Boundary\ + \ Protection | Fail Secure\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this System and Communications Protection\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1637\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4075bedc-c62a-4635-bede-a01be89807f3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4075bedc-c62a-4635-bede-a01be89807f3\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'Administrative Templates - System'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'Administrative Templates\ + \ - System'. It also creates a system-assigned managed identity and deploys\ + \ the VM extension for Guest Configuration. This policy should only be used\ + \ along with its corresponding audit policy in an initiative. For more information\ + \ on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"\ + metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"AlwaysUseClassicLogon\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Deprecated]: Always use classic logon\",\"description\"\ + :\"Specifies whether to force the user to log on to the computer using the\ + \ classic logon screen. This setting only works when the computer is not on\ + \ a domain.\"},\"defaultValue\":\"0\"},\"BootStartDriverInitializationPolicy\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Boot-Start\ + \ Driver Initialization Policy\",\"description\":\"Specifies which boot-start\ + \ drivers are initialized based on a classification determined by an Early\ + \ Launch Antimalware boot-start driver.\"},\"defaultValue\":\"3\"},\"EnableWindowsNTPClient\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Enable\ + \ Windows NTP Client\",\"description\":\"Specifies whether the Windows NTP\ + \ Client is enabled. Enabling the Windows NTP Client allows your computer\ + \ to synchronize its computer clock with other NTP servers.\"},\"defaultValue\"\ + :\"1\"},\"TurnOnConveniencePINSignin\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"[Deprecated]: Turn on convenience PIN sign-in\",\"description\"\ + :\"Specifies whether a domain user can sign in using a convenience PIN.\"\ + },\"defaultValue\":\"0\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"\ + field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_AdministrativeTemplatesSystem\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Always use classic logon;ExpectedValue', '=',\ + \ parameters('AlwaysUseClassicLogon'), ',', 'Boot-Start Driver Initialization\ + \ Policy;ExpectedValue', '=', parameters('BootStartDriverInitializationPolicy'),\ + \ ',', 'Enable Windows NTP Client;ExpectedValue', '=', parameters('EnableWindowsNTPClient'),\ + \ ',', 'Turn on convenience PIN sign-in;ExpectedValue', '=', parameters('TurnOnConveniencePINSignin')))]\"\ + },\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\"\ + :{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\"\ + :\"AzureBaseline_AdministrativeTemplatesSystem\"},\"AlwaysUseClassicLogon\"\ + :{\"value\":\"[parameters('AlwaysUseClassicLogon')]\"},\"BootStartDriverInitializationPolicy\"\ + :{\"value\":\"[parameters('BootStartDriverInitializationPolicy')]\"},\"EnableWindowsNTPClient\"\ + :{\"value\":\"[parameters('EnableWindowsNTPClient')]\"},\"TurnOnConveniencePINSignin\"\ + :{\"value\":\"[parameters('TurnOnConveniencePINSignin')]\"}},\"template\"\ + :{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"AlwaysUseClassicLogon\":{\"type\":\"string\"},\"\ + BootStartDriverInitializationPolicy\":{\"type\":\"string\"},\"EnableWindowsNTPClient\"\ + :{\"type\":\"string\"},\"TurnOnConveniencePINSignin\":{\"type\":\"string\"\ + }},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Always use classic\ + \ logon;ExpectedValue\",\"value\":\"[parameters('AlwaysUseClassicLogon')]\"\ + },{\"name\":\"Boot-Start Driver Initialization Policy;ExpectedValue\",\"value\"\ + :\"[parameters('BootStartDriverInitializationPolicy')]\"},{\"name\":\"Enable\ + \ Windows NTP Client;ExpectedValue\",\"value\":\"[parameters('EnableWindowsNTPClient')]\"\ + },{\"name\":\"Turn on convenience PIN sign-in;ExpectedValue\",\"value\":\"\ + [parameters('TurnOnConveniencePINSignin')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Always use classic\ + \ logon;ExpectedValue\",\"value\":\"[parameters('AlwaysUseClassicLogon')]\"\ + },{\"name\":\"Boot-Start Driver Initialization Policy;ExpectedValue\",\"value\"\ + :\"[parameters('BootStartDriverInitializationPolicy')]\"},{\"name\":\"Enable\ + \ Windows NTP Client;ExpectedValue\",\"value\":\"[parameters('EnableWindowsNTPClient')]\"\ + },{\"name\":\"Turn on convenience PIN sign-in;ExpectedValue\",\"value\":\"\ + [parameters('TurnOnConveniencePINSignin')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40917425-69db-4018-8dae-2a0556cef899\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40917425-69db-4018-8dae-2a0556cef899\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1202 - Access\ + \ Restrictions For Change\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Configuration Management control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1202\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40a2a83b-74f2-4c02-ae65-f460a5d2792a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40a2a83b-74f2-4c02-ae65-f460a5d2792a\"\ + },{\"properties\":{\"displayName\":\"Azure Machine Learning workspaces should\ + \ use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Evaluate Azure Machine Learning workspaces that do not have at least one\ + \ approved private endpoint connection. Clients in a virtual network can securely\ + \ access resources that have private endpoint connections through private\ + \ links. For more information, visit: https://aka.ms/azureml-workspaces-privatelink.\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine Learning\"},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"\ + },{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\"\ + ,\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\"\ + ,\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"\ + },{\"properties\":{\"displayName\":\"Inherit a tag from the subscription if\ + \ missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Adds the specified tag with its value from the containing subscription\ + \ when any resource missing this tag is created or updated. Existing resources\ + \ can be remediated by triggering a remediation task. If the tag exists with\ + \ a different value it will not be changed.\",\"metadata\":{\"category\":\"\ + Tags\",\"version\":\"1.0.0\"},\"parameters\":{\"tagName\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Tag Name\",\"description\":\"Name of the\ + \ tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"[concat('tags[', parameters('tagName'), ']')]\",\"exists\":\"false\"},{\"\ + value\":\"[subscription().tags[parameters('tagName')]]\",\"notEquals\":\"\"\ + }]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"\ + /providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', parameters('tagName'),\ + \ ']')]\",\"value\":\"[subscription().tags[parameters('tagName')]]\"}]}}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/40df99da-1232-49b1-a39a-6da8d878f469\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40df99da-1232-49b1-a39a-6da8d878f469\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1438 - Media\ + \ Sanitization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Media Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1438\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40fcc635-52a2-4dbc-9523-80a1f4aa1de6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40fcc635-52a2-4dbc-9523-80a1f4aa1de6\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1365 - Incident\ + \ Handling | Continuity Of Operations\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Incident Response\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1365\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4116891d-72f7-46ee-911c-8056cc8dcbd5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4116891d-72f7-46ee-911c-8056cc8dcbd5\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1022 - Account\ + \ Management | Shared / Group Account Credential Termination\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1022\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/411f7e2d-9a0b-4627-a0b9-1700432db47d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"411f7e2d-9a0b-4627-a0b9-1700432db47d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1464 - Monitoring\ + \ Physical Access | Intrusion Alarms / Surveillance Equipment\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Physical and Environmental Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1464\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/41256567-1795-4684-b00b-a1308ce43cac\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"41256567-1795-4684-b00b-a1308ce43cac\"\ + },{\"properties\":{\"displayName\":\"Azure Monitor should collect activity\ + \ logs from all regions\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"This policy audits the Azure Monitor log profile which does not export\ + \ activities from all Azure supported regions including global.\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Insights/logProfiles\",\"existenceCondition\":{\"allOf\":[{\"not\"\ + :{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\"\ + :\"australiacentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"australiacentral2\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"australiaeast\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"australiasoutheast\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"brazilsouth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"canadacentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"canadaeast\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"centralindia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"centralus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"eastasia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"eastus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"eastus2\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"francecentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"francesouth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"japaneast\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"japanwest\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"koreacentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"koreasouth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"northcentralus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"northeurope\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"southafricanorth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"southafricawest\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"southcentralus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"southindia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"southeastasia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"uaecentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"uaenorth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"uksouth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"ukwest\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"westcentralus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"westeurope\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"westindia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"westus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"westus2\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\"\ + ,\"notEquals\":\"global\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/41388f1c-2db0-4c25-95b2-35d7f5ccbfa9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"41388f1c-2db0-4c25-95b2-35d7f5ccbfa9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1263 - Contingency\ + \ Plan Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Contingency Planning control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1263\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/41472613-3b05-49f6-8fe8-525af113ce17\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"41472613-3b05-49f6-8fe8-525af113ce17\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1096 - Role-Based\ + \ Security Training | Practical Exercises\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Awareness and Training\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1096\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/420c1477-aa43-49d0-bd7e-c4abdd9addff\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"420c1477-aa43-49d0-bd7e-c4abdd9addff\"\ + },{\"properties\":{\"displayName\":\"Audit Windows VMs with a pending reboot\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires\ + \ that prerequisites are deployed to the policy assignment scope. For details,\ + \ visit https://aka.ms/gcpol. Machines are non-compliant if the machine is\ + \ pending reboot for any of the following reasons: component based servicing,\ + \ Windows Update, pending file rename, pending computer rename, configuration\ + \ manager pending reboot. Each detection has a unique registry path.\",\"\ + metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"\ + requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"WindowsPendingReboot\",\"version\":\"1.*\"}},\"parameters\":{\"\ + IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"\ + Include Arc connected servers\",\"description\":\"By selecting this option,\ + \ you agree to be charged monthly per Arc connected machine.\"},\"allowedValues\"\ + :[\"true\",\"false\"],\"defaultValue\":\"false\"}},\"policyRule\":{\"if\"\ + :{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsPendingReboot\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4221adbc-5c0f-474f-88b7-037a99e6114c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4221adbc-5c0f-474f-88b7-037a99e6114c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1260 - Contingency\ + \ Training | Simulated Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Contingency Planning control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1260\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/42254fc4-2738-4128-9613-72aaa4f0d9c3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"42254fc4-2738-4128-9613-72aaa4f0d9c3\"\ + },{\"properties\":{\"displayName\":\"Web Application Firewall (WAF) should\ + \ use the specified mode for Azure Front Door Service\",\"policyType\":\"\ + BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Mandates the use of 'Detection'\ + \ or 'Prevention' mode to be active on all Web Application Firewall policies\ + \ for Azure Front Door Service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"\ + defaultValue\":\"Audit\"},\"modeRequirement\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Mode Requirement\",\"description\":\"Mode required for\ + \ all WAF policies\"},\"allowedValues\":[\"Prevention\",\"Detection\"],\"\ + defaultValue\":\"Detection\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Network/frontdoorwebapplicationfirewallpolicies\"\ + },{\"field\":\"Microsoft.Network/frontdoorWebApplicationFirewallPolicies/policySettings.mode\"\ + ,\"notEquals\":\"[parameters('modeRequirement')]\"}]},\"then\":{\"effect\"\ + :\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/425bea59-a659-4cbb-8d31-34499bd030b8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"425bea59-a659-4cbb-8d31-34499bd030b8\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1694 - Information\ + \ System Monitoring | Analyze Communications Traffic Anomalies\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ System and Information Integrity control\",\"metadata\":{\"version\":\"\ + 1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"\ + /providers/Microsoft.PolicyInsights/policyMetadata/ACF1694\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/426c4ac9-ff17-49d0-acd7-a13c157081c0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"426c4ac9-ff17-49d0-acd7-a13c157081c0\"\ + },{\"properties\":{\"displayName\":\"Diagnostic logs in Batch accounts should\ + \ be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Audit enabling of diagnostic logs. This enables you to recreate activity\ + \ trails to use for investigation purposes; when a security incident occurs\ + \ or when your network is compromised\",\"metadata\":{\"version\":\"3.0.0\"\ + ,\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"},\"requiredRetentionDays\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required retention (days)\"\ + ,\"description\":\"The required diagnostic logs retention in days\"},\"defaultValue\"\ + :\"365\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\"\ + :{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"\ + anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\"\ + ,\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\"\ + ,\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\"\ + ,\"equals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\"\ + ,\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\"\ + ,\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"428256e6-1fac-4f48-a757-df34c2b3336d\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'System Audit Policies - Detailed Tracking'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'System Audit Policies\ + \ - Detailed Tracking'. It also creates a system-assigned managed identity\ + \ and deploys the VM extension for Guest Configuration. This policy should\ + \ only be used along with its corresponding audit policy in an initiative.\ + \ For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"AuditProcessTermination\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Deprecated]: Audit Process Termination\",\"description\"\ + :\"Specifies whether audit events are generated when a process has exited.\ + \ Recommended for monitoring termination of critical processes.\"},\"allowedValues\"\ + :[\"No Auditing\",\"Success\",\"Failure\",\"Success and Failure\"],\"defaultValue\"\ + :\"No Auditing\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Audit Process Termination;ExpectedValue', '=',\ + \ parameters('AuditProcessTermination')))]\"},\"deployment\":{\"properties\"\ + :{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\"\ + },\"AuditProcessTermination\":{\"value\":\"[parameters('AuditProcessTermination')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"AuditProcessTermination\":{\"type\":\"string\"}},\"\ + resources\":[{\"condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit Process\ + \ Termination;ExpectedValue\",\"value\":\"[parameters('AuditProcessTermination')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit Process\ + \ Termination;ExpectedValue\",\"value\":\"[parameters('AuditProcessTermination')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\"\ + ,\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\"\ + ,\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/42a07bbf-ffcf-459a-b4b1-30ecd118a505\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"42a07bbf-ffcf-459a-b4b1-30ecd118a505\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1174 - Configuration\ + \ Management Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Configuration Management\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1174\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/42a9a714-8fbb-43ac-b115-ea12d2bd652f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"42a9a714-8fbb-43ac-b115-ea12d2bd652f\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1137 - Audit\ + \ Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Audit and Accountability control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1137\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4344df62-88ab-4637-b97b-bcaf2ec97e7c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4344df62-88ab-4637-b97b-bcaf2ec97e7c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1367 - Incident\ + \ Handling | Insider Threats - Specific Capabilities\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Incident\ + \ Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1367\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/435b2547-6374-4f87-b42d-6e8dbe6ae62a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"435b2547-6374-4f87-b42d-6e8dbe6ae62a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1552 - Vulnerability\ + \ Scanning | Update By Frequency / Prior To New Scan / When Identified\",\"\ + policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements\ + \ this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1552\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/43684572-e4f1-4642-af35-6b933bc506da\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"43684572-e4f1-4642-af35-6b933bc506da\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'Security Options - System settings'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'Security Options\ + \ - System settings'. It also creates a system-assigned managed identity and\ + \ deploys the VM extension for Guest Configuration. This policy should only\ + \ be used along with its corresponding audit policy in an initiative. For\ + \ more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: System\ + \ settings: Use Certificate Rules on Windows Executables for Software Restriction\ + \ Policies\",\"description\":\"Specifies whether digital certificates are\ + \ processed when software restriction policies are enabled and a user or process\ + \ attempts to run software with an .exe file name extension. It enables or\ + \ disables certificate rules (a type of software restriction policies rule).\ + \ For certificate rules to take effect in software restriction policies, you\ + \ must enable this policy setting.\"},\"defaultValue\":\"1\"}},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsSystemsettings\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('System settings: Use Certificate Rules on Windows\ + \ Executables for Software Restriction Policies;ExpectedValue', '=', parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')))]\"\ + },\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\"\ + :{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\"\ + :\"AzureBaseline_SecurityOptionsSystemsettings\"},\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\"\ + :{\"value\":\"[parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"System settings:\ + \ Use Certificate Rules on Windows Executables for Software Restriction Policies;ExpectedValue\"\ + ,\"value\":\"[parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"System settings:\ + \ Use Certificate Rules on Windows Executables for Software Restriction Policies;ExpectedValue\"\ + ,\"value\":\"[parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\"\ + ,\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\"\ + ,\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/437a1f8f-8552-47a8-8b12-a2fee3269dd5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"437a1f8f-8552-47a8-8b12-a2fee3269dd5\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'System Audit Policies - Account Logon'\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'System Audit Policies - Account Logon'\ + \ for auditing credential validation and other account logon events. This\ + \ policy requires that the Guest Configuration prerequisites have been deployed\ + \ to the policy assignment scope. For details, visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\",\"version\":\"\ + 1.*\",\"configurationParameter\":{\"AuditCredentialValidation\":\"Audit Credential\ + \ Validation;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Include Arc connected servers\"\ + ,\"description\":\"By selecting this option, you agree to be charged monthly\ + \ per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"],\"\ + defaultValue\":\"false\"},\"AuditCredentialValidation\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Audit Credential Validation\",\"description\"\ + :\"Specifies whether audit events are generated when credentials are submitted\ + \ for a user account logon request. This setting is especially useful for\ + \ monitoring unsuccessful attempts, to find brute-force attacks, account enumeration,\ + \ and potential account compromise events on domain controllers.\"},\"allowedValues\"\ + :[\"No Auditing\",\"Success\",\"Failure\",\"Success and Failure\"],\"defaultValue\"\ + :\"Success and Failure\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_SystemAuditPoliciesAccountLogon\",\"existenceCondition\":{\"\ + allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Audit Credential Validation;ExpectedValue',\ + \ '=', parameters('AuditCredentialValidation')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/43bb60fe-1d7e-4b82-9e93-496bfc99e7d5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"43bb60fe-1d7e-4b82-9e93-496bfc99e7d5\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1544 - Risk\ + \ Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Risk Assessment control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1544\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/43ced7c9-cd53-456b-b0da-2522649a4271\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"43ced7c9-cd53-456b-b0da-2522649a4271\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1398 - Controlled\ + \ Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Maintenance control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1398\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/443e8f3d-b51a-45d8-95a7-18b0e42f4dc4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"443e8f3d-b51a-45d8-95a7-18b0e42f4dc4\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Monitor permissive network\ + \ access in Azure Security Center\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + All\",\"description\":\"Network Security Groups with too permissive rules\ + \ will be monitored by Azure Security Center as recommendations\",\"metadata\"\ + :{\"version\":\"1.0.0-deprecated\",\"category\":\"Security Center\",\"deprecated\"\ + :true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"\ + ]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/complianceResults\",\"name\":\"permissiveNetworkAccess\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\"\ + ,\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44452482-524f-4bf4-b852-0bff7cc4a3ed\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44452482-524f-4bf4-b852-0bff7cc4a3ed\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1066 - Remote\ + \ Access | Disconnect / Disable Access\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Access Control control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1066\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4455c2e8-c65d-4acf-895e-304916f90b36\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4455c2e8-c65d-4acf-895e-304916f90b36\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1720 - Spam\ + \ Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Information Integrity control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1720\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44b9a7cd-f36a-491a-a48b-6d04ae7c4221\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44b9a7cd-f36a-491a-a48b-6d04ae7c4221\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1334 - Authenticator\ + \ Management | Pki-Based Authentication\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Identification and\ + \ Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1334\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44bfdadc-8c2e-4c30-9c99-f005986fabcd\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44bfdadc-8c2e-4c30-9c99-f005986fabcd\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1604 - Developer\ + \ Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this System and Services\ + \ Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1604\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44dbba23-0b61-478e-89c7-b3084667782f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44dbba23-0b61-478e-89c7-b3084667782f\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1712 - Software,\ + \ Firmware, And Information Integrity\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this System and Information\ + \ Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1712\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44e543aa-41db-42aa-98eb-8a5eb1db53f0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44e543aa-41db-42aa-98eb-8a5eb1db53f0\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1310 - Device\ + \ Identification And Authentication\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Identification and Authentication\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1310\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/450d7ede-823d-4931-a99d-57f6a38807dc\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"450d7ede-823d-4931-a99d-57f6a38807dc\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1559 - System\ + \ And Services Acquisition Policy And Procedures\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this System and\ + \ Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1559\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/45692294-f074-42bd-ac54-16f1a3c07554\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"45692294-f074-42bd-ac54-16f1a3c07554\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1578 - Acquisition\ + \ Process | Functions / Ports / Protocols / Services In Use\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1578\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/45b7b644-5f91-498e-9d89-7402532d3645\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"45b7b644-5f91-498e-9d89-7402532d3645\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1565 - System\ + \ Development Life Cycle\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this System and Services Acquisition\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1565\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/45ce2396-5c76-4654-9737-f8792ab3d26b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"45ce2396-5c76-4654-9737-f8792ab3d26b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1337 - Authenticator\ + \ Management | In-Person Or Trusted Third-Party Registration\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Identification and Authentication control\",\"metadata\":{\"version\":\"\ + 1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"\ + /providers/Microsoft.PolicyInsights/policyMetadata/ACF1337\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/463e5220-3f79-4e24-a63f-343e4096cd22\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"463e5220-3f79-4e24-a63f-343e4096cd22\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Require SQL Server version\ + \ 12.0\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"\ + This policy ensures all SQL servers use version 12.0. This policy is deprecated\ + \ because it is no longer possible to create an Azure SQL server with any\ + \ version other than 12.0.\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"\ + },{\"not\":{\"field\":\"Microsoft.Sql/servers/version\",\"equals\":\"12.0\"\ + }}]},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/464dbb85-3d5f-4a1d-bb09-95a9b5dd19cf\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"464dbb85-3d5f-4a1d-bb09-95a9b5dd19cf\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1346 - Identification\ + \ And Authentication (Non-Organizational Users)\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Identification\ + \ and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1346\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/464dc8ce-2200-4720-87a5-dc5952924cc6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"464dc8ce-2200-4720-87a5-dc5952924cc6\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Audit Web Applications\ + \ that are not using latest supported Python Framework\",\"policyType\":\"\ + BuiltIn\",\"mode\":\"All\",\"description\":\"Use the latest supported Python\ + \ version for the latest security classes. Using older classes and types can\ + \ make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Security Center\",\"deprecated\":true},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:\ + \ Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\"\ + ,\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\"\ + :\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"}]}]},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\"\ + ,\"name\":\"UseLatestPython\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\"\ + ,\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/46544d7b-1f0d-46f5-81da-5c1351de1b06\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"46544d7b-1f0d-46f5-81da-5c1351de1b06\"\ + },{\"properties\":{\"displayName\":\"Require automatic OS image patching on\ + \ Virtual Machine Scale Sets\",\"policyType\":\"BuiltIn\",\"mode\":\"All\"\ + ,\"description\":\"This policy enforces enabling automatic OS image patching\ + \ on Virtual Machine Scale Sets to always keep Virtual Machines secure by\ + \ safely applying latest security patches every month.\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"\ + },{\"field\":\"Microsoft.Compute/VirtualMachineScaleSets/upgradePolicy.automaticOSUpgradePolicy.enableAutomaticOSUpgrade\"\ + ,\"notEquals\":\"True\"},{\"field\":\"Microsoft.Compute/VirtualMachineScaleSets/upgradePolicy.automaticOSUpgrade\"\ + ,\"notEquals\":\"True\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/465f0161-0087-490a-9ad9-ad6217f4f43a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"465f0161-0087-490a-9ad9-ad6217f4f43a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1368 - Incident\ + \ Handling | Correlation With External Organizations\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Incident\ + \ Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1368\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/465f32da-0ace-4603-8d1b-7be5a3a702de\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"465f32da-0ace-4603-8d1b-7be5a3a702de\"\ + },{\"properties\":{\"displayName\":\"Cognitive Services accounts should use\ + \ customer owned storage\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"This policy audits any Cognitive Services account not using\ + \ customer owned storage.\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Cognitive Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"Effect\",\"description\":\"The effect determines\ + \ what happens when the policy rule is evaluated to match\"},\"allowedValues\"\ + :[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"\ + },{\"count\":{\"field\":\"Microsoft.CognitiveServices/accounts/userOwnedStorage[*]\"\ + },\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\"\ + :\"/providers/Microsoft.Authorization/policyDefinitions/46aa9b05-0e60-4eae-a88b-1e9d374fa515\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"46aa9b05-0e60-4eae-a88b-1e9d374fa515\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1062 - Remote\ + \ Access | Protection Of Confidentiality / Integrity Using Encryption\",\"\ + policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements\ + \ this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1062\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4708723f-e099-4af1-bbf9-b6df7642e444\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4708723f-e099-4af1-bbf9-b6df7642e444\"\ + },{\"properties\":{\"displayName\":\"Storage accounts should have infrastructure\ + \ encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Enable infrastructure encryption for higher level of assurance that the\ + \ data is secure. When infrastructure encryption is enabled, data in a storage\ + \ account is encrypted twice.\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the audit policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"\ + ],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"\ + Microsoft.Storage/storageAccounts/encryption.requireInfrastructureEncryption\"\ + ,\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4733ea7b-a883-42fe-8cac-97454c2a9e4a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4733ea7b-a883-42fe-8cac-97454c2a9e4a\"\ + },{\"properties\":{\"displayName\":\"Azure Cosmos DB key based metadata write\ + \ access should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"This policy enables you to ensure all Azure Cosmos DB accounts\ + \ disable key based metadata write access.\",\"metadata\":{\"version\":\"\ + 1.0.0\",\"category\":\"Cosmos DB\"},\"parameters\":{},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"\ + },{\"field\":\"Microsoft.DocumentDB/databaseAccounts/disableKeyBasedMetadataWriteAccess\"\ + ,\"notEquals\":true}]},\"then\":{\"effect\":\"append\",\"details\":[{\"field\"\ + :\"Microsoft.DocumentDB/databaseAccounts/disableKeyBasedMetadataWriteAccess\"\ + ,\"value\":true}]}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4750c32b-89c0-46af-bfcb-2e4541a818d5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4750c32b-89c0-46af-bfcb-2e4541a818d5\"\ + },{\"properties\":{\"displayName\":\"Automatic provisioning of the Log Analytics\ + \ monitoring agent should be enabled on your subscription\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable automatic provisioning\ + \ of the Log Analytics monitoring agent in order to collect security data\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security Center\"},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"\ + existenceCondition\":{\"field\":\"Microsoft.Security/autoProvisioningSettings/autoProvision\"\ + ,\"equals\":\"On\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"475aae12-b88a-4572-8b36-9b712b2b3a17\"\ + },{\"properties\":{\"displayName\":\"Adaptive application controls for defining\ + \ safe applications should be enabled on your machines\",\"policyType\":\"\ + BuiltIn\",\"mode\":\"All\",\"description\":\"Enable application controls to\ + \ define the list of known-safe applications running on your machines, and\ + \ alert you when other applications run. This helps harden your machines against\ + \ malware. To simplify the process of configuring and maintaining your rules,\ + \ Security Center uses machine learning to analyze the applications running\ + \ on each machine and suggest the list of known-safe applications.\",\"metadata\"\ + :{\"version\":\"2.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"\ + description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\"\ + ,\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"35f45c95-27cf-4e52-891f-8390d1de5828\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47a6b606-51aa-4496-8bb7-64b11cf66adc\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1359 - Incident\ + \ Response Testing | Coordination With Related Plans\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Incident\ + \ Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1359\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47bc7ea0-7d13-4f7c-a154-b903f7194253\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47bc7ea0-7d13-4f7c-a154-b903f7194253\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1165 - Continuous\ + \ Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Security Assessment and Authorization control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1165\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47e10916-6c9e-446b-b0bd-ff5fd439d79d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47e10916-6c9e-446b-b0bd-ff5fd439d79d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1048 - System\ + \ Use Notification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1048\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/483e7ca9-82b3-45a2-be97-b93163a0deb7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"483e7ca9-82b3-45a2-be97-b93163a0deb7\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1033 - Separation\ + \ Of Duties\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1033\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/48540f01-fc11-411a-b160-42807c68896e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"48540f01-fc11-411a-b160-42807c68896e\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1477 - Fire\ + \ Protection | Detection Devices / Systems\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Physical and\ + \ Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1477\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4862a63c-6c74-4a9d-a221-89af3c374503\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4862a63c-6c74-4a9d-a221-89af3c374503\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1484 - Water\ + \ Damage Protection | Automation Support\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Physical and Environmental\ + \ Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1484\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/486b006a-3653-45e8-b41c-a052d3e05456\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"486b006a-3653-45e8-b41c-a052d3e05456\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Audit IP restrictions configuration\ + \ for an API App\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"IP Restrictions allow you to define a list of IP addresses that are allowed\ + \ to access your app. Use of IP Restrictions protects an API app from common\ + \ attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"\ + Security Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"\ + },{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\"\ + ,\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"\ + ConfigureIPRestrictions\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\"\ + ,\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/48893b84-a2c8-4d9a-badf-835d5d1b7d53\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"48893b84-a2c8-4d9a-badf-835d5d1b7d53\"\ + },{\"properties\":{\"displayName\":\"Geo-redundant backup should be enabled\ + \ for Azure Database for PostgreSQL\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Azure Database for PostgreSQL allows you to\ + \ choose the redundancy option for your database server. It can be set to\ + \ a geo-redundant backup storage in which the data is not only stored within\ + \ the region in which your server is hosted, but is also replicated to a paired\ + \ region to provide recovery option in case of a region failure. Configuring\ + \ geo-redundant storage for backup is only allowed during server create.\"\ + ,\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"\ + if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"\ + },{\"field\":\"Microsoft.DBforPostgreSQL/servers/storageProfile.geoRedundantBackup\"\ + ,\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"48af4db5-9b8b-401c-8e74-076be876a430\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1669 - Flaw\ + \ Remediation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Information Integrity control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1669\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/48f2f62b-5743-4415-a143-288adc0e078d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"48f2f62b-5743-4415-a143-288adc0e078d\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'Security Options - User Account Control'\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'Security Options - User Account Control'\ + \ for mode for admins, behavior of elevation prompt, and virtualizing file\ + \ and registry write failures. This policy requires that the Guest Configuration\ + \ prerequisites have been deployed to the policy assignment scope. For details,\ + \ visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\"\ + ,\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"\ + ],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsUserAccountControl\"\ + ,\"version\":\"1.*\",\"configurationParameter\":{\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\"\ + :\"User Account Control: Admin Approval Mode for the Built-in Administrator\ + \ account;ExpectedValue\",\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\"\ + :\"User Account Control: Behavior of the elevation prompt for administrators\ + \ in Admin Approval Mode;ExpectedValue\",\"UACDetectApplicationInstallationsAndPromptForElevation\"\ + :\"User Account Control: Detect application installations and prompt for elevation;ExpectedValue\"\ + ,\"UACRunAllAdministratorsInAdminApprovalMode\":\"User Account Control: Run\ + \ all administrators in Admin Approval Mode;ExpectedValue\"}}},\"parameters\"\ + :{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Include Arc connected servers\",\"description\":\"By selecting this option,\ + \ you agree to be charged monthly per Arc connected machine.\"},\"allowedValues\"\ + :[\"true\",\"false\"],\"defaultValue\":\"false\"},\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"UAC: Admin Approval\ + \ Mode for the Built-in Administrator account\",\"description\":\"Specifies\ + \ the behavior of Admin Approval Mode for the built-in Administrator account.\"\ + },\"defaultValue\":\"1\"},\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"UAC: Behavior of the\ + \ elevation prompt for administrators in Admin Approval Mode\",\"description\"\ + :\"Specifies the behavior of the elevation prompt for administrators.\"},\"\ + defaultValue\":\"2\"},\"UACDetectApplicationInstallationsAndPromptForElevation\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"UAC: Detect application\ + \ installations and prompt for elevation\",\"description\":\"Specifies the\ + \ behavior of application installation detection for the computer.\"},\"defaultValue\"\ + :\"1\"},\"UACRunAllAdministratorsInAdminApprovalMode\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"UAC: Run all administrators in Admin Approval\ + \ Mode\",\"description\":\"Specifies the behavior of all User Account Control\ + \ (UAC) policy settings for the computer.\"},\"defaultValue\":\"1\"},\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of this policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_SecurityOptionsUserAccountControl\",\"existenceCondition\":{\"\ + allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('User Account Control: Admin Approval Mode for\ + \ the Built-in Administrator account;ExpectedValue', '=', parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount'),\ + \ ',', 'User Account Control: Behavior of the elevation prompt for administrators\ + \ in Admin Approval Mode;ExpectedValue', '=', parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode'),\ + \ ',', 'User Account Control: Detect application installations and prompt\ + \ for elevation;ExpectedValue', '=', parameters('UACDetectApplicationInstallationsAndPromptForElevation'),\ + \ ',', 'User Account Control: Run all administrators in Admin Approval Mode;ExpectedValue',\ + \ '=', parameters('UACRunAllAdministratorsInAdminApprovalMode')))]\"}]}}}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/492a29ed-d143-4f03-b6a4-705ce081b463\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"492a29ed-d143-4f03-b6a4-705ce081b463\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1376 - Incident\ + \ Response Assistance | Coordination With External Providers\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1376\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/493a95f3-f2e3-47d0-af02-65e6d6decc2f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"493a95f3-f2e3-47d0-af02-65e6d6decc2f\"\ + },{\"properties\":{\"displayName\":\"Ensure that 'Java version' is the latest,\ + \ if used as a part of the Web app\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"Periodically, newer versions are released for\ + \ Java software either due to security flaws or to include additional functionality.\ + \ Using the latest Java version for web apps is recommended in order to take\ + \ advantage of security fixes, if any, and/or new functionalities of the latest\ + \ version.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App Service\"\ + },\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"},\"JavaLatestVersion\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Latest Java version\",\"description\":\"Latest supported\ + \ Java version for App Services\"},\"defaultValue\":\"11\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"\ + },{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"kind\",\"contains\"\ + :\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\"\ + :{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\"\ + :{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\"\ + ,\"notContains\":\"JAVA\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\"\ + ,\"like\":\"[concat('*', parameters('JavaLatestVersion'))]\"}]}}}}},\"id\"\ + :\"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"496223c3-ad65-4ecd-878a-bae78737e9ed\"\ + },{\"properties\":{\"displayName\":\"Add system-assigned managed identity\ + \ to enable Guest Configuration assignments on VMs with a user-assigned identity\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ adds a system-assigned managed identity to virtual machines hosted in Azure\ + \ that are supported by Guest Configuration and have at least one user-assigned\ + \ identity but do not have a system-assigned managed identity. A system-assigned\ + \ managed identity is a prerequisite for all Guest Configuration assignments\ + \ and must be added to machines before using any Guest Configuration policy\ + \ definitions. For more information on Guest Configuration, visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\"\ + ,\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"\ + Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"\ + Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\"\ + ,\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"\ + ]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"\ + field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\"\ + ,\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\"\ + ,\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\"\ + ,\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"\ + cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\"\ + ,\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\"\ + ,\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"\ + ]}]}]}]}]},{\"value\":\"[requestContext().apiVersion]\",\"greaterOrEquals\"\ + :\"2018-10-01\"},{\"field\":\"identity.type\",\"contains\":\"UserAssigned\"\ + },{\"field\":\"identity.type\",\"notContains\":\"SystemAssigned\"}]},\"then\"\ + :{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"identity.type\"\ + ,\"value\":\"[concat(field('identity.type'), ',SystemAssigned')]\"}]}}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/497dff13-db2a-4c0f-8603-28fa3b331ab6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"497dff13-db2a-4c0f-8603-28fa3b331ab6\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'Security Options - Audit'\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy creates a\ + \ Guest Configuration assignment to audit Windows virtual machines with non-compliant\ + \ settings in Group Policy category: 'Security Options - Audit'. It also creates\ + \ a system-assigned managed identity and deploys the VM extension for Guest\ + \ Configuration. This policy should only be used along with its corresponding\ + \ audit policy in an initiative. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.2.0-deprecated\",\"category\":\"Guest Configuration\",\"requiredProviders\"\ + :[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"\ + AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"[Deprecated]: Audit: Shut down system immediately\ + \ if unable to log security audits\",\"description\":\"Audits if the system\ + \ will shut down when unable to log Security events.\"},\"defaultValue\":\"\ + 0\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"\ + equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"\ + Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\"\ + ,\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\"\ + ,\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsAudit\",\"existenceCondition\":{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Audit: Shut down system immediately if unable\ + \ to log security audits;ExpectedValue', '=', parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')))]\"\ + },\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\"\ + :{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\"\ + :\"AzureBaseline_SecurityOptionsAudit\"},\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\"\ + :{\"value\":\"[parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit: Shut down\ + \ system immediately if unable to log security audits;ExpectedValue\",\"value\"\ + :\"[parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit: Shut down\ + \ system immediately if unable to log security audits;ExpectedValue\",\"value\"\ + :\"[parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\"\ + ,\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\"\ + ,\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/498b810c-59cd-4222-9338-352ba146ccf3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"498b810c-59cd-4222-9338-352ba146ccf3\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1329 - Authenticator\ + \ Management | Password-Based Authentication\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Identification\ + \ and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1329\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/498f6234-3e20-4b6a-a880-cbd646d973bd\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"498f6234-3e20-4b6a-a880-cbd646d973bd\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1638 - Boundary\ + \ Protection | Dynamic Isolation / Segregation\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this System and\ + \ Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1638\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/49b99653-32cd-405d-a135-e7d60a9aae1f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"49b99653-32cd-405d-a135-e7d60a9aae1f\"\ + },{\"properties\":{\"displayName\":\"Append a tag and its value to resource\ + \ groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"\ + Appends the specified tag and value when any resource group which is missing\ + \ this tag is created or updated. Does not modify the tags of resource groups\ + \ created before this policy was applied until those resource groups are changed.\ + \ New 'modify' effect policies are available that support remediation of tags\ + \ on existing resources (see https://aka.ms/modifydoc).\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Tag Name\",\"description\"\ + :\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Tag Value\",\"description\":\"Value of the\ + \ tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"\ + },{\"field\":\"[concat('tags[', parameters('tagName'), ']')]\",\"exists\"\ + :\"false\"}]},\"then\":{\"effect\":\"append\",\"details\":[{\"field\":\"[concat('tags[',\ + \ parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"49c88fc8-6fd1-46fd-a676-f12d1d3a4c71\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1294 - Information\ + \ System Backup | Transfer To Alternate Storage Site\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Contingency\ + \ Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1294\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/49dbe627-2c1e-438c-979e-dd7a39bbf81d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"49dbe627-2c1e-438c-979e-dd7a39bbf81d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1218 - Least\ + \ Functionality | Prevent Program Execution\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Configuration\ + \ Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1218\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4a1d0394-b9f5-493e-9e83-563fd0ac4df8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4a1d0394-b9f5-493e-9e83-563fd0ac4df8\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1677 - Malicious\ + \ Code Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Information Integrity control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1677\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4a248e1e-040f-43e5-bff2-afc3a57a3923\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4a248e1e-040f-43e5-bff2-afc3a57a3923\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1094 - Role-Based\ + \ Security Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Awareness and Training control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1094\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4b1853e0-8973-446b-b567-09d901d31a09\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4b1853e0-8973-446b-b567-09d901d31a09\"\ + },{\"properties\":{\"displayName\":\"Azure Event Grid topics should use private\ + \ links\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Audit Azure Event Grid topics that do not have at least one approved private\ + \ endpoint connection. Clients in a virtual network can securely access resources\ + \ that have private endpoint connections via private links. For more information,\ + \ visit https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Event Grid\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"\ + ],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.EventGrid/topics\"},{\"count\":{\"field\"\ + :\"Microsoft.EventGrid/topics/privateEndpointConnections[*]\",\"where\":{\"\ + field\":\"Microsoft.EventGrid/topics/privateEndpointConnections[*].privateLinkServiceConnectionState.status\"\ + ,\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4b90e17e-8448-49db-875e-bd83fb6f804f\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1114 - Response\ + \ To Audit Processing Failures | Real-Time Alerts\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Audit and\ + \ Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1114\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4c090801-59bc-4454-bb33-e0455133486a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4c090801-59bc-4454-bb33-e0455133486a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1364 - Incident\ + \ Handling | Dynamic Reconfiguration\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Incident Response\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1364\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4c615c2a-dc83-4dda-8220-abce7b50c9bc\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4c615c2a-dc83-4dda-8220-abce7b50c9bc\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1661 - Session\ + \ Authenticity | Invalidate Session Identifiers At Logout\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ System and Communications Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1661\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4c643c9a-1be7-4016-a5e7-e4bada052920\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4c643c9a-1be7-4016-a5e7-e4bada052920\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1373 - Incident\ + \ Reporting | Automated Reporting\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Incident Response control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1373\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4cca950f-c3b7-492a-8e8f-ea39663c14f9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4cca950f-c3b7-492a-8e8f-ea39663c14f9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1632 - Boundary\ + \ Protection | Prevent Split Tunneling For Remote Devices\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ System and Communications Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1632\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ce9073a-77fa-48f0-96b1-87aa8e6091c2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ce9073a-77fa-48f0-96b1-87aa8e6091c2\"\ + },{\"properties\":{\"displayName\":\"Audit Windows machines that do not have\ + \ a maximum password age of 70 days\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Requires that prerequisites are deployed to\ + \ the policy assignment scope. For details, visit https://aka.ms/gcpol. Machines\ + \ are non-compliant if Windows machines that do not have a maximum password\ + \ age of 70 days\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\"\ + :\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"MaximumPasswordAge\",\"version\":\"1.*\"}},\"parameters\":{\"\ + IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"\ + Include Arc connected servers\",\"description\":\"By selecting this option,\ + \ you agree to be charged monthly per Arc connected machine.\"},\"allowedValues\"\ + :[\"true\",\"false\"],\"defaultValue\":\"false\"},\"effect\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + MaximumPasswordAge\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ceb8dc2-559c-478b-a15b-733fbf1e3738\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ceb8dc2-559c-478b-a15b-733fbf1e3738\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Linux VMs that do not have the specified applications installed\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Linux virtual machines\ + \ that do not have the specified applications installed. It also creates a\ + \ system-assigned managed identity and deploys the VM extension for Guest\ + \ Configuration. This policy should only be used along with its corresponding\ + \ audit policy in an initiative. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"3.0.0-deprecated\",\"category\":\"Guest Configuration\",\"requiredProviders\"\ + :[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"\ + ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:\ + \ Application names\",\"description\":\"A semicolon-separated list of the\ + \ names of the applications that should be installed. e.g. 'python; powershell'\"\ + }}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"\ + equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"\ + Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\"\ + ,\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\"\ + ,\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"\ + like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\"\ + ,\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"\ + ]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"\ + field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\"\ + ,\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\"\ + ,\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\"\ + ,\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"\ + cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\"\ + ,\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\"\ + ,\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"\ + ]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"\ + then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"installed_application_linux\",\"existenceCondition\":{\"field\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent',\ + \ '=', concat('packages: [', replace(parameters('ApplicationName'), ';', ','),\ + \ ']')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\"\ + :{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\"\ + :\"installed_application_linux\"},\"ApplicationName\":{\"value\":\"[parameters('ApplicationName')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"ApplicationName\":{\"type\":\"string\"}},\"resources\"\ + :[{\"condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent\"\ + ,\"value\":\"[concat('packages: [', replace(parameters('ApplicationName'),\ + \ ';', ','), ']')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent\"\ + ,\"value\":\"[concat('packages: [', replace(parameters('ApplicationName'),\ + \ ';', ','), ']')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforLinux')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d1c04de-2172-403f-901b-90608c35c721\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d1c04de-2172-403f-901b-90608c35c721\"\ + },{\"properties\":{\"displayName\":\"FTPS should be required in your Web App\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable\ + \ FTPS enforcement for enhanced security\",\"metadata\":{\"version\":\"2.0.0\"\ + ,\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\"\ + :\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"\ + existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/ftpsState\",\"\ + in\":[\"FtpsOnly\",\"Disabled\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1155 - System\ + \ Interconnections | Restrictions On External System Connections\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Security Assessment and Authorization control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1155\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d33f9f1-12d0-46ad-9fbd-8f8046694977\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d33f9f1-12d0-46ad-9fbd-8f8046694977\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1156 - Plan\ + \ Of Action And Milestones\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Security Assessment and Authorization\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1156\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d52e864-9a3b-41ee-8f03-520815fe5378\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d52e864-9a3b-41ee-8f03-520815fe5378\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1312 - Identifier\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Identification and Authentication control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1312\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d6a5968-9eef-4c18-8534-376790ab7274\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d6a5968-9eef-4c18-8534-376790ab7274\"\ + },{\"properties\":{\"displayName\":\"Deploy Dependency agent for Linux virtual\ + \ machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Deploy Dependency agent for Linux virtual machines if the VM Image (OS)\ + \ is in the list defined and the agent is not installed.\",\"metadata\":{\"\ + version\":\"1.3.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: List of VM\ + \ images that have supported Linux OS to add to scope\",\"description\":\"\ + Example value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"\ + },\"defaultValue\":[]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"\ + },{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"\ + Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\"\ + ,\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\"\ + :[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"\ + SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\"\ + ,\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\"\ + ,\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\"\ + :{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\"\ + ,\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\ + ],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\"\ + ,\"equals\":\"DependencyAgentLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\"\ + ,\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"\ + Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\"\ + :\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\"\ + ,\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"\ + DependencyAgentLinux\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\"\ + ,\"vmExtensionType\":\"DependencyAgentLinux\",\"vmExtensionTypeHandlerVersion\"\ + :\"9.6\"},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\"\ + ,\"name\":\"[concat(parameters('vmName'), '/', variables('vmExtensionName'))]\"\ + ,\"apiVersion\":\"2018-06-01\",\"location\":\"[parameters('location')]\",\"\ + properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\"\ + :\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\"\ + ,\"autoUpgradeMinorVersion\":true}}],\"outputs\":{\"policy\":{\"type\":\"\ + string\",\"value\":\"[concat('Enabled extension for VM', ': ', parameters('vmName'))]\"\ + }}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\"\ + :{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4da21710-ce6f-4e06-8cdb-5cc4c93ffbee\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4da21710-ce6f-4e06-8cdb-5cc4c93ffbee\"\ + },{\"properties\":{\"displayName\":\"Azure Defender for servers should be\ + \ enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"\ + Azure Defender for servers provides real-time threat protection for server\ + \ workloads and generates hardening recommendations as well as alerts about\ + \ suspicious activities.\",\"metadata\":{\"version\":\"1.0.3\",\"category\"\ + :\"Security Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\"\ + ,\"name\":\"VirtualMachines\",\"existenceScope\":\"subscription\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"\ + }}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4da35fc9-c9e7-4960-aec9-797fe7d9051d\"\ + },{\"properties\":{\"displayName\":\"Deploy Diagnostic Settings for Data Lake\ + \ Analytics to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Deploys the diagnostic settings for Data Lake Analytics\ + \ to stream to a regional Event Hub when any Data Lake Analytics which is\ + \ missing this diagnostic settings is created or updated.\",\"metadata\":{\"\ + version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"},\"\ + profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile\ + \ name\",\"description\":\"The diagnostic settings profile name\"},\"defaultValue\"\ + :\"setbypolicy_eventHub\"},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Event Hub Authorization Rule Id\",\"description\":\"The\ + \ Event Hub authorization rule Id for Azure Diagnostics. The authorization\ + \ rule needs to be at Event Hub namespace level. e.g. /subscriptions/{subscription\ + \ Id}/resourceGroups/{resource group}/providers/Microsoft.EventHub/namespaces/{Event\ + \ Hub namespace}/authorizationrules/{authorization rule}\",\"strongType\"\ + :\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\"\ + :true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Event Hub Location\",\"description\":\"The location the Event Hub resides\ + \ in. Only Data Lake Analytics in this location will be linked to this Event\ + \ Hub.\",\"strongType\":\"location\"},\"defaultValue\":\"\"},\"metricsEnabled\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable metrics\",\"\ + description\":\"Whether to enable metrics stream to the Event Hub - True or\ + \ False\"},\"allowedValues\":[\"True\",\"False\"],\"defaultValue\":\"False\"\ + },\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable\ + \ logs\",\"description\":\"Whether to enable logs stream to the Event Hub\ + \ - True or False\"},\"allowedValues\":[\"True\",\"False\"],\"defaultValue\"\ + :\"True\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.DataLakeAnalytics/accounts\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\"\ + ,\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\"\ + ,\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"\ + /providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\"\ + :\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\"\ + :\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"\ + type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"\ + resources\":[{\"type\":\"Microsoft.DataLakeAnalytics/accounts/providers/diagnosticSettings\"\ + ,\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'),\ + \ '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"\ + [parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\"\ + :\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\"\ + ,\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\"\ + :false,\"days\":0}}],\"logs\":[{\"category\":\"Audit\",\"enabled\":\"[parameters('logsEnabled')]\"\ + },{\"category\":\"Requests\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"\ + outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"\ + },\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"\ + value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\"\ + :\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"\ + },\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\"\ + :\"/providers/Microsoft.Authorization/policyDefinitions/4daddf25-4823-43d4-88eb-2419eb6dcc08\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4daddf25-4823-43d4-88eb-2419eb6dcc08\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1394 - System\ + \ Maintenance Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Maintenance control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1394\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4db56f68-3f50-45ab-88f3-ca46f5379a94\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4db56f68-3f50-45ab-88f3-ca46f5379a94\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1702 - Information\ + \ System Monitoring | Indicators Of Compromise\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this System and\ + \ Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1702\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4dfc0855-92c4-4641-b155-a55ddd962362\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4dfc0855-92c4-4641-b155-a55ddd962362\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1001 - Access\ + \ Control Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Access Control control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1001\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e26f8c3-4bf3-4191-b8fc-d888805101b7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e26f8c3-4bf3-4191-b8fc-d888805101b7\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1083 - Publicly\ + \ Accessible Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1083\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e319cb6-2ca3-4a58-ad75-e67f484e50ec\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e319cb6-2ca3-4a58-ad75-e67f484e50ec\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1579 - Acquisition\ + \ Process | Use Of Approved Piv Products\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this System and Services\ + \ Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1579\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e54c7ef-7457-430b-9a3e-ef8881d4a8e0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e54c7ef-7457-430b-9a3e-ef8881d4a8e0\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1247 - Contingency\ + \ Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"\ + Microsoft implements this Contingency Planning control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1247\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e666db5-b2ef-4b06-aac6-09bfce49151b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e666db5-b2ef-4b06-aac6-09bfce49151b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1196 - Configuration\ + \ Change Control | Automated Document / Notification / Prohibition Of Changes\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Configuration Management control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1196\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e7f4ea4-dd62-44f6-8886-ac6137cf52b0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e7f4ea4-dd62-44f6-8886-ac6137cf52b0\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1134 - Protection\ + \ Of Audit Information | Access By Subset Of Privileged Users\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1134\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e95f70e-181c-4422-9da2-43079710c789\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e95f70e-181c-4422-9da2-43079710c789\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1267 - Alternate\ + \ Storage Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Contingency Planning control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1267\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e97ba1d-be5d-4953-8da4-0cccf28f4805\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e97ba1d-be5d-4953-8da4-0cccf28f4805\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1192 - Configuration\ + \ Change Control | Automated Document / Notification / Prohibition Of Changes\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Configuration Management control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1192\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ebd97f7-b105-4f50-8daf-c51465991240\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ebd97f7-b105-4f50-8daf-c51465991240\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1139 - Audit\ + \ Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Audit and Accountability control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1139\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ed62522-de00-4dda-9810-5205733d2f34\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ed62522-de00-4dda-9810-5205733d2f34\"\ + },{\"properties\":{\"displayName\":\"A maximum of 3 owners should be designated\ + \ for your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"It is recommended to designate up to 3 subscription owners in order to\ + \ reduce the potential for breach by a compromised owner.\",\"metadata\":{\"\ + version\":\"2.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/assessments\",\"name\":\"6f90a6d6-d4d6-0794-0ec1-98fa77878c2e\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f11b553-d42e-4e3a-89be-32ca364cad4c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1442 - Media\ + \ Sanitization | Nondestructive Techniques\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Media Protection\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1442\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f26049b-2c5a-4841-9ff3-d48a26aae475\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f26049b-2c5a-4841-9ff3-d48a26aae475\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1182 - Baseline\ + \ Configuration | Configure Systems, Components, Or Devices For High-Risk\ + \ Areas\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"\ + Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1182\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f34f554-da4b-4786-8d66-7915c90893da\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f34f554-da4b-4786-8d66-7915c90893da\"\ + },{\"properties\":{\"displayName\":\"A security contact email address should\ + \ be provided for your subscription\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"All\",\"description\":\"Enter an email address to receive notifications\ + \ when Azure Security Center detects compromised resources\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"\ + description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/securityContacts\",\"existenceCondition\":{\"field\":\"\ + Microsoft.Security/securityContacts/email\",\"notEquals\":\"\"}}}}},\"id\"\ + :\"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7\"\ + },{\"properties\":{\"displayName\":\"Add a tag to resources\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds the specified tag\ + \ and value when any resource missing this tag is created or updated. Existing\ + \ resources can be remediated by triggering a remediation task. If the tag\ + \ exists with a different value it will not be changed. Does not modify tags\ + \ on resource groups.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Tag Name\",\"description\":\"Name of the tag, such as 'environment'\"\ + }},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag Value\"\ + ,\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\"\ + :{\"if\":{\"field\":\"[concat('tags[', parameters('tagName'), ']')]\",\"exists\"\ + :\"false\"},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', parameters('tagName'),\ + \ ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f9dc7db-30c1-420c-b61a-e1d640128d26\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f9dc7db-30c1-420c-b61a-e1d640128d26\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Storage account public access\ + \ should be disallowed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"\ + description\":\"Anonymous public read access to containers and blobs in Azure\ + \ Storage is a convenient way to share data, but might present security risks.\ + \ To prevent data breaches caused by undesired anonymous access, Microsoft\ + \ recommends preventing public access to a storage account unless your scenario\ + \ requires it.\",\"metadata\":{\"version\":\"1.0.1-preview\",\"category\"\ + :\"Storage\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"[Preview]: Effect\",\"description\":\"The\ + \ effect determines what happens when the policy rule is evaluated to match\"\ + },\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"\ + audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Storage/storageAccounts\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/allowBlobPublicAccess\"\ + ,\"equals\":\"false\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4fa4b6c0-31ca-4c0d-b10d-24b96f62a751\"\ + },{\"properties\":{\"displayName\":\"A vulnerability assessment solution should\ + \ be enabled on your virtual machines\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"All\",\"description\":\"Audits virtual machines to detect whether they\ + \ are running a supported vulnerability assessment solution. A core component\ + \ of every cyber risk and security program is the identification and analysis\ + \ of vulnerabilities. Azure Security Center's standard pricing tier includes\ + \ vulnerability scanning for your virtual machines at no extra cost. Additionally,\ + \ Security Center can automatically deploy this tool for you.\",\"metadata\"\ + :{\"version\":\"2.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"\ + description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\"\ + ,\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"550e890b-e652-4d22-8274-60b3bdb24c63\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"501541f7-f7e7-4cd6-868c-4190fdad3ac9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1485 - Delivery\ + \ And Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Physical and Environmental Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1485\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/50301354-95d0-4a11-8af5-8039ecf6d38b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"50301354-95d0-4a11-8af5-8039ecf6d38b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1646 - Cryptographic\ + \ Key Establishment And Management | Asymmetric Keys\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this System and\ + \ Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1646\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/506814fa-b930-4b10-894e-a45b98c40e1a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"506814fa-b930-4b10-894e-a45b98c40e1a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1566 - System\ + \ Development Life Cycle\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this System and Services Acquisition\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1566\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/50ad3724-e2ac-4716-afcc-d8eabd97adb9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"50ad3724-e2ac-4716-afcc-d8eabd97adb9\"\ + },{\"properties\":{\"displayName\":\"A custom IPsec/IKE policy must be applied\ + \ to all Azure virtual network gateway connections\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"All\",\"description\":\"This policy ensures that all Azure virtual\ + \ network gateway connections use a custom Internet Protocol Security(Ipsec)/Internet\ + \ Key Exchange(IKE) policy. Supported algorithms and key strengths - https://aka.ms/AA62kb0\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"},\"IPsecEncryption\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"IPsec Encryption\",\"\ + description\":\"IPsec Encryption\"}},\"IPsecIntegrity\":{\"type\":\"Array\"\ + ,\"metadata\":{\"displayName\":\"IPsec Integrity\",\"description\":\"IPsec\ + \ Integrity\"}},\"IKEEncryption\":{\"type\":\"Array\",\"metadata\":{\"displayName\"\ + :\"IKE Encryption\",\"description\":\"IKE Encryption\"}},\"IKEIntegrity\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"IKE Integrity\",\"description\"\ + :\"IKE Integrity\"}},\"DHGroup\":{\"type\":\"Array\",\"metadata\":{\"displayName\"\ + :\"DH Group\",\"description\":\"DH Group\"}},\"PFSGroup\":{\"type\":\"Array\"\ + ,\"metadata\":{\"displayName\":\"PFS Group\",\"description\":\"PFS Group\"\ + }}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/connections\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].ipsecEncryption\"\ + ,\"notIn\":\"[parameters('IPsecEncryption')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].ipsecIntegrity\"\ + ,\"notIn\":\"[parameters('IPsecIntegrity')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].ikeEncryption\"\ + ,\"notIn\":\"[parameters('IKEEncryption')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].ikeIntegrity\"\ + ,\"notIn\":\"[parameters('IKEIntegrity')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].dhGroup\"\ + ,\"notIn\":\"[parameters('DHGroup')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].pfsGroup\"\ + ,\"notIn\":\"[parameters('PFSGroup')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/50b83b09-03da-41c1-b656-c293c914862b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"50b83b09-03da-41c1-b656-c293c914862b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1248 - Contingency\ + \ Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"\ + Microsoft implements this Contingency Planning control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1248\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/50fc602d-d8e0-444b-a039-ad138ee5deb0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"50fc602d-d8e0-444b-a039-ad138ee5deb0\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1386 - Information\ + \ Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Incident Response control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1386\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5120193e-91fd-4f9d-bc6d-194f94734065\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5120193e-91fd-4f9d-bc6d-194f94734065\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1352 - Incident\ + \ Response Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Incident Response control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1352\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/518cb545-bfa8-43f8-a108-3b7d5037469a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"518cb545-bfa8-43f8-a108-3b7d5037469a\"\ + },{\"properties\":{\"displayName\":\"Azure Defender for Kubernetes should\ + \ be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"Azure Defender for Kubernetes provides real-time threat protection for\ + \ containerized environments and generates alerts for suspicious activities.\"\ + ,\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security Center\"},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"KubernetesService\"\ + ,\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"\ + Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"523b5cd1-3e23-492f-a539-13118b6d1e3a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1642 - Network\ + \ Disconnect\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Communications Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1642\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53397227-5ee3-4b23-9e5e-c8a767ce6928\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53397227-5ee3-4b23-9e5e-c8a767ce6928\"\ + },{\"properties\":{\"displayName\":\"Connection throttling should be enabled\ + \ for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"This policy helps audit any PostgreSQL databases\ + \ in your environment without Connection throttling enabled. This setting\ + \ enables temporary connection throttling per IP for too many invalid password\ + \ login failures.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"\ + },\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\"\ + :\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\"\ + ,\"name\":\"connection_throttling\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\"\ + ,\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5345bb39-67dc-4960-a1bf-427e16b9a0bd\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5345bb39-67dc-4960-a1bf-427e16b9a0bd\"\ + },{\"properties\":{\"displayName\":\"Azure SignalR Service should use private\ + \ links\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Audit Azure SignalR Service resources that do not have at least one approved\ + \ private endpoint connection. Clients in a virtual network can securely access\ + \ resources that have private endpoint connections through private links.\ + \ For more information, visit: https://aka.ms/asrs/privatelink.\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"\ + },{\"count\":{\"field\":\"Microsoft.SignalRService/SignalR/privateEndpointConnections[*]\"\ + ,\"where\":{\"field\":\"Microsoft.SignalRService/SignalR/privateEndpointConnections[*].privateLinkServiceConnectionState.status\"\ + ,\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53503636-bcc9-4748-9663-5348217f160f\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1467 - Visitor\ + \ Access Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Physical and Environmental Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1467\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5350cbf9-8bdd-4904-b22a-e88be84ca49d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5350cbf9-8bdd-4904-b22a-e88be84ca49d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1183 - Baseline\ + \ Configuration | Configure Systems, Components, Or Devices For High-Risk\ + \ Areas\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"\ + Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1183\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5352e3e0-e63a-452e-9e5f-9c1d181cff9c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5352e3e0-e63a-452e-9e5f-9c1d181cff9c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1029 - Information\ + \ Flow Enforcement | Security Policy Filters\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Access Control\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1029\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53ac8f8e-c2b5-4d44-8a2d-058e9ced9b69\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53ac8f8e-c2b5-4d44-8a2d-058e9ced9b69\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1270 - Alternate\ + \ Storage Site | Recovery Time / Point Objectives\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Contingency\ + \ Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1270\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53c76a39-2097-408a-b237-b279f7b4614d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53c76a39-2097-408a-b237-b279f7b4614d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1040 - Least\ + \ Privilege | Review Of User Privileges\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Access Control control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1040\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/54205576-cec9-463f-ba44-b4b3f5d0a84c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"54205576-cec9-463f-ba44-b4b3f5d0a84c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1015 - Account\ + \ Management | Disable Inactive Accounts\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Access Control control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1015\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/544a208a-9c3f-40bc-b1d1-d7e144495c14\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"544a208a-9c3f-40bc-b1d1-d7e144495c14\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1026 - Account\ + \ Management | Disable Accounts For High-Risk Individuals\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1026\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/55419419-c597-4cd4-b51e-009fd2266783\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"55419419-c597-4cd4-b51e-009fd2266783\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1045 - Unsuccessful\ + \ Logon Attempts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1045\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/554d2dd6-f3a8-4ad5-b66f-5ce23bd18892\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"554d2dd6-f3a8-4ad5-b66f-5ce23bd18892\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Firewall should be enabled\ + \ on Key Vault\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"The key vault firewall prevents unauthorized traffic from reaching your\ + \ key vault and provides an additional layer of protection for your secrets.\ + \ Enable the key vault firewall to make sure that only traffic from allowed\ + \ networks can access your key vault.\",\"metadata\":{\"version\":\"1.0.1-preview\"\ + ,\"category\":\"Key Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"\ + },{\"field\":\"Microsoft.KeyVault/vaults/networkAcls.defaultAction\",\"notEquals\"\ + :\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"\ + /providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"55615ac9-af46-4a59-874e-391cc3dfb490\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1523 - Personnel\ + \ Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1523\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5577a310-2551-49c8-803b-36e0d5e55601\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5577a310-2551-49c8-803b-36e0d5e55601\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1113 - Response\ + \ To Audit Processing Failures | Audit Storage Capacity\",\"policyType\":\"\ + Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1113\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/562afd61-56be-4313-8fe4-b9564aa4ba7d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"562afd61-56be-4313-8fe4-b9564aa4ba7d\"\ + },{\"properties\":{\"displayName\":\"Web Application Firewall (WAF) should\ + \ be enabled for Application Gateway\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Requires Web Application Firewall (WAF) on\ + \ any Application Gateway. A Web Application Firewall provides greater security\ + \ for your other Azure resources.\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"\ + Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.Network/applicationGateways\"\ + },{\"field\":\"Microsoft.Network/applicationGateways/webApplicationFirewallConfiguration\"\ + ,\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"564feb30-bf6a-4854-b4bb-0d2d2d1e6c66\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1212 - Configuration\ + \ Settings | Automated Central Management / Application / Verification\",\"\ + policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements\ + \ this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1212\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/56d970ee-4efc-49c8-8a4e-5916940d784c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"56d970ee-4efc-49c8-8a4e-5916940d784c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1403 - Controlled\ + \ Maintenance | Automated Maintenance Activities\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Maintenance\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1403\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/57149289-d52b-4f40-9fe6-5233c1ef80f7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"57149289-d52b-4f40-9fe6-5233c1ef80f7\"\ + },{\"properties\":{\"displayName\":\"CORS should not allow every resource\ + \ to access your Web Applications\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"Cross-Origin Resource Sharing (CORS) should not\ + \ allow all domains to access your web application. Allow only required domains\ + \ to interact with your web app.\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\"\ + :\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Web/sites/config/web.cors.allowedOrigins[*]\",\"notEquals\"\ + :\"*\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5744710e-cc2f-4ee8-8809-3b11e89f4bc9\"\ + },{\"properties\":{\"displayName\":\"Audit Windows web servers that are not\ + \ using secure communication protocols\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Requires that prerequisites are deployed to\ + \ the policy assignment scope. For details, visit https://aka.ms/gcpol. Machines\ + \ are non-compliant if the registry key HKLM:\\\\SYSTEM\\\\CurrentControlSet\\\ + \\Control\\\\SecurityProviders\\\\SCHANNEL\\\\Protocols includes protocols\ + \ less secure than what is selected in the policy parameter.\",\"metadata\"\ + :{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\"\ + :[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AuditSecureProtocol\"\ + ,\"version\":\"1.*\",\"configurationParameter\":{\"MinimumTLSVersion\":\"\ + [SecureWebServer]s1;MinimumTLSVersion\"}}},\"parameters\":{\"IncludeArcMachines\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include Arc connected\ + \ servers\",\"description\":\"By selecting this option, you agree to be charged\ + \ monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"\ + ],\"defaultValue\":\"false\"},\"MinimumTLSVersion\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"Minimum TLS version\",\"description\":\"The\ + \ minimum TLS protocol version that should be enabled. Windows web servers\ + \ with lower TLS versions will be marked as non-compliant.\"},\"allowedValues\"\ + :[\"1.1\",\"1.2\"],\"defaultValue\":\"1.1\"}},\"policyRule\":{\"if\":{\"anyOf\"\ + :[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AuditSecureProtocol\",\"existenceCondition\":{\"allOf\":[{\"field\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[SecureWebServer]s1;MinimumTLSVersion', '=',\ + \ parameters('MinimumTLSVersion')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5752e6d6-1206-46d8-8ab1-ecc2f71a8112\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1162 - Continuous\ + \ Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Security Assessment and Authorization control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1162\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5770f3d6-8c2b-4f6f-bf0e-c8c8fc36d592\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5770f3d6-8c2b-4f6f-bf0e-c8c8fc36d592\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1054 - Session\ + \ Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1054\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5807e1b4-ba5e-4718-8689-a0ca05a191b2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5807e1b4-ba5e-4718-8689-a0ca05a191b2\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'System Audit Policies - Detailed Tracking'\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'System Audit Policies - Detailed\ + \ Tracking' for auditing DPAPI, process creation/termination, RPC events,\ + \ and PNP activity. This policy requires that the Guest Configuration prerequisites\ + \ have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\",\"version\"\ + :\"1.*\",\"configurationParameter\":{\"AuditProcessTermination\":\"Audit Process\ + \ Termination;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Include Arc connected servers\"\ + ,\"description\":\"By selecting this option, you agree to be charged monthly\ + \ per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"],\"\ + defaultValue\":\"false\"},\"AuditProcessTermination\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Audit Process Termination\",\"description\"\ + :\"Specifies whether audit events are generated when a process has exited.\ + \ Recommended for monitoring termination of critical processes.\"},\"allowedValues\"\ + :[\"No Auditing\",\"Success\",\"Failure\",\"Success and Failure\"],\"defaultValue\"\ + :\"No Auditing\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of this policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_SystemAuditPoliciesDetailedTracking\",\"existenceCondition\"\ + :{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Audit Process Termination;ExpectedValue', '=',\ + \ parameters('AuditProcessTermination')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58383b73-94a9-4414-b382-4146eb02611b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58383b73-94a9-4414-b382-4146eb02611b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1584 - Information\ + \ System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this System and Services Acquisition\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1584\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5864522b-ff1d-4979-a9f8-58bee1fb174c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5864522b-ff1d-4979-a9f8-58bee1fb174c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1547 - Vulnerability\ + \ Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Risk Assessment control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1547\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58abf9b8-c6d4-4b4b-bfb9-fe98fe295f52\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58abf9b8-c6d4-4b4b-bfb9-fe98fe295f52\"\ + },{\"properties\":{\"displayName\":\"Audit Windows machines on which Windows\ + \ Serial Console is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Requires that prerequisites are deployed to the policy\ + \ assignment scope. For details, visit https://aka.ms/gcpol. Machines are\ + \ non-compliant if the machine does not have the Serial Console software installed\ + \ or if the EMS port number or baud rate are not configured with the same\ + \ values as the policy parameters.\",\"metadata\":{\"category\":\"Guest Configuration\"\ + ,\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"\ + ],\"guestConfiguration\":{\"name\":\"WindowsSerialConsole\",\"version\":\"\ + 1.*\",\"configurationParameter\":{\"EMSPortNumber\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber\"\ + ,\"EMSBaudRate\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate\"\ + }}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"EMSPortNumber\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"EMS Port Number\",\"\ + description\":\"An integer indicating the COM port to be used for the Emergency\ + \ Management Services (EMS) console redirection. For more information on EMS\ + \ settings, please visit https://aka.ms/gcpolwsc\"},\"allowedValues\":[\"\ + 1\",\"2\",\"3\",\"4\"],\"defaultValue\":\"1\"},\"EMSBaudRate\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"EMS Baud Rate\",\"description\":\"\ + An integer indicating the baud rate to be used for the Emergency Management\ + \ Services (EMS) console redirection. For more information on EMS settings,\ + \ please visit https://aka.ms/gcpolwsc\"},\"allowedValues\":[\"9600\",\"19200\"\ + ,\"38400\",\"57600\",\"115200\"],\"defaultValue\":\"115200\"}},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsSerialConsole\",\"existenceCondition\":{\"allOf\":[{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber',\ + \ '=', parameters('EMSPortNumber'), ',', '[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate',\ + \ '=', parameters('EMSBaudRate')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58c460e9-7573-4bb2-9676-339c2f2486bb\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58c460e9-7573-4bb2-9676-339c2f2486bb\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1573 - Acquisition\ + \ Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Services Acquisition control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1573\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58c93053-7b98-4cf0-b99f-1beb985416c2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58c93053-7b98-4cf0-b99f-1beb985416c2\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Ensure Function app is\ + \ using the latest version of TLS encryption\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Please use /providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193\ + \ instead. The TLS(Transport Layer Security) protocol secures transmission\ + \ of data over the internet using standard encryption technology. Encryption\ + \ should be set with the latest version of TLS. App service allows TLS 1.2\ + \ by default, which is the recommended TLS level by industry standards, such\ + \ as PCI DSS\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\"\ + :\"App Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"\ + },{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"\ + [parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\"\ + ,\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.minTlsVersion\"\ + ,\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58d94fc1-a072-47c2-bd37-9cdb38e77453\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58d94fc1-a072-47c2-bd37-9cdb38e77453\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1063 - Remote\ + \ Access | Managed Access Control Points\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Access Control control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1063\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/593ce201-54b2-4dd0-b34f-c308005d7780\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"593ce201-54b2-4dd0-b34f-c308005d7780\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1463 - Monitoring\ + \ Physical Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Physical and Environmental Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1463\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/59721f87-ae25-4db0-a2a4-77cc5b25d495\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"59721f87-ae25-4db0-a2a4-77cc5b25d495\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1425 - Timely\ + \ Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Maintenance control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1425\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5983d99c-f39b-4c32-a3dc-170f19f6941b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5983d99c-f39b-4c32-a3dc-170f19f6941b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1512 - Personnel\ + \ Screening\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1512\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5a8324ad-f599-429b-aaed-f9c6e8c987a8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5a8324ad-f599-429b-aaed-f9c6e8c987a8\"\ + },{\"properties\":{\"displayName\":\"Operating system version should be the\ + \ most current version for your cloud service roles\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"All\",\"description\":\"Keeping the operating system (OS) on the\ + \ most recent supported version for your cloud service roles enhances the\ + \ systems security posture.\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Security Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"in\":[\"Microsoft.ClassicCompute/domainNames/slots/roles\"]},\"then\"\ + :{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\"\ + ,\"name\":\"8bc390da-9eb6-938d-25ed-44a35d9bcc9d\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\"\ + ,\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5a913c68-0590-402c-a531-e57e19379da3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5a913c68-0590-402c-a531-e57e19379da3\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs that do not have a minimum password age of 1 day\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should only be\ + \ used along with its corresponding deploy policy in an initiative. This definition\ + \ allows Azure Policy to process the results of auditing Windows virtual machines\ + \ that do not have a minimum password age of 1 day. For more information on\ + \ Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\"\ + :{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"\ + deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"MinimumPasswordAge\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5aa11bbc-5c76-4302-80e5-aba46a4282e7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5aa11bbc-5c76-4302-80e5-aba46a4282e7\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1032 - Separation\ + \ Of Duties\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1032\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5aa85661-d618-46b8-a20f-ca40a86f0751\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5aa85661-d618-46b8-a20f-ca40a86f0751\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs that do not restrict the minimum password length to 14 characters\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy\ + \ should only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines that do not restrict the minimum password length to 14\ + \ characters. For more information on Guest Configuration policies, please\ + \ visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Guest Configuration\",\"deprecated\":true},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"MinimumPasswordLength\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5aebc8d1-020d-4037-89a0-02043a7524ec\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5aebc8d1-020d-4037-89a0-02043a7524ec\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1555 - Vulnerability\ + \ Scanning | Privileged Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Risk Assessment control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1555\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5afa8cab-1ed7-4e40-884c-64e0ac2059cc\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5afa8cab-1ed7-4e40-884c-64e0ac2059cc\"\ + },{\"properties\":{\"displayName\":\"Audit Windows machines that allow re-use\ + \ of the previous 24 passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Requires that prerequisites are deployed to the policy\ + \ assignment scope. For details, visit https://aka.ms/gcpol. Machines are\ + \ non-compliant if Windows machines that allow re-use of the previous 24 passwords\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"EnforcePasswordHistory\",\"version\":\"1.*\"}},\"parameters\"\ + :{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Include Arc connected servers\",\"description\":\"By selecting this option,\ + \ you agree to be charged monthly per Arc connected machine.\"},\"allowedValues\"\ + :[\"true\",\"false\"],\"defaultValue\":\"false\"},\"effect\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + EnforcePasswordHistory\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b054a0d-39e2-4d53-bea3-9734cad2c69b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b054a0d-39e2-4d53-bea3-9734cad2c69b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1205 - Access\ + \ Restrictions For Change | Signed Components\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Configuration\ + \ Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1205\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b070cab-0fb8-4e48-ad29-fc90b4c2797c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b070cab-0fb8-4e48-ad29-fc90b4c2797c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1005 - Account\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1005\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b626abc-26d4-4e22-9de8-3831818526b1\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b626abc-26d4-4e22-9de8-3831818526b1\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1105 - Audit\ + \ Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Audit and Accountability control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1105\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b73f57b-587d-4470-a344-0b0ae805f459\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b73f57b-587d-4470-a344-0b0ae805f459\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Linux VMs that have the specified applications installed\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should only be\ + \ used along with its corresponding deploy policy in an initiative. This definition\ + \ allows Azure Policy to process the results of auditing Linux virtual machines\ + \ that have the specified applications installed. For more information on\ + \ Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\"\ + :{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest Configuration\",\"\ + deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"\ + qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\"\ + ,\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"\ + like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\"\ + ,\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"\ + ]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"\ + field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\"\ + ,\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\"\ + ,\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\"\ + ,\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"\ + cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\"\ + ,\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\"\ + ,\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"\ + ]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"\ + then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"not_installed_application_linux\",\"existenceCondition\":{\"field\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b842acb-0fe7-41b0-9f40-880ec4ad84d8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b842acb-0fe7-41b0-9f40-880ec4ad84d8\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1433 - Media\ + \ Transport\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Media Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1433\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b879b41-2728-41c5-ad24-9ee2c37cbe65\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b879b41-2728-41c5-ad24-9ee2c37cbe65\"\ + },{\"properties\":{\"displayName\":\"Container registries should be encrypted\ + \ with a customer-managed key (CMK)\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Audit container registries that do not have\ + \ encryption enabled with customer-managed keys (CMK). Azure automatically\ + \ encrypts registry contents at rest with service-managed keys. You can supplement\ + \ default encryption with an additional encryption layer using a key that\ + \ you create and manage in Azure Key Vault. For more information on CMK encryption,\ + \ please visit: https://aka.ms/acr/CMK.\",\"metadata\":{\"version\":\"1.1.0\"\ + ,\"category\":\"Container Registry\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"\ + Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"\ + },{\"field\":\"Microsoft.ContainerRegistry/registries/encryption.status\"\ + ,\"notEquals\":\"enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580\"\ + },{\"properties\":{\"displayName\":\"Ensure WEB app has 'Client Certificates\ + \ (Incoming client certificates)' set to 'On'\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Client certificates allow for the\ + \ app to request a certificate for incoming requests. Only clients that have\ + \ a valid certificate will be able to reach the app.\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"\ + Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\"\ + ,\"like\":\"app*\"},{\"field\":\"Microsoft.Web/sites/clientCertEnabled\",\"\ + equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5bb220d9-2698-4ee4-8404-b9c30c9df609\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs on which the remote connection status does not match the\ + \ specified one\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy creates a Guest Configuration assignment to audit Windows virtual\ + \ machines on which the remote host connection status does not match the specified\ + \ one. It also creates a system-assigned managed identity and deploys the\ + \ VM extension for Guest Configuration. This policy should only be used along\ + \ with its corresponding audit policy in an initiative. For more information\ + \ on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"\ + metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"host\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Remote Host Name\",\"description\":\"Specifies the Domain\ + \ Name System (DNS) name or IP address of the remote host machine.\"}},\"\ + port\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:\ + \ Port\",\"description\":\"The TCP port number on the remote host name.\"\ + }},\"shouldConnect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"\ + [Deprecated]: Should connect to remote host\",\"description\":\"Must be 'True'\ + \ or 'False'. 'True' indicates that the virtual machine should be able to\ + \ establish a connection with the remote host specified, so the machine will\ + \ be non-compliant if it cannot establish a connection. 'False' indicates\ + \ that the virtual machine should not be able to establish a connection with\ + \ the remote host specified, so the machine will be non-compliant if it can\ + \ establish a connection.\"},\"allowedValues\":[\"True\",\"False\"],\"defaultValue\"\ + :\"False\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"\ + type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsRemoteConnection\",\"existenceCondition\":{\"field\":\"\ + Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[WindowsRemoteConnection]WindowsRemoteConnection1;host',\ + \ '=', parameters('host'), ',', '[WindowsRemoteConnection]WindowsRemoteConnection1;port',\ + \ '=', parameters('port'), ',', '[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect',\ + \ '=', parameters('shouldConnect')))]\"},\"deployment\":{\"properties\":{\"\ + mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"WindowsRemoteConnection\"\ + },\"host\":{\"value\":\"[parameters('host')]\"},\"port\":{\"value\":\"[parameters('port')]\"\ + },\"shouldConnect\":{\"value\":\"[parameters('shouldConnect')]\"}},\"template\"\ + :{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"host\":{\"type\":\"string\"},\"port\":{\"type\":\"\ + string\"},\"shouldConnect\":{\"type\":\"string\"}},\"resources\":[{\"condition\"\ + :\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;host\"\ + ,\"value\":\"[parameters('host')]\"},{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;port\"\ + ,\"value\":\"[parameters('port')]\"},{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect\"\ + ,\"value\":\"[parameters('shouldConnect')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;host\"\ + ,\"value\":\"[parameters('host')]\"},{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;port\"\ + ,\"value\":\"[parameters('port')]\"},{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect\"\ + ,\"value\":\"[parameters('shouldConnect')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5bb36dda-8a78-4df9-affd-4f05a8612a8a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5bb36dda-8a78-4df9-affd-4f05a8612a8a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1551 - Vulnerability\ + \ Scanning | Update Tool Capability\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Risk Assessment control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1551\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5bbda922-0172-4095-89e6-5b4a0bf03af7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5bbda922-0172-4095-89e6-5b4a0bf03af7\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'Security Options - Network Security'\",\"\ + policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should\ + \ only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines with non-compliant settings in Group Policy category: 'Security\ + \ Options - Network Security'. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"deprecated\"\ + :true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsNetworkSecurity\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c028d2a-1889-45f6-b821-31f42711ced8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c028d2a-1889-45f6-b821-31f42711ced8\"\ + },{\"properties\":{\"displayName\":\"Audit Log Analytics agent deployment\ + \ in virtual machine scale sets - VM Image (OS) unlisted\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports virtual machine\ + \ scale sets as non-compliant if the VM Image (OS) is not in the list defined\ + \ and the agent is not installed. The list of OS images will be updated over\ + \ time as support is updated.\",\"metadata\":{\"version\":\"1.0.1\",\"category\"\ + :\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude_windows\":{\"type\"\ + :\"Array\",\"metadata\":{\"displayName\":\"Optional: List of VM images that\ + \ have supported Windows OS to add to scope\",\"description\":\"Example value:\ + \ '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"\ + },\"defaultValue\":[]},\"listOfImageIdToInclude_linux\":{\"type\":\"Array\"\ + ,\"metadata\":{\"displayName\":\"Optional: List of VM images that have supported\ + \ Linux OS to add to scope\",\"description\":\"Example value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"\ + },\"defaultValue\":[]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"not\":{\"anyOf\"\ + :[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_windows')]\"\ + },{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_linux')]\"\ + },{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\"\ + ,\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\"\ + ,\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\"\ + ,\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\"\ + ,\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\"\ + ,\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\"\ + ,\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\"\ + ,\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\"\ + ,\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"\ + *-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\"\ + :\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"Windows-10\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\"\ + :[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"\ + SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\"\ + ,\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\"\ + :[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\"\ + ,\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}}]},\"then\"\ + :{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\"\ + ,\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1671 - Flaw\ + \ Remediation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Information Integrity control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1671\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c5bbef7-a316-415b-9b38-29753ce8e698\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c5bbef7-a316-415b-9b38-29753ce8e698\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1067 - Wireless\ + \ Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1067\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c5e54f6-0127-44d0-8b61-f31dc8dd6190\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c5e54f6-0127-44d0-8b61-f31dc8dd6190\"\ + },{\"properties\":{\"displayName\":\"External accounts with write permissions\ + \ should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"All\",\"description\":\"External accounts with write privileges should\ + \ be removed from your subscription in order to prevent unmonitored access.\"\ + ,\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security Center\"},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"04e7147b-0deb-9796-2e5c-0336343ceb3d\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c607a2e-c700-4744-8254-d77e7c9eb5e4\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1483 - Water\ + \ Damage Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Physical and Environmental Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1483\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5cb81060-3c8a-4968-bcdc-395a1801f6c1\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5cb81060-3c8a-4968-bcdc-395a1801f6c1\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1362 - Incident\ + \ Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Incident Response control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1362\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5d169442-d6ef-439b-8dca-46c2c3248214\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5d169442-d6ef-439b-8dca-46c2c3248214\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1014 - Account\ + \ Management | Removal Of Temporary / Emergency Accounts\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1014\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5dee936c-8037-4df1-ab35-6635733da48c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5dee936c-8037-4df1-ab35-6635733da48c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1665 - Process\ + \ Isolation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Communications Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1665\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5df3a55c-8456-44d4-941e-175f79332512\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5df3a55c-8456-44d4-941e-175f79332512\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Function App should only\ + \ be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"\ + description\":\"Use of HTTPS ensures server/service authentication and protects\ + \ data in transit from network layer eavesdropping attacks.\",\"metadata\"\ + :{\"version\":\"1.0.0-deprecated\",\"category\":\"Security Center\",\"deprecated\"\ + :true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allof\":[{\"\ + field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\"\ + :\"kind\",\"equals\":\"functionapp\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux\"\ + },{\"field\":\"kind\",\"equals\":\"functionapp,linux,container\"}]}]},\"then\"\ + :{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\"\ + ,\"name\":\"OnlyHttpsForFunctionApp\",\"existenceCondition\":{\"field\":\"\ + Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\"\ + ,\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5df82f4f-773a-4a2d-97a2-422a806f1a55\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5df82f4f-773a-4a2d-97a2-422a806f1a55\"\ + },{\"properties\":{\"displayName\":\"Public network access should be disabled\ + \ for PostgreSQL flexible servers\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"Disabling the public network access property improves\ + \ security by ensuring your Azure Database for PostgreSQL flexible servers\ + \ can only be accessed from a private endpoint. This configuration strictly\ + \ disables access from any public address space outside of Azure IP range\ + \ and denies all logins that match IP or virtual network-based firewall rules.\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/flexibleServers\"\ + },{\"field\":\"Microsoft.DBforPostgreSQL/flexibleServers/publicNetworkAccess\"\ + ,\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e1de0e3-42cb-4ebc-a86d-61d0c619ca48\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e1de0e3-42cb-4ebc-a86d-61d0c619ca48\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1251 - Contingency\ + \ Plan | Coordinate With Related Plans\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Contingency Planning\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1251\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e2b3730-8c14-4081-8893-19dbb5de7348\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e2b3730-8c14-4081-8893-19dbb5de7348\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Audit Web Applications\ + \ that are not using latest supported .NET Framework\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"All\",\"description\":\"Use the latest supported .NET Framework\ + \ version for the latest security classes. Using older classes and types can\ + \ make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Security Center\",\"deprecated\":true},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:\ + \ Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\"\ + ,\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\"\ + :\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"\ + equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestDotNet\",\"\ + existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\"\ + ,\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e3315e0-a414-4efb-a4d2-c7bd2b0443d2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e3315e0-a414-4efb-a4d2-c7bd2b0443d2\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs that do not have the specified applications installed\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should only be\ + \ used along with its corresponding deploy policy in an initiative. This definition\ + \ allows Azure Policy to process the results of auditing Windows virtual machines\ + \ that do not have the specified applications installed. For more information\ + \ on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"\ + metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WhitelistedApplication\",\"existenceCondition\":{\"field\":\"\ + Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e393799-e3ca-4e43-a9a5-0ec4648a57d9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e393799-e3ca-4e43-a9a5-0ec4648a57d9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1116 - Audit\ + \ Review, Analysis, And Reporting\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Audit and Accountability\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1116\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e47bc51-35d1-44b8-92af-e2f2d8b67635\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e47bc51-35d1-44b8-92af-e2f2d8b67635\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1208 - Configuration\ + \ Settings\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1208\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ea87673-d06b-456f-a324-8abcee5c159f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ea87673-d06b-456f-a324-8abcee5c159f\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Allow resource creation\ + \ only in India data centers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Allows resource creation in the following locations only:\ + \ West India, South India, Central India\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"General\",\"deprecated\":true},\"parameters\":{},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"westindia\",\"southindia\"\ + ,\"centralindia\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ee85ce5-e7eb-44d6-b4a2-32a24be1ca54\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ee85ce5-e7eb-44d6-b4a2-32a24be1ca54\"\ + },{\"properties\":{\"displayName\":\"Deploy Log Analytics agent for Linux\ + \ virtual machine scale sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Deploy Log Analytics agent for Linux virtual machine scale\ + \ sets if the VM Image (OS) is in the list defined and the agent is not installed.\ + \ Note: if your scale set upgradePolicy is set to Manual, you need to apply\ + \ the extension to the all VMs in the set by calling upgrade on them. In CLI\ + \ this would be az vmss update-instances.\",\"metadata\":{\"version\":\"1.2.0\"\ + ,\"category\":\"Monitoring\"},\"parameters\":{\"logAnalytics\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Log Analytics workspace\",\"description\"\ + :\"Select Log Analytics workspace from dropdown list. If this workspace is\ + \ outside of the scope of the assignment you must manually grant 'Log Analytics\ + \ Contributor' permissions (or similar) to the policy assignment's principal\ + \ ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"listOfImageIdToInclude\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: List of VM\ + \ images that have supported Linux OS to add to scope\",\"description\":\"\ + Example value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"\ + },\"defaultValue\":[]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"\ + },{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"\ + RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"\ + RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"\ + SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\"\ + ,\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\"\ + :[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\"\ + ,\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\"\ + :{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\"\ + ,\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\ + ,\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"\ + ],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\"\ + ,\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\"\ + ,\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}]},\"deployment\":{\"\ + properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"\ + }},\"variables\":{\"vmExtensionName\":\"OMSAgentForLinux\",\"vmExtensionPublisher\"\ + :\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"OmsAgentForLinux\"\ + ,\"vmExtensionTypeHandlerVersion\":\"1.13\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'),\ + \ '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\"\ + ,\"location\":\"[parameters('location')]\",\"apiVersion\":\"2018-06-01\",\"\ + properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\"\ + :\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\"\ + ,\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'),\ + \ '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\"\ + :{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), '2015-03-20').primarySharedKey]\"\ + }}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled\ + \ extension for: ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\"\ + :{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ee9e9ed-0b42-41b7-8c9c-3cfb2fbe2069\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ee9e9ed-0b42-41b7-8c9c-3cfb2fbe2069\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Private endpoint should be\ + \ configured for Key Vault\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Private link provides a way to connect key vault to your\ + \ Azure resources without sending traffic over the public internet. Private\ + \ link provides defense in depth protection against data exfiltration.\",\"\ + metadata\":{\"version\":\"1.0.1-preview\",\"category\":\"Key Vault\",\"preview\"\ + :true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Preview]: Effect\",\"description\":\"Enable or disable the execution of\ + \ the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\"\ + :\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/vaults/privateEndpointConnections\"\ + ,\"exists\":\"false\"},{\"count\":{\"field\":\"Microsoft.KeyVault/vaults/privateEndpointConnections[*]\"\ + },\"equals\":0}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f0bc445-3935-4915-9981-011aa2b46147\"\ + },{\"properties\":{\"displayName\":\"Vulnerabilities in Azure Container Registry\ + \ images should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\"\ + ,\"description\":\"Container image vulnerability assessment scans your registry\ + \ for security vulnerabilities on each pushed container image and exposes\ + \ detailed findings for each image (powered by Qualys). Resolving the vulnerabilities\ + \ can greatly improve your containers' security posture and protect them from\ + \ attacks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security Center\"\ + },\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\"\ + :\"Microsoft.ContainerRegistry/registries\"},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"dbd0cb49-b563-45e7-9724-889e799fa648\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"equals\":\"Healthy\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f0f936f-2f01-4bf5-b6be-d423792fa562\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1576 - Acquisition\ + \ Process | Design / Implementation Information For Security Controls\",\"\ + policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements\ + \ this System and Services Acquisition control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1576\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f18c885-ade3-48c5-80b1-8f9216019c18\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f18c885-ade3-48c5-80b1-8f9216019c18\"\ + },{\"properties\":{\"displayName\":\"External accounts with read permissions\ + \ should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"All\",\"description\":\"External accounts with read privileges should\ + \ be removed from your subscription in order to prevent unmonitored access.\"\ + ,\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security Center\"},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"a8c6a4ad-d51e-88fe-2979-d3ee3c864f8b\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f76cf89-fbf2-47fd-a3f4-b891fa780b60\"\ + },{\"properties\":{\"displayName\":\"Audit Windows virtual machines on which\ + \ the Windows Guest Configuration extension is not enabled\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy audits Windows\ + \ virtual machines hosted in Azure that are supported by Guest Configuration\ + \ but do not have the Guest Configuration extension enabled. For more information\ + \ on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"version\"\ + :\"2.0.0\",\"category\":\"Guest Configuration\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"\ + details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\"\ + :\"AzurePolicyforWindows\",\"existenceCondition\":{\"allOf\":[{\"field\":\"\ + Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"\ + },{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\"\ + :\"ConfigurationforWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\"\ + ,\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5fc23db3-dd4d-4c56-bcc7-43626243e601\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5fc23db3-dd4d-4c56-bcc7-43626243e601\"\ + },{\"properties\":{\"displayName\":\"Add or replace a tag on resources\",\"\ + policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds or replaces\ + \ the specified tag and value when any resource is created or updated. Existing\ + \ resources can be remediated by triggering a remediation task. Does not modify\ + \ tags on resource groups.\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Tag Name\",\"description\":\"Name of the tag, such as 'environment'\"\ + }},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag Value\"\ + ,\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\"\ + :{\"if\":{\"field\":\"[concat('tags[', parameters('tagName'), ']')]\",\"notEquals\"\ + :\"[parameters('tagValue')]\"},\"then\":{\"effect\":\"modify\",\"details\"\ + :{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[',\ + \ parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ffd78d9-436d-4b41-a421-5baa819e3008\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ffd78d9-436d-4b41-a421-5baa819e3008\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1663 - Protection\ + \ Of Information At Rest\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this System and Communications Protection\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1663\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/60171210-6dde-40af-a144-bf2670518bfa\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"60171210-6dde-40af-a144-bf2670518bfa\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'System Audit Policies - Object Access'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy\ + \ should only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines with non-compliant settings in Group Policy category: 'System\ + \ Audit Policies - Object Access'. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"deprecated\"\ + :true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/60aeaf73-a074-417a-905f-7ce9df0ff77b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"60aeaf73-a074-417a-905f-7ce9df0ff77b\"\ + },{\"properties\":{\"displayName\":\"Storage Accounts should use a virtual\ + \ network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"This policy audits any Storage Account not configured to\ + \ use a virtual network service endpoint.\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"\ + ],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Storage/storageAccounts/networkAcls.defaultAction\",\"\ + notEquals\":\"Deny\"},{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.virtualNetworkRules[*].id\"\ + ,\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/60d21c4f-21a3-4d94-85f4-b924e6aeeda4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"60d21c4f-21a3-4d94-85f4-b924e6aeeda4\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows web servers that are not using secure communication protocols\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy\ + \ should only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ web servers that are not using secure communication protocols (TLS 1.1 or\ + \ TLS 1.2). For more information on Guest Configuration policies, please visit\ + \ https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"\ + category\":\"Guest Configuration\",\"deprecated\":true},\"policyRule\":{\"\ + if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AuditSecureProtocol\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/60ffe3e2-4604-4460-8f22-0f1da058266c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"60ffe3e2-4604-4460-8f22-0f1da058266c\"\ + },{\"properties\":{\"displayName\":\"Deploy Advanced Data Security on SQL\ + \ servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy enables Advanced Data Security on SQL Servers. This includes\ + \ turning on Threat Detection and Vulnerability Assessment. It will automatically\ + \ create a storage account in the same region and resource group as the SQL\ + \ server to store scan results, with a 'sqlva' prefix.\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{},\"policyRule\"\ + :{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\"\ + :{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\"\ + ,\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/securityAlertPolicies.state\"\ + ,\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\"\ + ,\"/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serverName\":{\"type\":\"\ + string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"serverResourceGroupName\"\ + :\"[resourceGroup().name]\",\"subscriptionId\":\"[subscription().subscriptionId]\"\ + ,\"uniqueStorage\":\"[uniqueString(variables('subscriptionId'), variables('serverResourceGroupName'),\ + \ parameters('location'))]\",\"storageName\":\"[tolower(concat('sqlva', variables('uniqueStorage')))]\"\ + },\"resources\":[{\"type\":\"Microsoft.Storage/storageAccounts\",\"name\"\ + :\"[variables('storageName')]\",\"apiVersion\":\"2019-04-01\",\"location\"\ + :\"[parameters('location')]\",\"sku\":{\"name\":\"Standard_LRS\"},\"kind\"\ + :\"StorageV2\",\"properties\":{}},{\"name\":\"[concat(parameters('serverName'),\ + \ '/Default')]\",\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\"\ + ,\"apiVersion\":\"2017-03-01-preview\",\"properties\":{\"state\":\"Enabled\"\ + ,\"emailAccountAdmins\":true}},{\"name\":\"[concat(parameters('serverName'),\ + \ '/Default')]\",\"type\":\"Microsoft.Sql/servers/vulnerabilityAssessments\"\ + ,\"apiVersion\":\"2018-06-01-preview\",\"properties\":{\"storageContainerPath\"\ + :\"[concat(reference(resourceId('Microsoft.Storage/storageAccounts', variables('storageName'))).primaryEndpoints.blob,\ + \ 'vulnerability-assessment')]\",\"storageAccountAccessKey\":\"[listKeys(resourceId('Microsoft.Storage/storageAccounts',\ + \ variables('storageName')), '2018-02-01').keys[0].value]\",\"recurringScans\"\ + :{\"isEnabled\":true,\"emailSubscriptionAdmins\":true,\"emails\":[]}},\"dependsOn\"\ + :[\"[concat('Microsoft.Storage/storageAccounts/', variables('storageName'))]\"\ + ,\"[concat('Microsoft.Sql/servers/', parameters('serverName'), '/securityAlertPolicies/Default')]\"\ + ]}]},\"parameters\":{\"serverName\":{\"value\":\"[field('name')]\"},\"location\"\ + :{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6134c3db-786f-471e-87bc-8f479dc890f6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6134c3db-786f-471e-87bc-8f479dc890f6\"\ + },{\"properties\":{\"displayName\":\"Configure time zone on Windows machines.\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to set specified time zone on Windows\ + \ virtual machines.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"\ + Guest Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"\ + ]},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"TimeZone\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Time zone\",\"description\"\ + :\"The expected time zone\"},\"allowedValues\":[\"(UTC-12:00) International\ + \ Date Line West\",\"(UTC-11:00) Coordinated Universal Time-11\",\"(UTC-10:00)\ + \ Aleutian Islands\",\"(UTC-10:00) Hawaii\",\"(UTC-09:30) Marquesas Islands\"\ + ,\"(UTC-09:00) Alaska\",\"(UTC-09:00) Coordinated Universal Time-09\",\"(UTC-08:00)\ + \ Baja California\",\"(UTC-08:00) Coordinated Universal Time-08\",\"(UTC-08:00)\ + \ Pacific Time (US & Canada)\",\"(UTC-07:00) Arizona\",\"(UTC-07:00) Chihuahua,\ + \ La Paz, Mazatlan\",\"(UTC-07:00) Mountain Time (US & Canada)\",\"(UTC-06:00)\ + \ Central America\",\"(UTC-06:00) Central Time (US & Canada)\",\"(UTC-06:00)\ + \ Easter Island\",\"(UTC-06:00) Guadalajara, Mexico City, Monterrey\",\"(UTC-06:00)\ + \ Saskatchewan\",\"(UTC-05:00) Bogota, Lima, Quito, Rio Branco\",\"(UTC-05:00)\ + \ Chetumal\",\"(UTC-05:00) Eastern Time (US & Canada)\",\"(UTC-05:00) Haiti\"\ + ,\"(UTC-05:00) Havana\",\"(UTC-05:00) Indiana (East)\",\"(UTC-05:00) Turks\ + \ and Caicos\",\"(UTC-04:00) Asuncion\",\"(UTC-04:00) Atlantic Time (Canada)\"\ + ,\"(UTC-04:00) Caracas\",\"(UTC-04:00) Cuiaba\",\"(UTC-04:00) Georgetown,\ + \ La Paz, Manaus, San Juan\",\"(UTC-04:00) Santiago\",\"(UTC-03:30) Newfoundland\"\ + ,\"(UTC-03:00) Araguaina\",\"(UTC-03:00) Brasilia\",\"(UTC-03:00) Cayenne,\ + \ Fortaleza\",\"(UTC-03:00) City of Buenos Aires\",\"(UTC-03:00) Greenland\"\ + ,\"(UTC-03:00) Montevideo\",\"(UTC-03:00) Punta Arenas\",\"(UTC-03:00) Saint\ + \ Pierre and Miquelon\",\"(UTC-03:00) Salvador\",\"(UTC-02:00) Coordinated\ + \ Universal Time-02\",\"(UTC-02:00) Mid-Atlantic - Old\",\"(UTC-01:00) Azores\"\ + ,\"(UTC-01:00) Cabo Verde Is.\",\"(UTC) Coordinated Universal Time\",\"(UTC+00:00)\ + \ Dublin, Edinburgh, Lisbon, London\",\"(UTC+00:00) Monrovia, Reykjavik\"\ + ,\"(UTC+00:00) Sao Tome\",\"(UTC+01:00) Casablanca\",\"(UTC+01:00) Amsterdam,\ + \ Berlin, Bern, Rome, Stockholm, Vienna\",\"(UTC+01:00) Belgrade, Bratislava,\ + \ Budapest, Ljubljana, Prague\",\"(UTC+01:00) Brussels, Copenhagen, Madrid,\ + \ Paris\",\"(UTC+01:00) Sarajevo, Skopje, Warsaw, Zagreb\",\"(UTC+01:00) West\ + \ Central Africa\",\"(UTC+02:00) Amman\",\"(UTC+02:00) Athens, Bucharest\"\ + ,\"(UTC+02:00) Beirut\",\"(UTC+02:00) Cairo\",\"(UTC+02:00) Chisinau\",\"\ + (UTC+02:00) Damascus\",\"(UTC+02:00) Gaza, Hebron\",\"(UTC+02:00) Harare,\ + \ Pretoria\",\"(UTC+02:00) Helsinki, Kyiv, Riga, Sofia, Tallinn, Vilnius\"\ + ,\"(UTC+02:00) Jerusalem\",\"(UTC+02:00) Kaliningrad\",\"(UTC+02:00) Khartoum\"\ + ,\"(UTC+02:00) Tripoli\",\"(UTC+02:00) Windhoek\",\"(UTC+03:00) Baghdad\"\ + ,\"(UTC+03:00) Istanbul\",\"(UTC+03:00) Kuwait, Riyadh\",\"(UTC+03:00) Minsk\"\ + ,\"(UTC+03:00) Moscow, St. Petersburg\",\"(UTC+03:00) Nairobi\",\"(UTC+03:30)\ + \ Tehran\",\"(UTC+04:00) Abu Dhabi, Muscat\",\"(UTC+04:00) Astrakhan, Ulyanovsk\"\ + ,\"(UTC+04:00) Baku\",\"(UTC+04:00) Izhevsk, Samara\",\"(UTC+04:00) Port Louis\"\ + ,\"(UTC+04:00) Saratov\",\"(UTC+04:00) Tbilisi\",\"(UTC+04:00) Volgograd\"\ + ,\"(UTC+04:00) Yerevan\",\"(UTC+04:30) Kabul\",\"(UTC+05:00) Ashgabat, Tashkent\"\ + ,\"(UTC+05:00) Ekaterinburg\",\"(UTC+05:00) Islamabad, Karachi\",\"(UTC+05:00)\ + \ Qyzylorda\",\"(UTC+05:30) Chennai, Kolkata, Mumbai, New Delhi\",\"(UTC+05:30)\ + \ Sri Jayawardenepura\",\"(UTC+05:45) Kathmandu\",\"(UTC+06:00) Astana\",\"\ + (UTC+06:00) Dhaka\",\"(UTC+06:00) Omsk\",\"(UTC+06:30) Yangon (Rangoon)\"\ + ,\"(UTC+07:00) Bangkok, Hanoi, Jakarta\",\"(UTC+07:00) Barnaul, Gorno-Altaysk\"\ + ,\"(UTC+07:00) Hovd\",\"(UTC+07:00) Krasnoyarsk\",\"(UTC+07:00) Novosibirsk\"\ + ,\"(UTC+07:00) Tomsk\",\"(UTC+08:00) Beijing, Chongqing, Hong Kong, Urumqi\"\ + ,\"(UTC+08:00) Irkutsk\",\"(UTC+08:00) Kuala Lumpur, Singapore\",\"(UTC+08:00)\ + \ Perth\",\"(UTC+08:00) Taipei\",\"(UTC+08:00) Ulaanbaatar\",\"(UTC+08:45)\ + \ Eucla\",\"(UTC+09:00) Chita\",\"(UTC+09:00) Osaka, Sapporo, Tokyo\",\"(UTC+09:00)\ + \ Pyongyang\",\"(UTC+09:00) Seoul\",\"(UTC+09:00) Yakutsk\",\"(UTC+09:30)\ + \ Adelaide\",\"(UTC+09:30) Darwin\",\"(UTC+10:00) Brisbane\",\"(UTC+10:00)\ + \ Canberra, Melbourne, Sydney\",\"(UTC+10:00) Guam, Port Moresby\",\"(UTC+10:00)\ + \ Hobart\",\"(UTC+10:00) Vladivostok\",\"(UTC+10:30) Lord Howe Island\",\"\ + (UTC+11:00) Bougainville Island\",\"(UTC+11:00) Chokurdakh\",\"(UTC+11:00)\ + \ Magadan\",\"(UTC+11:00) Norfolk Island\",\"(UTC+11:00) Sakhalin\",\"(UTC+11:00)\ + \ Solomon Is., New Caledonia\",\"(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky\"\ + ,\"(UTC+12:00) Auckland, Wellington\",\"(UTC+12:00) Coordinated Universal\ + \ Time+12\",\"(UTC+12:00) Fiji\",\"(UTC+12:00) Petropavlovsk-Kamchatsky -\ + \ Old\",\"(UTC+12:45) Chatham Islands\",\"(UTC+13:00) Coordinated Universal\ + \ Time+13\",\"(UTC+13:00) Nuku'alofa\",\"(UTC+13:00) Samoa\",\"(UTC+14:00)\ + \ Kiritimati Island\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"\ + field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"SetWindowsTimeZone\",\"existenceCondition\":{\"allOf\":[{\"field\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[WindowsTimeZone]WindowsTimeZone1;TimeZone',\ + \ '=', parameters('TimeZone')))]\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\"\ + ,\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"\ + value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"\ + configurationName\":{\"value\":\"SetWindowsTimeZone\"},\"TimeZone\":{\"value\"\ + :\"[parameters('TimeZone')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"TimeZone\":{\"type\":\"string\"}},\"resources\":[{\"\ + condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"assignmentType\":\"DeployAndAutoCorrect\",\"configurationParameter\"\ + :[{\"name\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\",\"value\":\"[parameters('TimeZone')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"assignmentType\":\"DeployAndAutoCorrect\",\"configurationParameter\"\ + :[{\"name\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\",\"value\":\"[parameters('TimeZone')]\"\ + }]}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6141c932-9384-44c6-a395-59e4c057d7c9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6141c932-9384-44c6-a395-59e4c057d7c9\"\ + },{\"properties\":{\"displayName\":\"Service Fabric clusters should have the\ + \ ClusterProtectionLevel property set to EncryptAndSign\",\"policyType\":\"\ + BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Service Fabric provides three\ + \ levels of protection (None, Sign and EncryptAndSign) for node-to-node communication\ + \ using a primary cluster certificate. Set the protection level to ensure\ + \ that all node-to-node messages are encrypted and digitally signed\",\"metadata\"\ + :{\"version\":\"1.1.0\",\"category\":\"Service Fabric\"},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"\ + description\":\"The effect determines what happens when the policy rule is\ + \ evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"\ + ],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.ServiceFabric/clusters\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.ServiceFabric/clusters/fabricSettings[*].name\",\"notEquals\"\ + :\"Security\"},{\"field\":\"Microsoft.ServiceFabric/clusters/fabricSettings[*].parameters[*].name\"\ + ,\"notEquals\":\"ClusterProtectionLevel\"},{\"field\":\"Microsoft.ServiceFabric/clusters/fabricSettings[*].parameters[*].value\"\ + ,\"notEquals\":\"EncryptAndSign\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"617c02be-7f02-4efd-8836-3180d47b6c68\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1110 - Audit\ + \ Storage Capacity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Audit and Accountability control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1110\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6182bfa7-0f2a-43f5-834a-a2ddf31c13c7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6182bfa7-0f2a-43f5-834a-a2ddf31c13c7\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1415 - Nonlocal\ + \ Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Maintenance control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1415\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/61a1dd98-b259-4840-abd5-fbba7ee0da83\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"61a1dd98-b259-4840-abd5-fbba7ee0da83\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1153 - System\ + \ Interconnections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Security Assessment and Authorization control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1153\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/61cf3125-142c-4754-8a16-41ab4d529635\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"61cf3125-142c-4754-8a16-41ab4d529635\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'Security Options - System objects'\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should only be\ + \ used along with its corresponding deploy policy in an initiative. This definition\ + \ allows Azure Policy to process the results of auditing Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'Security Options\ + \ - System objects'. For more information on Guest Configuration policies,\ + \ please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Guest Configuration\",\"deprecated\":true},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsSystemobjects\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/620e58b5-ac75-49b4-993f-a9d4f0459636\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"620e58b5-ac75-49b4-993f-a9d4f0459636\"\ + },{\"properties\":{\"displayName\":\"Audit Windows machines on which the Log\ + \ Analytics agent is not connected as expected\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Requires that prerequisites are deployed\ + \ to the policy assignment scope. For details, visit https://aka.ms/gcpol.\ + \ Machines are non-compliant if the agent is not installed, or if it is installed\ + \ but the COM object AgentConfigManager.MgmtSvcCfg returns that it is registered\ + \ to a workspace other than the ID specified in the policy parameter.\",\"\ + metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"\ + requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"WindowsLogAnalyticsAgentConnection\",\"version\":\"1.*\",\"configurationParameter\"\ + :{\"WorkspaceId\":\"[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId\"}}},\"\ + parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"WorkspaceId\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Connected workspace\ + \ IDs\",\"description\":\"A semicolon-separated list of the workspace IDs\ + \ that the Log Analytics agent should be connected to\"}}},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsLogAnalyticsAgentConnection\",\"existenceCondition\":{\"\ + allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId',\ + \ '=', parameters('WorkspaceId')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6265018c-d7e2-432f-a75d-094d5f6f4465\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6265018c-d7e2-432f-a75d-094d5f6f4465\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1682 - Malicious\ + \ Code Protection | Nonsignature-Based Detection\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this System and\ + \ Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1682\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/62b638c5-29d7-404b-8d93-f21e4b1ce198\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"62b638c5-29d7-404b-8d93-f21e4b1ce198\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1660 - Session\ + \ Authenticity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Communications Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1660\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/63096613-ce83-43e5-96f4-e588e8813554\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"63096613-ce83-43e5-96f4-e588e8813554\"\ + },{\"properties\":{\"displayName\":\"Audit Windows machines network connectivity\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires\ + \ that prerequisites are deployed to the policy assignment scope. For details,\ + \ visit https://aka.ms/gcpol. Machines are non-compliant if a network connection\ + \ status to an IP and TCP port does not match the policy parameter.\",\"metadata\"\ + :{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\"\ + :[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsRemoteConnection\"\ + ,\"version\":\"1.*\",\"configurationParameter\":{\"host\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;host\"\ + ,\"port\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;port\",\"shouldConnect\"\ + :\"[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect\"}}},\"\ + parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"host\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Remote Host Name\",\"\ + description\":\"Specifies the Domain Name System (DNS) name or IP address\ + \ of the remote host machine.\"}},\"port\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Port\",\"description\":\"The TCP port number on the remote\ + \ host name.\"}},\"shouldConnect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Should connect to remote host\",\"description\":\"The machine will be non-compliant\ + \ if it can't establish a connection.\"},\"allowedValues\":[\"True\",\"False\"\ + ],\"defaultValue\":\"False\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"\ + anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsRemoteConnection\",\"existenceCondition\":{\"allOf\":[{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[WindowsRemoteConnection]WindowsRemoteConnection1;host',\ + \ '=', parameters('host'), ',', '[WindowsRemoteConnection]WindowsRemoteConnection1;port',\ + \ '=', parameters('port'), ',', '[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect',\ + \ '=', parameters('shouldConnect')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/630ac30f-a234-4533-ac2d-e0df77acda51\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"630ac30f-a234-4533-ac2d-e0df77acda51\"\ + },{\"properties\":{\"displayName\":\"Audit Linux machines that are not using\ + \ SSH key for authentication\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Requires that prerequisites are deployed to the policy\ + \ assignment scope. For details, visit https://aka.ms/gcpol. Machines are\ + \ non-compliant if Non-compliant if the machine allows passwords for authenticating\ + \ through SSH\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\"\ + :\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"LinuxNoPasswordForSSH\",\"version\":\"1.*\"}},\"parameters\"\ + :{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Include Arc connected servers\",\"description\":\"By selecting this option,\ + \ you agree to be charged monthly per Arc connected machine.\"},\"allowedValues\"\ + :[\"true\",\"false\"],\"defaultValue\":\"false\"},\"effect\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\"\ + ,\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"\ + paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"\ + like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\"\ + ,\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"\ + ]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"\ + field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\"\ + ,\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\"\ + ,\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\"\ + ,\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"\ + cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\"\ + ,\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\"\ + ,\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"\ + ]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"\ + equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"\ + then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"LinuxNoPasswordForSSH\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"630c64f9-8b6b-4c64-b511-6544ceff6fd6\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1002 - Account\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1002\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/632024c2-8079-439d-a7f6-90af1d78cc65\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"632024c2-8079-439d-a7f6-90af1d78cc65\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1498 - Rules\ + \ Of Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Planning control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1498\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/633988b9-cf2f-4323-8394-f0d2af9cd6e1\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"633988b9-cf2f-4323-8394-f0d2af9cd6e1\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1177 - Baseline\ + \ Configuration | Reviews And Updates\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Configuration Management\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1177\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/63dbc7a8-e20b-4d38-b857-a7f6c0cd94bc\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"63dbc7a8-e20b-4d38-b857-a7f6c0cd94bc\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1185 - Configuration\ + \ Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1185\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6420cd73-b939-43b7-9d99-e8688fea053c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6420cd73-b939-43b7-9d99-e8688fea053c\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'Security Options - Devices'\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy creates a\ + \ Guest Configuration assignment to audit Windows virtual machines with non-compliant\ + \ settings in Group Policy category: 'Security Options - Devices'. It also\ + \ creates a system-assigned managed identity and deploys the VM extension\ + \ for Guest Configuration. This policy should only be used along with its\ + \ corresponding audit policy in an initiative. For more information on Guest\ + \ Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\"\ + :{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\",\"\ + requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"DevicesAllowedToFormatAndEjectRemovableMedia\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"[Deprecated]: Devices: Allowed to\ + \ format and eject removable media\",\"description\":\"Specifies who is allowed\ + \ to format and eject removable NTFS media. You can use this policy setting\ + \ to prevent unauthorized users from removing data on one computer to access\ + \ it on another computer on which they have local administrator privileges.\"\ + },\"defaultValue\":\"0\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"\ + field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsDevices\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Devices: Allowed to format and eject removable\ + \ media;ExpectedValue', '=', parameters('DevicesAllowedToFormatAndEjectRemovableMedia')))]\"\ + },\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\"\ + :{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\"\ + :\"AzureBaseline_SecurityOptionsDevices\"},\"DevicesAllowedToFormatAndEjectRemovableMedia\"\ + :{\"value\":\"[parameters('DevicesAllowedToFormatAndEjectRemovableMedia')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"DevicesAllowedToFormatAndEjectRemovableMedia\":{\"\ + type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Devices: Allowed\ + \ to format and eject removable media;ExpectedValue\",\"value\":\"[parameters('DevicesAllowedToFormatAndEjectRemovableMedia')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Devices: Allowed\ + \ to format and eject removable media;ExpectedValue\",\"value\":\"[parameters('DevicesAllowedToFormatAndEjectRemovableMedia')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\"\ + ,\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\"\ + ,\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6481cc21-ed6e-4480-99dd-ea7c5222e897\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6481cc21-ed6e-4480-99dd-ea7c5222e897\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1441 - Media\ + \ Sanitization | Equipment Testing\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Media Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1441\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6519d7f3-e8a2-4ff3-a935-9a9497152ad7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6519d7f3-e8a2-4ff3-a935-9a9497152ad7\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1558 - Vulnerability\ + \ Scanning | Correlate Scanning Information\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Risk Assessment\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1558\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/65592b16-4367-42c5-a26e-d371be450e17\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"65592b16-4367-42c5-a26e-d371be450e17\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Audit missing blob encryption\ + \ for storage accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"This policy is no longer necessary because storage blob encryption is enabled\ + \ by default and cannot be turned off.\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Security Center\",\"deprecated\":true},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:\ + \ Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"\ + },{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/enableBlobEncryption\"\ + ,\"equals\":\"True\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/655cb504-bcee-4362-bd4c-402e6aa38759\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"655cb504-bcee-4362-bd4c-402e6aa38759\"\ + },{\"properties\":{\"displayName\":\"Azure Defender for SQL servers on machines\ + \ should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"Azure Defender for SQL provides functionality for surfacing and mitigating\ + \ potential database vulnerabilities, detecting anomalous activities that\ + \ could indicate threats to SQL databases, and discovering and classifying\ + \ sensitive data.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Security\ + \ Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\"\ + ,\"name\":\"SqlServerVirtualMachines\",\"existenceScope\":\"subscription\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\"\ + ,\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6581d072-105e-4418-827f-bd446d56421b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1261 - Contingency\ + \ Plan Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Contingency Planning control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1261\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/65aeceb5-a59c-4cb1-8d82-9c474be5d431\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"65aeceb5-a59c-4cb1-8d82-9c474be5d431\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Audit IP restrictions configuration\ + \ for a Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"IP Restrictions allow you to define a list of IP addresses that are allowed\ + \ to access your app. Use of IP Restrictions protects a Function app from\ + \ common attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\"\ + :\"Security Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"\ + },{\"anyof\":[{\"field\":\"kind\",\"equals\":\"functionapp\"},{\"field\":\"\ + kind\",\"equals\":\"functionapp,linux\"},{\"field\":\"kind\",\"equals\":\"\ + functionapp,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"\ + ConfigureIPRestrictions\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\"\ + ,\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/664346d9-be92-43fb-a219-d595eeb76a90\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"664346d9-be92-43fb-a219-d595eeb76a90\"\ + },{\"properties\":{\"displayName\":\"Service principals should be used to\ + \ protect your subscriptions instead of management certificates\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"Management certificates allow\ + \ anyone who authenticates with them to manage the subscription(s) they are\ + \ associated with. To manage subscriptions more securely, use of service principals\ + \ with Resource Manager is recommended to limit the impact of a certificate\ + \ compromise.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security\ + \ Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"in\":[\"Microsoft.Resources/subscriptions\"]},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\"\ + ,\"name\":\"2acd365d-e8b5-4094-bce4-244b7c51d67c\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\"\ + ,\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6646a0bd-e110-40ca-bb97-84fcee63c414\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1444 - Media\ + \ Use | Prohibit Use Without Owner\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Media Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1444\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/666143df-f5e0-45bd-b554-135f0f93e44e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"666143df-f5e0-45bd-b554-135f0f93e44e\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1319 - Authenticator\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Identification and Authentication control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1319\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/66f7ae57-5560-4fc5-85c9-659f204e7a42\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"66f7ae57-5560-4fc5-85c9-659f204e7a42\"\ + },{\"properties\":{\"displayName\":\"Cognitive Services accounts should enable\ + \ data encryption with customer-managed key\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"Indexed\",\"description\":\"Customer-managed keys provide enhanced\ + \ data protection by allowing you to manage your encryption keys for data\ + \ stored in Cognitive Services. This is often required to meet compliance\ + \ requirements.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Cognitive\ + \ Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"The effect determines what\ + \ happens when the policy rule is evaluated to match\"},\"allowedValues\"\ + :[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"\ + },{\"field\":\"Microsoft.CognitiveServices/accounts/encryption.keySource\"\ + ,\"notEquals\":\"Microsoft.KeyVault\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"67121cc7-ff39-4ab8-b7e3-95b84dab487d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1628 - Boundary\ + \ Protection | External Telecommunications Services\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this System and\ + \ Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1628\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/67de62b4-a737-4781-8861-3baed3c35069\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"67de62b4-a737-4781-8861-3baed3c35069\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'Administrative Templates - Network'\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'Administrative Templates - Network'\ + \ for guest logons, simultaneous connections, network bridge, ICS, and multicast\ + \ name resolution. This policy requires that the Guest Configuration prerequisites\ + \ have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"AzureBaseline_AdministrativeTemplatesNetwork\",\"version\":\"\ + 1.*\",\"configurationParameter\":{\"EnableInsecureGuestLogons\":\"Enable insecure\ + \ guest logons;ExpectedValue\",\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\"\ + :\"Minimize the number of simultaneous connections to the Internet or a Windows\ + \ Domain;ExpectedValue\",\"TurnOffMulticastNameResolution\":\"Turn off multicast\ + \ name resolution;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include Arc connected\ + \ servers\",\"description\":\"By selecting this option, you agree to be charged\ + \ monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"\ + ],\"defaultValue\":\"false\"},\"EnableInsecureGuestLogons\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Enable insecure guest logons\",\"description\"\ + :\"Specifies whether the SMB client will allow insecure guest logons to an\ + \ SMB server.\"},\"defaultValue\":\"0\"},\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Allow simultaneous connections\ + \ to the Internet or a Windows Domain\",\"description\":\"Specify whether\ + \ to prevent computers from connecting to both a domain based network and\ + \ a non-domain based network at the same time. A value of 0 allows simultaneous\ + \ connections, and a value of 1 blocks them.\"},\"defaultValue\":\"1\"},\"\ + TurnOffMulticastNameResolution\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Turn off multicast name resolution\",\"description\":\"Specifies whether\ + \ LLMNR, a secondary name resolution protocol that transmits using multicast\ + \ over a local subnet link on a single subnet, is enabled.\"},\"defaultValue\"\ + :\"1\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of this policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_AdministrativeTemplatesNetwork\",\"existenceCondition\":{\"\ + allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Enable insecure guest logons;ExpectedValue',\ + \ '=', parameters('EnableInsecureGuestLogons'), ',', 'Minimize the number\ + \ of simultaneous connections to the Internet or a Windows Domain;ExpectedValue',\ + \ '=', parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain'),\ + \ ',', 'Turn off multicast name resolution;ExpectedValue', '=', parameters('TurnOffMulticastNameResolution')))]\"\ + }]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/67e010c1-640d-438e-a3a5-feaccb533a98\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"67e010c1-640d-438e-a3a5-feaccb533a98\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1377 - Incident\ + \ Response Assistance | Coordination With External Providers\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1377\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68434bd1-e14b-4031-9edb-a4adf5f84a67\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68434bd1-e14b-4031-9edb-a4adf5f84a67\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs on which the Log Analytics agent is not connected as expected\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ on which the Log Analytics agent is not connected to the specified workspaces.\ + \ It also creates a system-assigned managed identity and deploys the VM extension\ + \ for Guest Configuration. This policy should only be used along with its\ + \ corresponding audit policy in an initiative. For more information on Guest\ + \ Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\"\ + :{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\",\"\ + requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"WorkspaceId\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Connected workspace IDs\",\"description\":\"A semicolon-separated\ + \ list of the workspace IDs that the Log Analytics agent should be connected\ + \ to\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsLogAnalyticsAgentConnection\",\"existenceCondition\":{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId',\ + \ '=', parameters('WorkspaceId')))]\"},\"deployment\":{\"properties\":{\"\ + mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"WindowsLogAnalyticsAgentConnection\"\ + },\"WorkspaceId\":{\"value\":\"[parameters('WorkspaceId')]\"}},\"template\"\ + :{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"WorkspaceId\":{\"type\":\"string\"}},\"resources\"\ + :[{\"condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId\"\ + ,\"value\":\"[parameters('WorkspaceId')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId\"\ + ,\"value\":\"[parameters('WorkspaceId')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68511db2-bd02-41c4-ae6b-1900a012968a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68511db2-bd02-41c4-ae6b-1900a012968a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1597 - Developer\ + \ Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this System and Services Acquisition\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1597\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68b250ec-2e4f-4eee-898a-117a9fda7016\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68b250ec-2e4f-4eee-898a-117a9fda7016\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1588 - External\ + \ Information System Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this System and Services Acquisition\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1588\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68ebae26-e0e0-4ecb-8379-aabf633b51e9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68ebae26-e0e0-4ecb-8379-aabf633b51e9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1070 - Wireless\ + \ Access | Disable Wireless Networking\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Access Control control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1070\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68f837d0-8942-4b1e-9b31-be78b247bda8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68f837d0-8942-4b1e-9b31-be78b247bda8\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1727 - Memory\ + \ Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Information Integrity control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1727\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/697175a7-9715-4e89-b98b-c6f605888fa3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"697175a7-9715-4e89-b98b-c6f605888fa3\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1652 - Mobile\ + \ Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"\ + Microsoft implements this System and Communications Protection control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1652\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6998e84a-2d29-4e10-8962-76754d4f772d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6998e84a-2d29-4e10-8962-76754d4f772d\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Deploy Log Analytics agent\ + \ to Windows Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"This policy deploys the Log Analytics agent to Windows\ + \ Azure Arc machines if the agent isn't installed.\",\"metadata\":{\"version\"\ + :\"1.1.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\"\ + :{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]:\ + \ Log Analytics workspace\",\"description\":\"Specify the Log Analytics workspace\ + \ the agent should be connected to. If this workspace is outside of the scope\ + \ of the assignment you must manually grant 'Log Analytics Contributor' permissions\ + \ (or similar) to the policy assignment's principal ID.\",\"strongType\":\"\ + omsWorkspace\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"\ + field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]},\"\ + then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\"\ + ,\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\ + ],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\"\ + ,\"equals\":\"MicrosoftMonitoringAgent\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\"\ + ,\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\"\ + ,\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\"\ + ,\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"\ + }},\"variables\":{\"vmExtensionName\":\"MicrosoftMonitoringAgent\",\"vmExtensionPublisher\"\ + :\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"MicrosoftMonitoringAgent\"\ + },\"resources\":[{\"name\":\"[concat(parameters('vmName'), '/', variables('vmExtensionName'))]\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"location\":\"\ + [parameters('location')]\",\"apiVersion\":\"2019-12-12\",\"properties\":{\"\ + publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\"\ + ,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), '2015-03-20').customerId]\"\ + ,\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\"\ + :\"[listKeys(parameters('logAnalytics'), '2015-03-20').primarySharedKey]\"\ + }}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled\ + \ extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"\ + vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/69af7d4a-7b18-4044-93a9-2651498ef203\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"69af7d4a-7b18-4044-93a9-2651498ef203\"\ + },{\"properties\":{\"displayName\":\"Audit Windows machines that have the\ + \ specified members in the Administrators group\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Requires that prerequisites are deployed\ + \ to the policy assignment scope. For details, visit https://aka.ms/gcpol.\ + \ Machines are non-compliant if the local Administrators group contains one\ + \ or more of the members listed in the policy parameter.\",\"metadata\":{\"\ + category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\"\ + :[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AdministratorsGroupMembersToExclude\"\ + ,\"version\":\"1.*\",\"configurationParameter\":{\"MembersToExclude\":\"[LocalGroup]AdministratorsGroup;MembersToExclude\"\ + }}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"MembersToExclude\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Members to exclude\"\ + ,\"description\":\"A semicolon-separated list of members that should be excluded\ + \ in the Administrators local group. Ex: Administrator; myUser1; myUser2\"\ + }}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"\ + equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"\ + Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\"\ + ,\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\"\ + ,\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AdministratorsGroupMembersToExclude\",\"existenceCondition\":{\"\ + allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;MembersToExclude',\ + \ '=', parameters('MembersToExclude')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1699 - Information\ + \ System Monitoring | Privileged Users\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this System and Information\ + \ Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1699\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/69c7bee8-bc19-4129-a51e-65a7b39d3e7c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"69c7bee8-bc19-4129-a51e-65a7b39d3e7c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1696 - Information\ + \ System Monitoring | Correlate Monitoring Information\",\"policyType\":\"\ + Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ System and Information Integrity control\",\"metadata\":{\"version\":\"\ + 1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"\ + /providers/Microsoft.PolicyInsights/policyMetadata/ACF1696\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/69d2a238-20ab-4206-a6dc-f302bf88b1b8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"69d2a238-20ab-4206-a6dc-f302bf88b1b8\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1244 - Contingency\ + \ Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"\ + Microsoft implements this Contingency Planning control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1244\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a13a8f8-c163-4b1b-8554-d63569dab937\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a13a8f8-c163-4b1b-8554-d63569dab937\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1019 - Account\ + \ Management | Role-Based Schemes\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Access Control control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1019\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a3ee9b2-3977-459c-b8ce-2db583abd9f7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a3ee9b2-3977-459c-b8ce-2db583abd9f7\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs on which Windows Defender Exploit Guard is not enabled\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ on which Windows Defender Exploit Guard is not enabled. It also creates\ + \ a system-assigned managed identity and deploys the VM extension for Guest\ + \ Configuration. This policy should only be used along with its corresponding\ + \ audit policy in an initiative. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.1.0-deprecated\",\"category\":\"Guest Configuration\",\"requiredProviders\"\ + :[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"\ + NotAvailableMachineState\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: State in which to show VMs on which Windows Defender Exploit\ + \ Guard is not available\",\"description\":\"Windows Defender Exploit Guard\ + \ is only available starting with Windows 10/Windows Server with update 1709.\ + \ Setting this value to 'Non-Compliant' will make machines with older versions\ + \ on which Windows Defender Exploit Guard is not available (such as Windows\ + \ Server 2012 R2) non-compliant. Setting this value to 'Compliant' will make\ + \ these machines compliant.\"},\"allowedValues\":[\"Compliant\",\"Non-Compliant\"\ + ],\"defaultValue\":\"Non-Compliant\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsDefenderExploitGuard\",\"existenceCondition\":{\"field\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState',\ + \ '=', parameters('NotAvailableMachineState')))]\"},\"deployment\":{\"properties\"\ + :{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"WindowsDefenderExploitGuard\"\ + },\"NotAvailableMachineState\":{\"value\":\"[parameters('NotAvailableMachineState')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"NotAvailableMachineState\":{\"type\":\"string\"}},\"\ + resources\":[{\"condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState\"\ + ,\"value\":\"[parameters('NotAvailableMachineState')]\"}]}}},{\"condition\"\ + :\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState\"\ + ,\"value\":\"[parameters('NotAvailableMachineState')]\"}]}}},{\"condition\"\ + :\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\"\ + ,\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\"\ + ,\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2015-05-01-preview\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a7a2bcf-f9be-4e35-9734-4f9657a70f1d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a7a2bcf-f9be-4e35-9734-4f9657a70f1d\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Audit IP restrictions configuration\ + \ for a Web Application\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"IP Restrictions allow you to define a list of IP addresses that are allowed\ + \ to access your app. Use of IP Restrictions protects a web application from\ + \ common attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\"\ + :\"Security Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"\ + },{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\"\ + ,\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"\ + field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\"\ + ,\"name\":\"ConfigureIPRestrictions\",\"existenceCondition\":{\"field\":\"\ + Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\"\ + ,\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a8450e2-6c61-43b4-be65-62e3a197bffe\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a8450e2-6c61-43b4-be65-62e3a197bffe\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1211 - Configuration\ + \ Settings\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1211\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a8b9dc8-6b00-4701-aa96-bba3277ebf50\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a8b9dc8-6b00-4701-aa96-bba3277ebf50\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Ensure WEB app is using\ + \ the latest version of TLS encryption \",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Please use /providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b\ + \ instead. The TLS(Transport Layer Security) protocol secures transmission\ + \ of data over the internet using standard encryption technology. Encryption\ + \ should be set with the latest version of TLS. App service allows TLS 1.2\ + \ by default, which is the recommended TLS level by industry standards, such\ + \ as PCI DSS.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\"\ + :\"App Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"\ + },{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"\ + existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.minTlsVersion\"\ + ,\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6ad61431-88ce-4357-a0e1-6da43f292bd7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6ad61431-88ce-4357-a0e1-6da43f292bd7\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1653 - Mobile\ + \ Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"\ + Microsoft implements this System and Communications Protection control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1653\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6b1c00a7-7fd0-42b0-8c5b-c45f6fa1f71b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6b1c00a7-7fd0-42b0-8c5b-c45f6fa1f71b\"\ + },{\"properties\":{\"displayName\":\"Deprecated accounts should be removed\ + \ from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"\ + description\":\"Deprecated accounts should be removed from your subscriptions.\ + \ Deprecated accounts are accounts that have been blocked from signing in.\"\ + ,\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security Center\"},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"00c6d40b-e990-6acf-d4f3-471e747a27c4\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6b1cbf55-e8b6-442f-ba4c-7246b6381474\"\ + },{\"properties\":{\"displayName\":\"Deploy Diagnostic Settings for Service\ + \ Bus to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Deploys the diagnostic settings for Service Bus to stream to a regional\ + \ Event Hub when any Service Bus which is missing this diagnostic settings\ + \ is created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\"\ + :\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"DeployIfNotExists\"},\"profileName\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Profile name\",\"description\":\"The diagnostic\ + \ settings profile name\"},\"defaultValue\":\"setbypolicy_eventHub\"},\"eventHubRuleId\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event Hub Authorization\ + \ Rule Id\",\"description\":\"The Event Hub authorization rule Id for Azure\ + \ Diagnostics. The authorization rule needs to be at Event Hub namespace level.\ + \ e.g. /subscriptions/{subscription Id}/resourceGroups/{resource group}/providers/Microsoft.EventHub/namespaces/{Event\ + \ Hub namespace}/authorizationrules/{authorization rule}\",\"strongType\"\ + :\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\"\ + :true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Event Hub Location\",\"description\":\"The location the Event Hub resides\ + \ in. Only Service Bus in this location will be linked to this Event Hub.\"\ + ,\"strongType\":\"location\"},\"defaultValue\":\"\"},\"metricsEnabled\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Enable metrics\",\"description\"\ + :\"Whether to enable metrics stream to the Event Hub - True or False\"},\"\ + allowedValues\":[\"True\",\"False\"],\"defaultValue\":\"False\"},\"logsEnabled\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable logs\",\"description\"\ + :\"Whether to enable logs stream to the Event Hub - True or False\"},\"allowedValues\"\ + :[\"True\",\"False\"],\"defaultValue\":\"True\"}},\"policyRule\":{\"if\":{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"\ + },{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\ + \"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\"\ + ,\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"\ + /providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\"\ + :\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\"\ + :\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"\ + type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"\ + resources\":[{\"type\":\"Microsoft.ServiceBus/namespaces/providers/diagnosticSettings\"\ + ,\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'),\ + \ '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"\ + [parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\"\ + :\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\"\ + ,\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\"\ + :false,\"days\":0}}],\"logs\":[{\"category\":\"OperationalLogs\",\"enabled\"\ + :\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\"\ + :{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"\ + },\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\"\ + :{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\"\ + :\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"\ + }}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6b51af03-9277-49a9-a3f8-1c69c9ff7403\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6b51af03-9277-49a9-a3f8-1c69c9ff7403\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1031 - Separation\ + \ Of Duties\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1031\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6b93a801-fe25-4574-a60d-cb22acffae00\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6b93a801-fe25-4574-a60d-cb22acffae00\"\ + },{\"properties\":{\"displayName\":\"Not allowed resource types\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy enables you to\ + \ specify the resource types that your organization cannot deploy.\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"General\"},\"parameters\":{\"listOfResourceTypesNotAllowed\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of resource\ + \ types that cannot be deployed.\",\"displayName\":\"Not allowed resource\ + \ types\",\"strongType\":\"resourceTypes\"}}},\"policyRule\":{\"if\":{\"field\"\ + :\"type\",\"in\":\"[parameters('listOfResourceTypesNotAllowed')]\"},\"then\"\ + :{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6c112d4e-5bc7-47ae-a041-ea2d9dccd749\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6c112d4e-5bc7-47ae-a041-ea2d9dccd749\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1338 - Authenticator\ + \ Management | Automated Support For Password Strength Determination\",\"\ + policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements\ + \ this Identification and Authentication control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1338\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6c59a207-6aed-41dc-83a2-e1ff66e4a4db\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6c59a207-6aed-41dc-83a2-e1ff66e4a4db\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1304 - Identification\ + \ And Authentication (Org. Users) | Local Access To Non-Privileged Accounts\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Identification and Authentication control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1304\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6ca71be3-16cb-4d39-8b50-7f8fd5e2f11b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6ca71be3-16cb-4d39-8b50-7f8fd5e2f11b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1437 - Media\ + \ Transport | Cryptographic Protection\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Media Protection\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1437\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d1eb6ed-bf13-4046-b993-b9e2aef0f76c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d1eb6ed-bf13-4046-b993-b9e2aef0f76c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1171 - Penetration\ + \ Testing | Independent Penetration Agent Or Team\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Security\ + \ Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1171\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d4820bc-8b61-4982-9501-2123cb776c00\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d4820bc-8b61-4982-9501-2123cb776c00\"\ + },{\"properties\":{\"displayName\":\"Function App should only be accessible\ + \ over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Use of HTTPS ensures server/service authentication and protects data in\ + \ transit from network layer eavesdropping attacks.\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"\ + Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\"\ + ,\"like\":\"functionapp*\"},{\"field\":\"Microsoft.Web/sites/httpsOnly\",\"\ + equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1643 - Cryptographic\ + \ Key Establishment And Management\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this System and Communications\ + \ Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1643\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d8d492c-dd7a-46f7-a723-fa66a425b87c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d8d492c-dd7a-46f7-a723-fa66a425b87c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1291 - Information\ + \ System Backup | Testing For Reliability / Integrity\",\"policyType\":\"\ + Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1291\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d8fd073-9c85-4ee2-a9d0-2e4ec9eb8912\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d8fd073-9c85-4ee2-a9d0-2e4ec9eb8912\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1175 - Configuration\ + \ Management Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Configuration Management\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1175\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6dab4254-c30d-4bb7-ae99-1d21586c063c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6dab4254-c30d-4bb7-ae99-1d21586c063c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1651 - Mobile\ + \ Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"\ + Microsoft implements this System and Communications Protection control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1651\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6db63528-c9ba-491c-8a80-83e1e6977a50\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6db63528-c9ba-491c-8a80-83e1e6977a50\"\ + },{\"properties\":{\"displayName\":\"Enable Security Center's auto provisioning\ + \ of the Log Analytics agent on your subscriptions with default workspace.\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Allow Security\ + \ Center to auto provision the Log Analytics agent on your subscriptions to\ + \ monitor and collect security data using ASC default workspace.\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"\ + description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/autoProvisioningSettings\",\"deploymentScope\":\"Subscription\"\ + ,\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"existenceCondition\":{\"field\":\"Microsoft.Security/autoProvisioningSettings/autoProvision\"\ + ,\"equals\":\"On\"},\"deployment\":{\"location\":\"westus\",\"properties\"\ + :{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\"\ + :[{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"name\":\"default\"\ + ,\"apiVersion\":\"2017-08-01-preview\",\"properties\":{\"autoProvision\":\"\ + On\"}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6df2fee6-a9ed-4fef-bced-e13be1b25f1c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6df2fee6-a9ed-4fef-bced-e13be1b25f1c\"\ + },{\"properties\":{\"displayName\":\"Email notification for high severity\ + \ alerts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"\ + description\":\"Enable emailing security alerts to the security contact, in\ + \ order to have them receive security alert emails from Microsoft. This ensures\ + \ that the right people are aware of any potential security issues and are\ + \ able to mitigate the risks\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Security Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/securityContacts\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/securityContacts/alertNotifications\"\ + ,\"notEquals\":\"Off\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6e2593d9-add6-4083-9c9b-4b7d2188c899\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1586 - External\ + \ Information System Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this System and Services Acquisition\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1586\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6e3b2fbd-8f37-4766-a64d-3f37703dcb51\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6e3b2fbd-8f37-4766-a64d-3f37703dcb51\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1536 - Risk\ + \ Assessment Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Risk Assessment control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1536\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6e40d9de-2ad4-4cb5-8945-23143326a502\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6e40d9de-2ad4-4cb5-8945-23143326a502\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1530 - Third-Party\ + \ Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1530\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6e8f9566-29f1-49cd-b61f-f8628a3cf993\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6e8f9566-29f1-49cd-b61f-f8628a3cf993\"\ + },{\"properties\":{\"displayName\":\"Storage account should use a private\ + \ link connection\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Private links enforce secure communication, by providing private connectivity\ + \ to the storage account\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections/privateEndpoint\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections/provisioningState\"\ + ,\"equals\":\"Succeeded\"},{\"field\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections/privateLinkServiceConnectionState\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\"\ + ,\"equals\":\"Approved\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6edd7eda-6dd8-40f7-810d-67160c639cd9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1460 - Access\ + \ Control For Output Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Physical and Environmental Protection\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1460\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6f3ce1bb-4f77-4695-8355-70b08d54fdda\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6f3ce1bb-4f77-4695-8355-70b08d54fdda\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1320 - Authenticator\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Identification and Authentication control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1320\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6f54c732-71d4-4f93-a696-4e373eca3a77\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6f54c732-71d4-4f93-a696-4e373eca3a77\"\ + },{\"properties\":{\"displayName\":\"Storage account should use customer-managed\ + \ key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"\ + description\":\"Secure your storage account with greater flexibility using\ + \ customer-managed keys (CMKs). When you specify a CMK, that key is used to\ + \ protect and control access to the key that encrypts your data. Using CMKs\ + \ provides additional capabilities to control rotation of the key encryption\ + \ key or cryptographically erase data.\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"\ + ],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"not\":{\"field\"\ + :\"Microsoft.Storage/storageAccounts/encryption.keySource\",\"equals\":\"\ + Microsoft.Keyvault\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fac406b-40ca-413b-bf8e-0bf964659c25\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1141 - Audit\ + \ Generation | Changes By Authorized Individuals\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Audit and\ + \ Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1141\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fdefbf4-93e7-4513-bc95-c1858b7093e0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fdefbf4-93e7-4513-bc95-c1858b7093e0\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'Security Options - Microsoft Network Server'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy\ + \ should only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines with non-compliant settings in Group Policy category: 'Security\ + \ Options - Microsoft Network Server'. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"deprecated\"\ + :true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fe4ef56-7576-4dc4-8e9c-26bad4b087ce\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fe4ef56-7576-4dc4-8e9c-26bad4b087ce\"\ + },{\"properties\":{\"displayName\":\"Ensure that 'Python version' is the latest,\ + \ if used as a part of the Web app\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"Periodically, newer versions are released for\ + \ Python software either due to security flaws or to include additional functionality.\ + \ Using the latest Python version for web apps is recommended in order to\ + \ take advantage of security fixes, if any, and/or new functionalities of\ + \ the latest version.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"\ + App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"},\"WindowsPythonLatestVersion\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Windows Latest Python version\"\ + ,\"description\":\"Latest supported Python version for App Services\",\"deprecated\"\ + :true},\"defaultValue\":\"3.6\"},\"LinuxPythonLatestVersion\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Linux Latest Python version\",\"\ + description\":\"Latest supported Python version for App Services\"},\"defaultValue\"\ + :\"3.8\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\"\ + :\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"\ + existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\"\ + ,\"notContains\":\"PYTHON\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\"\ + ,\"equals\":\"[concat('PYTHON|', parameters('LinuxPythonLatestVersion'))]\"\ + }]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7008174a-fd10-4ef0-817e-fc820a951d73\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'Windows Components'\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy creates a\ + \ Guest Configuration assignment to audit Windows virtual machines with non-compliant\ + \ settings in Group Policy category: 'Windows Components'. It also creates\ + \ a system-assigned managed identity and deploys the VM extension for Guest\ + \ Configuration. This policy should only be used along with its corresponding\ + \ audit policy in an initiative. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.2.0-deprecated\",\"category\":\"Guest Configuration\",\"requiredProviders\"\ + :[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"\ + SendFileSamplesWhenFurtherAnalysisIsRequired\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Deprecated]: Send file samples when further analysis\ + \ is required\",\"description\":\"Specifies whether and how Windows Defender\ + \ will submit samples of suspected malware to Microsoft for further analysis\ + \ when opt-in for MAPS telemetry is set.\"},\"defaultValue\":\"1\"},\"AllowIndexingOfEncryptedFiles\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Allow\ + \ indexing of encrypted files\",\"description\":\"Specifies whether encrypted\ + \ items are allowed to be indexed.\"},\"defaultValue\":\"0\"},\"AllowTelemetry\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Allow\ + \ Telemetry\",\"description\":\"Specifies configuration of the amount of diagnostic\ + \ and usage data reported to Microsoft. The data is transmitted securely and\ + \ sensitive data is not sent.\"},\"defaultValue\":\"2\"},\"AllowUnencryptedTraffic\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Allow\ + \ unencrypted traffic\",\"description\":\"Specifies whether the Windows Remote\ + \ Management (WinRM) service sends and receives unencrypted messages over\ + \ the network.\"},\"defaultValue\":\"0\"},\"AlwaysInstallWithElevatedPrivileges\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Always\ + \ install with elevated privileges\",\"description\":\"Specifies whether Windows\ + \ Installer should use system permissions when it installs any program on\ + \ the system.\"},\"defaultValue\":\"0\"},\"AlwaysPromptForPasswordUponConnection\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Always\ + \ prompt for password upon connection\",\"description\":\"Specifies whether\ + \ Terminal Services/Remote Desktop Connection always prompts the client computer\ + \ for a password upon connection.\"},\"defaultValue\":\"1\"},\"ApplicationSpecifyTheMaximumLogFileSizeKB\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Application:\ + \ Specify the maximum log file size (KB)\",\"description\":\"Specifies the\ + \ maximum size for the Application event log in kilobytes.\"},\"defaultValue\"\ + :\"32768\"},\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Automatically\ + \ send memory dumps for OS-generated error reports\",\"description\":\"Specifies\ + \ if memory dumps in support of OS-generated error reports can be sent to\ + \ Microsoft automatically.\"},\"defaultValue\":\"1\"},\"ConfigureDefaultConsent\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Configure\ + \ Default consent\",\"description\":\"Specifies setting of the default consent\ + \ handling for error reports sent to Microsoft.\"},\"defaultValue\":\"4\"\ + },\"ConfigureWindowsSmartScreen\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Configure Windows SmartScreen\",\"description\":\"Specifies\ + \ how to manage the behavior of Windows SmartScreen. Windows SmartScreen helps\ + \ keep PCs safer by warning users before running unrecognized programs downloaded\ + \ from the Internet. Some information is sent to Microsoft about files and\ + \ programs run on PCs with this feature enabled.\"},\"defaultValue\":\"1\"\ + },\"DisallowDigestAuthentication\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Disallow Digest authentication\",\"description\":\"Specifies\ + \ whether the Windows Remote Management (WinRM) client will not use Digest\ + \ authentication.\"},\"defaultValue\":\"0\"},\"DisallowWinRMFromStoringRunAsCredentials\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Disallow\ + \ WinRM from storing RunAs credentials\",\"description\":\"Specifies whether\ + \ the Windows Remote Management (WinRM) service will not allow RunAs credentials\ + \ to be stored for any plug-ins.\"},\"defaultValue\":\"1\"},\"DoNotAllowPasswordsToBeSaved\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Do not\ + \ allow passwords to be saved\",\"description\":\"Specifies whether to prevent\ + \ Remote Desktop Services - Terminal Services clients from saving passwords\ + \ on a computer.\"},\"defaultValue\":\"1\"},\"SecuritySpecifyTheMaximumLogFileSizeKB\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Security:\ + \ Specify the maximum log file size (KB)\",\"description\":\"Specifies the\ + \ maximum size for the Security event log in kilobytes.\"},\"defaultValue\"\ + :\"196608\"},\"SetClientConnectionEncryptionLevel\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"[Deprecated]: Set client connection encryption\ + \ level\",\"description\":\"Specifies whether to require the use of a specific\ + \ encryption level to secure communications between client computers and RD\ + \ Session Host servers during Remote Desktop Protocol (RDP) connections. This\ + \ policy only applies when you are using native RDP encryption.\"},\"defaultValue\"\ + :\"3\"},\"SetTheDefaultBehaviorForAutoRun\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Deprecated]: Set the default behavior for AutoRun\",\"\ + description\":\"Specifies the default behavior for Autorun commands. Autorun\ + \ commands are generally stored in autorun.inf files. They often launch the\ + \ installation program or other routines.\"},\"defaultValue\":\"1\"},\"SetupSpecifyTheMaximumLogFileSizeKB\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Setup:\ + \ Specify the maximum log file size (KB)\",\"description\":\"Specifies the\ + \ maximum size for the Setup event log in kilobytes.\"},\"defaultValue\":\"\ + 32768\"},\"SystemSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"[Deprecated]: System: Specify the maximum log\ + \ file size (KB)\",\"description\":\"Specifies the maximum size for the System\ + \ event log in kilobytes.\"},\"defaultValue\":\"32768\"},\"TurnOffDataExecutionPreventionForExplorer\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Turn off\ + \ Data Execution Prevention for Explorer\",\"description\":\"Specifies whether\ + \ to turn off Data Execution Prevention for Windows File Explorer. Disabling\ + \ data execution prevention can allow certain legacy plug-in applications\ + \ to function without terminating Explorer.\"},\"defaultValue\":\"0\"},\"\ + SpecifyTheIntervalToCheckForDefinitionUpdates\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Deprecated]: Specify the interval to check for definition\ + \ updates\",\"description\":\"Specifies an interval at which to check for\ + \ Windows Defender definition updates. The time value is represented as the\ + \ number of hours between update checks.\"},\"defaultValue\":\"8\"}},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_WindowsComponents\",\"existenceCondition\":{\"field\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Send file samples when further analysis is required;ExpectedValue',\ + \ '=', parameters('SendFileSamplesWhenFurtherAnalysisIsRequired'), ',', 'Allow\ + \ indexing of encrypted files;ExpectedValue', '=', parameters('AllowIndexingOfEncryptedFiles'),\ + \ ',', 'Allow Telemetry;ExpectedValue', '=', parameters('AllowTelemetry'),\ + \ ',', 'Allow unencrypted traffic;ExpectedValue', '=', parameters('AllowUnencryptedTraffic'),\ + \ ',', 'Always install with elevated privileges;ExpectedValue', '=', parameters('AlwaysInstallWithElevatedPrivileges'),\ + \ ',', 'Always prompt for password upon connection;ExpectedValue', '=', parameters('AlwaysPromptForPasswordUponConnection'),\ + \ ',', 'Application: Specify the maximum log file size (KB);ExpectedValue',\ + \ '=', parameters('ApplicationSpecifyTheMaximumLogFileSizeKB'), ',', 'Automatically\ + \ send memory dumps for OS-generated error reports;ExpectedValue', '=', parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports'),\ + \ ',', 'Configure Default consent;ExpectedValue', '=', parameters('ConfigureDefaultConsent'),\ + \ ',', 'Configure Windows SmartScreen;ExpectedValue', '=', parameters('ConfigureWindowsSmartScreen'),\ + \ ',', 'Disallow Digest authentication;ExpectedValue', '=', parameters('DisallowDigestAuthentication'),\ + \ ',', 'Disallow WinRM from storing RunAs credentials;ExpectedValue', '=',\ + \ parameters('DisallowWinRMFromStoringRunAsCredentials'), ',', 'Do not allow\ + \ passwords to be saved;ExpectedValue', '=', parameters('DoNotAllowPasswordsToBeSaved'),\ + \ ',', 'Security: Specify the maximum log file size (KB);ExpectedValue', '=',\ + \ parameters('SecuritySpecifyTheMaximumLogFileSizeKB'), ',', 'Set client connection\ + \ encryption level;ExpectedValue', '=', parameters('SetClientConnectionEncryptionLevel'),\ + \ ',', 'Set the default behavior for AutoRun;ExpectedValue', '=', parameters('SetTheDefaultBehaviorForAutoRun'),\ + \ ',', 'Setup: Specify the maximum log file size (KB);ExpectedValue', '=',\ + \ parameters('SetupSpecifyTheMaximumLogFileSizeKB'), ',', 'System: Specify\ + \ the maximum log file size (KB);ExpectedValue', '=', parameters('SystemSpecifyTheMaximumLogFileSizeKB'),\ + \ ',', 'Turn off Data Execution Prevention for Explorer;ExpectedValue', '=',\ + \ parameters('TurnOffDataExecutionPreventionForExplorer'), ',', 'Specify the\ + \ interval to check for definition updates;ExpectedValue', '=', parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')))]\"\ + },\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\"\ + :{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\"\ + :\"AzureBaseline_WindowsComponents\"},\"SendFileSamplesWhenFurtherAnalysisIsRequired\"\ + :{\"value\":\"[parameters('SendFileSamplesWhenFurtherAnalysisIsRequired')]\"\ + },\"AllowIndexingOfEncryptedFiles\":{\"value\":\"[parameters('AllowIndexingOfEncryptedFiles')]\"\ + },\"AllowTelemetry\":{\"value\":\"[parameters('AllowTelemetry')]\"},\"AllowUnencryptedTraffic\"\ + :{\"value\":\"[parameters('AllowUnencryptedTraffic')]\"},\"AlwaysInstallWithElevatedPrivileges\"\ + :{\"value\":\"[parameters('AlwaysInstallWithElevatedPrivileges')]\"},\"AlwaysPromptForPasswordUponConnection\"\ + :{\"value\":\"[parameters('AlwaysPromptForPasswordUponConnection')]\"},\"\ + ApplicationSpecifyTheMaximumLogFileSizeKB\":{\"value\":\"[parameters('ApplicationSpecifyTheMaximumLogFileSizeKB')]\"\ + },\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":{\"value\":\"\ + [parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports')]\"},\"\ + ConfigureDefaultConsent\":{\"value\":\"[parameters('ConfigureDefaultConsent')]\"\ + },\"ConfigureWindowsSmartScreen\":{\"value\":\"[parameters('ConfigureWindowsSmartScreen')]\"\ + },\"DisallowDigestAuthentication\":{\"value\":\"[parameters('DisallowDigestAuthentication')]\"\ + },\"DisallowWinRMFromStoringRunAsCredentials\":{\"value\":\"[parameters('DisallowWinRMFromStoringRunAsCredentials')]\"\ + },\"DoNotAllowPasswordsToBeSaved\":{\"value\":\"[parameters('DoNotAllowPasswordsToBeSaved')]\"\ + },\"SecuritySpecifyTheMaximumLogFileSizeKB\":{\"value\":\"[parameters('SecuritySpecifyTheMaximumLogFileSizeKB')]\"\ + },\"SetClientConnectionEncryptionLevel\":{\"value\":\"[parameters('SetClientConnectionEncryptionLevel')]\"\ + },\"SetTheDefaultBehaviorForAutoRun\":{\"value\":\"[parameters('SetTheDefaultBehaviorForAutoRun')]\"\ + },\"SetupSpecifyTheMaximumLogFileSizeKB\":{\"value\":\"[parameters('SetupSpecifyTheMaximumLogFileSizeKB')]\"\ + },\"SystemSpecifyTheMaximumLogFileSizeKB\":{\"value\":\"[parameters('SystemSpecifyTheMaximumLogFileSizeKB')]\"\ + },\"TurnOffDataExecutionPreventionForExplorer\":{\"value\":\"[parameters('TurnOffDataExecutionPreventionForExplorer')]\"\ + },\"SpecifyTheIntervalToCheckForDefinitionUpdates\":{\"value\":\"[parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"SendFileSamplesWhenFurtherAnalysisIsRequired\":{\"\ + type\":\"string\"},\"AllowIndexingOfEncryptedFiles\":{\"type\":\"string\"\ + },\"AllowTelemetry\":{\"type\":\"string\"},\"AllowUnencryptedTraffic\":{\"\ + type\":\"string\"},\"AlwaysInstallWithElevatedPrivileges\":{\"type\":\"string\"\ + },\"AlwaysPromptForPasswordUponConnection\":{\"type\":\"string\"},\"ApplicationSpecifyTheMaximumLogFileSizeKB\"\ + :{\"type\":\"string\"},\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\"\ + :{\"type\":\"string\"},\"ConfigureDefaultConsent\":{\"type\":\"string\"},\"\ + ConfigureWindowsSmartScreen\":{\"type\":\"string\"},\"DisallowDigestAuthentication\"\ + :{\"type\":\"string\"},\"DisallowWinRMFromStoringRunAsCredentials\":{\"type\"\ + :\"string\"},\"DoNotAllowPasswordsToBeSaved\":{\"type\":\"string\"},\"SecuritySpecifyTheMaximumLogFileSizeKB\"\ + :{\"type\":\"string\"},\"SetClientConnectionEncryptionLevel\":{\"type\":\"\ + string\"},\"SetTheDefaultBehaviorForAutoRun\":{\"type\":\"string\"},\"SetupSpecifyTheMaximumLogFileSizeKB\"\ + :{\"type\":\"string\"},\"SystemSpecifyTheMaximumLogFileSizeKB\":{\"type\"\ + :\"string\"},\"TurnOffDataExecutionPreventionForExplorer\":{\"type\":\"string\"\ + },\"SpecifyTheIntervalToCheckForDefinitionUpdates\":{\"type\":\"string\"}},\"\ + resources\":[{\"condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Send file samples\ + \ when further analysis is required;ExpectedValue\",\"value\":\"[parameters('SendFileSamplesWhenFurtherAnalysisIsRequired')]\"\ + },{\"name\":\"Allow indexing of encrypted files;ExpectedValue\",\"value\"\ + :\"[parameters('AllowIndexingOfEncryptedFiles')]\"},{\"name\":\"Allow Telemetry;ExpectedValue\"\ + ,\"value\":\"[parameters('AllowTelemetry')]\"},{\"name\":\"Allow unencrypted\ + \ traffic;ExpectedValue\",\"value\":\"[parameters('AllowUnencryptedTraffic')]\"\ + },{\"name\":\"Always install with elevated privileges;ExpectedValue\",\"value\"\ + :\"[parameters('AlwaysInstallWithElevatedPrivileges')]\"},{\"name\":\"Always\ + \ prompt for password upon connection;ExpectedValue\",\"value\":\"[parameters('AlwaysPromptForPasswordUponConnection')]\"\ + },{\"name\":\"Application: Specify the maximum log file size (KB);ExpectedValue\"\ + ,\"value\":\"[parameters('ApplicationSpecifyTheMaximumLogFileSizeKB')]\"},{\"\ + name\":\"Automatically send memory dumps for OS-generated error reports;ExpectedValue\"\ + ,\"value\":\"[parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports')]\"\ + },{\"name\":\"Configure Default consent;ExpectedValue\",\"value\":\"[parameters('ConfigureDefaultConsent')]\"\ + },{\"name\":\"Configure Windows SmartScreen;ExpectedValue\",\"value\":\"[parameters('ConfigureWindowsSmartScreen')]\"\ + },{\"name\":\"Disallow Digest authentication;ExpectedValue\",\"value\":\"\ + [parameters('DisallowDigestAuthentication')]\"},{\"name\":\"Disallow WinRM\ + \ from storing RunAs credentials;ExpectedValue\",\"value\":\"[parameters('DisallowWinRMFromStoringRunAsCredentials')]\"\ + },{\"name\":\"Do not allow passwords to be saved;ExpectedValue\",\"value\"\ + :\"[parameters('DoNotAllowPasswordsToBeSaved')]\"},{\"name\":\"Security: Specify\ + \ the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SecuritySpecifyTheMaximumLogFileSizeKB')]\"\ + },{\"name\":\"Set client connection encryption level;ExpectedValue\",\"value\"\ + :\"[parameters('SetClientConnectionEncryptionLevel')]\"},{\"name\":\"Set the\ + \ default behavior for AutoRun;ExpectedValue\",\"value\":\"[parameters('SetTheDefaultBehaviorForAutoRun')]\"\ + },{\"name\":\"Setup: Specify the maximum log file size (KB);ExpectedValue\"\ + ,\"value\":\"[parameters('SetupSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\"\ + :\"System: Specify the maximum log file size (KB);ExpectedValue\",\"value\"\ + :\"[parameters('SystemSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Turn\ + \ off Data Execution Prevention for Explorer;ExpectedValue\",\"value\":\"\ + [parameters('TurnOffDataExecutionPreventionForExplorer')]\"},{\"name\":\"\ + Specify the interval to check for definition updates;ExpectedValue\",\"value\"\ + :\"[parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')]\"}]}}},{\"\ + condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Send file samples\ + \ when further analysis is required;ExpectedValue\",\"value\":\"[parameters('SendFileSamplesWhenFurtherAnalysisIsRequired')]\"\ + },{\"name\":\"Allow indexing of encrypted files;ExpectedValue\",\"value\"\ + :\"[parameters('AllowIndexingOfEncryptedFiles')]\"},{\"name\":\"Allow Telemetry;ExpectedValue\"\ + ,\"value\":\"[parameters('AllowTelemetry')]\"},{\"name\":\"Allow unencrypted\ + \ traffic;ExpectedValue\",\"value\":\"[parameters('AllowUnencryptedTraffic')]\"\ + },{\"name\":\"Always install with elevated privileges;ExpectedValue\",\"value\"\ + :\"[parameters('AlwaysInstallWithElevatedPrivileges')]\"},{\"name\":\"Always\ + \ prompt for password upon connection;ExpectedValue\",\"value\":\"[parameters('AlwaysPromptForPasswordUponConnection')]\"\ + },{\"name\":\"Application: Specify the maximum log file size (KB);ExpectedValue\"\ + ,\"value\":\"[parameters('ApplicationSpecifyTheMaximumLogFileSizeKB')]\"},{\"\ + name\":\"Automatically send memory dumps for OS-generated error reports;ExpectedValue\"\ + ,\"value\":\"[parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports')]\"\ + },{\"name\":\"Configure Default consent;ExpectedValue\",\"value\":\"[parameters('ConfigureDefaultConsent')]\"\ + },{\"name\":\"Configure Windows SmartScreen;ExpectedValue\",\"value\":\"[parameters('ConfigureWindowsSmartScreen')]\"\ + },{\"name\":\"Disallow Digest authentication;ExpectedValue\",\"value\":\"\ + [parameters('DisallowDigestAuthentication')]\"},{\"name\":\"Disallow WinRM\ + \ from storing RunAs credentials;ExpectedValue\",\"value\":\"[parameters('DisallowWinRMFromStoringRunAsCredentials')]\"\ + },{\"name\":\"Do not allow passwords to be saved;ExpectedValue\",\"value\"\ + :\"[parameters('DoNotAllowPasswordsToBeSaved')]\"},{\"name\":\"Security: Specify\ + \ the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SecuritySpecifyTheMaximumLogFileSizeKB')]\"\ + },{\"name\":\"Set client connection encryption level;ExpectedValue\",\"value\"\ + :\"[parameters('SetClientConnectionEncryptionLevel')]\"},{\"name\":\"Set the\ + \ default behavior for AutoRun;ExpectedValue\",\"value\":\"[parameters('SetTheDefaultBehaviorForAutoRun')]\"\ + },{\"name\":\"Setup: Specify the maximum log file size (KB);ExpectedValue\"\ + ,\"value\":\"[parameters('SetupSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\"\ + :\"System: Specify the maximum log file size (KB);ExpectedValue\",\"value\"\ + :\"[parameters('SystemSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Turn\ + \ off Data Execution Prevention for Explorer;ExpectedValue\",\"value\":\"\ + [parameters('TurnOffDataExecutionPreventionForExplorer')]\"},{\"name\":\"\ + Specify the interval to check for definition updates;ExpectedValue\",\"value\"\ + :\"[parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')]\"}]}}},{\"\ + condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\"\ + ,\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\"\ + ,\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7040a231-fb65-4412-8c0a-b365f4866c24\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7040a231-fb65-4412-8c0a-b365f4866c24\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1254 - Contingency\ + \ Plan | Resume All Missions / Business Functions\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Contingency\ + \ Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1254\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/704e136a-4fe0-427c-b829-cd69957f5d2b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"704e136a-4fe0-427c-b829-cd69957f5d2b\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'System Audit Policies - System'\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should only be\ + \ used along with its corresponding deploy policy in an initiative. This definition\ + \ allows Azure Policy to process the results of auditing Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'System Audit Policies\ + \ - System'. For more information on Guest Configuration policies, please\ + \ visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Guest Configuration\",\"deprecated\":true},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SystemAuditPoliciesSystem\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7066131b-61a6-4917-a7e4-72e8983f0aa6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7066131b-61a6-4917-a7e4-72e8983f0aa6\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1509 - Position\ + \ Risk Designation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1509\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/70792197-9bfc-4813-905a-bd33993e327f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"70792197-9bfc-4813-905a-bd33993e327f\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1541 - Risk\ + \ Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Risk Assessment control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1541\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/70f6af82-7be6-44aa-9b15-8b9231b2e434\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"70f6af82-7be6-44aa-9b15-8b9231b2e434\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1691 - Information\ + \ System Monitoring | Automated Tools For Real-Time Analysis\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ System and Information Integrity control\",\"metadata\":{\"version\":\"\ + 1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"\ + /providers/Microsoft.PolicyInsights/policyMetadata/ACF1691\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/71475fb4-49bd-450b-a1a5-f63894c24725\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"71475fb4-49bd-450b-a1a5-f63894c24725\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1481 - Temperature\ + \ And Humidity Controls\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this Physical and Environmental Protection\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1481\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/717a1c78-a267-4f56-ac58-ee6c54dc4339\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"717a1c78-a267-4f56-ac58-ee6c54dc4339\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1129 - Time\ + \ Stamps | Synchronization With Authoritative Time Source\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1129\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/71bb965d-4047-4623-afd4-b8189a58df5d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"71bb965d-4047-4623-afd4-b8189a58df5d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1395 - System\ + \ Maintenance Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Maintenance control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1395\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7207a023-a517-41c5-9df2-09d4c6845a05\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7207a023-a517-41c5-9df2-09d4c6845a05\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs on which the DSC configuration is not compliant\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should only be\ + \ used along with its corresponding deploy policy in an initiative. This definition\ + \ allows Azure Policy to process the results of auditing Windows VMs on which\ + \ the Desired State Configuration (DSC) configuration is not compliant. This\ + \ policy is only applicable to machines with WMF 4 and above. For more information\ + \ on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"\ + metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsDscConfiguration\",\"existenceCondition\":{\"field\":\"\ + Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7227ebe5-9ff7-47ab-b823-171cd02fb90f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7227ebe5-9ff7-47ab-b823-171cd02fb90f\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'Administrative Templates - Network'\",\"\ + policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should\ + \ only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines with non-compliant settings in Group Policy category: 'Administrative\ + \ Templates - Network'. For more information on Guest Configuration policies,\ + \ please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Guest Configuration\",\"deprecated\":true},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_AdministrativeTemplatesNetwork\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7229bd6a-693d-478a-87f0-1dc1af06f3b8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7229bd6a-693d-478a-87f0-1dc1af06f3b8\"\ + },{\"properties\":{\"displayName\":\"Ensure that 'Python version' is the latest,\ + \ if used as a part of the Function app\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Periodically, newer versions are released for\ + \ Python software either due to security flaws or to include additional functionality.\ + \ Using the latest Python version for Function apps is recommended in order\ + \ to take advantage of security fixes, if any, and/or new functionalities\ + \ of the latest version.\",\"metadata\":{\"version\":\"2.0.0\",\"category\"\ + :\"App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"},\"WindowsPythonLatestVersion\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Windows Latest Python version\"\ + ,\"description\":\"Latest supported Python version for App Services\",\"deprecated\"\ + :true},\"defaultValue\":\"3.6\"},\"LinuxPythonLatestVersion\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Linux Latest Python version\",\"\ + description\":\"Latest supported Python version for App Services\"},\"defaultValue\"\ + :\"3.8\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"\ + field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"\ + existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\"\ + ,\"notContains\":\"PYTHON\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\"\ + ,\"equals\":\"[concat('PYTHON|', parameters('LinuxPythonLatestVersion'))]\"\ + }]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7238174a-fd10-4ef0-817e-fc820a951d73\"\ + },{\"properties\":{\"displayName\":\"Ensure that 'PHP version' is the latest,\ + \ if used as a part of the WEB app\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"Periodically, newer versions are released for\ + \ PHP software either due to security flaws or to include additional functionality.\ + \ Using the latest PHP version for web apps is recommended in order to take\ + \ advantage of security fixes, if any, and/or new functionalities of the latest\ + \ version.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App Service\"\ + },\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"},\"PHPLatestVersion\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Latest PHP version\",\"description\":\"Latest supported\ + \ PHP version for App Services\"},\"defaultValue\":\"7.3\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"\ + },{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"kind\",\"contains\"\ + :\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\"\ + :{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\"\ + :{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\"\ + ,\"notContains\":\"PHP\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\"\ + ,\"equals\":\"[concat('PHP|', parameters('PHPLatestVersion'))]\"}]}}}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7261b898-8a84-4db8-9e04-18527132abb3\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs that allow re-use of the previous 24 passwords\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy creates a\ + \ Guest Configuration assignment to audit Windows virtual machines that allow\ + \ re-use of the previous 24 passwords. It also creates a system-assigned managed\ + \ identity and deploys the VM extension for Guest Configuration. This policy\ + \ should only be used along with its corresponding audit policy in an initiative.\ + \ For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"EnforcePasswordHistory\",\"deployment\":{\"properties\":{\"mode\"\ + :\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"EnforcePasswordHistory\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/726671ac-c4de-4908-8c7d-6043ae62e3b6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"726671ac-c4de-4908-8c7d-6043ae62e3b6\"\ + },{\"properties\":{\"displayName\":\"Add a tag to resource groups\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"Adds the specified tag and\ + \ value when any resource group missing this tag is created or updated. Existing\ + \ resource groups can be remediated by triggering a remediation task. If the\ + \ tag exists with a different value it will not be changed.\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag Name\",\"description\"\ + :\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Tag Value\",\"description\":\"Value of the\ + \ tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"\ + },{\"field\":\"[concat('tags[', parameters('tagName'), ']')]\",\"exists\"\ + :\"false\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', parameters('tagName'),\ + \ ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/726aca4c-86e9-4b04-b0c5-073027359532\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"726aca4c-86e9-4b04-b0c5-073027359532\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1524 - Personnel\ + \ Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1524\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/72f1cb4e-2439-4fe8-88ea-b8671ce3c268\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"72f1cb4e-2439-4fe8-88ea-b8671ce3c268\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1393 - Information\ + \ Spillage Response | Exposure To Unauthorized Personnel\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1393\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/731856d8-1598-4b75-92de-7d46235747c0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"731856d8-1598-4b75-92de-7d46235747c0\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1101 - Audit\ + \ And Accountability Policy And Procedures\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Audit and Accountability\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1101\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7327b708-f0e0-457d-9d2a-527fcc9c9a65\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7327b708-f0e0-457d-9d2a-527fcc9c9a65\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1456 - Physical\ + \ Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Physical and Environmental Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1456\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/733ba9e3-9e7c-440a-a7aa-6196a90a2870\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"733ba9e3-9e7c-440a-a7aa-6196a90a2870\"\ + },{\"properties\":{\"displayName\":\"Deploy Workflow Automation for Azure\ + \ Security Center recommendations\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + All\",\"description\":\"Enable automation of Azure Security Center recommendations.\ + \ This policy deploys a workflow automation with your conditions and triggers\ + \ on the assigned scope. To deploy this policy on newly created subscriptions,\ + \ open the Compliance tab, select the relevant non-compliant assignment and\ + \ create a remediation task.\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Security Center\"},\"parameters\":{\"automationName\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Automation name\",\"description\":\"This\ + \ is the automation name.\"}},\"resourceGroupName\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"Resource group name\",\"description\":\"The\ + \ resource group name where the workflow automation is created. If you enter\ + \ a name for a resource group that doesn't exist, it'll be created in the\ + \ subscription.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Resource group location\",\"description\":\"The location\ + \ where the resource group and the workflow automation are created.\",\"strongType\"\ + :\"location\"}},\"recommendationNames\":{\"type\":\"Array\",\"metadata\":{\"\ + displayName\":\"Recommendation IDs\",\"description\":\"For all recommendations,\ + \ leave empty. For specific recommendations, enter a list of recommendation\ + \ IDs separated by semicolons (';'). Recommendation IDs are available through\ + \ the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),\ + \ or Azure Resource Graph Explorer (https://portal.azure.com/#blade/HubsExtension/ArgQueryBlade),\ + \ choose securityresources and microsoft.security/assessments.\"},\"defaultValue\"\ + :[]},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\"\ + :\"Recommendation severities\",\"description\":\"Determines recommendation\ + \ severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"\ + Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"recommendationStates\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation states\"\ + ,\"description\":\"Determines recommendation states. Recommendations with\ + \ unhealthy state require your attention to resolve. When a recommendation\ + \ state is healthy, it no longer applies to the resource as Security Center\ + \ detects it as healthy. A recommendation is not-applicable if, for example,\ + \ it was disabled in the Security Policy. Example: Healthy;Unhealthy;Not Applicable;\"\ + },\"allowedValues\":[\"Healthy\",\"Unhealthy\",\"Not Applicable\"],\"defaultValue\"\ + :[\"Healthy\",\"Unhealthy\",\"Not Applicable\"]},\"logicAppResourceId\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Logic App\",\"description\"\ + :\"The Logic App that is triggered. If you do not already have a logic app,\ + \ visit Logic Apps to create one (https://portal.azure.com/#blade/HubsExtension/BrowseResourceBlade/resourceType/Microsoft.Logic%2Fworkflows).\"\ + ,\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"\ + logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic\ + \ app trigger\",\"description\":\"The trigger connector of the logic app that\ + \ is triggered. Possible values: 'Manual (Incoming HTTP request)', 'When an\ + \ Azure Security Center Recommendation is created or triggered'.\"},\"allowedValues\"\ + :[\"Manual (Incoming HTTP request)\",\"When an Azure Security Center Recommendation\ + \ is created or triggered\"]}},\"policyRule\":{\"if\":{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"\ + deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\"\ + ,\"name\":\"[parameters('automationName')]\",\"existenceScope\":\"resourcegroup\"\ + ,\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\"\ + :\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"\ + incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"automationName\":{\"type\"\ + :\"string\"},\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\"\ + :{\"type\":\"string\"},\"recommendationNames\":{\"type\":\"array\"},\"recommendationSeverities\"\ + :{\"type\":\"array\"},\"recommendationStates\":{\"type\":\"array\"},\"logicAppResourceId\"\ + :{\"type\":\"string\"},\"logicAppTrigger\":{\"type\":\"string\"},\"guidValue\"\ + :{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"\ + scopeDescription\":\"scope for subscription {0}\",\"recommendationNamesLength\"\ + :\"[length(parameters('recommendationNames'))]\",\"recommendationSeveritiesLength\"\ + :\"[length(parameters('recommendationSeverities'))]\",\"recommendationStatesLength\"\ + :\"[length(parameters('recommendationStates'))]\",\"recommendationNamesLengthIfEmpty\"\ + :\"[if(equals(variables('recommendationNamesLength'), 0), 1, variables('recommendationNamesLength'))]\"\ + ,\"recommendationSeveritiesLengthIfEmpty\":\"[if(equals(variables('recommendationSeveritiesLength'),\ + \ 0), 1, variables('recommendationSeveritiesLength'))]\",\"recommendationStatesLengthIfEmpty\"\ + :\"[if(equals(variables('recommendationStatesLength'), 0), 1, variables('recommendationStatesLength'))]\"\ + ,\"totalRuleCombinationsForOneRecommendationName\":\"[mul(variables('recommendationSeveritiesLengthIfEmpty'),variables('recommendationStatesLengthIfEmpty'))]\"\ + ,\"totalRuleCombinationsForOneRecommendationSeverity\":\"[variables('recommendationStatesLengthIfEmpty')]\"\ + ,\"totalRuleCombinationsForOneRecommendationState\":1,\"stateMap\":{\"Healthy\"\ + :\"healthy\",\"Unhealthy\":\"unhealthy\",\"Not Applicable\":\"notapplicable\"\ + },\"triggerMap\":{\"Manual (Incoming HTTP request)\":\"manual\",\"When an\ + \ Azure Security Center Recommendation is created or triggered\":\"When_an_Azure_Security_Center_Recommendation_is_created_or_triggered\"\ + }},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\"\ + :\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\"\ + :\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"\ + type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"\ + name\":\"[concat('nestedAutomationDeployment', '_', parameters('guidValue'))]\"\ + ,\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"\ + [resourceId('Microsoft.Resources/resourceGroups/', parameters('resourceGroupName'))]\"\ + ],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\"\ + :[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\"\ + ,\"name\":\"[parameters('automationName')]\",\"type\":\"Microsoft.Security/automations\"\ + ,\"dependsOn\":[],\"properties\":{\"description\":\"Workflow Automation for\ + \ Azure Security Center recommendations via policy\",\"isEnabled\":true,\"\ + scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}',\ + \ subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"\ + }],\"sources\":[{\"eventSource\":\"Assessments\",\"copy\":[{\"name\":\"ruleSets\"\ + ,\"count\":\"[mul(variables('recommendationNamesLengthIfEmpty'), mul(variables('recommendationSeveritiesLengthIfEmpty'),variables('recommendationStatesLengthIfEmpty')))]\"\ + ,\"input\":{\"rules\":[{\"propertyJPath\":\"[if(equals(variables('recommendationNamesLength'),\ + \ 0), 'type', 'name')]\",\"propertyType\":\"string\",\"expectedValue\":\"\ + [if(equals(variables('recommendationNamesLength'), 0), 'Microsoft.Security/assessments',\ + \ parameters('recommendationNames')[mod(div(copyIndex('ruleSets'), variables('totalRuleCombinationsForOneRecommendationName')),\ + \ variables('recommendationNamesLength'))])]\",\"operator\":\"Contains\"},{\"\ + propertyJPath\":\"properties.metadata.severity\",\"propertyType\":\"string\"\ + ,\"expectedValue\":\"[parameters('recommendationSeverities')[mod(div(copyIndex('ruleSets'),\ + \ variables('totalRuleCombinationsForOneRecommendationSeverity')), variables('recommendationSeveritiesLength'))]]\"\ + ,\"operator\":\"Equals\"},{\"propertyJPath\":\"properties.status.code\",\"\ + propertyType\":\"string\",\"expectedValue\":\"[variables('stateMap')[parameters('recommendationStates')[mod(div(copyIndex('ruleSets'),\ + \ variables('totalRuleCombinationsForOneRecommendationState')), variables('recommendationStatesLength'))]]]\"\ + ,\"operator\":\"Contains\"}]}}]}],\"actions\":[{\"actionType\":\"LogicApp\"\ + ,\"logicAppResourceId\":\"[parameters('logicAppResourceId')]\",\"uri\":\"\ + [listCallbackUrl(concat(parameters('logicAppResourceId'), '/triggers/', variables('triggerMap')[parameters('logicAppTrigger')]),'2016-06-01').value]\"\ + }]}}]}}}]},\"parameters\":{\"automationName\":{\"value\":\"[parameters('automationName')]\"\ + },\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"\ + resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"\ + },\"recommendationNames\":{\"value\":\"[parameters('recommendationNames')]\"\ + },\"recommendationSeverities\":{\"value\":\"[parameters('recommendationSeverities')]\"\ + },\"recommendationStates\":{\"value\":\"[parameters('recommendationStates')]\"\ + },\"logicAppResourceId\":{\"value\":\"[parameters('logicAppResourceId')]\"\ + },\"logicAppTrigger\":{\"value\":\"[parameters('logicAppTrigger')]\"}}}}}}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/73d6ab6c-2475-4850-afd6-43795f3492ef\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"73d6ab6c-2475-4850-afd6-43795f3492ef\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1581 - Information\ + \ System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this System and Services Acquisition\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1581\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/742b549b-7a25-465f-b83c-ea1ffb4f4e0e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"742b549b-7a25-465f-b83c-ea1ffb4f4e0e\"\ + },{\"properties\":{\"displayName\":\"Allowed storage account SKUs\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy enables you\ + \ to specify a set of storage account SKUs that your organization can deploy.\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\"\ + :{\"listOfAllowedSKUs\":{\"type\":\"Array\",\"metadata\":{\"description\"\ + :\"The list of SKUs that can be specified for storage accounts.\",\"displayName\"\ + :\"Allowed SKUs\",\"strongType\":\"StorageSKUs\"}}},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"\ + },{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/sku.name\",\"in\"\ + :\"[parameters('listOfAllowedSKUs')]\"}}]},\"then\":{\"effect\":\"Deny\"}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/7433c107-6db4-4ad1-b57a-a76dce0154a1\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7433c107-6db4-4ad1-b57a-a76dce0154a1\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1631 - Boundary\ + \ Protection | Deny By Default / Allow By Exception\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this System and\ + \ Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1631\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/74ae9b8e-e7bb-4c9c-992f-c535282f7a2c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"74ae9b8e-e7bb-4c9c-992f-c535282f7a2c\"\ + },{\"properties\":{\"displayName\":\"Ensure that 'Python version' is the latest,\ + \ if used as a part of the Api app\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"Periodically, newer versions are released for\ + \ Python software either due to security flaws or to include additional functionality.\ + \ Using the latest Python version for Api apps is recommended in order to\ + \ take advantage of security fixes, if any, and/or new functionalities of\ + \ the latest version.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"\ + App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"},\"WindowsPythonLatestVersion\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Windows Latest Python version\"\ + ,\"description\":\"Latest supported Python version for App Services\",\"deprecated\"\ + :true},\"defaultValue\":\"3.6\"},\"LinuxPythonLatestVersion\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Linux Latest Python version\",\"\ + description\":\"Latest supported Python version for App Services\"},\"defaultValue\"\ + :\"3.8\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\"\ + :\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"\ + existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\"\ + ,\"notContains\":\"PYTHON\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\"\ + ,\"equals\":\"[concat('PYTHON|', parameters('LinuxPythonLatestVersion'))]\"\ + }]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"74c3584d-afae-46f7-a20a-6f8adba71a16\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1417 - Nonlocal\ + \ Maintenance | Comparable Security / Sanitization\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Maintenance\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1417\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7522ed84-70d5-4181-afc0-21e50b1b6d0e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7522ed84-70d5-4181-afc0-21e50b1b6d0e\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Audit enabling of diagnostic\ + \ logs in App Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"Audit enabling of diagnostic logs on the app. This enables you to recreate\ + \ activity trails for investigation purposes if a security incident occurs\ + \ or your network is compromised\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"App Service\",\"deprecated\":true},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"\ + if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites/config\"\ + },{\"field\":\"name\",\"equals\":\"web\"},{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/detailedErrorLoggingEnabled\"\ + ,\"notEquals\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/httpLoggingEnabled\"\ + ,\"notEquals\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/requestTracingEnabled\"\ + ,\"notEquals\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/752c6934-9bcc-4749-b004-655e676ae2ac\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"752c6934-9bcc-4749-b004-655e676ae2ac\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1468 - Visitor\ + \ Access Records | Automated Records Maintenance / Review\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Physical and Environmental Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1468\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/75603f96-80a1-4757-991d-5a1221765ddd\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"75603f96-80a1-4757-991d-5a1221765ddd\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1053 - Session\ + \ Lock | Pattern-Hiding Displays\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Access Control control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1053\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7582b19c-9dba-438e-aed8-ede59ac35ba3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7582b19c-9dba-438e-aed8-ede59ac35ba3\"\ + },{\"properties\":{\"displayName\":\"Private endpoint should be enabled for\ + \ MySQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Private endpoint connections enforce secure communication by enabling private\ + \ connectivity to Azure Database for MySQL. Configure a private endpoint connection\ + \ to enable access to traffic coming only from known networks and prevent\ + \ access from all other IP addresses, including within Azure.\",\"metadata\"\ + :{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.DBforMySQL/servers/privateEndpointConnections\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.DBforMySQL/servers/privateEndpointConnections/privateLinkServiceConnectionState.status\"\ + ,\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7595c971-233d-4bcf-bd18-596129188c49\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1459 - Access\ + \ Control For Transmission Medium\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Physical and Environmental\ + \ Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1459\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/75cc73c7-5cdb-479d-a06f-7b4d0dbb1da0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"75cc73c7-5cdb-479d-a06f-7b4d0dbb1da0\"\ + },{\"properties\":{\"displayName\":\"Vulnerabilities should be remediated\ + \ by a Vulnerability Assessment solution\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"All\",\"description\":\"Monitors vulnerabilities detected by Vulnerability\ + \ Assessment solution and VMs without a Vulnerability Assessment solution\ + \ in Azure Security Center as recommendations.\",\"metadata\":{\"version\"\ + :\"2.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"effect\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\"\ + ,\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"71992a2a-d168-42e0-b10e-6b45fa2ecddb\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/760a85ff-6162-42b3-8d70-698e268f648c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"760a85ff-6162-42b3-8d70-698e268f648c\"\ + },{\"properties\":{\"displayName\":\"Deploy Dependency agent for Linux virtual\ + \ machine scale sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"\ + description\":\"Deploy Dependency agent for Linux virtual machine scale sets\ + \ if the VM Image (OS) is in the list defined and the agent is not installed.\ + \ Note: if your scale set upgradePolicy is set to Manual, you need to apply\ + \ the extension to the all virtual machines in the set by calling upgrade\ + \ on them. In CLI this would be az vmss update-instances.\",\"metadata\":{\"\ + version\":\"1.3.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: List of VM\ + \ images that have supported Linux OS to add to scope\",\"description\":\"\ + Example value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"\ + },\"defaultValue\":[]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"\ + },{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"\ + Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\"\ + ,\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\"\ + :[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"\ + SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\"\ + ,\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\"\ + ,\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\"\ + :{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\"\ + ,\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"\ + ],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\"\ + ,\"equals\":\"DependencyAgentLinux\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\"\ + ,\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"}]},\"deployment\"\ + :{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"\ + DependencyAgentLinux\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\"\ + ,\"vmExtensionType\":\"DependencyAgentLinux\",\"vmExtensionTypeHandlerVersion\"\ + :\"9.7\"},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\"\ + ,\"name\":\"[concat(parameters('vmName'), '/', variables('vmExtensionName'))]\"\ + ,\"apiVersion\":\"2018-06-01\",\"location\":\"[parameters('location')]\",\"\ + properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\"\ + :\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\"\ + ,\"autoUpgradeMinorVersion\":true}}],\"outputs\":{\"policy\":{\"type\":\"\ + string\",\"value\":\"[concat('Enabled extension for: ', parameters('vmName'))]\"\ + }}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\"\ + :{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/765266ab-e40e-4c61-bcb2-5a5275d0b7c0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"765266ab-e40e-4c61-bcb2-5a5275d0b7c0\"\ + },{\"properties\":{\"displayName\":\"Private endpoint connections on Azure\ + \ SQL Database should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"Private endpoint connections enforce secure communication\ + \ by enabling private connectivity to Azure SQL Database.\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"\ + },{\"count\":{\"field\":\"Microsoft.Sql/servers/privateEndpointConnections[*]\"\ + ,\"where\":{\"field\":\"Microsoft.Sql/servers/privateEndpointConnections[*].privateLinkServiceConnectionState.status\"\ + ,\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"audit\"}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7698e800-9299-47a6-b3b6-5a0fee576eed\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1055 - Session\ + \ Termination| User-Initiated Logouts / Message Displays\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1055\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/769efd9b-3587-4e22-90ce-65ddcd5bd969\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"769efd9b-3587-4e22-90ce-65ddcd5bd969\"\ + },{\"properties\":{\"displayName\":\"Audit delegation of scopes to a managing\ + \ tenant\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"\ + Audit delegation of scopes to a managing tenant via Azure Lighthouse.\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Lighthouse\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"\ + if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ManagedServices/registrationAssignments\"\ + },{\"value\":\"true\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/76bed37b-484f-430f-a009-fd7592dff818\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"76bed37b-484f-430f-a009-fd7592dff818\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1058 - Permitted\ + \ Actions Without Identification Or Authentication\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Access Control\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1058\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/76e85d08-8fbb-4112-a1c1-93521e6a9254\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"76e85d08-8fbb-4112-a1c1-93521e6a9254\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1508 - Position\ + \ Risk Designation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1508\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/76f500cc-4bca-4583-bda1-6d084dc21086\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"76f500cc-4bca-4583-bda1-6d084dc21086\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1423 - Maintenance\ + \ Personnel | Individuals Without Appropriate Access\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Maintenance\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1423\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7741669e-d4f6-485a-83cb-e70ce7cbbc20\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7741669e-d4f6-485a-83cb-e70ce7cbbc20\"\ + },{\"properties\":{\"displayName\":\"Azure subscriptions should have a log\ + \ profile for Activity Log\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"\ + description\":\"This policy ensures if a log profile is enabled for exporting\ + \ activity logs. It audits if there is no log profile created to export the\ + \ logs either to a storage account or to an event hub.\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Insights/logProfiles\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/logProfiles/categories\"\ + ,\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7796937f-307b-4598-941c-67d3a05ebfe7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7796937f-307b-4598-941c-67d3a05ebfe7\"\ + },{\"properties\":{\"displayName\":\"Virtual network firewall rule on Azure\ + \ SQL Database should be enabled to allow traffic from the specified subnet\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual\ + \ network based firewall rules are used to enable traffic from a specific\ + \ subnet to Azure SQL Database while ensuring the traffic stays within the\ + \ Azure boundary.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"\ + },\"parameters\":{\"subnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Subnet ID\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"\ + ,\"description\":\"The resource ID of the virtual network subnet that should\ + \ have a rule enabled. Example: /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Default/providers/Microsoft.Network/virtualNetworks/testvnet/subnets/testsubnet\"\ + }}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"\ + },\"then\":{\"effect\":\"AuditIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/virtualNetworkRules\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/virtualNetworkRules/virtualNetworkSubnetId\"\ + ,\"equals\":\"[parameters('subnetId')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/77e8b146-0078-4fb2-b002-e112381199f0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"77e8b146-0078-4fb2-b002-e112381199f0\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1336 - Authenticator\ + \ Management | Pki-Based Authentication\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Identification and\ + \ Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1336\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/77f56280-e367-432a-a3b9-8ca2aa636a26\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"77f56280-e367-432a-a3b9-8ca2aa636a26\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1258 - Contingency\ + \ Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Contingency Planning control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1258\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7814506c-382c-4d33-a142-249dd4a0dbff\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7814506c-382c-4d33-a142-249dd4a0dbff\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1178 - Baseline\ + \ Configuration | Reviews And Updates\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Configuration Management\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1178\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7818b8f4-47c6-441a-90ae-12ce04e99893\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7818b8f4-47c6-441a-90ae-12ce04e99893\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1057 - Permitted\ + \ Actions Without Identification Or Authentication\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Access Control\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1057\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/78255758-6d45-4bf0-a005-7016bc03b13c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"78255758-6d45-4bf0-a005-7016bc03b13c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1700 - Information\ + \ System Monitoring | Unauthorized Network Services\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this System and\ + \ Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1700\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7831b4ba-c3f4-4cb1-8c11-ef8d59438cd5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7831b4ba-c3f4-4cb1-8c11-ef8d59438cd5\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1010 - Account\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1010\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/784663a8-1eb0-418a-a98c-24d19bc1bb62\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"784663a8-1eb0-418a-a98c-24d19bc1bb62\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1216 - Least\ + \ Functionality | Periodic Review\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Configuration Management\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1216\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7894fe6a-f5cb-44c8-ba90-c3f254ff9484\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7894fe6a-f5cb-44c8-ba90-c3f254ff9484\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1639 - Boundary\ + \ Protection | Isolation Of Information System Components\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ System and Communications Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1639\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/78e8e649-50f6-4fe3-99ac-fedc2e63b03f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"78e8e649-50f6-4fe3-99ac-fedc2e63b03f\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1647 - Cryptographic\ + \ Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Communications Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1647\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/791cfc15-6974-42a0-9f4c-2d4b82f4a78c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"791cfc15-6974-42a0-9f4c-2d4b82f4a78c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1510 - Position\ + \ Risk Designation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1510\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/79da5b09-0e7e-499e-adda-141b069c7998\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"79da5b09-0e7e-499e-adda-141b069c7998\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1384 - Information\ + \ Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Incident Response control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1384\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/79fbc228-461c-4a45-9004-a865ca0728a7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"79fbc228-461c-4a45-9004-a865ca0728a7\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows Server VMs on which Windows Serial Console is not enabled\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows Server virtual\ + \ machines on which Windows Serial Console is not enabled. It also creates\ + \ a system-assigned managed identity and deploys the VM extension for Guest\ + \ Configuration. This policy should only be used along with its corresponding\ + \ audit policy in an initiative. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.2.0-deprecated\",\"category\":\"Guest Configuration\",\"requiredProviders\"\ + :[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"\ + EMSPortNumber\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:\ + \ EMS Port Number\",\"description\":\"An integer indicating the COM port to\ + \ be used for the Emergency Management Services (EMS) console redirection.\ + \ For more information on EMS settings, please visit https://aka.ms/gcpolwsc\"\ + },\"allowedValues\":[\"1\",\"2\",\"3\",\"4\"],\"defaultValue\":\"1\"},\"EMSBaudRate\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: EMS Baud\ + \ Rate\",\"description\":\"An integer indicating the baud rate to be used\ + \ for the Emergency Management Services (EMS) console redirection. For more\ + \ information on EMS settings, please visit https://aka.ms/gcpolwsc\"},\"\ + allowedValues\":[\"9600\",\"19200\",\"38400\",\"57600\",\"115200\"],\"defaultValue\"\ + :\"115200\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"\ + type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsSerialConsole\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber',\ + \ '=', parameters('EMSPortNumber'), ',', '[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate',\ + \ '=', parameters('EMSBaudRate')))]\"},\"deployment\":{\"properties\":{\"\ + mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"WindowsSerialConsole\"\ + },\"EMSPortNumber\":{\"value\":\"[parameters('EMSPortNumber')]\"},\"EMSBaudRate\"\ + :{\"value\":\"[parameters('EMSBaudRate')]\"}},\"template\":{\"$schema\":\"\ + https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"EMSPortNumber\":{\"type\":\"string\"},\"EMSBaudRate\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber\"\ + ,\"value\":\"[parameters('EMSPortNumber')]\"},{\"name\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate\"\ + ,\"value\":\"[parameters('EMSBaudRate')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber\"\ + ,\"value\":\"[parameters('EMSPortNumber')]\"},{\"name\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate\"\ + ,\"value\":\"[parameters('EMSBaudRate')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a031c68-d6ab-406e-a506-697a19c634b0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a031c68-d6ab-406e-a506-697a19c634b0\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1093 - Role-Based\ + \ Security Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Awareness and Training control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1093\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a0bdeeb-15f4-47e8-a1da-9f769f845fdf\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a0bdeeb-15f4-47e8-a1da-9f769f845fdf\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1708 - Security\ + \ Function Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this System and Information Integrity\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1708\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a1e2c88-13de-4959-8ee7-47e3d74f1f48\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a1e2c88-13de-4959-8ee7-47e3d74f1f48\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1289 - Information\ + \ System Backup\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Contingency Planning control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1289\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a724864-956a-496c-b778-637cb1d762cf\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a724864-956a-496c-b778-637cb1d762cf\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1687 - Information\ + \ System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Information Integrity control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1687\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a87fc7f-301e-49f3-ba2a-4d74f424fa97\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a87fc7f-301e-49f3-ba2a-4d74f424fa97\"\ + },{\"properties\":{\"displayName\":\"Allow managing tenant ids to onboard\ + \ through Azure Lighthouse\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"\ + description\":\"Restricting Azure Lighthouse delegations to specific managing\ + \ tenants increases security by limiting those who can manage your Azure resources.\"\ + ,\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Lighthouse\"},\"parameters\"\ + :{\"listOfAllowedTenants\":{\"type\":\"Array\",\"metadata\":{\"displayName\"\ + :\"Allowed tenants\",\"description\":\"List of the tenants IDs that can be\ + \ onboarded through Azure Lighthouse\"}}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.ManagedServices/registrationDefinitions\"\ + },{\"not\":{\"field\":\"Microsoft.ManagedServices/registrationDefinitions/managedByTenantId\"\ + ,\"in\":\"[parameters('listOfAllowedTenants')]\"}}]},\"then\":{\"effect\"\ + :\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a8a51a3-ad87-4def-96f3-65a1839242b6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a8a51a3-ad87-4def-96f3-65a1839242b6\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1061 - Remote\ + \ Access | Automated Monitoring / Control\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Access Control control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1061\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ac22808-a2e8-41c4-9d46-429b50738914\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ac22808-a2e8-41c4-9d46-429b50738914\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1492 - System\ + \ Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Planning control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1492\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ad5f307-e045-46f7-8214-5bdb7e973737\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ad5f307-e045-46f7-8214-5bdb7e973737\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1636 - Boundary\ + \ Protection | Isolation Of Security Tools / Mechanisms / Support Components\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this System and Communications Protection control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1636\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7b694eed-7081-43c6-867c-41c76c961043\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7b694eed-7081-43c6-867c-41c76c961043\"\ + },{\"properties\":{\"displayName\":\"Diagnostic logs in Virtual Machine Scale\ + \ Sets should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"It is recommended to enable Logs so that activity trail\ + \ can be recreated when investigations are required in the event of an incident\ + \ or a compromise.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Compute\"\ + },\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"},\"includeAKSClusters\":{\"type\":\"Boolean\",\"metadata\"\ + :{\"displayName\":\"Include AKS Clusters\",\"description\":\"Whether to include\ + \ AKS Clusters to Diagnostic logs extension - True or False\"},\"defaultValue\"\ + :false}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"value\":\"[parameters('includeAKSClusters')]\"\ + ,\"equals\":true}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"\ + },{\"value\":\"[parameters('includeAKSClusters')]\",\"equals\":false},{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"notEquals\":\"microsoft-aks\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notEquals\":\"aks\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"notLike\":\"aks*\"}]}]},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\"\ + ,\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\"\ + ,\"equals\":\"IaaSDiagnostics\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\"\ + ,\"equals\":\"Microsoft.Azure.Diagnostics\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\"\ + ,\"equals\":\"LinuxDiagnostic\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\"\ + ,\"in\":[\"Microsoft.OSTCExtensions\",\"Microsoft.Azure.Diagnostics\"]}]}]}}}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7c1b1214-f927-48bf-8882-84f0af6588b1\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Require blob encryption\ + \ for storage accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"\ + description\":\"This policy ensures blob encryption for storage accounts is\ + \ turned on. It only applies to Microsoft.Storage resource types, not other\ + \ storage providers. This policy is deprecated because storage blob encryption\ + \ is now enabled by default, and can no longer be disabled.\",\"metadata\"\ + :{\"version\":\"1.0.0-deprecated\",\"category\":\"Storage\",\"deprecated\"\ + :true},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"\ + type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"Microsoft.Storage/storageAccounts/enableBlobEncryption\"\ + ,\"equals\":\"false\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1143 - Security\ + \ Assessment And Authorization Policy And Procedures\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Security\ + \ Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1143\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7c6de11b-5f51-4f7c-8d83-d2467c8a816e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7c6de11b-5f51-4f7c-8d83-d2467c8a816e\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1051 - Session\ + \ Lock\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"\ + Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1051\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7cac6ee9-b58b-40c8-a5ce-f0efc3d9b339\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7cac6ee9-b58b-40c8-a5ce-f0efc3d9b339\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1279 - Telecommunications\ + \ Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Contingency Planning control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1279\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d00bcd6-963d-4c02-ad8e-b45fa50bf3b0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d00bcd6-963d-4c02-ad8e-b45fa50bf3b0\"\ + },{\"properties\":{\"displayName\":\"Azure Cache for Redis should reside within\ + \ a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Azure Cache for Redis has the ability to reside within a virtual network,\ + \ which is a way for the resource to have a non-public endpoint controlled\ + \ and managed by the user.\",\"metadata\":{\"version\":\"1.0.1\",\"category\"\ + :\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"The effect determines what happens\ + \ when the policy rule is evaluated to match.\"},\"allowedValues\":[\"Audit\"\ + ,\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/redis\"},{\"\ + field\":\"Microsoft.Cache/Redis/subnetId\",\"exists\":\"false\"}]},\"then\"\ + :{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d092e0a-7acd-40d2-a975-dca21cae48c4\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1109 - Content\ + \ Of Audit Records | Centralized Management Of Planned Audit Record Content\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Audit and Accountability control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1109\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d9ffa23-ad92-4d0d-b1f4-7db274cc2aec\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d9ffa23-ad92-4d0d-b1f4-7db274cc2aec\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1201 - Security\ + \ Impact Analysis | Separate Test Environments\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Configuration\ + \ Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1201\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7daef997-fdd3-461b-8807-a608a6dd70f1\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7daef997-fdd3-461b-8807-a608a6dd70f1\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1471 - Emergency\ + \ Shutoff\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Physical and Environmental Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1471\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7dd0e9ce-1772-41fb-a50a-99977071f916\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7dd0e9ce-1772-41fb-a50a-99977071f916\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs that have the specified applications installed\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should only be\ + \ used along with its corresponding deploy policy in an initiative. This definition\ + \ allows Azure Policy to process the results of auditing Windows virtual machines\ + \ that have the specified applications installed. For more information on\ + \ Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\"\ + :{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"\ + deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"NotInstalledApplication\",\"existenceCondition\":{\"field\":\"\ + Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7e56b49b-5990-4159-a734-511ea19b731c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7e56b49b-5990-4159-a734-511ea19b731c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1011 - Account\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1011\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7e6a54f3-883f-43d5-87c4-172dfd64a1f5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7e6a54f3-883f-43d5-87c4-172dfd64a1f5\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs that have not restarted within the specified number of days\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy\ + \ should only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines that have not restarted within the specified number of\ + \ days. For more information on Guest Configuration policies, please visit\ + \ https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"\ + category\":\"Guest Configuration\",\"deprecated\":true},\"policyRule\":{\"\ + if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"MachineLastBootUpTime\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7e84ba44-6d03-46fd-950e-5efa5a1112fa\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7e84ba44-6d03-46fd-950e-5efa5a1112fa\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1692 - Information\ + \ System Monitoring | Inbound And Outbound Communications Traffic\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ System and Information Integrity control\",\"metadata\":{\"version\":\"\ + 1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"\ + /providers/Microsoft.PolicyInsights/policyMetadata/ACF1692\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ecda928-9df4-4dd7-8f44-641a91e470e8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ecda928-9df4-4dd7-8f44-641a91e470e8\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs that do not have the password complexity setting enabled\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ that do not have the password complexity setting enabled. It also creates\ + \ a system-assigned managed identity and deploys the VM extension for Guest\ + \ Configuration. This policy should only be used along with its corresponding\ + \ audit policy in an initiative. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"2.2.0-deprecated\",\"category\":\"Guest Configuration\",\"requiredProviders\"\ + :[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"\ + if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"PasswordMustMeetComplexityRequirements\",\"deployment\":{\"properties\"\ + :{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"PasswordMustMeetComplexityRequirements\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ed40801-8a0f-4ceb-85c0-9fd25c1d61a8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ed40801-8a0f-4ceb-85c0-9fd25c1d61a8\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1191 - Configuration\ + \ Change Control | Automated Document / Notification / Prohibition Of Changes\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Configuration Management control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1191\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f26a61b-a74d-467c-99cf-63644db144f7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f26a61b-a74d-467c-99cf-63644db144f7\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1520 - Personnel\ + \ Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1520\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f2c513b-eb16-463b-b469-c10e5fa94f0a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f2c513b-eb16-463b-b469-c10e5fa94f0a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1126 - Audit\ + \ Reduction And Report Generation | Automatic Processing\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1126\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f37f71b-420f-49bf-9477-9c0196974ecf\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f37f71b-420f-49bf-9477-9c0196974ecf\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'System Audit Policies - Privilege Use'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy\ + \ should only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines with non-compliant settings in Group Policy category: 'System\ + \ Audit Policies - Privilege Use'. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"deprecated\"\ + :true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f4e96d1-e4f3-4dbb-b767-33ca4df8df7c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f4e96d1-e4f3-4dbb-b767-33ca4df8df7c\"\ + },{\"properties\":{\"displayName\":\"Audit diagnostic setting\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit diagnostic setting for\ + \ selected resource types\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Monitoring\"},\"parameters\":{\"listOfResourceTypes\":{\"type\":\"Array\"\ + ,\"metadata\":{\"displayName\":\"Resource Types\",\"strongType\":\"resourceTypes\"\ + }}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":\"[parameters('listOfResourceTypes')]\"\ + },\"then\":{\"effect\":\"AuditIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\"\ + ,\"equals\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f89b1eb-583c-429a-8828-af049802c1d9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f89b1eb-583c-429a-8828-af049802c1d9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1117 - Audit\ + \ Review, Analysis, And Reporting | Process Integration\",\"policyType\":\"\ + Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1117\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7fbfe680-6dbb-4037-963c-a621c5635902\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7fbfe680-6dbb-4037-963c-a621c5635902\"\ + },{\"properties\":{\"displayName\":\"Azure Defender for Azure SQL Database\ + \ servers should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\"\ + ,\"description\":\"Azure Defender for SQL provides functionality for surfacing\ + \ and mitigating potential database vulnerabilities, detecting anomalous activities\ + \ that could indicate threats to SQL databases, and discovering and classifying\ + \ sensitive data.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Security\ + \ Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\"\ + ,\"name\":\"SqlServers\",\"existenceScope\":\"subscription\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"\ + }}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7fe3b40f-802b-4cdd-8bd4-fd799c948cc2\"\ + },{\"properties\":{\"displayName\":\"SQL Auditing settings should have Action-Groups\ + \ configured to capture critical activities\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"Indexed\",\"description\":\"The AuditActionsAndGroups property should\ + \ contain at least SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP, FAILED_DATABASE_AUTHENTICATION_GROUP,\ + \ BATCH_COMPLETED_GROUP to ensure a thorough audit logging\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Sql/servers/auditingSettings\",\"name\":\"default\",\"existenceCondition\"\ + :{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Sql/servers/auditingSettings/auditActionsAndGroups[*]\"\ + ,\"notEquals\":\"SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP\"}},{\"not\":{\"\ + field\":\"Microsoft.Sql/servers/auditingSettings/auditActionsAndGroups[*]\"\ + ,\"notEquals\":\"FAILED_DATABASE_AUTHENTICATION_GROUP\"}},{\"not\":{\"field\"\ + :\"Microsoft.Sql/servers/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\"\ + :\"BATCH_COMPLETED_GROUP\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ff426e2-515f-405a-91c8-4f2333442eb5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ff426e2-515f-405a-91c8-4f2333442eb5\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1703 - Security\ + \ Alerts, Advisories, And Directives\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this System and Information\ + \ Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1703\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/804faf7d-b687-40f7-9f74-79e28adf4205\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"804faf7d-b687-40f7-9f74-79e28adf4205\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1303 - Identification\ + \ And Authentication (Org. Users) | Local Access To Privileged Accounts\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Identification and Authentication control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1303\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/80ca0a27-918a-4604-af9e-723a27ee51e8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"80ca0a27-918a-4604-af9e-723a27ee51e8\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1505 - Information\ + \ Security Architecture\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this Planning control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1505\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/813a10a7-3943-4fe3-8678-00dc52db5490\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"813a10a7-3943-4fe3-8678-00dc52db5490\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1614 - Developer\ + \ Security Architecture And Design\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this System and Services\ + \ Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1614\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8154e3b3-cc52-40be-9407-7756581d71f6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8154e3b3-cc52-40be-9407-7756581d71f6\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'User Rights Assignment'\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy creates a\ + \ Guest Configuration assignment to audit Windows virtual machines with non-compliant\ + \ settings in Group Policy category: 'User Rights Assignment'. It also creates\ + \ a system-assigned managed identity and deploys the VM extension for Guest\ + \ Configuration. This policy should only be used along with its corresponding\ + \ audit policy in an initiative. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.2.0-deprecated\",\"category\":\"Guest Configuration\",\"requiredProviders\"\ + :[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"\ + UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"[Deprecated]: Users or groups that may access\ + \ this computer from the network\",\"description\":\"Specifies which remote\ + \ users on the network are permitted to connect to the computer. This does\ + \ not include Remote Desktop Connection.\"},\"defaultValue\":\"Administrators,\ + \ Authenticated Users\"},\"UsersOrGroupsThatMayLogOnLocally\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"[Deprecated]: Users or groups that\ + \ may log on locally\",\"description\":\"Specifies which users or groups can\ + \ interactively log on to the computer. Users who attempt to log on via Remote\ + \ Desktop Connection or IIS also require this user right.\"},\"defaultValue\"\ + :\"Administrators\"},\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Users\ + \ or groups that may log on through Remote Desktop Services\",\"description\"\ + :\"Specifies which users or groups are permitted to log on as a Terminal Services\ + \ client, Remote Desktop, or for Remote Assistance.\"},\"defaultValue\":\"\ + Administrators, Remote Desktop Users\"},\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Users\ + \ and groups that are denied access to this computer from the network\",\"\ + description\":\"Specifies which users or groups are explicitly prohibited\ + \ from connecting to the computer across the network.\"},\"defaultValue\"\ + :\"Guests\"},\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Users or groups\ + \ that may manage auditing and security log\",\"description\":\"Specifies\ + \ users and groups permitted to change the auditing options for files and\ + \ directories and clear the Security log.\"},\"defaultValue\":\"Administrators\"\ + },\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"[Deprecated]: Users or groups that may back\ + \ up files and directories\",\"description\":\"Specifies users and groups\ + \ allowed to circumvent file and directory permissions to back up the system.\"\ + },\"defaultValue\":\"Administrators, Backup Operators\"},\"UsersOrGroupsThatMayChangeTheSystemTime\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Users\ + \ or groups that may change the system time\",\"description\":\"Specifies\ + \ which users and groups are permitted to change the time and date on the\ + \ internal clock of the computer.\"},\"defaultValue\":\"Administrators, LOCAL\ + \ SERVICE\"},\"UsersOrGroupsThatMayChangeTheTimeZone\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"[Deprecated]: Users or groups that may change\ + \ the time zone\",\"description\":\"Specifies which users and groups are permitted\ + \ to change the time zone of the computer.\"},\"defaultValue\":\"Administrators,\ + \ LOCAL SERVICE\"},\"UsersOrGroupsThatMayCreateATokenObject\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"[Deprecated]: Users or groups that\ + \ may create a token object\",\"description\":\"Specifies which users and\ + \ groups are permitted to create an access token, which may provide elevated\ + \ rights to access sensitive data.\"},\"defaultValue\":\"No One\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Users\ + \ and groups that are denied logging on as a batch job\",\"description\":\"\ + Specifies which users and groups are explicitly not permitted to log on to\ + \ the computer as a batch job (i.e. scheduled task).\"},\"defaultValue\":\"\ + Guests\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"[Deprecated]: Users and groups that\ + \ are denied logging on as a service\",\"description\":\"Specifies which service\ + \ accounts are explicitly not permitted to register a process as a service.\"\ + },\"defaultValue\":\"Guests\"},\"UsersAndGroupsThatAreDeniedLocalLogon\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Users and\ + \ groups that are denied local logon\",\"description\":\"Specifies which users\ + \ and groups are explicitly not permitted to log on to the computer.\"},\"\ + defaultValue\":\"Guests\"},\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Users\ + \ and groups that are denied log on through Remote Desktop Services\",\"description\"\ + :\"Specifies which users and groups are explicitly not permitted to log on\ + \ to the computer via Terminal Services/Remote Desktop Client.\"},\"defaultValue\"\ + :\"Guests\"},\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: User and groups\ + \ that may force shutdown from a remote system\",\"description\":\"Specifies\ + \ which users and groups are permitted to shut down the computer from a remote\ + \ location on the network.\"},\"defaultValue\":\"Administrators\"},\"UsersAndGroupsThatMayRestoreFilesAndDirectories\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Users\ + \ and groups that may restore files and directories\",\"description\":\"Specifies\ + \ which users and groups are permitted to bypass file, directory, registry,\ + \ and other persistent object permissions when restoring backed up files and\ + \ directories.\"},\"defaultValue\":\"Administrators, Backup Operators\"},\"\ + UsersAndGroupsThatMayShutDownTheSystem\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Deprecated]: Users and groups that may shut down the\ + \ system\",\"description\":\"Specifies which users and groups who are logged\ + \ on locally to the computers in your environment are permitted to shut down\ + \ the operating system with the Shut Down command.\"},\"defaultValue\":\"\ + Administrators\"},\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Users\ + \ or groups that may take ownership of files or other objects\",\"description\"\ + :\"Specifies which users and groups are permitted to take ownership of files,\ + \ folders, registry keys, processes, or threads. This user right bypasses\ + \ any permissions that are in place to protect objects to give ownership to\ + \ the specified user.\"},\"defaultValue\":\"Administrators\"}},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_UserRightsAssignment\",\"existenceCondition\":{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Access this computer from the network;ExpectedValue',\ + \ '=', parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork'),\ + \ ',', 'Allow log on locally;ExpectedValue', '=', parameters('UsersOrGroupsThatMayLogOnLocally'),\ + \ ',', 'Allow log on through Remote Desktop Services;ExpectedValue', '=',\ + \ parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices'), ',',\ + \ 'Deny access to this computer from the network;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork'),\ + \ ',', 'Manage auditing and security log;ExpectedValue', '=', parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog'),\ + \ ',', 'Back up files and directories;ExpectedValue', '=', parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories'),\ + \ ',', 'Change the system time;ExpectedValue', '=', parameters('UsersOrGroupsThatMayChangeTheSystemTime'),\ + \ ',', 'Change the time zone;ExpectedValue', '=', parameters('UsersOrGroupsThatMayChangeTheTimeZone'),\ + \ ',', 'Create a token object;ExpectedValue', '=', parameters('UsersOrGroupsThatMayCreateATokenObject'),\ + \ ',', 'Deny log on as a batch job;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob'),\ + \ ',', 'Deny log on as a service;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService'),\ + \ ',', 'Deny log on locally;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLocalLogon'),\ + \ ',', 'Deny log on through Remote Desktop Services;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices'),\ + \ ',', 'Force shutdown from a remote system;ExpectedValue', '=', parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem'),\ + \ ',', 'Restore files and directories;ExpectedValue', '=', parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories'),\ + \ ',', 'Shut down the system;ExpectedValue', '=', parameters('UsersAndGroupsThatMayShutDownTheSystem'),\ + \ ',', 'Take ownership of files or other objects;ExpectedValue', '=', parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')))]\"\ + },\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\"\ + :{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\"\ + :\"AzureBaseline_UserRightsAssignment\"},\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\"\ + :{\"value\":\"[parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork')]\"\ + },\"UsersOrGroupsThatMayLogOnLocally\":{\"value\":\"[parameters('UsersOrGroupsThatMayLogOnLocally')]\"\ + },\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":{\"value\":\"\ + [parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices')]\"},\"\ + UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":{\"value\"\ + :\"[parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork')]\"\ + },\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":{\"value\":\"[parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog')]\"\ + },\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":{\"value\":\"[parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories')]\"\ + },\"UsersOrGroupsThatMayChangeTheSystemTime\":{\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheSystemTime')]\"\ + },\"UsersOrGroupsThatMayChangeTheTimeZone\":{\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheTimeZone')]\"\ + },\"UsersOrGroupsThatMayCreateATokenObject\":{\"value\":\"[parameters('UsersOrGroupsThatMayCreateATokenObject')]\"\ + },\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob')]\"\ + },\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService')]\"\ + },\"UsersAndGroupsThatAreDeniedLocalLogon\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLocalLogon')]\"\ + },\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":{\"value\"\ + :\"[parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices')]\"\ + },\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":{\"value\":\"[parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem')]\"\ + },\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":{\"value\":\"[parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories')]\"\ + },\"UsersAndGroupsThatMayShutDownTheSystem\":{\"value\":\"[parameters('UsersAndGroupsThatMayShutDownTheSystem')]\"\ + },\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":{\"value\":\"\ + [parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')]\"}},\"\ + template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\"\ + :{\"type\":\"string\"},\"UsersOrGroupsThatMayLogOnLocally\":{\"type\":\"string\"\ + },\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":{\"type\":\"string\"\ + },\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":{\"type\"\ + :\"string\"},\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":{\"type\"\ + :\"string\"},\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":{\"type\":\"\ + string\"},\"UsersOrGroupsThatMayChangeTheSystemTime\":{\"type\":\"string\"\ + },\"UsersOrGroupsThatMayChangeTheTimeZone\":{\"type\":\"string\"},\"UsersOrGroupsThatMayCreateATokenObject\"\ + :{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\"\ + :{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\"\ + :{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedLocalLogon\":{\"type\"\ + :\"string\"},\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\"\ + :{\"type\":\"string\"},\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\"\ + :{\"type\":\"string\"},\"UsersAndGroupsThatMayRestoreFilesAndDirectories\"\ + :{\"type\":\"string\"},\"UsersAndGroupsThatMayShutDownTheSystem\":{\"type\"\ + :\"string\"},\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":{\"\ + type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Access this computer\ + \ from the network;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork')]\"\ + },{\"name\":\"Allow log on locally;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayLogOnLocally')]\"\ + },{\"name\":\"Allow log on through Remote Desktop Services;ExpectedValue\"\ + ,\"value\":\"[parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices')]\"\ + },{\"name\":\"Deny access to this computer from the network;ExpectedValue\"\ + ,\"value\":\"[parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork')]\"\ + },{\"name\":\"Manage auditing and security log;ExpectedValue\",\"value\":\"\ + [parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog')]\"},{\"name\"\ + :\"Back up files and directories;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories')]\"\ + },{\"name\":\"Change the system time;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheSystemTime')]\"\ + },{\"name\":\"Change the time zone;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheTimeZone')]\"\ + },{\"name\":\"Create a token object;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayCreateATokenObject')]\"\ + },{\"name\":\"Deny log on as a batch job;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob')]\"\ + },{\"name\":\"Deny log on as a service;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService')]\"\ + },{\"name\":\"Deny log on locally;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLocalLogon')]\"\ + },{\"name\":\"Deny log on through Remote Desktop Services;ExpectedValue\"\ + ,\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices')]\"\ + },{\"name\":\"Force shutdown from a remote system;ExpectedValue\",\"value\"\ + :\"[parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem')]\"},{\"\ + name\":\"Restore files and directories;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories')]\"\ + },{\"name\":\"Shut down the system;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatMayShutDownTheSystem')]\"\ + },{\"name\":\"Take ownership of files or other objects;ExpectedValue\",\"\ + value\":\"[parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Access this computer\ + \ from the network;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork')]\"\ + },{\"name\":\"Allow log on locally;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayLogOnLocally')]\"\ + },{\"name\":\"Allow log on through Remote Desktop Services;ExpectedValue\"\ + ,\"value\":\"[parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices')]\"\ + },{\"name\":\"Deny access to this computer from the network;ExpectedValue\"\ + ,\"value\":\"[parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork')]\"\ + },{\"name\":\"Manage auditing and security log;ExpectedValue\",\"value\":\"\ + [parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog')]\"},{\"name\"\ + :\"Back up files and directories;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories')]\"\ + },{\"name\":\"Change the system time;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheSystemTime')]\"\ + },{\"name\":\"Change the time zone;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheTimeZone')]\"\ + },{\"name\":\"Create a token object;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayCreateATokenObject')]\"\ + },{\"name\":\"Deny log on as a batch job;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob')]\"\ + },{\"name\":\"Deny log on as a service;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService')]\"\ + },{\"name\":\"Deny log on locally;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLocalLogon')]\"\ + },{\"name\":\"Deny log on through Remote Desktop Services;ExpectedValue\"\ + ,\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices')]\"\ + },{\"name\":\"Force shutdown from a remote system;ExpectedValue\",\"value\"\ + :\"[parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem')]\"},{\"\ + name\":\"Restore files and directories;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories')]\"\ + },{\"name\":\"Shut down the system;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatMayShutDownTheSystem')]\"\ + },{\"name\":\"Take ownership of files or other objects;ExpectedValue\",\"\ + value\":\"[parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\"\ + ,\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\"\ + ,\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/815dcc9f-6662-43f2-9a03-1b83e9876f24\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"815dcc9f-6662-43f2-9a03-1b83e9876f24\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1308 - Identification\ + \ And Authentication (Org. Users) | Remote Access - Separate Device\",\"\ + policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements\ + \ this Identification and Authentication control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1308\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/81817e1c-5347-48dd-965a-40159d008229\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"81817e1c-5347-48dd-965a-40159d008229\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1287 - Information\ + \ System Backup\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Contingency Planning control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1287\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/819dc6da-289d-476e-8500-7e341ef8677d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"819dc6da-289d-476e-8500-7e341ef8677d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1213 - Configuration\ + \ Settings | Respond To Unauthorized Changes\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Configuration\ + \ Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1213\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/81f11e32-a293-4a58-82cd-134af52e2318\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"81f11e32-a293-4a58-82cd-134af52e2318\"\ + },{\"properties\":{\"displayName\":\"Geo-redundant backup should be enabled\ + \ for Azure Database for MySQL\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Azure Database for MySQL allows you to choose the redundancy\ + \ option for your database server. It can be set to a geo-redundant backup\ + \ storage in which the data is not only stored within the region in which\ + \ your server is hosted, but is also replicated to a paired region to provide\ + \ recovery option in case of a region failure. Configuring geo-redundant storage\ + \ for backup is only allowed during server create.\",\"metadata\":{\"version\"\ + :\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"\ + ],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},{\"field\":\"Microsoft.DBforMySQL/servers/storageProfile.geoRedundantBackup\"\ + ,\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"82339799-d096-41ae-8538-b108becf0970\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1168 - Continuous\ + \ Monitoring | Independent Assessment\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Security Assessment\ + \ and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1168\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/82409f9e-1f32-4775-bf07-b99d53a91b06\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"82409f9e-1f32-4775-bf07-b99d53a91b06\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1448 - Physical\ + \ Access Authorizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this Physical and Environmental Protection\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1448\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/825d6494-e583-42f2-a3f2-6458e6f0004f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"825d6494-e583-42f2-a3f2-6458e6f0004f\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1452 - Physical\ + \ Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Physical and Environmental Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1452\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/82c76455-4d3f-4e09-a654-22e592107e74\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"82c76455-4d3f-4e09-a654-22e592107e74\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'System Audit Policies - System'\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'System Audit Policies - System' for\ + \ auditing IPsec driver, system integrity, system extension, state change,\ + \ and other system events. This policy requires that the Guest Configuration\ + \ prerequisites have been deployed to the policy assignment scope. For details,\ + \ visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\"\ + ,\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"\ + ],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesSystem\"\ + ,\"version\":\"1.*\",\"configurationParameter\":{\"AuditOtherSystemEvents\"\ + :\"Audit Other System Events;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include Arc connected\ + \ servers\",\"description\":\"By selecting this option, you agree to be charged\ + \ monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"\ + ],\"defaultValue\":\"false\"},\"AuditOtherSystemEvents\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Audit Other System Events\",\"description\"\ + :\"Specifies whether audit events are generated for Windows Firewall Service\ + \ and Windows Firewall driver start and stop events, failure events for these\ + \ services and Windows Firewall Service policy processing failures.\"},\"\ + allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success and Failure\"\ + ],\"defaultValue\":\"No Auditing\"},\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_SystemAuditPoliciesSystem\",\"existenceCondition\":{\"allOf\"\ + :[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Audit Other System Events;ExpectedValue', '=',\ + \ parameters('AuditOtherSystemEvents')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8316fa92-d69c-4810-8124-62414f560dcf\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8316fa92-d69c-4810-8124-62414f560dcf\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1262 - Contingency\ + \ Plan Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Contingency Planning control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1262\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/831e510e-db41-4c72-888e-a0621ab62265\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"831e510e-db41-4c72-888e-a0621ab62265\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1008 - Account\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1008\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8356cfc6-507a-4d20-b818-08038011cd07\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8356cfc6-507a-4d20-b818-08038011cd07\"\ + },{\"properties\":{\"displayName\":\"Diagnostic logs in Event Hub should be\ + \ enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Audit enabling of diagnostic logs. This enables you to recreate activity\ + \ trails to use for investigation purposes; when a security incident occurs\ + \ or when your network is compromised\",\"metadata\":{\"version\":\"3.0.0\"\ + ,\"category\":\"Event Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"},\"requiredRetentionDays\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required retention (days)\"\ + ,\"description\":\"The required diagnostic logs retention in days\"},\"defaultValue\"\ + :\"365\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\"\ + :{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"\ + anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\"\ + ,\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\"\ + ,\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\"\ + ,\"equals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\"\ + ,\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\"\ + ,\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"83a214f7-d01a-484b-91a9-ed54470c9a6a\"\ + },{\"properties\":{\"displayName\":\"Network interfaces should not have public\ + \ IPs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"\ + This policy denies the network interfaces which are configured with any public\ + \ IP. Public IP addresses allow internet resources to communicate inbound\ + \ to Azure resources, and Azure resources to communicate outbound to the internet.\ + \ This should be reviewed by the network security team.\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkInterfaces\"\ + },{\"not\":{\"field\":\"Microsoft.Network/networkInterfaces/ipconfigurations[*].publicIpAddress.id\"\ + ,\"notLike\":\"*\"}}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/83a86a26-fd1f-447c-b59d-e51f44264114\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"83a86a26-fd1f-447c-b59d-e51f44264114\"\ + },{\"properties\":{\"displayName\":\"Bring your own key data protection should\ + \ be enabled for MySQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Using customer-managed keys for encrypting data at rest\ + \ in your Azure Database for MySQL database servers enables implementing a\ + \ separation of duties in the management of keys and data. When you configure\ + \ a customer-managed key, the key is used to protect and control access to\ + \ the key that encrypts your data. You have full control and responsibility\ + \ for the key lifecycle, including rotation and management. The use of customer-managed\ + \ keys is sometimes required for compliance purposes.\",\"metadata\":{\"version\"\ + :\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\"\ + :{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},\"then\"\ + :{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMySQL/servers/keys\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.DBforMySQL/servers/keys/serverKeyType\"\ + ,\"equals\":\"AzureKeyVault\"},{\"field\":\"Microsoft.DBforMySQL/servers/keys/uri\"\ + ,\"notEquals\":\"\"},{\"field\":\"Microsoft.DBforMySQL/servers/keys/uri\"\ + ,\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"83cef61d-dbd1-4b20-a4fc-5fbc7da10833\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1382 - Incident\ + \ Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Incident Response control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1382\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/841392b3-40da-4473-b328-4cde49db67b3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"841392b3-40da-4473-b328-4cde49db67b3\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Log Analytics agent should\ + \ be installed on your Linux Azure Arc machines\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"This policy audits Linux Azure Arc\ + \ machines if the Log Analytics agent is not installed.\",\"metadata\":{\"\ + version\":\"1.0.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Preview]: Effect\",\"description\":\"Enable or disable the execution of\ + \ the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\"\ + :\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\"\ + ,\"like\":\"linux*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"\ + details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"existenceCondition\"\ + :{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\"\ + ,\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\"\ + ,\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\"\ + ,\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"842c54e8-c2f9-4d79-ae8d-38d8b8019373\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1098 - Security\ + \ Training Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Awareness and Training control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1098\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/84363adb-dde3-411a-9fc1-36b56737f822\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"84363adb-dde3-411a-9fc1-36b56737f822\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Ensure that '.NET Framework'\ + \ version is the latest, if used as a part of the Web app\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy is not required\ + \ since Azure App Service automatically updates and maintains the .NET Framework\ + \ versions installed on the platform.\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"App Service\",\"deprecated\":true},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"\ + },{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Web/sites/config/web.netFrameworkVersion\",\"in\"\ + :[\"v3.0\",\"v4.0\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/843664e0-7563-41ee-a9cb-7522c382d2c4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"843664e0-7563-41ee-a9cb-7522c382d2c4\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1119 - Audit\ + \ Review, Analysis, And Reporting | Central Review And Analysis\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1119\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/845f6359-b764-4b40-b579-657aefe23c44\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"845f6359-b764-4b40-b579-657aefe23c44\"\ + },{\"properties\":{\"displayName\":\"Audit Windows machines that are not joined\ + \ to the specified domain\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Requires that prerequisites are deployed to the policy\ + \ assignment scope. For details, visit https://aka.ms/gcpol. Machines are\ + \ non-compliant if the value of the Domain property in WMI class win32_computersystem\ + \ does not match the value in the policy parameter.\",\"metadata\":{\"category\"\ + :\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"\ + ],\"guestConfiguration\":{\"name\":\"WindowsDomainMembership\",\"version\"\ + :\"1.*\",\"configurationParameter\":{\"DomainName\":\"[DomainMembership]WindowsDomainMembership;DomainName\"\ + }}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"DomainName\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Domain Name (FQDN)\"\ + ,\"description\":\"The fully qualified domain name (FQDN) that the Windows\ + \ machines should be joined to\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsDomainMembership\",\"existenceCondition\":{\"allOf\":[{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[DomainMembership]WindowsDomainMembership;DomainName',\ + \ '=', parameters('DomainName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/84662df4-0e37-44a6-9ce1-c9d2150db18c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"84662df4-0e37-44a6-9ce1-c9d2150db18c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1024 - Account\ + \ Management | Account Monitoring / Atypical Usage\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Access Control\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1024\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/84914fb4-12da-4c53-a341-a9fd463bed10\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"84914fb4-12da-4c53-a341-a9fd463bed10\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1307 - Identification\ + \ And Authentication (Org. Users) | Net. Access To Non-Priv. Accts. - Replay\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Identification and Authentication control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1307\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/84e622c8-4bed-417c-84c6-b2fb0dd73682\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"84e622c8-4bed-417c-84c6-b2fb0dd73682\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1080 - Use\ + \ Of External Information Systems | Portable Storage Devices\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1080\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/852981b4-a380-4704-aa1e-2e52d63445e5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"852981b4-a380-4704-aa1e-2e52d63445e5\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'Windows Components'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Windows machines should have the specified Group Policy\ + \ settings in the category 'Windows Components' for basic authentication,\ + \ unencrypted traffic, Microsoft accounts, telemetry, Cortana, and other Windows\ + \ behaviors. This policy requires that the Guest Configuration prerequisites\ + \ have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"AzureBaseline_WindowsComponents\",\"version\":\"1.*\",\"configurationParameter\"\ + :{\"SendFileSamplesWhenFurtherAnalysisIsRequired\":\"Send file samples when\ + \ further analysis is required;ExpectedValue\",\"AllowIndexingOfEncryptedFiles\"\ + :\"Allow indexing of encrypted files;ExpectedValue\",\"AllowTelemetry\":\"\ + Allow Telemetry;ExpectedValue\",\"AllowUnencryptedTraffic\":\"Allow unencrypted\ + \ traffic;ExpectedValue\",\"AlwaysInstallWithElevatedPrivileges\":\"Always\ + \ install with elevated privileges;ExpectedValue\",\"AlwaysPromptForPasswordUponConnection\"\ + :\"Always prompt for password upon connection;ExpectedValue\",\"ApplicationSpecifyTheMaximumLogFileSizeKB\"\ + :\"Application: Specify the maximum log file size (KB);ExpectedValue\",\"\ + AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":\"Automatically send\ + \ memory dumps for OS-generated error reports;ExpectedValue\",\"ConfigureDefaultConsent\"\ + :\"Configure Default consent;ExpectedValue\",\"ConfigureWindowsSmartScreen\"\ + :\"Configure Windows SmartScreen;ExpectedValue\",\"DisallowDigestAuthentication\"\ + :\"Disallow Digest authentication;ExpectedValue\",\"DisallowWinRMFromStoringRunAsCredentials\"\ + :\"Disallow WinRM from storing RunAs credentials;ExpectedValue\",\"DoNotAllowPasswordsToBeSaved\"\ + :\"Do not allow passwords to be saved;ExpectedValue\",\"SecuritySpecifyTheMaximumLogFileSizeKB\"\ + :\"Security: Specify the maximum log file size (KB);ExpectedValue\",\"SetClientConnectionEncryptionLevel\"\ + :\"Set client connection encryption level;ExpectedValue\",\"SetTheDefaultBehaviorForAutoRun\"\ + :\"Set the default behavior for AutoRun;ExpectedValue\",\"SetupSpecifyTheMaximumLogFileSizeKB\"\ + :\"Setup: Specify the maximum log file size (KB);ExpectedValue\",\"SystemSpecifyTheMaximumLogFileSizeKB\"\ + :\"System: Specify the maximum log file size (KB);ExpectedValue\",\"TurnOffDataExecutionPreventionForExplorer\"\ + :\"Turn off Data Execution Prevention for Explorer;ExpectedValue\",\"SpecifyTheIntervalToCheckForDefinitionUpdates\"\ + :\"Specify the interval to check for definition updates;ExpectedValue\"}}},\"\ + parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"SendFileSamplesWhenFurtherAnalysisIsRequired\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Send file samples when\ + \ further analysis is required\",\"description\":\"Specifies whether and how\ + \ Windows Defender will submit samples of suspected malware to Microsoft\ + \ for further analysis when opt-in for MAPS telemetry is set.\"},\"defaultValue\"\ + :\"1\"},\"AllowIndexingOfEncryptedFiles\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Allow indexing of encrypted files\",\"description\":\"\ + Specifies whether encrypted items are allowed to be indexed.\"},\"defaultValue\"\ + :\"0\"},\"AllowTelemetry\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Allow Telemetry\",\"description\":\"Specifies configuration of the amount\ + \ of diagnostic and usage data reported to Microsoft. The data is transmitted\ + \ securely and sensitive data is not sent.\"},\"defaultValue\":\"2\"},\"AllowUnencryptedTraffic\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Allow unencrypted traffic\"\ + ,\"description\":\"Specifies whether the Windows Remote Management (WinRM)\ + \ service sends and receives unencrypted messages over the network.\"},\"\ + defaultValue\":\"0\"},\"AlwaysInstallWithElevatedPrivileges\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Always install with elevated privileges\"\ + ,\"description\":\"Specifies whether Windows Installer should use system permissions\ + \ when it installs any program on the system.\"},\"defaultValue\":\"0\"},\"\ + AlwaysPromptForPasswordUponConnection\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Always prompt for password upon connection\",\"description\"\ + :\"Specifies whether Terminal Services/Remote Desktop Connection always prompts\ + \ the client computer for a password upon connection.\"},\"defaultValue\"\ + :\"1\"},\"ApplicationSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Application: Specify the maximum log file\ + \ size (KB)\",\"description\":\"Specifies the maximum size for the Application\ + \ event log in kilobytes.\"},\"defaultValue\":\"32768\"},\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automatically send memory\ + \ dumps for OS-generated error reports\",\"description\":\"Specifies if memory\ + \ dumps in support of OS-generated error reports can be sent to Microsoft\ + \ automatically.\"},\"defaultValue\":\"1\"},\"ConfigureDefaultConsent\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Configure Default consent\"\ + ,\"description\":\"Specifies setting of the default consent handling for error\ + \ reports sent to Microsoft.\"},\"defaultValue\":\"4\"},\"ConfigureWindowsSmartScreen\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configure Windows SmartScreen\"\ + ,\"description\":\"Specifies how to manage the behavior of Windows SmartScreen.\ + \ Windows SmartScreen helps keep PCs safer by warning users before running\ + \ unrecognized programs downloaded from the Internet. Some information is\ + \ sent to Microsoft about files and programs run on PCs with this feature\ + \ enabled.\"},\"defaultValue\":\"1\"},\"DisallowDigestAuthentication\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Disallow Digest authentication\"\ + ,\"description\":\"Specifies whether the Windows Remote Management (WinRM)\ + \ client will not use Digest authentication.\"},\"defaultValue\":\"0\"},\"\ + DisallowWinRMFromStoringRunAsCredentials\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Disallow WinRM from storing RunAs credentials\",\"description\"\ + :\"Specifies whether the Windows Remote Management (WinRM) service will not\ + \ allow RunAs credentials to be stored for any plug-ins.\"},\"defaultValue\"\ + :\"1\"},\"DoNotAllowPasswordsToBeSaved\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Do not allow passwords to be saved\",\"description\":\"\ + Specifies whether to prevent Remote Desktop Services - Terminal Services clients\ + \ from saving passwords on a computer.\"},\"defaultValue\":\"1\"},\"SecuritySpecifyTheMaximumLogFileSizeKB\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Security: Specify the\ + \ maximum log file size (KB)\",\"description\":\"Specifies the maximum size\ + \ for the Security event log in kilobytes.\"},\"defaultValue\":\"196608\"\ + },\"SetClientConnectionEncryptionLevel\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Set client connection encryption level\",\"description\"\ + :\"Specifies whether to require the use of a specific encryption level to\ + \ secure communications between client computers and RD Session Host servers\ + \ during Remote Desktop Protocol (RDP) connections. This policy only applies\ + \ when you are using native RDP encryption.\"},\"defaultValue\":\"3\"},\"\ + SetTheDefaultBehaviorForAutoRun\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Set the default behavior for AutoRun\",\"description\":\"Specifies the\ + \ default behavior for Autorun commands. Autorun commands are generally stored\ + \ in autorun.inf files. They often launch the installation program or other\ + \ routines.\"},\"defaultValue\":\"1\"},\"SetupSpecifyTheMaximumLogFileSizeKB\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setup: Specify the maximum\ + \ log file size (KB)\",\"description\":\"Specifies the maximum size for the\ + \ Setup event log in kilobytes.\"},\"defaultValue\":\"32768\"},\"SystemSpecifyTheMaximumLogFileSizeKB\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"System: Specify the\ + \ maximum log file size (KB)\",\"description\":\"Specifies the maximum size\ + \ for the System event log in kilobytes.\"},\"defaultValue\":\"32768\"},\"\ + TurnOffDataExecutionPreventionForExplorer\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Turn off Data Execution Prevention for Explorer\",\"description\"\ + :\"Specifies whether to turn off Data Execution Prevention for Windows File\ + \ Explorer. Disabling data execution prevention can allow certain legacy plug-in\ + \ applications to function without terminating Explorer.\"},\"defaultValue\"\ + :\"0\"},\"SpecifyTheIntervalToCheckForDefinitionUpdates\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Specify the interval to check for definition\ + \ updates\",\"description\":\"Specifies an interval at which to check for\ + \ Windows Defender definition updates. The time value is represented as the\ + \ number of hours between update checks.\"},\"defaultValue\":\"8\"},\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of this policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_WindowsComponents\",\"existenceCondition\":{\"allOf\":[{\"field\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Send file samples when further analysis is required;ExpectedValue',\ + \ '=', parameters('SendFileSamplesWhenFurtherAnalysisIsRequired'), ',', 'Allow\ + \ indexing of encrypted files;ExpectedValue', '=', parameters('AllowIndexingOfEncryptedFiles'),\ + \ ',', 'Allow Telemetry;ExpectedValue', '=', parameters('AllowTelemetry'),\ + \ ',', 'Allow unencrypted traffic;ExpectedValue', '=', parameters('AllowUnencryptedTraffic'),\ + \ ',', 'Always install with elevated privileges;ExpectedValue', '=', parameters('AlwaysInstallWithElevatedPrivileges'),\ + \ ',', 'Always prompt for password upon connection;ExpectedValue', '=', parameters('AlwaysPromptForPasswordUponConnection'),\ + \ ',', 'Application: Specify the maximum log file size (KB);ExpectedValue',\ + \ '=', parameters('ApplicationSpecifyTheMaximumLogFileSizeKB'), ',', 'Automatically\ + \ send memory dumps for OS-generated error reports;ExpectedValue', '=', parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports'),\ + \ ',', 'Configure Default consent;ExpectedValue', '=', parameters('ConfigureDefaultConsent'),\ + \ ',', 'Configure Windows SmartScreen;ExpectedValue', '=', parameters('ConfigureWindowsSmartScreen'),\ + \ ',', 'Disallow Digest authentication;ExpectedValue', '=', parameters('DisallowDigestAuthentication'),\ + \ ',', 'Disallow WinRM from storing RunAs credentials;ExpectedValue', '=',\ + \ parameters('DisallowWinRMFromStoringRunAsCredentials'), ',', 'Do not allow\ + \ passwords to be saved;ExpectedValue', '=', parameters('DoNotAllowPasswordsToBeSaved'),\ + \ ',', 'Security: Specify the maximum log file size (KB);ExpectedValue', '=',\ + \ parameters('SecuritySpecifyTheMaximumLogFileSizeKB'), ',', 'Set client connection\ + \ encryption level;ExpectedValue', '=', parameters('SetClientConnectionEncryptionLevel'),\ + \ ',', 'Set the default behavior for AutoRun;ExpectedValue', '=', parameters('SetTheDefaultBehaviorForAutoRun'),\ + \ ',', 'Setup: Specify the maximum log file size (KB);ExpectedValue', '=',\ + \ parameters('SetupSpecifyTheMaximumLogFileSizeKB'), ',', 'System: Specify\ + \ the maximum log file size (KB);ExpectedValue', '=', parameters('SystemSpecifyTheMaximumLogFileSizeKB'),\ + \ ',', 'Turn off Data Execution Prevention for Explorer;ExpectedValue', '=',\ + \ parameters('TurnOffDataExecutionPreventionForExplorer'), ',', 'Specify the\ + \ interval to check for definition updates;ExpectedValue', '=', parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')))]\"\ + }]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8537fe96-8cbe-43de-b0ef-131bc72bc22a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8537fe96-8cbe-43de-b0ef-131bc72bc22a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1580 - Information\ + \ System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this System and Services Acquisition\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1580\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/854db8ac-6adf-42a0-bef3-b73f764f40b9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"854db8ac-6adf-42a0-bef3-b73f764f40b9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1348 - Identification\ + \ And Authentication (Non-Org. Users) | Acceptance Of Third-Party Credentials\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Identification and Authentication control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1348\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/855ced56-417b-4d74-9d5f-dd1bc81e22d6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"855ced56-417b-4d74-9d5f-dd1bc81e22d6\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1079 - Use\ + \ Of External Information Systems | Limits On Authorized Use\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1079\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/85c32733-7d23-4948-88da-058e2c56b60f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"85c32733-7d23-4948-88da-058e2c56b60f\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1326 - Authenticator\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Identification and Authentication control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1326\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8605fc00-1bf5-4fb3-984e-c95cec4f231d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8605fc00-1bf5-4fb3-984e-c95cec4f231d\"\ + },{\"properties\":{\"displayName\":\"Azure Cosmos DB accounts should have\ + \ firewall rules\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"Audit or deny resources that do not have any IP rules configured and allow\ + \ all networks by default. Accounts that have at least one IP rule defined\ + \ with the virtual network filter enabled are deemed compliant. Accounts disabling\ + \ public access are also deemed compliant.\",\"metadata\":{\"version\":\"\ + 1.0.0\",\"category\":\"Cosmos DB\"},\"parameters\":{\"effect\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Policy Effect\",\"description\":\"\ + The desired effect of the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\"\ + ,\"Disabled\"],\"defaultValue\":\"Deny\"}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\"\ + ,\"equals\":\"Enabled\"}]},{\"anyOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/isVirtualNetworkFilterEnabled\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/isVirtualNetworkFilterEnabled\"\ + ,\"equals\":\"false\"},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/ipRules\"\ + ,\"exists\":\"false\"},{\"count\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/ipRules[*]\"\ + },\"equals\":0}]},{\"anyOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/ipRangeFilter\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/ipRangeFilter\"\ + ,\"equals\":\"\"}]}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'Security Options - Microsoft Network\ + \ Server'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy creates a Guest Configuration assignment to audit Windows virtual\ + \ machines with non-compliant settings in Group Policy category: 'Security\ + \ Options - Microsoft Network Server'. It also creates a system-assigned managed\ + \ identity and deploys the VM extension for Guest Configuration. This policy\ + \ should only be used along with its corresponding audit policy in an initiative.\ + \ For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\",\"deployment\"\ + :{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"\ + value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\"\ + :\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\"}},\"template\":{\"\ + $schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86880e5c-df35-43c5-95ad-7e120635775e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86880e5c-df35-43c5-95ad-7e120635775e\"\ + },{\"properties\":{\"displayName\":\"Deploy SQL DB transparent data encryption\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enables\ + \ transparent data encryption on SQL databases\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"\ + },{\"field\":\"name\",\"notEquals\":\"master\"}]},\"then\":{\"effect\":\"\ + DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/databases/transparentDataEncryption\"\ + ,\"name\":\"current\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/transparentDataEncryption.status\"\ + ,\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9b7fa17d-e63e-47b0-bb0a-15c516ac86ec\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"fullDbName\":{\"type\":\"\ + string\"}},\"resources\":[{\"name\":\"[concat(parameters('fullDbName'), '/current')]\"\ + ,\"type\":\"Microsoft.Sql/servers/databases/transparentDataEncryption\",\"\ + apiVersion\":\"2014-04-01\",\"properties\":{\"status\":\"Enabled\"}}]},\"\ + parameters\":{\"fullDbName\":{\"value\":\"[field('fullName')]\"}}}}}}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/86a912f6-9a06-4e26-b447-11b16ba8659f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86a912f6-9a06-4e26-b447-11b16ba8659f\"\ + },{\"properties\":{\"displayName\":\"System updates should be installed on\ + \ your machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"Missing security system updates on your servers will be monitored by Azure\ + \ Security Center as recommendations\",\"metadata\":{\"version\":\"2.0.0\"\ + ,\"category\":\"Security Center\"},\"parameters\":{\"effect\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"\ + Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"c0f5316d-5ac5-9218-b77a-b96e16ccfd66\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86b3d65f-7626-441e-b690-81a8b71cff60\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1507 - Personnel\ + \ Security Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Personnel Security control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1507\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86ccd1bf-e7ad-4851-93ce-6ec817469c1e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86ccd1bf-e7ad-4851-93ce-6ec817469c1e\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Ensure that Register with\ + \ Azure Active Directory is enabled on API app\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"This policy is a duplicate of the\ + \ respective Managed Identity policies. Please use /providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3ee\ + \ instead.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"\ + App Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"[Deprecated]: Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"\ + },{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"\ + existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.managedServiceIdentityId\"\ + ,\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86d97760-d216-4d81-a3ad-163087b2b6c3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86d97760-d216-4d81-a3ad-163087b2b6c3\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1392 - Information\ + \ Spillage Response | Post-Spill Operations\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Incident Response\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1392\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86dc819f-15e1-43f9-a271-41ae58d4cecc\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86dc819f-15e1-43f9-a271-41ae58d4cecc\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1589 - External\ + \ Information System Services | Risk Assessments / Organizational Approvals\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this System and Services Acquisition control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1589\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86ec7f9b-9478-40ff-8cfd-6a0d510081a8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86ec7f9b-9478-40ff-8cfd-6a0d510081a8\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1207 - Access\ + \ Restrictions For Change | Limit Production / Operational Privileges\",\"\ + policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements\ + \ this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1207\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8713a0ed-0d1e-4d10-be82-83dffb39830e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8713a0ed-0d1e-4d10-be82-83dffb39830e\"\ + },{\"properties\":{\"displayName\":\"Require a tag on resources\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforces existence of\ + \ a tag. Does not apply to resource groups.\",\"metadata\":{\"version\":\"\ + 1.0.1\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Tag Name\",\"description\":\"Name of the\ + \ tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"field\":\"[concat('tags[',\ + \ parameters('tagName'), ']')]\",\"exists\":\"false\"},\"then\":{\"effect\"\ + :\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/871b6d14-10aa-478d-b590-94f262ecfa99\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"871b6d14-10aa-478d-b590-94f262ecfa99\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1180 - Baseline\ + \ Configuration | Automation Support For Accuracy / Currency\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1180\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/874e7880-a067-42a7-bcbe-1a340f54c8cc\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"874e7880-a067-42a7-bcbe-1a340f54c8cc\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1635 - Boundary\ + \ Protection | Host-Based Protection\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this System and Communications\ + \ Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1635\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87551b5d-1deb-4d0f-86cc-9dc14cb4bf7e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87551b5d-1deb-4d0f-86cc-9dc14cb4bf7e\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'System Audit Policies - Privilege Use'\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'System Audit Policies - Privilege\ + \ Use' for auditing nonsensitive and other privilege use. This policy requires\ + \ that the Guest Configuration prerequisites have been deployed to the policy\ + \ assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\"\ + :{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\"\ + :[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\"\ + ,\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Include Arc connected servers\",\"\ + description\":\"By selecting this option, you agree to be charged monthly\ + \ per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"],\"\ + defaultValue\":\"false\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_SystemAuditPoliciesPrivilegeUse\",\"existenceCondition\":{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87845465-c458-45f3-af66-dcd62176f397\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87845465-c458-45f3-af66-dcd62176f397\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'Security Options - Devices'\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"Windows machines should have the specified Group\ + \ Policy settings in the category 'Security Options - Devices' for undocking\ + \ without logging on, installing print drivers, and formatting/ejecting media.\ + \ This policy requires that the Guest Configuration prerequisites have been\ + \ deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"AzureBaseline_SecurityOptionsDevices\",\"version\":\"1.*\",\"\ + configurationParameter\":{\"DevicesAllowedToFormatAndEjectRemovableMedia\"\ + :\"Devices: Allowed to format and eject removable media;ExpectedValue\"}}},\"\ + parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"DevicesAllowedToFormatAndEjectRemovableMedia\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Devices: Allowed to\ + \ format and eject removable media\",\"description\":\"Specifies who is allowed\ + \ to format and eject removable NTFS media. You can use this policy setting\ + \ to prevent unauthorized users from removing data on one computer to access\ + \ it on another computer on which they have local administrator privileges.\"\ + },\"defaultValue\":\"0\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_SecurityOptionsDevices\",\"existenceCondition\":{\"allOf\":[{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Devices: Allowed to format and eject removable\ + \ media;ExpectedValue', '=', parameters('DevicesAllowedToFormatAndEjectRemovableMedia')))]\"\ + }]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8794ff4f-1a35-4e18-938f-0b22055067cd\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8794ff4f-1a35-4e18-938f-0b22055067cd\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'Administrative Templates - Control Panel'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy\ + \ should only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines with non-compliant settings in Group Policy category: 'Administrative\ + \ Templates - Control Panel'. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"deprecated\"\ + :true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_AdministrativeTemplatesControlPanel\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87b590fe-4a1d-4697-ae74-d4fe72ab786c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87b590fe-4a1d-4697-ae74-d4fe72ab786c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1293 - Information\ + \ System Backup | Separate Storage For Critical Information\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1293\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87f7cd82-2e45-4d0f-9e2f-586b0962d142\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87f7cd82-2e45-4d0f-9e2f-586b0962d142\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1440 - Media\ + \ Sanitization | Review / Approve / Track / Document / Verify\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1440\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/881299bf-2a5b-4686-a1b2-321d33679953\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"881299bf-2a5b-4686-a1b2-321d33679953\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1356 - Incident\ + \ Response Training | Simulated Events\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Incident Response\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1356\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8829f8f5-e8be-441e-85c9-85b72a5d0ef3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8829f8f5-e8be-441e-85c9-85b72a5d0ef3\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Linux VMs that have the specified applications installed\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy creates a\ + \ Guest Configuration assignment to audit Linux virtual machines that have\ + \ the specified applications installed. It also creates a system-assigned\ + \ managed identity and deploys the VM extension for Guest Configuration. This\ + \ policy should only be used along with its corresponding audit policy in\ + \ an initiative. For more information on Guest Configuration policies, please\ + \ visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\"\ + ,\"category\":\"Guest Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"\ + ],\"deprecated\":true},\"parameters\":{\"ApplicationName\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"[Deprecated]: Application names\",\"description\"\ + :\"A semicolon-separated list of the names of the applications that should\ + \ not be installed. e.g. 'python; powershell'\"}}},\"policyRule\":{\"if\"\ + :{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\"\ + ,\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"\ + paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"\ + like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\"\ + ,\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"\ + ]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"\ + field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\"\ + ,\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\"\ + ,\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\"\ + ,\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"\ + cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\"\ + ,\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\"\ + ,\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"\ + ]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"\ + then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"not_installed_application_linux\",\"existenceCondition\":{\"field\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent',\ + \ '=', concat('packages: [', replace(parameters('ApplicationName'), ';', ','),\ + \ ']')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\"\ + :{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\"\ + :\"not_installed_application_linux\"},\"ApplicationName\":{\"value\":\"[parameters('ApplicationName')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"ApplicationName\":{\"type\":\"string\"}},\"resources\"\ + :[{\"condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent\"\ + ,\"value\":\"[concat('packages: [', replace(parameters('ApplicationName'),\ + \ ';', ','), ']')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent\"\ + ,\"value\":\"[concat('packages: [', replace(parameters('ApplicationName'),\ + \ ';', ','), ']')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforLinux')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/884b209a-963b-4520-8006-d20cb3c213e0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"884b209a-963b-4520-8006-d20cb3c213e0\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1317 - Authenticator\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Identification and Authentication control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1317\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8877f519-c166-47b7-81b7-8a8eb4ff3775\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8877f519-c166-47b7-81b7-8a8eb4ff3775\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1501 - Rules\ + \ Of Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Planning control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1501\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/88817b58-8472-4f6c-81fa-58ce42b67f51\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"88817b58-8472-4f6c-81fa-58ce42b67f51\"\ + },{\"properties\":{\"displayName\":\"Ensure that 'Java version' is the latest,\ + \ if used as a part of the Api app\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"Periodically, newer versions are released for\ + \ Java either due to security flaws or to include additional functionality.\ + \ Using the latest Python version for Api apps is recommended in order to\ + \ take advantage of security fixes, if any, and/or new functionalities of\ + \ the latest version.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"\ + App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"},\"JavaLatestVersion\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Latest Java version\",\"description\":\"\ + Latest supported Java version for App Services\"},\"defaultValue\":\"11\"\ + }},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"\ + },{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"kind\",\"contains\"\ + :\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\"\ + :{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\"\ + :{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\"\ + ,\"notContains\":\"JAVA\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\"\ + ,\"like\":\"[concat('*', parameters('JavaLatestVersion'))]\"}]}}}}},\"id\"\ + :\"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"88999f4c-376a-45c8-bcb3-4058f713cf39\"\ + },{\"properties\":{\"displayName\":\"Network interfaces should disable IP\ + \ forwarding\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy denies the network interfaces which enabled IP forwarding.\ + \ The setting of IP forwarding disables Azure's check of the source and destination\ + \ for a network interface. This should be reviewed by the network security\ + \ team.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"\ + parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"\ + equals\":\"Microsoft.Network/networkInterfaces\"},{\"field\":\"Microsoft.Network/networkInterfaces/enableIpForwarding\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/88c0b9da-ce96-4b03-9635-f29a937e2900\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"88c0b9da-ce96-4b03-9635-f29a937e2900\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1215 - Least\ + \ Functionality\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1215\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/88fc93e8-4745-4785-b5a5-b44bb92c44ff\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"88fc93e8-4745-4785-b5a5-b44bb92c44ff\"\ + },{\"properties\":{\"displayName\":\"SQL servers should be configured with\ + \ auditing retention days greater than 90 days.\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Audit SQL servers configured with\ + \ an auditing retention period of less than 90 days.\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\"\ + :{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\"\ + ,\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/auditingSettings/retentionDays\"\ + ,\"greater\":90}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"89099bee-89e0-4b26-a5f4-165451757743\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1411 - Nonlocal\ + \ Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Maintenance control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1411\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/898d4fe8-f743-4333-86b7-0c9245d93e7d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"898d4fe8-f743-4333-86b7-0c9245d93e7d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1092 - Security\ + \ Awareness Training | Insider Threat\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Awareness and Training\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1092\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8a29d47b-8604-4667-84ef-90d203fcb305\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8a29d47b-8604-4667-84ef-90d203fcb305\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'Security Options - System settings'\",\"\ + policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should\ + \ only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines with non-compliant settings in Group Policy category: 'Security\ + \ Options - System settings'. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"deprecated\"\ + :true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsSystemsettings\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8a39d1f1-5513-4628-b261-f469a5a3341b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8a39d1f1-5513-4628-b261-f469a5a3341b\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs with a pending reboot\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"All\",\"description\":\"This policy should only be used along with its\ + \ corresponding deploy policy in an initiative. This definition allows Azure\ + \ Policy to process the results of auditing Windows virtual machines with\ + \ a pending reboot. For more information on Guest Configuration policies,\ + \ please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Guest Configuration\",\"deprecated\":true},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsPendingReboot\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b0de57a-f511-4d45-a277-17cb79cb163b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b0de57a-f511-4d45-a277-17cb79cb163b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1534 - Personnel\ + \ Sanctions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1534\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b2b263e-cd05-4488-bcbf-4debec7a17d9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b2b263e-cd05-4488-bcbf-4debec7a17d9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1170 - Penetration\ + \ Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Security Assessment and Authorization control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1170\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b78b9b3-ee3c-48e0-a243-ed6dba5b7a12\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b78b9b3-ee3c-48e0-a243-ed6dba5b7a12\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'Windows Firewall Properties'\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should only be\ + \ used along with its corresponding deploy policy in an initiative. This definition\ + \ allows Azure Policy to process the results of auditing Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'Windows Firewall\ + \ Properties'. For more information on Guest Configuration policies, please\ + \ visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Guest Configuration\",\"deprecated\":true},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_WindowsFirewallProperties\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8bbd627e-4d25-4906-9a6e-3789780af3ec\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8bbd627e-4d25-4906-9a6e-3789780af3ec\"\ + },{\"properties\":{\"displayName\":\"Ensure that 'HTTP Version' is the latest,\ + \ if used to run the Web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Periodically, newer versions are released for HTTP either\ + \ due to security flaws or to include additional functionality. Using the\ + \ latest HTTP version for web apps to take advantage of security fixes, if\ + \ any, and/or new functionalities of the newer version.\",\"metadata\":{\"\ + version\":\"2.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"\ + },{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"kind\",\"contains\"\ + :\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\"\ + :{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Web/sites/config/web.http20Enabled\",\"Equals\":\"\ + true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8c122334-9d20-4eb8-89ea-ac9a705b74ae\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8c122334-9d20-4eb8-89ea-ac9a705b74ae\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1458 - Physical\ + \ Access Control | Information System Access\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Physical and\ + \ Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1458\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8c19ceb7-56e9-4488-8ddb-b1eb3aa6d203\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8c19ceb7-56e9-4488-8ddb-b1eb3aa6d203\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1683 - Information\ + \ System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Information Integrity control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1683\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8c79fee4-88dd-44ce-bbd4-4de88948c4f8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8c79fee4-88dd-44ce-bbd4-4de88948c4f8\"\ + },{\"properties\":{\"displayName\":\"Latest TLS version should be used in\ + \ your API App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Upgrade to the latest TLS version\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\"\ + :\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"\ + existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/minTlsVersion\"\ + ,\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1316 - Identifier\ + \ Management | Identify User Status\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Identification and Authentication\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1316\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8ce14753-66e5-465d-9841-26ef55c09c0d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8ce14753-66e5-465d-9841-26ef55c09c0d\"\ + },{\"properties\":{\"displayName\":\"Require a tag and its value on resource\ + \ groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"\ + Enforces a required tag and its value on resource groups.\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Tag Name\",\"description\"\ + :\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Tag Value\",\"description\":\"Value of the\ + \ tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"\ + },{\"field\":\"[concat('tags[', parameters('tagName'), ']')]\",\"notEquals\"\ + :\"[parameters('tagValue')]\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"\ + /providers/Microsoft.Authorization/policyDefinitions/8ce3da23-7156-49e4-b145-24f95f9dcb46\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8ce3da23-7156-49e4-b145-24f95f9dcb46\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1324 - Authenticator\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Identification and Authentication control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1324\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8cfea2b3-7f77-497e-ac20-0752f2ff6eee\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8cfea2b3-7f77-497e-ac20-0752f2ff6eee\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1225 - Information\ + \ System Component Inventory | Automated Maintenance\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Configuration\ + \ Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1225\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8d096fe0-f510-4486-8b4d-d17dc230980b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8d096fe0-f510-4486-8b4d-d17dc230980b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1288 - Information\ + \ System Backup\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Contingency Planning control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1288\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8d854c3b-a3e6-4ec9-9f0c-c7274dbaeb2f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8d854c3b-a3e6-4ec9-9f0c-c7274dbaeb2f\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1281 - Telecommunications\ + \ Services | Priority Of Service Provisions\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Contingency\ + \ Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1281\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8dc459b3-0e77-45af-8d71-cfd8c9654fe2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8dc459b3-0e77-45af-8d71-cfd8c9654fe2\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1250 - Contingency\ + \ Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"\ + Microsoft implements this Contingency Planning control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1250\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8de614d8-a8b7-4f70-a62a-6d37089a002c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8de614d8-a8b7-4f70-a62a-6d37089a002c\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'System Audit Policies - Object Access'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'System Audit Policies\ + \ - Object Access'. It also creates a system-assigned managed identity and\ + \ deploys the VM extension for Guest Configuration. This policy should only\ + \ be used along with its corresponding audit policy in an initiative. For\ + \ more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"AuditDetailedFileShare\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Deprecated]: Audit Detailed File Share\",\"description\"\ + :\"If this policy setting is enabled, access to all shared files and folders\ + \ on the system is audited. Auditing for Success can lead to very high volumes\ + \ of events.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\"\ + ,\"Success and Failure\"],\"defaultValue\":\"No Auditing\"},\"AuditFileShare\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Audit\ + \ File Share\",\"description\":\"Specifies whether to audit events related\ + \ to file shares: creation, deletion, modification, and access attempts. Also,\ + \ it shows failed SMB SPN checks. Event volumes can be high on DCs and File\ + \ Servers.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"\ + Success and Failure\"],\"defaultValue\":\"No Auditing\"},\"AuditFileSystem\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Audit\ + \ File System\",\"description\":\"Specifies whether audit events are generated\ + \ when users attempt to access file system objects. Audit events are generated\ + \ only for objects that have configured system access control lists (SACLs).\"\ + },\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success and\ + \ Failure\"],\"defaultValue\":\"No Auditing\"}},\"policyRule\":{\"if\":{\"\ + anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Audit Detailed File Share;ExpectedValue', '=',\ + \ parameters('AuditDetailedFileShare'), ',', 'Audit File Share;ExpectedValue',\ + \ '=', parameters('AuditFileShare'), ',', 'Audit File System;ExpectedValue',\ + \ '=', parameters('AuditFileSystem')))]\"},\"deployment\":{\"properties\"\ + :{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\"\ + },\"AuditDetailedFileShare\":{\"value\":\"[parameters('AuditDetailedFileShare')]\"\ + },\"AuditFileShare\":{\"value\":\"[parameters('AuditFileShare')]\"},\"AuditFileSystem\"\ + :{\"value\":\"[parameters('AuditFileSystem')]\"}},\"template\":{\"$schema\"\ + :\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"AuditDetailedFileShare\":{\"type\":\"string\"},\"\ + AuditFileShare\":{\"type\":\"string\"},\"AuditFileSystem\":{\"type\":\"string\"\ + }},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit Detailed\ + \ File Share;ExpectedValue\",\"value\":\"[parameters('AuditDetailedFileShare')]\"\ + },{\"name\":\"Audit File Share;ExpectedValue\",\"value\":\"[parameters('AuditFileShare')]\"\ + },{\"name\":\"Audit File System;ExpectedValue\",\"value\":\"[parameters('AuditFileSystem')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit Detailed\ + \ File Share;ExpectedValue\",\"value\":\"[parameters('AuditDetailedFileShare')]\"\ + },{\"name\":\"Audit File Share;ExpectedValue\",\"value\":\"[parameters('AuditFileShare')]\"\ + },{\"name\":\"Audit File System;ExpectedValue\",\"value\":\"[parameters('AuditFileSystem')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\"\ + ,\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\"\ + ,\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8e170edb-e0f5-497a-bb36-48b3280cec6a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8e170edb-e0f5-497a-bb36-48b3280cec6a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1278 - Alternate\ + \ Processing Site | Preparation For Use\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Contingency Planning\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1278\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8e5ef485-9e16-4c53-a475-fbb8107eac59\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8e5ef485-9e16-4c53-a475-fbb8107eac59\"\ + },{\"properties\":{\"displayName\":\"Enable Security Center's auto provisioning\ + \ of the Log Analytics agent on your subscriptions with custom workspace.\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Allow Security\ + \ Center to auto provision the Log Analytics agent on your subscriptions to\ + \ monitor and collect security data using a custom workspace.\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"\ + description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"\ + },\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log\ + \ Analytics workspace\",\"description\":\"Auto provision the Log Analytics\ + \ agent on your subscriptions to monitor and collect security data using a\ + \ custom workspace.\",\"strongType\":\"omsWorkspace\"}}},\"policyRule\":{\"\ + if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/autoProvisioningSettings\",\"deploymentScope\":\"Subscription\"\ + ,\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"existenceCondition\":{\"field\":\"Microsoft.Security/autoProvisioningSettings/autoProvision\"\ + ,\"equals\":\"On\"},\"deployment\":{\"location\":\"westus\",\"properties\"\ + :{\"mode\":\"incremental\",\"parameters\":{\"logAnalytics\":{\"value\":\"\ + [parameters('logAnalytics')]\"}},\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"logAnalytics\":{\"type\"\ + :\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Security/autoProvisioningSettings\"\ + ,\"name\":\"default\",\"apiVersion\":\"2017-08-01-preview\",\"properties\"\ + :{\"autoProvision\":\"On\"}},{\"type\":\"Microsoft.Security/workspaceSettings\"\ + ,\"apiVersion\":\"2017-08-01-preview\",\"name\":\"default\",\"properties\"\ + :{\"workspaceId\":\"[parameters('logAnalytics')]\",\"scope\":\"[subscription().id]\"\ + }}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8e7da0a5-0a0e-4bbc-bfc0-7773c018b616\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8e7da0a5-0a0e-4bbc-bfc0-7773c018b616\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1517 - Personnel\ + \ Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1517\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8f5ad423-50d6-4617-b058-69908f5586c9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8f5ad423-50d6-4617-b058-69908f5586c9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1668 - Flaw\ + \ Remediation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Information Integrity control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1668\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8fb0966e-be1d-42c3-baca-60df5c0bcc61\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8fb0966e-be1d-42c3-baca-60df5c0bcc61\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1013 - Account\ + \ Management | Automated System Account Management\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Access Control\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1013\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8fd7b917-d83b-4379-af60-51e14e316c61\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8fd7b917-d83b-4379-af60-51e14e316c61\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1147 - Security\ + \ Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Security Assessment and Authorization control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1147\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8fef824a-29a8-4a4c-88fc-420a39c0d541\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8fef824a-29a8-4a4c-88fc-420a39c0d541\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs that do not store passwords using reversible encryption\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ that do not store passwords using reversible encryption. It also creates\ + \ a system-assigned managed identity and deploys the VM extension for Guest\ + \ Configuration. This policy should only be used along with its corresponding\ + \ audit policy in an initiative. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"2.2.0-deprecated\",\"category\":\"Guest Configuration\",\"requiredProviders\"\ + :[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"\ + if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"StorePasswordsUsingReversibleEncryption\",\"deployment\":{\"properties\"\ + :{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"StorePasswordsUsingReversibleEncryption\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8ff0b18b-262e-4512-857a-48ad0aeb9a78\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8ff0b18b-262e-4512-857a-48ad0aeb9a78\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1550 - Vulnerability\ + \ Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Risk Assessment control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1550\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/902908fb-25a8-4225-a3a5-5603c80066c9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"902908fb-25a8-4225-a3a5-5603c80066c9\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'Windows Firewall Properties'\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy creates a\ + \ Guest Configuration assignment to audit Windows virtual machines with non-compliant\ + \ settings in Group Policy category: 'Windows Firewall Properties'. It also\ + \ creates a system-assigned managed identity and deploys the VM extension\ + \ for Guest Configuration. This policy should only be used along with its\ + \ corresponding audit policy in an initiative. For more information on Guest\ + \ Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\"\ + :{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\",\"\ + requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"WindowsFirewallDomainUseProfileSettings\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"[Deprecated]: Windows Firewall (Domain):\ + \ Use profile settings\",\"description\":\"Specifies whether Windows Firewall\ + \ with Advanced Security uses the settings for the Domain profile to filter\ + \ network traffic. If you select Off, Windows Firewall with Advanced Security\ + \ will not use any of the firewall rules or connection security rules for\ + \ this profile.\"},\"defaultValue\":\"1\"},\"WindowsFirewallDomainBehaviorForOutboundConnections\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Windows\ + \ Firewall (Domain): Behavior for outbound connections\",\"description\":\"\ + Specifies the behavior for outbound connections for the Domain profile that\ + \ do not match an outbound firewall rule. The default value of 0 means to\ + \ allow connections, and a value of 1 means to block connections.\"},\"defaultValue\"\ + :\"0\"},\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Windows Firewall\ + \ (Domain): Apply local connection security rules\",\"description\":\"Specifies\ + \ whether local administrators are allowed to create connection security rules\ + \ that apply together with connection security rules configured by Group Policy\ + \ for the Domain profile.\"},\"defaultValue\":\"1\"},\"WindowsFirewallDomainApplyLocalFirewallRules\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Windows\ + \ Firewall (Domain): Apply local firewall rules\",\"description\":\"Specifies\ + \ whether local administrators are allowed to create local firewall rules\ + \ that apply together with firewall rules configured by Group Policy for the\ + \ Domain profile.\"},\"defaultValue\":\"1\"},\"WindowsFirewallDomainDisplayNotifications\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Windows\ + \ Firewall (Domain): Display notifications\",\"description\":\"Specifies whether\ + \ Windows Firewall with Advanced Security displays notifications to the user\ + \ when a program is blocked from receiving inbound connections, for the Domain\ + \ profile.\"},\"defaultValue\":\"1\"},\"WindowsFirewallPrivateUseProfileSettings\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Windows\ + \ Firewall (Private): Use profile settings\",\"description\":\"Specifies whether\ + \ Windows Firewall with Advanced Security uses the settings for the Private\ + \ profile to filter network traffic. If you select Off, Windows Firewall with\ + \ Advanced Security will not use any of the firewall rules or connection security\ + \ rules for this profile.\"},\"defaultValue\":\"1\"},\"WindowsFirewallPrivateBehaviorForOutboundConnections\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Windows\ + \ Firewall (Private): Behavior for outbound connections\",\"description\"\ + :\"Specifies the behavior for outbound connections for the Private profile\ + \ that do not match an outbound firewall rule. The default value of 0 means\ + \ to allow connections, and a value of 1 means to block connections.\"},\"\ + defaultValue\":\"0\"},\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Windows\ + \ Firewall (Private): Apply local connection security rules\",\"description\"\ + :\"Specifies whether local administrators are allowed to create connection\ + \ security rules that apply together with connection security rules configured\ + \ by Group Policy for the Private profile.\"},\"defaultValue\":\"1\"},\"WindowsFirewallPrivateApplyLocalFirewallRules\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Windows\ + \ Firewall (Private): Apply local firewall rules\",\"description\":\"Specifies\ + \ whether local administrators are allowed to create local firewall rules\ + \ that apply together with firewall rules configured by Group Policy for the\ + \ Private profile.\"},\"defaultValue\":\"1\"},\"WindowsFirewallPrivateDisplayNotifications\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Windows\ + \ Firewall (Private): Display notifications\",\"description\":\"Specifies\ + \ whether Windows Firewall with Advanced Security displays notifications to\ + \ the user when a program is blocked from receiving inbound connections, for\ + \ the Private profile.\"},\"defaultValue\":\"1\"},\"WindowsFirewallPublicUseProfileSettings\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Windows\ + \ Firewall (Public): Use profile settings\",\"description\":\"Specifies whether\ + \ Windows Firewall with Advanced Security uses the settings for the Public\ + \ profile to filter network traffic. If you select Off, Windows Firewall with\ + \ Advanced Security will not use any of the firewall rules or connection security\ + \ rules for this profile.\"},\"defaultValue\":\"1\"},\"WindowsFirewallPublicBehaviorForOutboundConnections\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Windows\ + \ Firewall (Public): Behavior for outbound connections\",\"description\":\"\ + Specifies the behavior for outbound connections for the Public profile that\ + \ do not match an outbound firewall rule. The default value of 0 means to\ + \ allow connections, and a value of 1 means to block connections.\"},\"defaultValue\"\ + :\"0\"},\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Windows Firewall\ + \ (Public): Apply local connection security rules\",\"description\":\"Specifies\ + \ whether local administrators are allowed to create connection security rules\ + \ that apply together with connection security rules configured by Group Policy\ + \ for the Public profile.\"},\"defaultValue\":\"1\"},\"WindowsFirewallPublicApplyLocalFirewallRules\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Windows\ + \ Firewall (Public): Apply local firewall rules\",\"description\":\"Specifies\ + \ whether local administrators are allowed to create local firewall rules\ + \ that apply together with firewall rules configured by Group Policy for the\ + \ Public profile.\"},\"defaultValue\":\"1\"},\"WindowsFirewallPublicDisplayNotifications\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Windows\ + \ Firewall (Public): Display notifications\",\"description\":\"Specifies whether\ + \ Windows Firewall with Advanced Security displays notifications to the user\ + \ when a program is blocked from receiving inbound connections, for the Public\ + \ profile.\"},\"defaultValue\":\"1\"},\"WindowsFirewallDomainAllowUnicastResponse\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Windows\ + \ Firewall: Domain: Allow unicast response\",\"description\":\"Specifies whether\ + \ Windows Firewall with Advanced Security permits the local computer to receive\ + \ unicast responses to its outgoing multicast or broadcast messages; for the\ + \ Domain profile.\"},\"defaultValue\":\"0\"},\"WindowsFirewallPrivateAllowUnicastResponse\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Windows\ + \ Firewall: Private: Allow unicast response\",\"description\":\"Specifies\ + \ whether Windows Firewall with Advanced Security permits the local computer\ + \ to receive unicast responses to its outgoing multicast or broadcast messages;\ + \ for the Private profile.\"},\"defaultValue\":\"0\"},\"WindowsFirewallPublicAllowUnicastResponse\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Windows\ + \ Firewall: Public: Allow unicast response\",\"description\":\"Specifies whether\ + \ Windows Firewall with Advanced Security permits the local computer to receive\ + \ unicast responses to its outgoing multicast or broadcast messages; for the\ + \ Public profile.\"},\"defaultValue\":\"1\"}},\"policyRule\":{\"if\":{\"anyOf\"\ + :[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_WindowsFirewallProperties\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Windows Firewall: Domain: Firewall state;ExpectedValue',\ + \ '=', parameters('WindowsFirewallDomainUseProfileSettings'), ',', 'Windows\ + \ Firewall: Domain: Outbound connections;ExpectedValue', '=', parameters('WindowsFirewallDomainBehaviorForOutboundConnections'),\ + \ ',', 'Windows Firewall: Domain: Settings: Apply local connection security\ + \ rules;ExpectedValue', '=', parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules'),\ + \ ',', 'Windows Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue',\ + \ '=', parameters('WindowsFirewallDomainApplyLocalFirewallRules'), ',', 'Windows\ + \ Firewall: Domain: Settings: Display a notification;ExpectedValue', '=',\ + \ parameters('WindowsFirewallDomainDisplayNotifications'), ',', 'Windows Firewall:\ + \ Private: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallPrivateUseProfileSettings'),\ + \ ',', 'Windows Firewall: Private: Outbound connections;ExpectedValue', '=',\ + \ parameters('WindowsFirewallPrivateBehaviorForOutboundConnections'), ',',\ + \ 'Windows Firewall: Private: Settings: Apply local connection security rules;ExpectedValue',\ + \ '=', parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules'),\ + \ ',', 'Windows Firewall: Private: Settings: Apply local firewall rules;ExpectedValue',\ + \ '=', parameters('WindowsFirewallPrivateApplyLocalFirewallRules'), ',', 'Windows\ + \ Firewall: Private: Settings: Display a notification;ExpectedValue', '=',\ + \ parameters('WindowsFirewallPrivateDisplayNotifications'), ',', 'Windows\ + \ Firewall: Public: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallPublicUseProfileSettings'),\ + \ ',', 'Windows Firewall: Public: Outbound connections;ExpectedValue', '=',\ + \ parameters('WindowsFirewallPublicBehaviorForOutboundConnections'), ',',\ + \ 'Windows Firewall: Public: Settings: Apply local connection security rules;ExpectedValue',\ + \ '=', parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules'),\ + \ ',', 'Windows Firewall: Public: Settings: Apply local firewall rules;ExpectedValue',\ + \ '=', parameters('WindowsFirewallPublicApplyLocalFirewallRules'), ',', 'Windows\ + \ Firewall: Public: Settings: Display a notification;ExpectedValue', '=',\ + \ parameters('WindowsFirewallPublicDisplayNotifications'), ',', 'Windows Firewall:\ + \ Domain: Allow unicast response;ExpectedValue', '=', parameters('WindowsFirewallDomainAllowUnicastResponse'),\ + \ ',', 'Windows Firewall: Private: Allow unicast response;ExpectedValue',\ + \ '=', parameters('WindowsFirewallPrivateAllowUnicastResponse'), ',', 'Windows\ + \ Firewall: Public: Allow unicast response;ExpectedValue', '=', parameters('WindowsFirewallPublicAllowUnicastResponse')))]\"\ + },\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\"\ + :{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\"\ + :\"AzureBaseline_WindowsFirewallProperties\"},\"WindowsFirewallDomainUseProfileSettings\"\ + :{\"value\":\"[parameters('WindowsFirewallDomainUseProfileSettings')]\"},\"\ + WindowsFirewallDomainBehaviorForOutboundConnections\":{\"value\":\"[parameters('WindowsFirewallDomainBehaviorForOutboundConnections')]\"\ + },\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":{\"value\":\"\ + [parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules')]\"},\"\ + WindowsFirewallDomainApplyLocalFirewallRules\":{\"value\":\"[parameters('WindowsFirewallDomainApplyLocalFirewallRules')]\"\ + },\"WindowsFirewallDomainDisplayNotifications\":{\"value\":\"[parameters('WindowsFirewallDomainDisplayNotifications')]\"\ + },\"WindowsFirewallPrivateUseProfileSettings\":{\"value\":\"[parameters('WindowsFirewallPrivateUseProfileSettings')]\"\ + },\"WindowsFirewallPrivateBehaviorForOutboundConnections\":{\"value\":\"[parameters('WindowsFirewallPrivateBehaviorForOutboundConnections')]\"\ + },\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":{\"value\":\"\ + [parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules')]\"\ + },\"WindowsFirewallPrivateApplyLocalFirewallRules\":{\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalFirewallRules')]\"\ + },\"WindowsFirewallPrivateDisplayNotifications\":{\"value\":\"[parameters('WindowsFirewallPrivateDisplayNotifications')]\"\ + },\"WindowsFirewallPublicUseProfileSettings\":{\"value\":\"[parameters('WindowsFirewallPublicUseProfileSettings')]\"\ + },\"WindowsFirewallPublicBehaviorForOutboundConnections\":{\"value\":\"[parameters('WindowsFirewallPublicBehaviorForOutboundConnections')]\"\ + },\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":{\"value\":\"\ + [parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules')]\"},\"\ + WindowsFirewallPublicApplyLocalFirewallRules\":{\"value\":\"[parameters('WindowsFirewallPublicApplyLocalFirewallRules')]\"\ + },\"WindowsFirewallPublicDisplayNotifications\":{\"value\":\"[parameters('WindowsFirewallPublicDisplayNotifications')]\"\ + },\"WindowsFirewallDomainAllowUnicastResponse\":{\"value\":\"[parameters('WindowsFirewallDomainAllowUnicastResponse')]\"\ + },\"WindowsFirewallPrivateAllowUnicastResponse\":{\"value\":\"[parameters('WindowsFirewallPrivateAllowUnicastResponse')]\"\ + },\"WindowsFirewallPublicAllowUnicastResponse\":{\"value\":\"[parameters('WindowsFirewallPublicAllowUnicastResponse')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"WindowsFirewallDomainUseProfileSettings\":{\"type\"\ + :\"string\"},\"WindowsFirewallDomainBehaviorForOutboundConnections\":{\"type\"\ + :\"string\"},\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":{\"\ + type\":\"string\"},\"WindowsFirewallDomainApplyLocalFirewallRules\":{\"type\"\ + :\"string\"},\"WindowsFirewallDomainDisplayNotifications\":{\"type\":\"string\"\ + },\"WindowsFirewallPrivateUseProfileSettings\":{\"type\":\"string\"},\"WindowsFirewallPrivateBehaviorForOutboundConnections\"\ + :{\"type\":\"string\"},\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\"\ + :{\"type\":\"string\"},\"WindowsFirewallPrivateApplyLocalFirewallRules\":{\"\ + type\":\"string\"},\"WindowsFirewallPrivateDisplayNotifications\":{\"type\"\ + :\"string\"},\"WindowsFirewallPublicUseProfileSettings\":{\"type\":\"string\"\ + },\"WindowsFirewallPublicBehaviorForOutboundConnections\":{\"type\":\"string\"\ + },\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":{\"type\":\"\ + string\"},\"WindowsFirewallPublicApplyLocalFirewallRules\":{\"type\":\"string\"\ + },\"WindowsFirewallPublicDisplayNotifications\":{\"type\":\"string\"},\"WindowsFirewallDomainAllowUnicastResponse\"\ + :{\"type\":\"string\"},\"WindowsFirewallPrivateAllowUnicastResponse\":{\"\ + type\":\"string\"},\"WindowsFirewallPublicAllowUnicastResponse\":{\"type\"\ + :\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Windows Firewall:\ + \ Domain: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainUseProfileSettings')]\"\ + },{\"name\":\"Windows Firewall: Domain: Outbound connections;ExpectedValue\"\ + ,\"value\":\"[parameters('WindowsFirewallDomainBehaviorForOutboundConnections')]\"\ + },{\"name\":\"Windows Firewall: Domain: Settings: Apply local connection security\ + \ rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules')]\"\ + },{\"name\":\"Windows Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue\"\ + ,\"value\":\"[parameters('WindowsFirewallDomainApplyLocalFirewallRules')]\"\ + },{\"name\":\"Windows Firewall: Domain: Settings: Display a notification;ExpectedValue\"\ + ,\"value\":\"[parameters('WindowsFirewallDomainDisplayNotifications')]\"},{\"\ + name\":\"Windows Firewall: Private: Firewall state;ExpectedValue\",\"value\"\ + :\"[parameters('WindowsFirewallPrivateUseProfileSettings')]\"},{\"name\":\"\ + Windows Firewall: Private: Outbound connections;ExpectedValue\",\"value\"\ + :\"[parameters('WindowsFirewallPrivateBehaviorForOutboundConnections')]\"\ + },{\"name\":\"Windows Firewall: Private: Settings: Apply local connection\ + \ security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules')]\"\ + },{\"name\":\"Windows Firewall: Private: Settings: Apply local firewall rules;ExpectedValue\"\ + ,\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalFirewallRules')]\"\ + },{\"name\":\"Windows Firewall: Private: Settings: Display a notification;ExpectedValue\"\ + ,\"value\":\"[parameters('WindowsFirewallPrivateDisplayNotifications')]\"\ + },{\"name\":\"Windows Firewall: Public: Firewall state;ExpectedValue\",\"\ + value\":\"[parameters('WindowsFirewallPublicUseProfileSettings')]\"},{\"name\"\ + :\"Windows Firewall: Public: Outbound connections;ExpectedValue\",\"value\"\ + :\"[parameters('WindowsFirewallPublicBehaviorForOutboundConnections')]\"},{\"\ + name\":\"Windows Firewall: Public: Settings: Apply local connection security\ + \ rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules')]\"\ + },{\"name\":\"Windows Firewall: Public: Settings: Apply local firewall rules;ExpectedValue\"\ + ,\"value\":\"[parameters('WindowsFirewallPublicApplyLocalFirewallRules')]\"\ + },{\"name\":\"Windows Firewall: Public: Settings: Display a notification;ExpectedValue\"\ + ,\"value\":\"[parameters('WindowsFirewallPublicDisplayNotifications')]\"},{\"\ + name\":\"Windows Firewall: Domain: Allow unicast response;ExpectedValue\"\ + ,\"value\":\"[parameters('WindowsFirewallDomainAllowUnicastResponse')]\"},{\"\ + name\":\"Windows Firewall: Private: Allow unicast response;ExpectedValue\"\ + ,\"value\":\"[parameters('WindowsFirewallPrivateAllowUnicastResponse')]\"\ + },{\"name\":\"Windows Firewall: Public: Allow unicast response;ExpectedValue\"\ + ,\"value\":\"[parameters('WindowsFirewallPublicAllowUnicastResponse')]\"}]}}},{\"\ + condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Windows Firewall:\ + \ Domain: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainUseProfileSettings')]\"\ + },{\"name\":\"Windows Firewall: Domain: Outbound connections;ExpectedValue\"\ + ,\"value\":\"[parameters('WindowsFirewallDomainBehaviorForOutboundConnections')]\"\ + },{\"name\":\"Windows Firewall: Domain: Settings: Apply local connection security\ + \ rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules')]\"\ + },{\"name\":\"Windows Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue\"\ + ,\"value\":\"[parameters('WindowsFirewallDomainApplyLocalFirewallRules')]\"\ + },{\"name\":\"Windows Firewall: Domain: Settings: Display a notification;ExpectedValue\"\ + ,\"value\":\"[parameters('WindowsFirewallDomainDisplayNotifications')]\"},{\"\ + name\":\"Windows Firewall: Private: Firewall state;ExpectedValue\",\"value\"\ + :\"[parameters('WindowsFirewallPrivateUseProfileSettings')]\"},{\"name\":\"\ + Windows Firewall: Private: Outbound connections;ExpectedValue\",\"value\"\ + :\"[parameters('WindowsFirewallPrivateBehaviorForOutboundConnections')]\"\ + },{\"name\":\"Windows Firewall: Private: Settings: Apply local connection\ + \ security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules')]\"\ + },{\"name\":\"Windows Firewall: Private: Settings: Apply local firewall rules;ExpectedValue\"\ + ,\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalFirewallRules')]\"\ + },{\"name\":\"Windows Firewall: Private: Settings: Display a notification;ExpectedValue\"\ + ,\"value\":\"[parameters('WindowsFirewallPrivateDisplayNotifications')]\"\ + },{\"name\":\"Windows Firewall: Public: Firewall state;ExpectedValue\",\"\ + value\":\"[parameters('WindowsFirewallPublicUseProfileSettings')]\"},{\"name\"\ + :\"Windows Firewall: Public: Outbound connections;ExpectedValue\",\"value\"\ + :\"[parameters('WindowsFirewallPublicBehaviorForOutboundConnections')]\"},{\"\ + name\":\"Windows Firewall: Public: Settings: Apply local connection security\ + \ rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules')]\"\ + },{\"name\":\"Windows Firewall: Public: Settings: Apply local firewall rules;ExpectedValue\"\ + ,\"value\":\"[parameters('WindowsFirewallPublicApplyLocalFirewallRules')]\"\ + },{\"name\":\"Windows Firewall: Public: Settings: Display a notification;ExpectedValue\"\ + ,\"value\":\"[parameters('WindowsFirewallPublicDisplayNotifications')]\"},{\"\ + name\":\"Windows Firewall: Domain: Allow unicast response;ExpectedValue\"\ + ,\"value\":\"[parameters('WindowsFirewallDomainAllowUnicastResponse')]\"},{\"\ + name\":\"Windows Firewall: Private: Allow unicast response;ExpectedValue\"\ + ,\"value\":\"[parameters('WindowsFirewallPrivateAllowUnicastResponse')]\"\ + },{\"name\":\"Windows Firewall: Public: Allow unicast response;ExpectedValue\"\ + ,\"value\":\"[parameters('WindowsFirewallPublicAllowUnicastResponse')]\"}]}}},{\"\ + condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\"\ + ,\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\"\ + ,\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/909c958d-1b99-4c74-b88f-46a5c5bc34f9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"909c958d-1b99-4c74-b88f-46a5c5bc34f9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1133 - Protection\ + \ Of Audit Information | Cryptographic Protection\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Audit and\ + \ Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1133\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90b60a09-133d-45bc-86ef-b206a6134bbe\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90b60a09-133d-45bc-86ef-b206a6134bbe\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs that do not have the specified Windows PowerShell modules\ + \ installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy creates a Guest Configuration assignment to audit Windows virtual\ + \ machines that do not have the specified Windows PowerShell modules installed.\ + \ It also creates a system-assigned managed identity and deploys the VM extension\ + \ for Guest Configuration. This policy should only be used along with its\ + \ corresponding audit policy in an initiative. For more information on Guest\ + \ Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\"\ + :{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\",\"\ + requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"Modules\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: PowerShell Modules\",\"description\":\"A semicolon-separated\ + \ list of the names of the PowerShell modules that should be installed. You\ + \ may also specify a specific version of a module that should be installed\ + \ by including a comma after the module name, followed by the desired version.\ + \ e.g. PSDscResources; SqlServerDsc, 12.0.0.0; ComputerManagementDsc, 6.1.0.0\"\ + }}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"\ + equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"\ + Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\"\ + ,\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\"\ + ,\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsPowerShellModules\",\"existenceCondition\":{\"field\":\"\ + Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[PowerShellModules]PowerShellModules1;Modules',\ + \ '=', parameters('Modules')))]\"},\"deployment\":{\"properties\":{\"mode\"\ + :\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"WindowsPowerShellModules\"\ + },\"Modules\":{\"value\":\"[parameters('Modules')]\"}},\"template\":{\"$schema\"\ + :\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"Modules\":{\"type\":\"string\"}},\"resources\":[{\"\ + condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[PowerShellModules]PowerShellModules1;Modules\"\ + ,\"value\":\"[parameters('Modules')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[PowerShellModules]PowerShellModules1;Modules\"\ + ,\"value\":\"[parameters('Modules')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90ba2ee7-4ca8-4673-84d1-c851c50d3baf\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90ba2ee7-4ca8-4673-84d1-c851c50d3baf\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1140 - Audit\ + \ Generation | System-Wide / Time-Correlated Audit Trail\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1140\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90d8b8ad-8ee3-4db7-913f-2a53fcff5316\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90d8b8ad-8ee3-4db7-913f-2a53fcff5316\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1355 - Incident\ + \ Response Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Incident Response control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1355\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90e01f69-3074-4de8-ade7-0fef3e7d83e0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90e01f69-3074-4de8-ade7-0fef3e7d83e0\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1657 - Secure\ + \ Name / Address Resolution Service (Authoritative Source)\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ System and Communications Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1657\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90f01329-a100-43c2-af31-098996135d2b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90f01329-a100-43c2-af31-098996135d2b\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'Windows Components'\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"All\",\"description\":\"This policy should only be used along\ + \ with its corresponding deploy policy in an initiative. This definition allows\ + \ Azure Policy to process the results of auditing Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'Windows Components'.\ + \ For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_WindowsComponents\",\"existenceCondition\":{\"field\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9178b430-2295-406e-bb28-f6a7a2a2f897\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9178b430-2295-406e-bb28-f6a7a2a2f897\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1069 - Wireless\ + \ Access | Authentication And Encryption\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Access Control control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1069\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/91c97b44-791e-46e9-bad7-ab7c4949edbb\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"91c97b44-791e-46e9-bad7-ab7c4949edbb\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Deploy Dependency agent to\ + \ Windows Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"This policy deploys the Dependency agent to Windows Azure\ + \ Arc machines if the agent isn't installed.\",\"metadata\":{\"version\":\"\ + 1.1.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\"\ + ,\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\ + ],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\"\ + ,\"equals\":\"DependencyAgentWindows\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\"\ + ,\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"\ + Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\"\ + :\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\"\ + ,\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"}},\"variables\":{\"DaExtensionName\":\"\ + DependencyAgentWindows\",\"DaExtensionType\":\"DependencyAgentWindows\"},\"\ + resources\":[{\"type\":\"Microsoft.HybridCompute/machines\",\"apiVersion\"\ + :\"2020-03-11-preview\",\"name\":\"[parameters('vmName')]\",\"location\":\"\ + [parameters('location')]\",\"resources\":[{\"type\":\"extensions\",\"apiVersion\"\ + :\"2020-03-11-preview\",\"name\":\"[variables('DaExtensionName')]\",\"location\"\ + :\"[parameters('location')]\",\"dependsOn\":[\"[concat('Microsoft.HybridCompute/machines/',\ + \ parameters('vmName'))]\"],\"properties\":{\"publisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\"\ + ,\"type\":\"[variables('DaExtensionType')]\",\"autoUpgradeMinorVersion\":true,\"\ + settings\":{}}}]}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\"\ + :\"[concat('Enabled DA extension for VM', ': ', parameters('vmName'))]\"}}},\"\ + parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"\ + value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/91cb9edd-cd92-4d2f-b2f2-bdd8d065a3d4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"91cb9edd-cd92-4d2f-b2f2-bdd8d065a3d4\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1370 - Incident\ + \ Monitoring | Automated Tracking / Data Collection / Analysis\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1370\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/924e1b2d-c502-478f-bfdb-a7e09a0d5c01\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"924e1b2d-c502-478f-bfdb-a7e09a0d5c01\"\ + },{\"properties\":{\"displayName\":\"MFA should be enabled accounts with write\ + \ permissions on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + All\",\"description\":\"Multi-Factor Authentication (MFA) should be enabled\ + \ for all subscription accounts with write privileges to prevent a breach\ + \ of accounts or resources.\",\"metadata\":{\"version\":\"2.0.0\",\"category\"\ + :\"Security Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\"\ + ,\"name\":\"57e98606-6b1e-6193-0e3d-fe621387c16b\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"Healthy\"\ + ]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9297c21d-2ed6-4474-b48f-163f75654ce3\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1290 - Information\ + \ System Backup\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Contingency Planning control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1290\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/92f85ce9-17b7-49ea-85ee-ea7271ea6b82\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"92f85ce9-17b7-49ea-85ee-ea7271ea6b82\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs that contain certificates expiring within the specified number\ + \ of days\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"\ + This policy should only be used along with its corresponding deploy policy\ + \ in an initiative. This definition allows Azure Policy to process the results\ + \ of auditing Windows virtual machines that contain certificates expiring\ + \ within the specified number of days. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"deprecated\"\ + :true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"CertificateExpiration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9328f27e-611e-44a7-a244-39109d7d35ab\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9328f27e-611e-44a7-a244-39109d7d35ab\"\ + },{\"properties\":{\"displayName\":\"Audit Windows machines that do not contain\ + \ the specified certificates in Trusted Root\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Requires that prerequisites are deployed\ + \ to the policy assignment scope. For details, visit https://aka.ms/gcpol.\ + \ Machines are non-compliant if the machine Trusted Root certificate store\ + \ (Cert:\\\\LocalMachine\\\\Root) does not contain one or more of the certificates\ + \ listed by the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\"\ + ,\"version\":\"1.0.1\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"\ + ],\"guestConfiguration\":{\"name\":\"WindowsCertificateInTrustedRoot\",\"\ + version\":\"1.*\",\"configurationParameter\":{\"CertificateThumbprints\":\"\ + [CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\"}}},\"\ + parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"CertificateThumbprints\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Certificate thumbprints\"\ + ,\"description\":\"A semicolon-separated list of certificate thumbprints that\ + \ should exist under the Trusted Root certificate store (Cert:\\\\LocalMachine\\\ + \\Root). e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}}},\"policyRule\":{\"\ + if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsCertificateInTrustedRoot\",\"existenceCondition\":{\"allOf\"\ + :[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude',\ + \ '=', parameters('CertificateThumbprints')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/934345e1-4dfb-4c70-90d7-41990dc9608b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"934345e1-4dfb-4c70-90d7-41990dc9608b\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs if the Administrators group doesn't contain all the specified\ + \ members\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy creates a Guest Configuration assignment to audit Windows virtual\ + \ machines in which the Administrators group does not contain all of the specified\ + \ members. It also creates a system-assigned managed identity and deploys\ + \ the VM extension for Guest Configuration. This policy should only be used\ + \ along with its corresponding audit policy in an initiative. For more information\ + \ on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"\ + metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"MembersToInclude\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Members to include\",\"description\":\"A semicolon-separated\ + \ list of members that should be included in the Administrators local group.\ + \ Ex: Administrator; myUser1; myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\"\ + :[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AdministratorsGroupMembersToInclude\",\"existenceCondition\":{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;MembersToInclude',\ + \ '=', parameters('MembersToInclude')))]\"},\"deployment\":{\"properties\"\ + :{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"AdministratorsGroupMembersToInclude\"\ + },\"MembersToInclude\":{\"value\":\"[parameters('MembersToInclude')]\"}},\"\ + template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"MembersToInclude\":{\"type\":\"string\"}},\"resources\"\ + :[{\"condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;MembersToInclude\"\ + ,\"value\":\"[parameters('MembersToInclude')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;MembersToInclude\"\ + ,\"value\":\"[parameters('MembersToInclude')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/93507a81-10a4-4af0-9ee2-34cf25a96e98\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"93507a81-10a4-4af0-9ee2-34cf25a96e98\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1575 - Acquisition\ + \ Process | Functional Properties Of Security Controls\",\"policyType\":\"\ + Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1575\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/93e1bb73-1b08-4dbe-9c62-8e2e92e7ec41\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"93e1bb73-1b08-4dbe-9c62-8e2e92e7ec41\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1674 - Flaw\ + \ Remediation | Time To Remediate Flaws / Benchmarks For Corrective Actions\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this System and Information Integrity control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1674\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/93e9e233-dd0a-4bde-aea5-1371bce0e002\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"93e9e233-dd0a-4bde-aea5-1371bce0e002\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1297 - Information\ + \ System Recovery And Reconstitution | Restore Within Time Period\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1297\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/93fd8af1-c161-4bae-9ba9-f62731f76439\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"93fd8af1-c161-4bae-9ba9-f62731f76439\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1284 - Telecommunications\ + \ Services | Provider Contingency Plan\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Contingency Planning\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1284\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/942b3e97-6ae3-410e-a794-c9c999b97c0b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"942b3e97-6ae3-410e-a794-c9c999b97c0b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1379 - Incident\ + \ Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Incident Response control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1379\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9442dd2c-a07f-46cd-b55a-553b66ba47ca\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9442dd2c-a07f-46cd-b55a-553b66ba47ca\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1371 - Incident\ + \ Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Incident Response control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1371\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9447f354-2c85-4700-93b3-ecdc6cb6a417\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9447f354-2c85-4700-93b3-ecdc6cb6a417\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Allow resource creation\ + \ only in European data centers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Allows resource creation in the following locations only:\ + \ North Europe, West Europe\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"General\",\"deprecated\":true},\"parameters\":{},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"\ + ]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/94c19f19-8192-48cd-a11b-e37099d3e36b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"94c19f19-8192-48cd-a11b-e37099d3e36b\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'System Audit Policies - Account Management'\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'System Audit Policies - Account Management'\ + \ for auditing application, security, and user group management, and other\ + \ management events. This policy requires that the Guest Configuration prerequisites\ + \ have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\",\"version\"\ + :\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"Include Arc connected servers\",\"description\"\ + :\"By selecting this option, you agree to be charged monthly per Arc connected\ + \ machine.\"},\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"\ + },\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of this policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_SystemAuditPoliciesAccountManagement\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/94d9aca8-3757-46df-aa51-f218c5f11954\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"94d9aca8-3757-46df-aa51-f218c5f11954\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1526 - Access\ + \ Agreements\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1526\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/953e6261-a05a-44fd-8246-000e1a3edbb9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"953e6261-a05a-44fd-8246-000e1a3edbb9\"\ + },{\"properties\":{\"displayName\":\"Authentication should be enabled on your\ + \ web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Azure App Service Authentication is a feature that can prevent anonymous\ + \ HTTP requests from reaching the web app, or authenticate those that have\ + \ tokens before they reach the web app\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\"\ + :\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"\ + existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/siteAuthEnabled\"\ + ,\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/95bccee9-a7f8-4bec-9ee9-62c3473701fc\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"95bccee9-a7f8-4bec-9ee9-62c3473701fc\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1163 - Continuous\ + \ Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Security Assessment and Authorization control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1163\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/961663a1-8a91-4e59-b6f5-1eee57c0f49c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"961663a1-8a91-4e59-b6f5-1eee57c0f49c\"\ + },{\"properties\":{\"displayName\":\"Require a tag on resource groups\",\"\ + policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enforces existence\ + \ of a tag on resource groups.\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Tag Name\",\"description\":\"Name of the tag, such as 'environment'\"\ + }}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"\ + },{\"field\":\"[concat('tags[', parameters('tagName'), ']')]\",\"exists\"\ + :\"false\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/96670d01-0a4d-4649-9c89-2d3abc0a5025\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"96670d01-0a4d-4649-9c89-2d3abc0a5025\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1717 - Software,\ + \ Firmware, And Information Integrity | Binary Or Machine Executable Code\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this System and Information Integrity control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1717\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/967773fc-d9ab-4a4e-8ff6-f5e9e3f5dbef\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"967773fc-d9ab-4a4e-8ff6-f5e9e3f5dbef\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Advanced data security\ + \ settings for SQL server should contain an email address to receive security\ + \ alerts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Ensure that an email address is provided for the 'Send alerts to' field\ + \ in the Advanced Data Security server settings. This email address receives\ + \ alert notifications when anomalous activities are detected on SQL servers.\"\ + ,\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\"\ + :true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"Disabled\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"\ + equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"\ + name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/securityAlertPolicies/emailAddresses[*]\"\ + ,\"notEquals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9677b740-f641-4f3c-b9c5-466005c85278\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9677b740-f641-4f3c-b9c5-466005c85278\"\ + },{\"properties\":{\"displayName\":\"App Configuration should use a customer-managed\ + \ key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"\ + Customer-managed keys provide enhanced data protection by allowing you to\ + \ manage your encryption keys. This is often required to meet compliance requirements.\"\ + ,\"metadata\":{\"version\":\"1.0.1\",\"category\":\"App Configuration\"},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"\ + },{\"field\":\"Microsoft.AppConfiguration/configurationStores/encryption.keyVaultProperties.keyIdentifier\"\ + ,\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/967a4b4b-2da9-43c1-b7d0-f98d0d74d0b1\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"967a4b4b-2da9-43c1-b7d0-f98d0d74d0b1\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'Administrative Templates - System'\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'Administrative Templates - System'\ + \ for settings that control the administrative experience and Remote Assistance.\ + \ This policy requires that the Guest Configuration prerequisites have been\ + \ deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"AzureBaseline_AdministrativeTemplatesSystem\",\"version\":\"\ + 1.*\",\"configurationParameter\":{\"AlwaysUseClassicLogon\":\"Always use classic\ + \ logon;ExpectedValue\",\"BootStartDriverInitializationPolicy\":\"Boot-Start\ + \ Driver Initialization Policy;ExpectedValue\",\"EnableWindowsNTPClient\"\ + :\"Enable Windows NTP Client;ExpectedValue\",\"TurnOnConveniencePINSignin\"\ + :\"Turn on convenience PIN sign-in;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include Arc connected\ + \ servers\",\"description\":\"By selecting this option, you agree to be charged\ + \ monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"\ + ],\"defaultValue\":\"false\"},\"AlwaysUseClassicLogon\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Always use classic logon\",\"description\"\ + :\"Specifies whether to force the user to log on to the computer using the\ + \ classic logon screen. This setting only works when the computer is not on\ + \ a domain.\"},\"defaultValue\":\"0\"},\"BootStartDriverInitializationPolicy\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Boot-Start Driver Initialization\ + \ Policy\",\"description\":\"Specifies which boot-start drivers are initialized\ + \ based on a classification determined by an Early Launch Antimalware boot-start\ + \ driver.\"},\"defaultValue\":\"3\"},\"EnableWindowsNTPClient\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Enable Windows NTP Client\",\"\ + description\":\"Specifies whether the Windows NTP Client is enabled. Enabling\ + \ the Windows NTP Client allows your computer to synchronize its computer\ + \ clock with other NTP servers.\"},\"defaultValue\":\"1\"},\"TurnOnConveniencePINSignin\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Turn on convenience\ + \ PIN sign-in\",\"description\":\"Specifies whether a domain user can sign\ + \ in using a convenience PIN.\"},\"defaultValue\":\"0\"},\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_AdministrativeTemplatesSystem\",\"existenceCondition\":{\"allOf\"\ + :[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Always use classic logon;ExpectedValue', '=',\ + \ parameters('AlwaysUseClassicLogon'), ',', 'Boot-Start Driver Initialization\ + \ Policy;ExpectedValue', '=', parameters('BootStartDriverInitializationPolicy'),\ + \ ',', 'Enable Windows NTP Client;ExpectedValue', '=', parameters('EnableWindowsNTPClient'),\ + \ ',', 'Turn on convenience PIN sign-in;ExpectedValue', '=', parameters('TurnOnConveniencePINSignin')))]\"\ + }]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/968410dc-5ca0-4518-8a5b-7b55f0530ea9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"968410dc-5ca0-4518-8a5b-7b55f0530ea9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1453 - Physical\ + \ Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Physical and Environmental Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1453\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9693b564-3008-42bc-9d5d-9c7fe198c011\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9693b564-3008-42bc-9d5d-9c7fe198c011\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'Administrative Templates - MSS (Legacy)'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy\ + \ should only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines with non-compliant settings in Group Policy category: 'Administrative\ + \ Templates - MSS (Legacy)'. For more information on Guest Configuration policies,\ + \ please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.1-deprecated\"\ + ,\"category\":\"Guest Configuration\",\"deprecated\":true},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/97646672-5efa-4622-9b54-740270ad60bf\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"97646672-5efa-4622-9b54-740270ad60bf\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1607 - Developer\ + \ Security Testing And Evaluation | Dynamic Code Analysis\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1607\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/976a74cf-b192-4d35-8cab-2068f272addb\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"976a74cf-b192-4d35-8cab-2068f272addb\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'System Audit Policies - Policy Change'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'System Audit Policies\ + \ - Policy Change'. It also creates a system-assigned managed identity and\ + \ deploys the VM extension for Guest Configuration. This policy should only\ + \ be used along with its corresponding audit policy in an initiative. For\ + \ more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"AuditAuthenticationPolicyChange\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"[Deprecated]: Audit Authentication Policy Change\"\ + ,\"description\":\"Specifies whether audit events are generated when changes\ + \ are made to authentication policy. This setting is useful for tracking changes\ + \ in domain-level and forest-level trust and privileges that are granted to\ + \ user accounts or groups.\"},\"allowedValues\":[\"No Auditing\",\"Success\"\ + ,\"Failure\",\"Success and Failure\"],\"defaultValue\":\"Success\"},\"AuditAuthorizationPolicyChange\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Audit\ + \ Authorization Policy Change\",\"description\":\"Specifies whether audit\ + \ events are generated for assignment and removal of user rights in user right\ + \ policies, changes in security token object permission, resource attributes\ + \ changes and Central Access Policy changes for file system objects.\"},\"\ + allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success and Failure\"\ + ],\"defaultValue\":\"No Auditing\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Audit Authentication Policy Change;ExpectedValue',\ + \ '=', parameters('AuditAuthenticationPolicyChange'), ',', 'Audit Authorization\ + \ Policy Change;ExpectedValue', '=', parameters('AuditAuthorizationPolicyChange')))]\"\ + },\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\"\ + :{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\"\ + :\"AzureBaseline_SystemAuditPoliciesPolicyChange\"},\"AuditAuthenticationPolicyChange\"\ + :{\"value\":\"[parameters('AuditAuthenticationPolicyChange')]\"},\"AuditAuthorizationPolicyChange\"\ + :{\"value\":\"[parameters('AuditAuthorizationPolicyChange')]\"}},\"template\"\ + :{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"AuditAuthenticationPolicyChange\":{\"type\":\"string\"\ + },\"AuditAuthorizationPolicyChange\":{\"type\":\"string\"}},\"resources\"\ + :[{\"condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit Authentication\ + \ Policy Change;ExpectedValue\",\"value\":\"[parameters('AuditAuthenticationPolicyChange')]\"\ + },{\"name\":\"Audit Authorization Policy Change;ExpectedValue\",\"value\"\ + :\"[parameters('AuditAuthorizationPolicyChange')]\"}]}}},{\"condition\":\"\ + [equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit Authentication\ + \ Policy Change;ExpectedValue\",\"value\":\"[parameters('AuditAuthenticationPolicyChange')]\"\ + },{\"name\":\"Audit Authorization Policy Change;ExpectedValue\",\"value\"\ + :\"[parameters('AuditAuthorizationPolicyChange')]\"}]}}},{\"condition\":\"\ + [equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\"\ + ,\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\"\ + ,\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/97b595c8-fd10-400e-8543-28e2b9138b13\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"97b595c8-fd10-400e-8543-28e2b9138b13\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1136 - Audit\ + \ Record Retention\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Audit and Accountability control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1136\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/97ed5bac-a92f-4f6d-a8ed-dc094723597c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"97ed5bac-a92f-4f6d-a8ed-dc094723597c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1378 - Incident\ + \ Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Incident Response control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1378\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/97fceb70-6983-42d0-9331-18ad8253184d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"97fceb70-6983-42d0-9331-18ad8253184d\"\ + },{\"properties\":{\"displayName\":\"Azure Event Grid domains should use private\ + \ links\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Audit Azure Event Grid domains that do not have at least one approved private\ + \ endpoint connection. Clients in a virtual network can securely access resources\ + \ that have private endpoint connections via private links. For more information,\ + \ visit https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Event Grid\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"\ + ],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.EventGrid/domains\"},{\"count\":{\"field\"\ + :\"Microsoft.EventGrid/domains/privateEndpointConnections[*]\",\"where\":{\"\ + field\":\"Microsoft.EventGrid/domains/privateEndpointConnections[*].privateLinkServiceConnectionState.status\"\ + ,\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9830b652-8523-49cc-b1b3-e17dce1127ca\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Allow resource creation\ + \ only in United States data centers\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Allows resource creation in the following locations\ + \ only: Central US, East US, East US2, North Central US, South Central US,\ + \ West US\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"\ + General\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"\ + not\":{\"field\":\"location\",\"in\":[\"centralus\",\"eastus\",\"eastus2\"\ + ,\"northcentralus\",\"southcentralus\",\"westus\"]}},\"then\":{\"effect\"\ + :\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/983211ba-f348-4758-983b-21fa29294869\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"983211ba-f348-4758-983b-21fa29294869\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'Administrative Templates - Network'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'Administrative Templates\ + \ - Network'. It also creates a system-assigned managed identity and deploys\ + \ the VM extension for Guest Configuration. This policy should only be used\ + \ along with its corresponding audit policy in an initiative. For more information\ + \ on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"\ + metadata\":{\"version\":\"1.1.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"EnableInsecureGuestLogons\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Deprecated]: Enable insecure guest logons\",\"description\"\ + :\"Specifies whether the SMB client will allow insecure guest logons to an\ + \ SMB server.\"},\"defaultValue\":\"0\"},\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Allow\ + \ simultaneous connections to the Internet or a Windows Domain\",\"description\"\ + :\"Specify whether to prevent computers from connecting to both a domain based\ + \ network and a non-domain based network at the same time. A value of 0 allows\ + \ simultaneous connections, and a value of 1 blocks them.\"},\"defaultValue\"\ + :\"1\"},\"TurnOffMulticastNameResolution\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Deprecated]: Turn off multicast name resolution\",\"\ + description\":\"Specifies whether LLMNR, a secondary name resolution protocol\ + \ that transmits using multicast over a local subnet link on a single subnet,\ + \ is enabled.\"},\"defaultValue\":\"1\"}},\"policyRule\":{\"if\":{\"anyOf\"\ + :[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_AdministrativeTemplatesNetwork\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Enable insecure guest logons;ExpectedValue',\ + \ '=', parameters('EnableInsecureGuestLogons'), ',', 'Minimize the number\ + \ of simultaneous connections to the Internet or a Windows Domain;ExpectedValue',\ + \ '=', parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain'),\ + \ ',', 'Turn off multicast name resolution;ExpectedValue', '=', parameters('TurnOffMulticastNameResolution')))]\"\ + },\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\"\ + :{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\"\ + :\"AzureBaseline_AdministrativeTemplatesNetwork\"},\"EnableInsecureGuestLogons\"\ + :{\"value\":\"[parameters('EnableInsecureGuestLogons')]\"},\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\"\ + :{\"value\":\"[parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain')]\"\ + },\"TurnOffMulticastNameResolution\":{\"value\":\"[parameters('TurnOffMulticastNameResolution')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"EnableInsecureGuestLogons\":{\"type\":\"string\"\ + },\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":{\"type\"\ + :\"string\"},\"TurnOffMulticastNameResolution\":{\"type\":\"string\"}},\"\ + resources\":[{\"condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Enable insecure\ + \ guest logons;ExpectedValue\",\"value\":\"[parameters('EnableInsecureGuestLogons')]\"\ + },{\"name\":\"Minimize the number of simultaneous connections to the Internet\ + \ or a Windows Domain;ExpectedValue\",\"value\":\"[parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain')]\"\ + },{\"name\":\"Turn off multicast name resolution;ExpectedValue\",\"value\"\ + :\"[parameters('TurnOffMulticastNameResolution')]\"}]}}},{\"condition\":\"\ + [equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Enable insecure\ + \ guest logons;ExpectedValue\",\"value\":\"[parameters('EnableInsecureGuestLogons')]\"\ + },{\"name\":\"Minimize the number of simultaneous connections to the Internet\ + \ or a Windows Domain;ExpectedValue\",\"value\":\"[parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain')]\"\ + },{\"name\":\"Turn off multicast name resolution;ExpectedValue\",\"value\"\ + :\"[parameters('TurnOffMulticastNameResolution')]\"}]}}},{\"condition\":\"\ + [equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\"\ + ,\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\"\ + ,\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/985285b7-b97a-419c-8d48-c88cc934c8d8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"985285b7-b97a-419c-8d48-c88cc934c8d8\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1076 - Use\ + \ Of External Information Systems\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Access Control control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1076\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/98a4bd5f-6436-46d4-ad00-930b5b1dfed4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"98a4bd5f-6436-46d4-ad00-930b5b1dfed4\"\ + },{\"properties\":{\"displayName\":\"Ensure that 'HTTP Version' is the latest,\ + \ if used to run the Api app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Periodically, newer versions are released for HTTP either\ + \ due to security flaws or to include additional functionality. Using the\ + \ latest HTTP version for web apps to take advantage of security fixes, if\ + \ any, and/or new functionalities of the newer version.\",\"metadata\":{\"\ + version\":\"2.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"\ + },{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"kind\",\"contains\"\ + :\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\"\ + :{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Web/sites/config/web.http20Enabled\",\"equals\":\"\ + true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/991310cd-e9f3-47bc-b7b6-f57b557d07db\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"991310cd-e9f3-47bc-b7b6-f57b557d07db\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1102 - Audit\ + \ Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Audit and Accountability control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1102\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9943c16a-c54c-4b4a-ad28-bfd938cdbf57\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9943c16a-c54c-4b4a-ad28-bfd938cdbf57\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1300 - Identification\ + \ And Authentication (Organizational Users)\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Identification\ + \ and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1300\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/99deec7d-5526-472e-b07c-3645a792026a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"99deec7d-5526-472e-b07c-3645a792026a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1036 - Least\ + \ Privilege | Non-Privileged Access For Nonsecurity Functions\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1036\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9a16d673-8cf0-4dcf-b1d5-9b3e114fef71\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9a16d673-8cf0-4dcf-b1d5-9b3e114fef71\"\ + },{\"properties\":{\"displayName\":\"FTPS only should be required in your\ + \ API App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Enable FTPS enforcement for enhanced security\",\"metadata\":{\"version\"\ + :\"2.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"\ + field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"\ + existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/ftpsState\",\"\ + in\":[\"FtpsOnly\",\"Disabled\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9a1b8c48-453a-4044-86c3-d8bfd823e4f5\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1021 - Account\ + \ Management | Restrictions On Use Of Shared / Group Accounts\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1021\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9a3eb0a3-428d-4669-baff-20a14eb4b551\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9a3eb0a3-428d-4669-baff-20a14eb4b551\"\ + },{\"properties\":{\"displayName\":\"Deploy Diagnostic Settings for Azure\ + \ SQL Database to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Deploys the diagnostic settings for Azure SQL Database\ + \ to stream to a regional Event Hub on any Azure SQL Database which is missing\ + \ this diagnostic settings is created or updated.\",\"metadata\":{\"version\"\ + :\"1.1.0\",\"category\":\"SQL\"},\"parameters\":{\"profileName\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Profile name\",\"description\"\ + :\"The diagnostic settings profile name\"},\"defaultValue\":\"setbypolicy\"\ + },\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"\ + Event Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization\ + \ rule Id for Azure Diagnostics. The authorization rule needs to be at Event\ + \ Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource\ + \ group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization\ + \ rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\"\ + ,\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Enable metrics\",\"description\":\"Whether to enable metrics\ + \ stream to the Event Hub - True or False\"},\"allowedValues\":[\"True\",\"\ + False\"],\"defaultValue\":\"False\"},\"logsEnabled\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Enable logs\",\"description\":\"Whether to\ + \ enable logs stream to the Event Hub - True or False\"},\"allowedValues\"\ + :[\"True\",\"False\"],\"defaultValue\":\"True\"}},\"policyRule\":{\"if\":{\"\ + field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},\"then\"\ + :{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\"\ + ,\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\"\ + :[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\"\ + :\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\"\ + ,\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"\ + /providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"fullName\":{\"type\":\"\ + string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\"\ + :\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"\ + type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"resources\":[{\"\ + type\":\"Microsoft.Sql/servers/databases/providers/diagnosticSettings\",\"\ + apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('fullName'),\ + \ '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"\ + [parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\"\ + :\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\"\ + ,\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\"\ + :false,\"days\":0}}],\"logs\":[{\"category\":\"QueryStoreRuntimeStatistics\"\ + ,\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"QueryStoreWaitStatistics\"\ + ,\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Errors\",\"\ + enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"DatabaseWaitStatistics\"\ + ,\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Blocks\",\"\ + enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"SQLInsights\",\"\ + enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"SQLSecurityAuditEvents\"\ + ,\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Timeouts\",\"\ + enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"AutomaticTuning\"\ + ,\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Deadlocks\"\ + ,\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{\"policy\"\ + :{\"type\":\"string\",\"value\":\"[concat('Enabled diagnostic settings for\ + \ ', parameters('fullName'))]\"}}},\"parameters\":{\"location\":{\"value\"\ + :\"[field('location')]\"},\"fullName\":{\"value\":\"[field('fullName')]\"\ + },\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\"\ + :{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\"\ + :\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"\ + }}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9a7c7a7d-49e5-4213-bea8-6a502b6272e0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9a7c7a7d-49e5-4213-bea8-6a502b6272e0\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1049 - System\ + \ Use Notification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1049\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9adf7ba7-900a-4f35-8d57-9f34aafc405c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9adf7ba7-900a-4f35-8d57-9f34aafc405c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1563 - Allocation\ + \ Of Resources\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Services Acquisition control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1563\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9afe2edf-232c-4fdf-8e6a-e867a5c525fd\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9afe2edf-232c-4fdf-8e6a-e867a5c525fd\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1462 - Monitoring\ + \ Physical Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Physical and Environmental Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1462\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9b1f3a9a-13a1-4b40-8420-36bca6fd8c02\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9b1f3a9a-13a1-4b40-8420-36bca6fd8c02\"\ + },{\"properties\":{\"displayName\":\"Microsoft IaaSAntimalware extension should\ + \ be deployed on Windows servers\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"This policy audits any Windows server VM without\ + \ Microsoft IaaSAntimalware extension deployed.\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\"\ + ,\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\"\ + ,\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\"\ + ,\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"\ + 2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\"\ + ,\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\"\ + ,\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\"\ + ,\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\"\ + ]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\"\ + ,\"equals\":\"IaaSAntimalware\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\"\ + ,\"equals\":\"Microsoft.Azure.Security\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9b597639-28e4-48eb-b506-56b05d366257\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9b597639-28e4-48eb-b506-56b05d366257\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1236 - Software\ + \ Usage Restrictions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1236\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ba3ed84-c768-4e18-b87c-34ef1aff1b57\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ba3ed84-c768-4e18-b87c-34ef1aff1b57\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1525 - Personnel\ + \ Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1525\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9be2f688-7a61-45e3-8230-e1ec93893f66\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9be2f688-7a61-45e3-8230-e1ec93893f66\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Audit API Applications\ + \ that are not using latest supported Java Framework\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"All\",\"description\":\"Use the latest supported Java version\ + \ for the latest security classes. Using older classes and types can make\ + \ your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Security Center\",\"deprecated\":true},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:\ + \ Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\"\ + ,\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\"\ + :\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\"\ + ,\"name\":\"UseLatestJava\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\"\ + ,\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9bfe3727-0a17-471f-a2fe-eddd6b668745\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9bfe3727-0a17-471f-a2fe-eddd6b668745\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1138 - Audit\ + \ Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Audit and Accountability control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1138\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9c284fc0-268a-4f29-af44-3c126674edb4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9c284fc0-268a-4f29-af44-3c126674edb4\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1135 - Non-Repudiation\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Audit and Accountability control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1135\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9c308b6b-2429-4b97-86cf-081b8e737b04\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9c308b6b-2429-4b97-86cf-081b8e737b04\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1489 - Location\ + \ Of Information System Components\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Physical and Environmental\ + \ Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1489\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d0a794f-1444-4c96-9534-e35fc8c39c91\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d0a794f-1444-4c96-9534-e35fc8c39c91\"\ + },{\"properties\":{\"displayName\":\"Ensure that 'Java version' is the latest,\ + \ if used as a part of the Function app\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Periodically, newer versions are released for\ + \ Java software either due to security flaws or to include additional functionality.\ + \ Using the latest Java version for Function apps is recommended in order\ + \ to take advantage of security fixes, if any, and/or new functionalities\ + \ of the latest version.\",\"metadata\":{\"version\":\"2.0.0\",\"category\"\ + :\"App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"},\"JavaLatestVersion\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Latest Java version\",\"description\":\"\ + Latest supported Java version for App Services\"},\"defaultValue\":\"11\"\ + }},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"\ + },{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"kind\",\"contains\"\ + :\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\"\ + :{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\"\ + :{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\"\ + ,\"notContains\":\"JAVA\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\"\ + ,\"like\":\"[concat('*', parameters('JavaLatestVersion'))]\"}]}}}}},\"id\"\ + :\"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1322 - Authenticator\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Identification and Authentication control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1322\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d1d971e-467e-4278-9633-c74c3d4fecc4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d1d971e-467e-4278-9633-c74c3d4fecc4\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Deploy Log Analytics agent\ + \ to Linux Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"This policy deploys the Log Analytics agent to Linux Azure\ + \ Arc machines if the agent isn't installed.\",\"metadata\":{\"version\":\"\ + 1.1.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\"\ + :{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]:\ + \ Log Analytics workspace\",\"description\":\"Specify the Log Analytics workspace\ + \ the agent should be connected to. If this workspace is outside of the scope\ + \ of the assignment you must manually grant 'Log Analytics Contributor' permissions\ + \ (or similar) to the policy assignment's principal ID.\",\"strongType\":\"\ + omsWorkspace\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"\ + field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]},\"then\"\ + :{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\"\ + ,\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\ + ],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\"\ + ,\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\"\ + ,\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\"\ + ,\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\"\ + ,\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"\ + }},\"variables\":{\"vmExtensionName\":\"OMSAgentForLinux\",\"vmExtensionPublisher\"\ + :\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"OmsAgentForLinux\"\ + },\"resources\":[{\"name\":\"[concat(parameters('vmName'), '/', variables('vmExtensionName'))]\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"location\":\"\ + [parameters('location')]\",\"apiVersion\":\"2019-12-12\",\"properties\":{\"\ + publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\"\ + ,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), '2015-03-20').customerId]\"\ + ,\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\"\ + :\"[listKeys(parameters('logAnalytics'), '2015-03-20').primarySharedKey]\"\ + }}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled\ + \ extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"\ + vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d2b61b4-1d14-4a63-be30-d4498e7ad2cf\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d2b61b4-1d14-4a63-be30-d4498e7ad2cf\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1233 - Configuration\ + \ Management Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1233\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d79001f-95fe-45d0-8736-f217e78c1f57\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d79001f-95fe-45d0-8736-f217e78c1f57\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1305 - Identification\ + \ And Authentication (Org. Users) | Group Authentication\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Identification and Authentication control\",\"metadata\":{\"version\":\"\ + 1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"\ + /providers/Microsoft.PolicyInsights/policyMetadata/ACF1305\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d9166a8-1722-4b8f-847c-2cf3f2618b3d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d9166a8-1722-4b8f-847c-2cf3f2618b3d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1259 - Contingency\ + \ Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Contingency Planning control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1259\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d9e18f7-bad9-4d30-8806-a0c9d5e26208\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d9e18f7-bad9-4d30-8806-a0c9d5e26208\"\ + },{\"properties\":{\"displayName\":\"All network ports should be restricted\ + \ on network security groups associated to your virtual machine\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure Security Center has\ + \ identified some of your network security groups' inbound rules to be too\ + \ permissive. Inbound rules should not allow access from 'Any' or 'Internet'\ + \ ranges. This can potentially enable attackers to target your resources.\"\ + ,\"metadata\":{\"version\":\"2.0.1\",\"category\":\"Security Center\"},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"\ + Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"\ + ]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/assessments\",\"name\":\"3b20e985-f71f-483b-b078-f30d73936d43\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9daedab3-fb2d-461e-b861-71790eead4f6\"\ + },{\"properties\":{\"displayName\":\"Application definition for Managed Application\ + \ should use customer provided storage account\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Use your own storage account to control\ + \ the application definition data when this is a regulatory or compliance\ + \ requirement. You can choose to store your managed application definition\ + \ within a storage account provided by you during creation, so that its location\ + \ and access can be fully managed by you to fulfill regulatory compliance\ + \ requirements.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Managed\ + \ Application\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"\ + defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"\ + type\",\"equals\":\"Microsoft.Solutions/applicationDefinitions\"},{\"field\"\ + :\"Microsoft.Solutions/applicationDefinitions/storageAccountId\",\"exists\"\ + :\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"\ + /providers/Microsoft.Authorization/policyDefinitions/9db7917b-1607-4e7d-a689-bca978dd0633\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9db7917b-1607-4e7d-a689-bca978dd0633\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1500 - Rules\ + \ Of Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Planning control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1500\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9dd5b241-03cb-47d3-a5cd-4b89f9c53c92\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9dd5b241-03cb-47d3-a5cd-4b89f9c53c92\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1482 - Temperature\ + \ And Humidity Controls | Monitoring With Alarms / Notifications\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Physical and Environmental Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1482\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9df4277e-8c88-4d5c-9b1a-541d53d15d7b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9df4277e-8c88-4d5c-9b1a-541d53d15d7b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1553 - Vulnerability\ + \ Scanning | Breadth / Depth Of Coverage\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Risk Assessment control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1553\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9e5225fe-cdfb-4fce-9aec-0fe20dd53b62\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9e5225fe-cdfb-4fce-9aec-0fe20dd53b62\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1490 - Security\ + \ Planning Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Planning control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1490\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9e61da80-0957-4892-b70c-609d5eaafb6b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9e61da80-0957-4892-b70c-609d5eaafb6b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1504 - Information\ + \ Security Architecture\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this Planning control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1504\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9e7c35d0-12d4-4e0c-80a2-8a352537aefd\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9e7c35d0-12d4-4e0c-80a2-8a352537aefd\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1609 - Development\ + \ Process, Standards, And Tools\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this System and Services Acquisition\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1609\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9e93fa71-42ac-41a7-b177-efbfdc53c69f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9e93fa71-42ac-41a7-b177-efbfdc53c69f\"\ + },{\"properties\":{\"displayName\":\"Append a tag and its value from the resource\ + \ group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Appends the specified tag with its value from the resource group when any\ + \ resource which is missing this tag is created or updated. Does not modify\ + \ the tags of resources created before this policy was applied until those\ + \ resources are changed. New 'modify' effect policies are available that support\ + \ remediation of tags on existing resources (see https://aka.ms/modifydoc).\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\"\ + :{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag Name\"\ + ,\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', parameters('tagName'),\ + \ ']')]\",\"exists\":\"false\"},{\"value\":\"[resourceGroup().tags[parameters('tagName')]]\"\ + ,\"notEquals\":\"\"}]},\"then\":{\"effect\":\"append\",\"details\":[{\"field\"\ + :\"[concat('tags[', parameters('tagName'), ']')]\",\"value\":\"[resourceGroup().tags[parameters('tagName')]]\"\ + }]}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ea02ca2-71db-412d-8b00-7c7ca9fcd32d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ea02ca2-71db-412d-8b00-7c7ca9fcd32d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1494 - System\ + \ Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Planning control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1494\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ed09d84-3311-4853-8b67-2b55dfa33d09\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ed09d84-3311-4853-8b67-2b55dfa33d09\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1514 - Personnel\ + \ Screening | Information With Special Protection Measures\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1514\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ed5ca00-0e43-434e-a018-7aab91461ba7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ed5ca00-0e43-434e-a018-7aab91461ba7\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1187 - Configuration\ + \ Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1187\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9f2b2f9e-4ba6-46c3-907f-66db138b6f85\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9f2b2f9e-4ba6-46c3-907f-66db138b6f85\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs that are not set to the specified time zone\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should only be\ + \ used along with its corresponding deploy policy in an initiative. This definition\ + \ allows Azure Policy to process the results of auditing Windows virtual machines\ + \ that are not set to the specified time zone. For more information on Guest\ + \ Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\"\ + :{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"\ + deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsTimeZone\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9f658460-46b7-43af-8565-94fc0662be38\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9f658460-46b7-43af-8565-94fc0662be38\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1354 - Incident\ + \ Response Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Incident Response control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1354\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9fd92c17-163a-4511-bb96-bbb476449796\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9fd92c17-163a-4511-bb96-bbb476449796\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs on which the Log Analytics agent is not connected as expected\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy\ + \ should only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines on which the Log Analytics agent is not connected to the\ + \ specified workspaces. For more information on Guest Configuration policies,\ + \ please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Guest Configuration\",\"deprecated\":true},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsLogAnalyticsAgentConnection\",\"existenceCondition\":{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a030a57e-4639-4e8f-ade9-a92f33afe7ee\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a030a57e-4639-4e8f-ade9-a92f33afe7ee\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1145 - Security\ + \ Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Security Assessment and Authorization control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1145\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a0724970-9c75-4a64-a225-a28002953f28\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a0724970-9c75-4a64-a225-a28002953f28\"\ + },{\"properties\":{\"displayName\":\"Allowed resource types\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy enables you\ + \ to specify the resource types that your organization can deploy. Only resource\ + \ types that support 'tags' and 'location' will be affected by this policy.\ + \ To restrict all resources please duplicate this policy and change the 'mode'\ + \ to 'All'.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"General\"\ + },\"parameters\":{\"listOfResourceTypesAllowed\":{\"type\":\"Array\",\"metadata\"\ + :{\"description\":\"The list of resource types that can be deployed.\",\"\ + displayName\":\"Allowed resource types\",\"strongType\":\"resourceTypes\"\ + }}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"type\",\"in\":\"[parameters('listOfResourceTypesAllowed')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a08ec900-254a-4555-9bf5-e42af04b5c5c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1245 - Contingency\ + \ Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"\ + Microsoft implements this Contingency Planning control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1245\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a0e45314-57b8-4623-80cd-bbb561f59516\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a0e45314-57b8-4623-80cd-bbb561f59516\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1406 - Maintenance\ + \ Tools | Inspect Media\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this Maintenance control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1406\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a0f5339c-9292-43aa-a0bc-d27c6b8e30aa\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a0f5339c-9292-43aa-a0bc-d27c6b8e30aa\"\ + },{\"properties\":{\"displayName\":\"Security Center standard pricing tier\ + \ should be selected\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"The standard pricing tier enables threat detection for networks and virtual\ + \ machines, providing threat intelligence, anomaly detection, and behavior\ + \ analytics in Azure Security Center\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Security Center\"},\"parameters\":{\"effect\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"\ + Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.Security/pricings\"},{\"field\"\ + :\"Microsoft.Security/pricings/pricingTier\",\"exists\":\"true\"},{\"field\"\ + :\"Microsoft.Security/pricings/pricingTier\",\"notEquals\":\"Standard\"}]},\"\ + then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1181c5f-672a-477a-979a-7d58aa086233\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1181c5f-672a-477a-979a-7d58aa086233\"\ + },{\"properties\":{\"displayName\":\"All authorization rules except RootManageSharedAccessKey\ + \ should be removed from Service Bus namespace\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"All\",\"description\":\"Service Bus clients should not use a namespace\ + \ level access policy that provides access to all queues and topics in a namespace.\ + \ To align with the least privilege security model, you should create access\ + \ policies at the entity level for queues and topics to provide access to\ + \ only the specific entity\",\"metadata\":{\"version\":\"1.0.1\",\"category\"\ + :\"Service Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"The effect determines what\ + \ happens when the policy rule is evaluated to match\"},\"allowedValues\"\ + :[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces/authorizationRules\"\ + },{\"field\":\"name\",\"notEquals\":\"RootManageSharedAccessKey\"}]},\"then\"\ + :{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1817ec0-a368-432a-8057-8371e17ac6ee\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1817ec0-a368-432a-8057-8371e17ac6ee\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1265 - Contingency\ + \ Plan Testing | Alternate Processing Site\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Contingency\ + \ Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1265\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a18adb5b-1db6-4a5b-901a-7d3797d12972\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a18adb5b-1db6-4a5b-901a-7d3797d12972\"\ + },{\"properties\":{\"displayName\":\"Deploy Diagnostic Settings for Logic\ + \ Apps to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Deploys the diagnostic settings for Logic Apps to stream to a regional\ + \ Event Hub when any Logic Apps which is missing this diagnostic settings\ + \ is created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\"\ + :\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"DeployIfNotExists\"},\"profileName\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Profile name\",\"description\":\"The diagnostic\ + \ settings profile name\"},\"defaultValue\":\"setbypolicy_eventHub\"},\"eventHubRuleId\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event Hub Authorization\ + \ Rule Id\",\"description\":\"The Event Hub authorization rule Id for Azure\ + \ Diagnostics. The authorization rule needs to be at Event Hub namespace level.\ + \ e.g. /subscriptions/{subscription Id}/resourceGroups/{resource group}/providers/Microsoft.EventHub/namespaces/{Event\ + \ Hub namespace}/authorizationrules/{authorization rule}\",\"strongType\"\ + :\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\"\ + :true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Event Hub Location\",\"description\":\"The location the Event Hub resides\ + \ in. Only Logic Apps in this location will be linked to this Event Hub.\"\ + ,\"strongType\":\"location\"},\"defaultValue\":\"\"},\"metricsEnabled\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Enable metrics\",\"description\"\ + :\"Whether to enable metrics stream to the Event Hub - True or False\"},\"\ + allowedValues\":[\"True\",\"False\"],\"defaultValue\":\"False\"},\"logsEnabled\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable logs\",\"description\"\ + :\"Whether to enable logs stream to the Event Hub - True or False\"},\"allowedValues\"\ + :[\"True\",\"False\"],\"defaultValue\":\"True\"}},\"policyRule\":{\"if\":{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Logic/workflows\"},{\"\ + anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"\ + field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"\ + then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\"\ + ,\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\"\ + :[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\"\ + :\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\"\ + ,\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"\ + /providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\"\ + :\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\"\ + :\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"\ + type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"\ + resources\":[{\"type\":\"Microsoft.Logic/workflows/providers/diagnosticSettings\"\ + ,\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'),\ + \ '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"\ + [parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\"\ + :\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\"\ + ,\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\"\ + :false,\"days\":0}}],\"logs\":[{\"category\":\"WorkflowRuntime\",\"enabled\"\ + :\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\"\ + :{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"\ + },\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\"\ + :{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\"\ + :\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"\ + }}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1dae6c7-13f3-48ea-a149-ff8442661f60\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1dae6c7-13f3-48ea-a149-ff8442661f60\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'Administrative Templates - System'\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should only be\ + \ used along with its corresponding deploy policy in an initiative. This definition\ + \ allows Azure Policy to process the results of auditing Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'Administrative Templates\ + \ - System'. For more information on Guest Configuration policies, please\ + \ visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Guest Configuration\",\"deprecated\":true},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_AdministrativeTemplatesSystem\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1e8dda3-9fd2-4835-aec3-0e55531fde33\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1e8dda3-9fd2-4835-aec3-0e55531fde33\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1612 - Developer\ + \ Security Architecture And Design\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this System and Services\ + \ Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1612\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2037b3d-8b04-4171-8610-e6d4f1d08db5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2037b3d-8b04-4171-8610-e6d4f1d08db5\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1197 - Configuration\ + \ Change Control | Test / Validate / Document Changes\",\"policyType\":\"\ + Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1197\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a20d2eaa-88e2-4907-96a2-8f3a05797e5c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a20d2eaa-88e2-4907-96a2-8f3a05797e5c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1275 - Alternate\ + \ Processing Site | Separation From Primary Site\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Contingency\ + \ Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1275\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a23d9d53-ad2e-45ef-afd5-e6d10900a737\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a23d9d53-ad2e-45ef-afd5-e6d10900a737\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1690 - Information\ + \ System Monitoring | System-Wide Intrusion Detection System\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ System and Information Integrity control\",\"metadata\":{\"version\":\"\ + 1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"\ + /providers/Microsoft.PolicyInsights/policyMetadata/ACF1690\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2567a23-d1c3-4783-99f3-d471302a4d6b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2567a23-d1c3-4783-99f3-d471302a4d6b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1410 - Maintenance\ + \ Tools | Prevent Unauthorized Removal\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Maintenance control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1410\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2596a9f-e59f-420d-9625-6e0b536348be\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2596a9f-e59f-420d-9625-6e0b536348be\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1059 - Remote\ + \ Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1059\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a29b5d9f-4953-4afe-b560-203a6410b6b4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a29b5d9f-4953-4afe-b560-203a6410b6b4\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs that are not joined to the specified domain\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should only be\ + \ used along with its corresponding deploy policy in an initiative. This definition\ + \ allows Azure Policy to process the results of auditing Windows virtual machines\ + \ that are not joined to the specified domain. For more information on Guest\ + \ Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\"\ + :{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"\ + deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsDomainMembership\",\"existenceCondition\":{\"field\":\"\ + Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a29ee95c-0395-4515-9851-cc04ffe82a91\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a29ee95c-0395-4515-9851-cc04ffe82a91\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1532 - Third-Party\ + \ Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1532\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2c66299-9017-4d95-8040-8bdbf7901d52\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2c66299-9017-4d95-8040-8bdbf7901d52\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1664 - Protection\ + \ Of Information At Rest | Cryptographic Protection\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this System and\ + \ Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1664\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2cdf6b8-9505-4619-b579-309ba72037ac\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2cdf6b8-9505-4619-b579-309ba72037ac\"\ + },{\"properties\":{\"displayName\":\"Audit Windows machines that do not restrict\ + \ the minimum password length to 14 characters\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Requires that prerequisites are deployed\ + \ to the policy assignment scope. For details, visit https://aka.ms/gcpol.\ + \ Machines are non-compliant if Windows machines that do not restrict the\ + \ minimum password length to 14 characters\",\"metadata\":{\"category\":\"\ + Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"\ + ],\"guestConfiguration\":{\"name\":\"MinimumPasswordLength\",\"version\":\"\ + 1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of this policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + MinimumPasswordLength\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2d0e922-65d0-40c4-8f87-ea6da2d307a2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2d0e922-65d0-40c4-8f87-ea6da2d307a2\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1252 - Contingency\ + \ Plan | Capacity Planning\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Contingency Planning control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1252\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a328fd72-8ff5-4f96-8c9c-b30ed95db4ab\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a328fd72-8ff5-4f96-8c9c-b30ed95db4ab\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1238 - User-Installed\ + \ Software\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1238\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a36cedd4-3ffd-4b1f-8b18-aa71d8d87ce1\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a36cedd4-3ffd-4b1f-8b18-aa71d8d87ce1\"\ + },{\"properties\":{\"displayName\":\"Log Analytics agent should be installed\ + \ on your virtual machine scale sets for Azure Security Center monitoring\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Security Center\ + \ collects data from your Azure virtual machines (VMs) to monitor for security\ + \ vulnerabilities and threats.\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Security Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"in\":[\"Microsoft.Compute/virtualMachineScaleSets\"]},\"then\":{\"\ + effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\"\ + ,\"name\":\"45cfe080-ceb1-a91e-9743-71551ed24e94\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\"\ + ,\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a3a6ea0c-e018-4933-9ef0-5aaa1501449b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1693 - Information\ + \ System Monitoring | System-Generated Alerts\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this System and\ + \ Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1693\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a450eba6-2efc-4a00-846a-5804a93c6b77\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a450eba6-2efc-4a00-846a-5804a93c6b77\"\ + },{\"properties\":{\"displayName\":\"Audit usage of custom RBAC rules\",\"\ + policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit built-in\ + \ roles such as 'Owner, Contributer, Reader' instead of custom RBAC roles,\ + \ which are error prone. Using custom roles is treated as an exception and\ + \ requires a rigorous review and threat modeling\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"General\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"\ + Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.Authorization/roleDefinitions\"\ + },{\"field\":\"Microsoft.Authorization/roleDefinitions/type\",\"equals\":\"\ + CustomRole\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\"\ + :\"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a451c1ef-c6ca-483d-87ed-f49761e3ffb5\"\ + },{\"properties\":{\"displayName\":\"Web Application should only be accessible\ + \ over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Use of HTTPS ensures server/service authentication and protects data in\ + \ transit from network layer eavesdropping attacks.\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"\ + Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\"\ + ,\"like\":\"app*\"},{\"field\":\"Microsoft.Web/sites/httpsOnly\",\"equals\"\ + :\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"\ + /providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a4af4a39-4135-47fb-b175-47fbdf85311d\"\ + },{\"properties\":{\"displayName\":\"Log Analytics agent should be installed\ + \ on your virtual machine for Azure Security Center monitoring\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy audits any Windows/Linux\ + \ virtual machines (VMs) if the Log Analytics agent is not installed which\ + \ Security Center uses to monitor for security vulnerabilities and threats\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security Center\"},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"\ + Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachines\"\ + ]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/assessments\",\"name\":\"d1db3318-01ff-16de-29eb-28b344515626\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a4fe33eb-e377-4efb-ab31-0784311bc499\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1617 - Application\ + \ Partitioning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Communications Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1617\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a631d8f5-eb81-4f9d-9ee1-74431371e4a3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a631d8f5-eb81-4f9d-9ee1-74431371e4a3\"\ + },{\"properties\":{\"displayName\":\"Auditing on SQL server should be enabled\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Auditing\ + \ on your SQL Server should be enabled to track database activities across\ + \ all databases on the server, except Synapse, and save them in an audit log.\"\ + ,\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + },\"setting\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Desired\ + \ Auditing setting\"},\"allowedValues\":[\"enabled\",\"disabled\"],\"defaultValue\"\ + :\"enabled\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"\ + }]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"default\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Sql/auditingSettings.state\",\"equals\":\"[parameters('setting')]\"\ + }}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9\"\ + },{\"properties\":{\"displayName\":\"The Log Analytics agent should be installed\ + \ on virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"\ + description\":\"This policy audits any Windows/Linux virtual machines if the\ + \ Log Analytics agent is not installed.\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\"\ + :{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},\"\ + then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\"\ + ,\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\"\ + ,\"in\":[\"MicrosoftMonitoringAgent\",\"OmsAgentForLinux\"]},{\"field\":\"\ + Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\"\ + :\"Succeeded\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/settings.workspaceId\"\ + ,\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a70ca396-0a34-413a-88e1-b956c1e683be\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a70ca396-0a34-413a-88e1-b956c1e683be\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1431 - Media\ + \ Storage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Media Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1431\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7173c52-2b99-4696-a576-63dd5f970ef4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7173c52-2b99-4696-a576-63dd5f970ef4\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1644 - Cryptographic\ + \ Key Establishment And Management | Availability\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this System and\ + \ Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1644\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7211477-c970-446b-b4af-062f37461147\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7211477-c970-446b-b4af-062f37461147\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1027 - Access\ + \ Enforcement\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1027\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a76ca9b0-3f4a-4192-9a38-b25e4f8ae48c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a76ca9b0-3f4a-4192-9a38-b25e4f8ae48c\"\ + },{\"properties\":{\"displayName\":\"Azure DDoS Protection Standard should\ + \ be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"DDoS protection standard should be enabled for all virtual networks with\ + \ a subnet that is part of an application gateway with a public IP.\",\"metadata\"\ + :{\"version\":\"2.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"\ + description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"microsoft.network/virtualNetworks\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/assessments\",\"name\":\"e3de1cc0-f4dd-3b34-e496-8b5381ba2d70\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7aca53f-2ed4-4466-a25e-0b45ade68efd\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1570 - Acquisition\ + \ Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Services Acquisition control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1570\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7fcf38d-bb09-4600-be7d-825046eb162a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7fcf38d-bb09-4600-be7d-825046eb162a\"\ + },{\"properties\":{\"displayName\":\"Require encryption on Data Lake Store\ + \ accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy ensures encryption is enabled on all Data Lake Store accounts\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data Lake\"},\"parameters\"\ + :{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeStore/accounts\"\ + },{\"field\":\"Microsoft.DataLakeStore/accounts/encryptionState\",\"equals\"\ + :\"Disabled\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7ff3161-0087-490a-9ad9-ad6217f4f43a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7ff3161-0087-490a-9ad9-ad6217f4f43a\"\ + },{\"properties\":{\"displayName\":\"SQL Managed Instance should have the\ + \ minimal TLS version of 1.2\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Setting minimal TLS version to 1.2 improves security by\ + \ ensuring your SQL Managed Instance can only be accessed from clients using\ + \ TLS 1.2. Using versions of TLS less than 1.2 is not reccomended since they\ + \ have well documented security vunerabilities.\",\"metadata\":{\"version\"\ + :\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"\ + ],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Sql/managedInstances/minimalTlsVersion\",\"exists\":false},{\"\ + field\":\"Microsoft.Sql/managedInstances/minimalTlsVersion\",\"notEquals\"\ + :\"1.2\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"\ + /providers/Microsoft.Authorization/policyDefinitions/a8793640-60f7-487c-b5c3-1d37215905c4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a8793640-60f7-487c-b5c3-1d37215905c4\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1295 - Information\ + \ System Recovery And Reconstitution\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Contingency Planning\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1295\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a895fbdb-204d-4302-9689-0a59dc42b3d9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a895fbdb-204d-4302-9689-0a59dc42b3d9\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Monitor unencrypted SQL\ + \ databases in Azure Security Center\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"All\",\"description\":\"Unencrypted SQL databases will be monitored by\ + \ Azure Security Center as recommendations. This policy is deprecated and\ + \ replaced by the following policy: Transparent Data Encryption on SQL databases\ + \ should be enabled'\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\"\ + :\"Security Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.SQL/servers/databases\"\ + ]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/complianceResults\",\"name\":\"encryption\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\"\ + :[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a8bef009-a5c9-4d0f-90d7-6018734e8a16\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a8bef009-a5c9-4d0f-90d7-6018734e8a16\"\ + },{\"properties\":{\"displayName\":\"Deploy Azure Policy Add-on to Azure Kubernetes\ + \ Service clusters\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Use Azure Policy Add-on to manage and report on the compliance state of\ + \ your Azure Kubernetes Service (AKS) clusters. For more information, see\ + \ https://aka.ms/akspolicydoc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Kubernetes\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.ContainerService/managedClusters\"},\"then\":{\"effect\"\ + :\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.ContainerService/managedClusters\"\ + ,\"name\":\"[field('name')]\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/ed7f3fbd-7b88-4dd4-9017-9adb7ce333f8\"\ + ],\"existenceCondition\":{\"field\":\"Microsoft.ContainerService/managedClusters/addonProfiles.azurePolicy.enabled\"\ + ,\"equals\":\"true\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\"\ + ,\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"clusterName\":{\"type\"\ + :\"string\"},\"clusterResourceGroupName\":{\"type\":\"string\"}},\"variables\"\ + :{\"clusterGetDeploymentName\":\"[concat('PolicyDeployment-Get-', parameters('clusterName'))]\"\ + ,\"clusterUpdateDeploymentName\":\"[concat('PolicyDeployment-Update-', parameters('clusterName'))]\"\ + },\"resources\":[{\"apiVersion\":\"2020-06-01\",\"type\":\"Microsoft.Resources/deployments\"\ + ,\"name\":\"[variables('clusterGetDeploymentName')]\",\"properties\":{\"mode\"\ + :\"Incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"resources\":[],\"outputs\":{\"aksCluster\"\ + :{\"type\":\"object\",\"value\":\"[reference(resourceId(parameters('clusterResourceGroupName'),\ + \ 'Microsoft.ContainerService/managedClusters', parameters('clusterName')),\ + \ '2020-04-01', 'Full')]\"}}}}},{\"apiVersion\":\"2020-06-01\",\"type\":\"\ + Microsoft.Resources/deployments\",\"name\":\"[variables('clusterUpdateDeploymentName')]\"\ + ,\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\"\ + :{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"aksClusterName\":{\"type\"\ + :\"string\"},\"aksClusterContent\":{\"type\":\"object\"}},\"resources\":[{\"\ + apiVersion\":\"2020-04-01\",\"type\":\"Microsoft.ContainerService/managedClusters\"\ + ,\"name\":\"[parameters('aksClusterName')]\",\"location\":\"[parameters('aksClusterContent').location]\"\ + ,\"sku\":\"[parameters('aksClusterContent').sku]\",\"tags\":\"[if(contains(parameters('aksClusterContent'),\ + \ 'tags'), parameters('aksClusterContent').tags, json('null'))]\",\"identity\"\ + :\"[if(contains(parameters('aksClusterContent'), 'identity'), parameters('aksClusterContent').identity,\ + \ json('null'))]\",\"properties\":{\"kubernetesVersion\":\"[parameters('aksClusterContent').properties.kubernetesVersion]\"\ + ,\"dnsPrefix\":\"[parameters('aksClusterContent').properties.dnsPrefix]\"\ + ,\"agentPoolProfiles\":\"[if(contains(parameters('aksClusterContent').properties,\ + \ 'agentPoolProfiles'), parameters('aksClusterContent').properties.agentPoolProfiles,\ + \ json('null'))]\",\"linuxProfile\":\"[if(contains(parameters('aksClusterContent').properties,\ + \ 'linuxProfile'), parameters('aksClusterContent').properties.linuxProfile,\ + \ json('null'))]\",\"windowsProfile\":\"[if(contains(parameters('aksClusterContent').properties,\ + \ 'windowsProfile'), parameters('aksClusterContent').properties.windowsProfile,\ + \ json('null'))]\",\"servicePrincipalProfile\":\"[if(contains(parameters('aksClusterContent').properties,\ + \ 'servicePrincipalProfile'), parameters('aksClusterContent').properties.servicePrincipalProfile,\ + \ json('null'))]\",\"addonProfiles\":{\"azurepolicy\":{\"enabled\":true}},\"\ + nodeResourceGroup\":\"[parameters('aksClusterContent').properties.nodeResourceGroup]\"\ + ,\"enableRBAC\":\"[if(contains(parameters('aksClusterContent').properties,\ + \ 'enableRBAC'), parameters('aksClusterContent').properties.enableRBAC, json('null'))]\"\ + ,\"enablePodSecurityPolicy\":\"[if(contains(parameters('aksClusterContent').properties,\ + \ 'enablePodSecurityPolicy'), parameters('aksClusterContent').properties.enablePodSecurityPolicy,\ + \ json('null'))]\",\"networkProfile\":\"[if(contains(parameters('aksClusterContent').properties,\ + \ 'networkProfile'), parameters('aksClusterContent').properties.networkProfile,\ + \ json('null'))]\",\"aadProfile\":\"[if(contains(parameters('aksClusterContent').properties,\ + \ 'aadProfile'), parameters('aksClusterContent').properties.aadProfile, json('null'))]\"\ + ,\"autoScalerProfile\":\"[if(contains(parameters('aksClusterContent').properties,\ + \ 'autoScalerProfile'), parameters('aksClusterContent').properties.autoScalerProfile,\ + \ json('null'))]\",\"apiServerAccessProfile\":\"[if(contains(parameters('aksClusterContent').properties,\ + \ 'apiServerAccessProfile'), parameters('aksClusterContent').properties.apiServerAccessProfile,\ + \ json('null'))]\",\"diskEncryptionSetID\":\"[if(contains(parameters('aksClusterContent').properties,\ + \ 'diskEncryptionSetID'), parameters('aksClusterContent').properties.diskEncryptionSetID,\ + \ json('null'))]\",\"identityProfile\":\"[if(contains(parameters('aksClusterContent').properties,\ + \ 'identityProfile'), parameters('aksClusterContent').properties.identityProfile,\ + \ json('null'))]\"}}],\"outputs\":{}},\"parameters\":{\"aksClusterName\":{\"\ + value\":\"[parameters('clusterName')]\"},\"aksClusterContent\":{\"value\"\ + :\"[reference(variables('clusterGetDeploymentName')).outputs.aksCluster.value]\"\ + }}}}]},\"parameters\":{\"clusterName\":{\"value\":\"[field('name')]\"},\"\ + clusterResourceGroupName\":{\"value\":\"[resourceGroup().name]\"}}}}}}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/a8eff44f-8c92-45c3-a3fb-9880802d67a7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a8eff44f-8c92-45c3-a3fb-9880802d67a7\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1283 - Telecommunications\ + \ Services | Separation Of Primary / Alternate Providers\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1283\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9172e76-7f56-46e9-93bf-75d69bdb5491\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9172e76-7f56-46e9-93bf-75d69bdb5491\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1400 - Controlled\ + \ Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Maintenance control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1400\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a96d5098-a604-4cdf-90b1-ef6449a27424\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a96d5098-a604-4cdf-90b1-ef6449a27424\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1118 - Audit\ + \ Review, Analysis, And Reporting | Correlate Audit Repositories\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1118\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a96f743d-a195-420d-983a-08aa06bc441e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a96f743d-a195-420d-983a-08aa06bc441e\"\ + },{\"properties\":{\"displayName\":\"SQL Managed Instances should avoid using\ + \ GRS backup redundancy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Managed Instances should avoid using GRS storage for backups\ + \ if data residency rules require data to stay within a specific region.\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"Deny\",\"Disabled\"],\"defaultValue\":\"Deny\"}},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"\ + },{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Sql/managedInstances/storageAccountType\"\ + ,\"equals\":\"LRS\"},{\"field\":\"Microsoft.Sql/managedInstances/storageAccountType\"\ + ,\"equals\":\"ZRS\"}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9934fd7-29f2-4e6d-ab3d-607ea38e9079\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9934fd7-29f2-4e6d-ab3d-607ea38e9079\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1199 - Configuration\ + \ Change Control | Cryptography Management\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Configuration\ + \ Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1199\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9a08d1c-09b1-48f1-90ea-029bbdf7111e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9a08d1c-09b1-48f1-90ea-029bbdf7111e\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'System Audit Policies - Detailed Tracking'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy\ + \ should only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines with non-compliant settings in Group Policy category: 'System\ + \ Audit Policies - Detailed Tracking'. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"deprecated\"\ + :true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9a33475-481d-4b81-9116-0bf02ffe67e8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9a33475-481d-4b81-9116-0bf02ffe67e8\"\ + },{\"properties\":{\"displayName\":\"Deploy network watcher when virtual networks\ + \ are created\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy creates a network watcher resource in regions with virtual\ + \ networks. You need to ensure existence of a resource group named networkWatcherRG,\ + \ which will be used to deploy network watcher instances.\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{},\"policyRule\"\ + :{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks\"\ + },\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Network/networkWatchers\"\ + ,\"resourceGroupName\":\"networkWatcherRG\",\"existenceCondition\":{\"field\"\ + :\"location\",\"equals\":\"[field('location')]\"},\"roleDefinitionIds\":[\"\ + /providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"\ + string\"}},\"resources\":[{\"apiVersion\":\"2016-09-01\",\"type\":\"Microsoft.Network/networkWatchers\"\ + ,\"name\":\"[concat('networkWatcher_', parameters('location'))]\",\"location\"\ + :\"[parameters('location')]\"}]},\"parameters\":{\"location\":{\"value\":\"\ + [field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9b99dd8-06c5-4317-8629-9d86a3c6e7d9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9b99dd8-06c5-4317-8629-9d86a3c6e7d9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1511 - Personnel\ + \ Screening\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1511\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9eae324-d327-4539-9293-b48e122465f8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9eae324-d327-4539-9293-b48e122465f8\"\ + },{\"properties\":{\"displayName\":\"MFA should be enabled on accounts with\ + \ owner permissions on your subscription\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"All\",\"description\":\"Multi-Factor Authentication (MFA) should be enabled\ + \ for all subscription accounts with owner permissions to prevent a breach\ + \ of accounts or resources.\",\"metadata\":{\"version\":\"2.0.0\",\"category\"\ + :\"Security Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\"\ + ,\"name\":\"94290b00-4d0c-d7b4-7cea-064a9554e681\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"Healthy\"\ + ]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aa633080-8b72-40c4-a2d7-d00c03e80bed\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Ensure that Register with\ + \ Azure Active Directory is enabled on WEB App\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"This policy is a duplicate of the\ + \ respective Managed Identity policies. Please use /providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332\ + \ instead.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"\ + App Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"[Deprecated]: Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"\ + },{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"\ + existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.managedServiceIdentityId\"\ + ,\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aa81768c-cb87-4ce2-bfaa-00baa10d760c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aa81768c-cb87-4ce2-bfaa-00baa10d760c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1539 - Security\ + \ Categorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Risk Assessment control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1539\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aabb155f-e7a5-4896-a767-e918bfae2ee0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aabb155f-e7a5-4896-a767-e918bfae2ee0\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1006 - Account\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1006\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aae8d54c-4bce-4c04-b3aa-5b65b67caac8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aae8d54c-4bce-4c04-b3aa-5b65b67caac8\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1461 - Monitoring\ + \ Physical Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Physical and Environmental Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1461\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aafef03e-fea8-470b-88fa-54bd1fcd7064\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aafef03e-fea8-470b-88fa-54bd1fcd7064\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1073 - Access\ + \ Control For Mobile Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Access Control control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1073\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ab55cdb0-c7dd-4bd8-ae22-a7cea7594e9c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ab55cdb0-c7dd-4bd8-ae22-a7cea7594e9c\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Ensure that 'PHP version'\ + \ is the latest, if used as a part of the Function app\",\"policyType\":\"\ + BuiltIn\",\"mode\":\"Indexed\",\"description\":\"PHP cannot be used with Function\ + \ apps.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App\ + \ Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"[Deprecated]: Effect\",\"description\":\"\ + Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"},\"PHPLatestVersion\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Latest\ + \ PHP version\",\"description\":\"Latest supported PHP version for App Services\"\ + },\"defaultValue\":\"7.3\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\"\ + :\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\"\ + :{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\"\ + :{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\"\ + ,\"notContains\":\"PHP\"},{\"field\":\"Microsoft.Web/sites/config/web.phpVersion\"\ + ,\"equals\":\"\"}]},{\"allOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\"\ + ,\"equals\":\"[concat('PHP|', parameters('PHPLatestVersion'))]\"},{\"field\"\ + :\"Microsoft.Web/sites/config/web.phpVersion\",\"equals\":\"\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\"\ + :\"\"},{\"field\":\"Microsoft.Web/sites/config/web.phpVersion\",\"equals\"\ + :\"[parameters('PHPLatestVersion')]\"}]}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ab965db2-d2bf-4b64-8b39-c38ec8179461\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ab965db2-d2bf-4b64-8b39-c38ec8179461\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Automatic provisioning\ + \ of security monitoring agent\",\"policyType\":\"BuiltIn\",\"mode\":\"All\"\ + ,\"description\":\"Installs security agent on VMs for advanced security alerts\ + \ and preventions in Azure Security Center. Applies only for subscriptions\ + \ that use Azure Security Center.\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Security Center\",\"deprecated\":true},\"parameters\":{},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\"\ + ,\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"AuditIfNotExists\"\ + ,\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"\ + securityAgent\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\"\ + ,\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/abcc6037-1fc4-47f6-aac5-89706589be24\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"abcc6037-1fc4-47f6-aac5-89706589be24\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1323 - Authenticator\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Identification and Authentication control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1323\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/abe8f70b-680f-470c-9b86-a7edfb664ecc\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"abe8f70b-680f-470c-9b86-a7edfb664ecc\"\ + },{\"properties\":{\"displayName\":\"Advanced data security should be enabled\ + \ on your SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"\ + description\":\"Audit SQL servers without Advanced Data Security\",\"metadata\"\ + :{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"\ + },{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\"\ + ,\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/securityAlertPolicies/state\"\ + ,\"equals\":\"Enabled\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9\"\ + },{\"properties\":{\"displayName\":\"Advanced data security should be enabled\ + \ on SQL Managed Instance\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Audit each SQL Managed Instance without advanced data security.\"\ + ,\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Sql/managedInstances/securityAlertPolicies\",\"name\":\"Default\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/state\"\ + ,\"equals\":\"Enabled\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9\"\ + },{\"properties\":{\"displayName\":\"Enable Azure Security Center on your\ + \ subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"Identifies existing subscriptions that are not monitored by Azure Security\ + \ Center (ASC).\\nSubscriptions not monitored by ASC will be registered to\ + \ the free pricing tier.\\nSubscriptions already monitored by ASC (free or\ + \ standard), will be considered compliant.\\nTo register newly created subscriptions,\ + \ open the compliance tab, select the relevant non-compliant assignment and\ + \ create a remediation task.\\nRepeat this step when you have one or more\ + \ new subscriptions you want to monitor with Security Center.\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Security Center\"},\"parameters\":{},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"\ + },\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/pricings\"\ + ,\"name\":\"VirtualMachines\",\"deploymentScope\":\"subscription\",\"existenceScope\"\ + :\"subscription\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"\ + ],\"existenceCondition\":{\"anyof\":[{\"field\":\"microsoft.security/pricings/pricingTier\"\ + ,\"equals\":\"standard\"},{\"field\":\"microsoft.security/pricings/pricingTier\"\ + ,\"equals\":\"free\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\"\ + :{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"variables\":{},\"resources\":[{\"type\"\ + :\"Microsoft.Security/pricings\",\"apiVersion\":\"2018-06-01\",\"name\":\"\ + VirtualMachines\",\"properties\":{\"pricingTier\":\"free\"}}],\"outputs\"\ + :{}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac076320-ddcf-4066-b451-6154267e8ad2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac076320-ddcf-4066-b451-6154267e8ad2\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1056 - Session\ + \ Termination | User-Initiated Logouts / Message Displays\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1056\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac43352f-df83-4694-8738-cfce549fd08d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac43352f-df83-4694-8738-cfce549fd08d\"\ + },{\"properties\":{\"displayName\":\"Role-Based Access Control (RBAC) should\ + \ be used on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + All\",\"description\":\"To provide granular filtering on the actions that\ + \ users can perform, use Role-Based Access Control (RBAC) to manage permissions\ + \ in Kubernetes Service Clusters and configure relevant authorization policies.\"\ + ,\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Security Center\"},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/enableRBAC\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerService/managedClusters/enableRBAC\"\ + ,\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac4a19c2-fa67-49b4-8ae5-0b2e78c49457\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Allow resource creation\ + \ if 'environment' tag value in allowed values\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Allows resource creation if the 'environment'\ + \ tag is set to one of the following values: production, dev, test, staging\"\ + ,\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Tags\",\"deprecated\"\ + :true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"tags['environment']\"\ + ,\"in\":[\"production\",\"dev\",\"test\",\"staging\"]}},\"then\":{\"effect\"\ + :\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac7e5fc0-c029-4b12-91d4-a8500ce697f9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac7e5fc0-c029-4b12-91d4-a8500ce697f9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1569 - Acquisition\ + \ Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Services Acquisition control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1569\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ad2f8e61-a564-4dfd-8eaa-816f5be8cb34\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ad2f8e61-a564-4dfd-8eaa-816f5be8cb34\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1454 - Physical\ + \ Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Physical and Environmental Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1454\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ad58985d-ab32-4f99-8bd3-b7e134c90229\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ad58985d-ab32-4f99-8bd3-b7e134c90229\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1025 - Account\ + \ Management | Account Monitoring / Atypical Usage\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Access Control\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1025\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/adfe020d-0a97-45f4-a39c-696ef99f3a95\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"adfe020d-0a97-45f4-a39c-696ef99f3a95\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1272 - Alternate\ + \ Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Contingency Planning control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1272\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ae46cf7a-e3fd-427b-9b91-44bc78e2d9d8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ae46cf7a-e3fd-427b-9b91-44bc78e2d9d8\"\ + },{\"properties\":{\"displayName\":\"SQL Server should use a virtual network\ + \ service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy audits any SQL Server not configured to use a virtual network\ + \ service endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Sql/servers/virtualNetworkRules\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Sql/servers/virtualNetworkRules/virtualNetworkSubnetId\"\ + ,\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ae5d2f14-d830-42b6-9899-df6cfe9c71a3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ae5d2f14-d830-42b6-9899-df6cfe9c71a3\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1598 - Developer\ + \ Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this System and Services Acquisition\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1598\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ae7e1f5e-2d63-4b38-91ef-bce14151cce3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ae7e1f5e-2d63-4b38-91ef-bce14151cce3\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Email notifications to\ + \ admins should be enabled in SQL Managed Instance advanced data security\ + \ settings\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Audit that 'email notification to admins and subscription owners' is enabled\ + \ in SQL Managed Instance advanced threat protection settings. This setting\ + \ ensures that any detections of anomalous activities on SQL Managed Instance\ + \ are reported as soon as possible to the admins.\",\"metadata\":{\"version\"\ + :\"1.0.1-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:\ + \ Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + Disabled\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Sql/managedInstances/securityAlertPolicies\",\"name\":\"default\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/emailAccountAdmins\"\ + ,\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aeb23562-188d-47cb-80b8-551f16ef9fff\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aeb23562-188d-47cb-80b8-551f16ef9fff\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1413 - Nonlocal\ + \ Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Maintenance control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1413\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aeedddb6-6bc0-42d5-809b-80048033419d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aeedddb6-6bc0-42d5-809b-80048033419d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1710 - Security\ + \ Function Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this System and Information Integrity\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1710\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/af2a93c8-e6dd-4c94-acdd-4a2eedfc478e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"af2a93c8-e6dd-4c94-acdd-4a2eedfc478e\"\ + },{\"properties\":{\"displayName\":\"Azure Spring Cloud should use network\ + \ injection\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Azure Spring Cloud instances should use virtual network injection for the\ + \ following purposes: 1. Isolate Azure Spring Cloud from Internet. 2. Enable\ + \ Azure Spring Cloud to interact with systems in either on premises data centers\ + \ or Azure service in other virtual networks. 3. Empower customers to control\ + \ inbound and outbound network communications for Azure Spring Cloud.\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"App Platform\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"},\"evaluatedSkuNames\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Azure Spring Cloud SKU\ + \ Names\",\"description\":\"List of Azure Spring Cloud SKUs against which\ + \ this policy will be evaluated.\"},\"allowedValues\":[\"Standard\"],\"defaultValue\"\ + :[\"Standard\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"\ + equals\":\"Microsoft.AppPlatform/Spring\"},{\"field\":\"Microsoft.AppPlatform/Spring/sku.tier\"\ + ,\"in\":\"[parameters('evaluatedSkuNames')]\"},{\"field\":\"Microsoft.AppPlatform/Spring/networkProfile.serviceRuntimeSubnetId\"\ + ,\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"af35e2a4-ef96-44e7-a9ae-853dd97032c4\"\ + },{\"properties\":{\"displayName\":\"Monitor missing Endpoint Protection in\ + \ Azure Security Center\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"Servers without an installed Endpoint Protection agent will be monitored\ + \ by Azure Security Center as recommendations\",\"metadata\":{\"version\"\ + :\"2.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"effect\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\"\ + ,\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"3bcd234d-c9c7-c2a2-89e0-c01f419c1a8a\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"af6cd1bd-1635-48cb-bde7-5b15693900b9\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Monitor unaudited SQL servers\ + \ in Azure Security Center\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"\ + description\":\"SQL servers which don't have SQL auditing turned on will be\ + \ monitored by Azure Security Center as recommendations. This policy is deprecated\ + \ and replaced by the following policy: 'Auditing should be enabled on advanced\ + \ data security settings on SQL Server'\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Security Center\",\"deprecated\":true},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:\ + \ Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"\ + Microsoft.SQL/servers\"]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"\ + auditing\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\"\ + ,\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/af8051bf-258b-44e2-a2bf-165330459f9d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"af8051bf-258b-44e2-a2bf-165330459f9d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1645 - Cryptographic\ + \ Key Establishment And Management | Symmetric Keys\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this System and\ + \ Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1645\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/afbd0baf-ff1a-4447-a86f-088a97347c0c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"afbd0baf-ff1a-4447-a86f-088a97347c0c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1725 - Error\ + \ Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Information Integrity control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1725\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/afc234b5-456b-4aa5-b3e2-ce89108124cc\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"afc234b5-456b-4aa5-b3e2-ce89108124cc\"\ + },{\"properties\":{\"displayName\":\"Activity log should be retained for at\ + \ least one year\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"This policy audits the activity log if the retention is not set for 365\ + \ days or forever (retention days set to 0).\",\"metadata\":{\"version\":\"\ + 1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Insights/logProfiles\",\"existenceCondition\":{\"anyOf\":[{\"allOf\"\ + :[{\"field\":\"Microsoft.Insights/logProfiles/retentionPolicy.enabled\",\"\ + equals\":\"true\"},{\"field\":\"Microsoft.Insights/logProfiles/retentionPolicy.days\"\ + ,\"equals\":\"365\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/logProfiles/retentionPolicy.enabled\"\ + ,\"equals\":\"false\"},{\"field\":\"Microsoft.Insights/logProfiles/retentionPolicy.days\"\ + ,\"equals\":\"0\"}]}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b02aacc0-b073-424e-8298-42b22829ee0a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b02aacc0-b073-424e-8298-42b22829ee0a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1429 - Media\ + \ Marking\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Media Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1429\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b07c9b24-729e-4e85-95fc-f224d2d08a80\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b07c9b24-729e-4e85-95fc-f224d2d08a80\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1711 - Security\ + \ Function Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this System and Information Integrity\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1711\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b083a535-a66a-41ec-ba7f-f9498bf67cde\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b083a535-a66a-41ec-ba7f-f9498bf67cde\"\ + },{\"properties\":{\"displayName\":\"Management ports of virtual machines\ + \ should be protected with just-in-time network access control\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"Possible network Just In Time\ + \ (JIT) access will be monitored by Azure Security Center as recommendations\"\ + ,\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security Center\"},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"805651bc-6ecd-4c73-9b55-97a19d0582d0\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b0f33259-77d7-4c9e-aac6-3aabcfae693c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1571 - Acquisition\ + \ Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Services Acquisition control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1571\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b11c985b-f2cd-4bd7-85f4-b52426edf905\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b11c985b-f2cd-4bd7-85f4-b52426edf905\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Linux VMs that do not have the passwd file permissions set to 0644\",\"\ + policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should\ + \ only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Linux\ + \ virtual machines that do not have the passwd file permissions set to 0644.\ + \ For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"\ + qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\"\ + ,\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"\ + like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\"\ + ,\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"\ + ]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"\ + field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\"\ + ,\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\"\ + ,\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\"\ + ,\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"\ + cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\"\ + ,\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\"\ + ,\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"\ + ]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"\ + then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"PasswordPolicy_msid121\",\"existenceCondition\":{\"field\":\"\ + Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b18175dd-c599-4c64-83ba-bb018a06d35b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b18175dd-c599-4c64-83ba-bb018a06d35b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1537 - Risk\ + \ Assessment Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Risk Assessment control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1537\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b19454ca-0d70-42c0-acf5-ea1c1e5726d1\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b19454ca-0d70-42c0-acf5-ea1c1e5726d1\"\ + },{\"properties\":{\"displayName\":\"SQL Database should avoid using GRS backup\ + \ redundancy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Databases should avoid using GRS storage for backups if data residency\ + \ rules require data to stay within a specific region.\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"\ + Disabled\"],\"defaultValue\":\"Deny\"}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"\ + field\":\"Microsoft.Sql/servers/databases/edition\",\"notEquals\":\"DataWarehouse\"\ + },{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Sql/servers/databases/storageAccountType\"\ + ,\"equals\":\"LRS\"},{\"field\":\"Microsoft.Sql/servers/databases/storageAccountType\"\ + ,\"equals\":\"ZRS\"}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b219b9cf-f672-4f96-9ab0-f5a3ac5e1c13\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b219b9cf-f672-4f96-9ab0-f5a3ac5e1c13\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1091 - Security\ + \ Awareness Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Awareness and Training control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1091\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b23bd715-5d1c-4e5c-9759-9cbdf79ded9d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b23bd715-5d1c-4e5c-9759-9cbdf79ded9d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1078 - Use\ + \ Of External Information Systems | Limits On Authorized Use\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1078\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b25faf85-8a16-4f28-8e15-d05c0072d64d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b25faf85-8a16-4f28-8e15-d05c0072d64d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1009 - Account\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1009\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b26f8610-e615-47c2-abd6-c00b2b0b503a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b26f8610-e615-47c2-abd6-c00b2b0b503a\"\ + },{\"properties\":{\"displayName\":\"All authorization rules except RootManageSharedAccessKey\ + \ should be removed from Event Hub namespace\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"All\",\"description\":\"Event Hub clients should not use a namespace\ + \ level access policy that provides access to all queues and topics in a namespace.\ + \ To align with the least privilege security model, you should create access\ + \ policies at the entity level for queues and topics to provide access to\ + \ only the specific entity\",\"metadata\":{\"version\":\"1.0.1\",\"category\"\ + :\"Event Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"The effect determines what\ + \ happens when the policy rule is evaluated to match\"},\"allowedValues\"\ + :[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces/authorizationRules\"\ + },{\"field\":\"name\",\"notEquals\":\"RootManageSharedAccessKey\"}]},\"then\"\ + :{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b278e460-7cfc-4451-8294-cccc40a940d7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b278e460-7cfc-4451-8294-cccc40a940d7\"\ + },{\"properties\":{\"displayName\":\"Inherit a tag from the subscription\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds or\ + \ replaces the specified tag and value from the containing subscription when\ + \ any resource is created or updated. Existing resources can be remediated\ + \ by triggering a remediation task.\",\"metadata\":{\"category\":\"Tags\"\ + ,\"version\":\"1.0.0\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"Tag Name\",\"description\":\"Name of the tag,\ + \ such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"[concat('tags[', parameters('tagName'), ']')]\",\"notEquals\":\"[subscription().tags[parameters('tagName')]]\"\ + },{\"value\":\"[subscription().tags[parameters('tagName')]]\",\"notEquals\"\ + :\"\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[',\ + \ parameters('tagName'), ']')]\",\"value\":\"[subscription().tags[parameters('tagName')]]\"\ + }]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b27a0cbd-a167-4dfa-ae64-4337be671140\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b27a0cbd-a167-4dfa-ae64-4337be671140\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1234 - Software\ + \ Usage Restrictions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1234\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b293f881-361c-47ed-b997-bc4e2296bc0b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b293f881-361c-47ed-b997-bc4e2296bc0b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1107 - Content\ + \ Of Audit Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Audit and Accountability control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1107\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b29ed931-8e21-4779-8458-27916122a904\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b29ed931-8e21-4779-8458-27916122a904\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows web servers that are not using secure communication protocols\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows web servers that\ + \ are not using secure communication protocols (TLS 1.1 or TLS 1.2). It also\ + \ creates a system-assigned managed identity and deploys the VM extension\ + \ for Guest Configuration. This policy should only be used along with its\ + \ corresponding audit policy in an initiative. For more information on Guest\ + \ Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\"\ + :{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\",\"\ + requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"MinimumTLSVersion\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"[Deprecated]: Minimum TLS version\",\"description\":\"The\ + \ minimum TLS protocol version that should be enabled. Windows web servers\ + \ with lower TLS versions will be marked as non-compliant.\"},\"allowedValues\"\ + :[\"1.1\",\"1.2\"],\"defaultValue\":\"1.1\"}},\"policyRule\":{\"if\":{\"anyOf\"\ + :[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AuditSecureProtocol\",\"existenceCondition\":{\"anyOf\":[{\"field\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[SecureWebServer]s1;MinimumTLSVersion', '=',\ + \ parameters('MinimumTLSVersion')))]\"},{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"\"},{\"value\":\"[parameters('MinimumTLSVersion')]\",\"equals\"\ + :\"1.1\"}]}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"\ + parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"\ + value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"\ + configurationName\":{\"value\":\"AuditSecureProtocol\"},\"MinimumTLSVersion\"\ + :{\"value\":\"[parameters('MinimumTLSVersion')]\"}},\"template\":{\"$schema\"\ + :\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"MinimumTLSVersion\":{\"type\":\"string\"}},\"resources\"\ + :[{\"condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[SecureWebServer]s1;MinimumTLSVersion\"\ + ,\"value\":\"[parameters('MinimumTLSVersion')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[SecureWebServer]s1;MinimumTLSVersion\"\ + ,\"value\":\"[parameters('MinimumTLSVersion')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b2fc8f91-866d-4434-9089-5ebfe38d6fd8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b2fc8f91-866d-4434-9089-5ebfe38d6fd8\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'System Audit Policies - Logon-Logoff'\",\"\ + policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should\ + \ only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines with non-compliant settings in Group Policy category: 'System\ + \ Audit Policies - Logon-Logoff'. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"deprecated\"\ + :true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b3802d79-dd88-4bce-b81d-780218e48280\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b3802d79-dd88-4bce-b81d-780218e48280\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1041 - Least\ + \ Privilege | Privilege Levels For Code Execution\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Access Control\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1041\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b3d8d15b-627a-4219-8c96-4d16f788888b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b3d8d15b-627a-4219-8c96-4d16f788888b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1380 - Incident\ + \ Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Incident Response control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1380\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4319b7e-ea8d-42ff-8a67-ccd462972827\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4319b7e-ea8d-42ff-8a67-ccd462972827\"\ + },{\"properties\":{\"displayName\":\"Diagnostic logs in Search services should\ + \ be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Audit enabling of diagnostic logs. This enables you to recreate activity\ + \ trails to use for investigation purposes; when a security incident occurs\ + \ or when your network is compromised\",\"metadata\":{\"version\":\"3.0.0\"\ + ,\"category\":\"Search\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"},\"requiredRetentionDays\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required retention (days)\"\ + ,\"description\":\"The required diagnostic logs retention in days\"},\"defaultValue\"\ + :\"365\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\"\ + :{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"\ + anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\"\ + ,\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\"\ + ,\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\"\ + ,\"equals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\"\ + ,\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\"\ + ,\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4330a05-a843-4bc8-bf9a-cacce50c67f4\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1172 - Internal\ + \ System Connections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Security Assessment and Authorization control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1172\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b43e946e-a4c8-4b92-8201-4a39331db43c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b43e946e-a4c8-4b92-8201-4a39331db43c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1672 - Flaw\ + \ Remediation | Central Management\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this System and Information\ + \ Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1672\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b45fe972-904e-45a4-ac20-673ba027a301\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b45fe972-904e-45a4-ac20-673ba027a301\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1131 - Protection\ + \ Of Audit Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this Audit and Accountability control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1131\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b472a17e-c2bc-493f-b50b-42d55a346962\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b472a17e-c2bc-493f-b50b-42d55a346962\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Audit Web Sockets state\ + \ for an API App\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"The Web Sockets protocol is vulnerable to different types of security threats.\ + \ Use of Web Sockets within an API app must be carefully reviewed.\",\"metadata\"\ + :{\"version\":\"1.0.0-deprecated\",\"category\":\"Security Center\",\"deprecated\"\ + :true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allof\":[{\"\ + field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\"\ + :\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"\ + then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\"\ + ,\"name\":\"DisableWebSockets\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\"\ + ,\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b48334a4-911b-4084-b1ab-3e6a4e50b951\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b48334a4-911b-4084-b1ab-3e6a4e50b951\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'Security Options - Shutdown'\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'Security Options - Shutdown' for\ + \ allowing shutdown without logon and clearing the virtual memory pagefile.\ + \ This policy requires that the Guest Configuration prerequisites have been\ + \ deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"AzureBaseline_SecurityOptionsShutdown\",\"version\":\"1.*\",\"\ + configurationParameter\":{\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\"\ + :\"Shutdown: Allow system to be shut down without having to log on;ExpectedValue\"\ + ,\"ShutdownClearVirtualMemoryPagefile\":\"Shutdown: Clear virtual memory pagefile;ExpectedValue\"\ + }}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Shutdown: Allow system\ + \ to be shut down without having to log on\",\"description\":\"Specifies whether\ + \ a computer can be shut down when a user is not logged on. If this policy\ + \ setting is enabled, the shutdown command is available on the Windows logon\ + \ screen.\"},\"defaultValue\":\"0\"},\"ShutdownClearVirtualMemoryPagefile\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Shutdown: Clear virtual\ + \ memory pagefile\",\"description\":\"Specifies whether the virtual memory\ + \ pagefile is cleared when the system is shut down. When this policy setting\ + \ is enabled, the system pagefile is cleared each time that the system shuts\ + \ down properly. For systems with large amounts of RAM, this could result\ + \ in substantial time needed to complete the shutdown.\"},\"defaultValue\"\ + :\"0\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of this policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_SecurityOptionsShutdown\",\"existenceCondition\":{\"allOf\"\ + :[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Shutdown: Allow system to be shut down without\ + \ having to log on;ExpectedValue', '=', parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn'),\ + \ ',', 'Shutdown: Clear virtual memory pagefile;ExpectedValue', '=', parameters('ShutdownClearVirtualMemoryPagefile')))]\"\ + }]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4a4d1eb-0263-441b-84cb-a44073d8372d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4a4d1eb-0263-441b-84cb-a44073d8372d\"\ + },{\"properties\":{\"displayName\":\"A security contact phone number should\ + \ be provided for your subscription\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"All\",\"description\":\"Enter a phone number to receive notifications when\ + \ Azure Security Center detects compromised resources\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"effect\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/securityContacts\",\"existenceCondition\":{\"field\":\"\ + Microsoft.Security/securityContacts/phone\",\"notEquals\":\"\"}}}}},\"id\"\ + :\"/providers/Microsoft.Authorization/policyDefinitions/b4d66858-c922-44e3-9566-5cdb7a7be744\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4d66858-c922-44e3-9566-5cdb7a7be744\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1286 - Telecommunications\ + \ Services | Provider Contingency Plan\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Contingency Planning\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1286\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4f9b47a-2116-4e6f-88db-4edbf22753f1\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4f9b47a-2116-4e6f-88db-4edbf22753f1\"\ + },{\"properties\":{\"displayName\":\"Public network access should be disabled\ + \ for PostgreSQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Disabling the public network access property improves security\ + \ by ensuring your Azure Database for PostgreSQL can only be accessed from\ + \ a private endpoint. This configuration strictly disables access from any\ + \ public address space outside of Azure IP range, and denies all logins that\ + \ match IP or virtual network-based firewall rules.\",\"metadata\":{\"version\"\ + :\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"\ + ],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},{\"field\":\"\ + Microsoft.DBforPostgreSQL/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"\ + }]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b52376f7-9612-48a1-81cd-1ffe4b61032c\"\ + },{\"properties\":{\"displayName\":\"Service Fabric clusters should only use\ + \ Azure Active Directory for client authentication\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Audit usage of client authentication\ + \ only via Azure Active Directory in Service Fabric\",\"metadata\":{\"version\"\ + :\"1.1.0\",\"category\":\"Service Fabric\"},\"parameters\":{\"effect\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"The effect determines what happens when the policy rule is evaluated to\ + \ match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\"\ + :\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.ServiceFabric/clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ServiceFabric/clusters/azureActiveDirectory.tenantId\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.ServiceFabric/clusters/azureActiveDirectory.tenantId\"\ + ,\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b54ed75b-3e1a-44ac-a333-05ba39b99ff0\"\ + },{\"properties\":{\"displayName\":\"Deploy Advanced Threat Protection for\ + \ Cosmos DB Accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"\ + description\":\"This policy enables Advanced Threat Protection across Cosmos\ + \ DB accounts.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos\ + \ DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\"\ + :\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\"\ + :\"Microsoft.DocumentDB/databaseAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/advancedThreatProtectionSettings\"\ + ,\"name\":\"current\",\"existenceCondition\":{\"field\":\"Microsoft.Security/advancedThreatProtectionSettings/isEnabled\"\ + ,\"equals\":\"true\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"cosmosDbAccountName\":{\"\ + type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-01-01\",\"type\"\ + :\"Microsoft.DocumentDB/databaseAccounts/providers/advancedThreatProtectionSettings\"\ + ,\"name\":\"[concat(parameters('cosmosDbAccountName'), '/Microsoft.Security/current')]\"\ + ,\"properties\":{\"isEnabled\":true}}]},\"parameters\":{\"cosmosDbAccountName\"\ + :{\"value\":\"[field('name')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b5f04e03-92a3-4b09-9410-2cc5e5047656\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b5f04e03-92a3-4b09-9410-2cc5e5047656\"\ + },{\"properties\":{\"displayName\":\"Diagnostic logs in App Services should\ + \ be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"Audit enabling of diagnostic logs on the app. This enables you to recreate\ + \ activity trails for investigation purposes if a security incident occurs\ + \ or your network is compromised\",\"metadata\":{\"version\":\"2.0.0\",\"\ + category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\"\ + :\"kind\",\"notContains\":\"functionapp\"},{\"field\":\"kind\",\"notContains\"\ + :\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\"\ + :{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"allOf\"\ + :[{\"field\":\"Microsoft.Web/sites/config/detailedErrorLoggingEnabled\",\"\ + equals\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/httpLoggingEnabled\"\ + ,\"equals\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/requestTracingEnabled\"\ + ,\"equals\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1419 - Nonlocal\ + \ Maintenance | Cryptographic Protection\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Maintenance control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1419\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b6747bf9-2b97-45b8-b162-3c8becb9937d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b6747bf9-2b97-45b8-b162-3c8becb9937d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1301 - Identification\ + \ And Authentication (Org. Users) | Network Access To Privileged Accounts\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Identification and Authentication control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1301\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b6a8e0cc-ac23-468b-abe4-a8a1cc6d7a08\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b6a8e0cc-ac23-468b-abe4-a8a1cc6d7a08\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1568 - Acquisition\ + \ Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Services Acquisition control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1568\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b6a8eae8-9854-495a-ac82-d2cd3eac02a6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b6a8eae8-9854-495a-ac82-d2cd3eac02a6\"\ + },{\"properties\":{\"displayName\":\"Network Watcher should be enabled\",\"\ + policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Network Watcher\ + \ is a regional service that enables you to monitor and diagnose conditions\ + \ at a network scenario level in, to, and from Azure. Scenario level monitoring\ + \ enables you to diagnose problems at an end to end network level view. Network\ + \ diagnostic and visualization tools available with Network Watcher help you\ + \ understand, diagnose, and gain insights to your network in Azure.\",\"metadata\"\ + :{\"version\":\"1.1.0\",\"category\":\"Network\"},\"parameters\":{\"listOfLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Locations\",\"description\"\ + :\"Audit if Network Watcher is not enabled for region(s).\",\"strongType\"\ + :\"location\"}},\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"NetworkWatcher resource group name\",\"description\":\"Name\ + \ of the resource group of NetworkWatcher, such as NetworkWatcherRG. This\ + \ is the resource group where the Network Watchers are located.\"},\"defaultValue\"\ + :\"NetworkWatcherRG\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"auditIfNotExists\"\ + ,\"details\":{\"type\":\"Microsoft.Network/networkWatchers\",\"resourceGroupName\"\ + :\"[parameters('resourceGroupName')]\",\"existenceCondition\":{\"field\":\"\ + location\",\"in\":\"[parameters('listOfLocations')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b6e2945c-0b7b-40f5-9233-7a5323b5cdc6\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1608 - Supply\ + \ Chain Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Services Acquisition control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1608\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b73b7b3b-677c-4a2a-b949-ad4dc4acd89f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b73b7b3b-677c-4a2a-b949-ad4dc4acd89f\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1401 - Controlled\ + \ Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Maintenance control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1401\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b78ee928-e3c1-4569-ad97-9f8c4b629847\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b78ee928-e3c1-4569-ad97-9f8c4b629847\"\ + },{\"properties\":{\"displayName\":\"API App should only be accessible over\ + \ HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Use of HTTPS ensures server/service authentication and protects data in\ + \ transit from network layer eavesdropping attacks.\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"\ + Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\"\ + ,\"like\":\"*api\"},{\"field\":\"Microsoft.Web/sites/httpsOnly\",\"equals\"\ + :\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"\ + /providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b7ddfbdc-1260-477d-91fd-98bd9be789a6\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs if the Administrators group doesn't contain only specified\ + \ members\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy creates a Guest Configuration assignment to audit Windows virtual\ + \ machines in which the Administrators group does not contain only the specified\ + \ members. It also creates a system-assigned managed identity and deploys\ + \ the VM extension for Guest Configuration. This policy should only be used\ + \ along with its corresponding audit policy in an initiative. For more information\ + \ on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"\ + metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"Members\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Members\",\"description\":\"A semicolon-separated list of\ + \ all the expected members of the Administrators local group. Ex: Administrator;\ + \ myUser1; myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"\ + field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AdministratorsGroupMembers\",\"existenceCondition\":{\"field\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;Members', '=',\ + \ parameters('Members')))]\"},\"deployment\":{\"properties\":{\"mode\":\"\ + incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"\ + location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"\ + },\"configurationName\":{\"value\":\"AdministratorsGroupMembers\"},\"Members\"\ + :{\"value\":\"[parameters('Members')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"Members\":{\"type\":\"string\"}},\"resources\":[{\"\ + condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;Members\"\ + ,\"value\":\"[parameters('Members')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;Members\"\ + ,\"value\":\"[parameters('Members')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b821191b-3a12-44bc-9c38-212138a29ff3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b821191b-3a12-44bc-9c38-212138a29ff3\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'Security Options - Accounts'\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should only be\ + \ used along with its corresponding deploy policy in an initiative. This definition\ + \ allows Azure Policy to process the results of auditing Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'Security Options\ + \ - Accounts'. For more information on Guest Configuration policies, please\ + \ visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Guest Configuration\",\"deprecated\":true},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsAccounts\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b872a447-cc6f-43b9-bccf-45703cd81607\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b872a447-cc6f-43b9-bccf-45703cd81607\"\ + },{\"properties\":{\"displayName\":\"Deploy Diagnostic Settings for Logic\ + \ Apps to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"Deploys the diagnostic settings for Logic Apps\ + \ to stream to a regional Log Analytics workspace when any Logic Apps which\ + \ is missing this diagnostic settings is created or updated.\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"},\"\ + profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile\ + \ name\",\"description\":\"The diagnostic settings profile name\"},\"defaultValue\"\ + :\"setbypolicy_logAnalytics\"},\"logAnalytics\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Log Analytics workspace\",\"description\":\"Select Log\ + \ Analytics workspace from dropdown list. If this workspace is outside of\ + \ the scope of the assignment you must manually grant 'Log Analytics Contributor'\ + \ permissions (or similar) to the policy assignment's principal ID.\",\"strongType\"\ + :\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Enable metrics\",\"description\"\ + :\"Whether to enable metrics stream to the Log Analytics workspace - True\ + \ or False\"},\"allowedValues\":[\"True\",\"False\"],\"defaultValue\":\"False\"\ + },\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable\ + \ logs\",\"description\":\"Whether to enable logs stream to the Log Analytics\ + \ workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"],\"defaultValue\"\ + :\"True\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Logic/workflows\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\"\ + ,\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"\ + /providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\"\ + ,\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\"\ + :\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\"\ + :\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"\ + type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"\ + resources\":[{\"type\":\"Microsoft.Logic/workflows/providers/diagnosticSettings\"\ + ,\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'),\ + \ '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"\ + [parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\"\ + :\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\"\ + ,\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\"\ + :false,\"days\":0}}],\"logs\":[{\"category\":\"WorkflowRuntime\",\"enabled\"\ + :\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\"\ + :{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"\ + },\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\"\ + :{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\"\ + :\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"\ + }}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b889a06c-ec72-4b03-910a-cb169ee18721\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b889a06c-ec72-4b03-910a-cb169ee18721\"\ + },{\"properties\":{\"displayName\":\"An activity log alert should exist for\ + \ specific Administrative operations\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"All\",\"description\":\"This policy audits specific Administrative operations\ + \ with no activity log alerts configured.\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"},\"operationName\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Operation Name\",\"description\"\ + :\"Administrative Operation name for which activity log alert should be configured\"\ + },\"allowedValues\":[\"Microsoft.Sql/servers/firewallRules/write\",\"Microsoft.Sql/servers/firewallRules/delete\"\ + ,\"Microsoft.Network/networkSecurityGroups/write\",\"Microsoft.Network/networkSecurityGroups/delete\"\ + ,\"Microsoft.ClassicNetwork/networkSecurityGroups/write\",\"Microsoft.ClassicNetwork/networkSecurityGroups/delete\"\ + ,\"Microsoft.Network/networkSecurityGroups/securityRules/write\",\"Microsoft.Network/networkSecurityGroups/securityRules/delete\"\ + ,\"Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write\",\"\ + Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/delete\"]}},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"\ + }]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.Insights/ActivityLogAlerts\",\"existenceCondition\":{\"allOf\"\ + :[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/enabled\",\"equals\":\"\ + true\"},{\"count\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]\"\ + ,\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\"\ + ,\"equals\":\"category\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\"\ + ,\"equals\":\"Administrative\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\"\ + ,\"equals\":\"operationName\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\"\ + ,\"equals\":\"[parameters('operationName')]\"}]}]}},\"equals\":2},{\"not\"\ + :{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\"\ + ,\"equals\":\"category\"}},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\"\ + ,\"equals\":\"operationName\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b954148f-4c11-4c38-8221-be76711e194a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1257 - Contingency\ + \ Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Contingency Planning control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1257\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b958b241-4245-4bd6-bd2d-b8f0779fb543\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b958b241-4245-4bd6-bd2d-b8f0779fb543\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1186 - Configuration\ + \ Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1186\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b95ba3bd-4ded-49ea-9d10-c6f4b680813d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b95ba3bd-4ded-49ea-9d10-c6f4b680813d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1447 - Physical\ + \ Access Authorizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this Physical and Environmental Protection\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1447\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b9783a99-98fe-4a95-873f-29613309fe9a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b9783a99-98fe-4a95-873f-29613309fe9a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1625 - Boundary\ + \ Protection | Access Points\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this System and Communications Protection\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1625\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b9b66a4d-70a1-4b47-8fa1-289cec68c605\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b9b66a4d-70a1-4b47-8fa1-289cec68c605\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1610 - Development\ + \ Process, Standards, And Tools\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this System and Services Acquisition\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1610\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b9f3fb54-4222-46a1-a308-4874061f8491\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b9f3fb54-4222-46a1-a308-4874061f8491\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'Security Options - Recovery console'\",\"\ + policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should\ + \ only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines with non-compliant settings in Group Policy category: 'Security\ + \ Options - Recovery console'. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"deprecated\"\ + :true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsRecoveryconsole\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ba12366f-f9a6-42b8-9d98-157d0b1a837b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ba12366f-f9a6-42b8-9d98-157d0b1a837b\"\ + },{\"properties\":{\"displayName\":\"Azure Machine Learning workspaces should\ + \ be encrypted with a customer-managed key (CMK)\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Evaluate Azure Machine Learning workspaces\ + \ that do not have encryption enabled with customer-managed keys (CMK). Customer-managed\ + \ keys add an aditional layer of security for workspaces. For more information,\ + \ visit https://aka.ms/azureml-workspaces-cmk.\",\"metadata\":{\"version\"\ + :\"1.0.1\",\"category\":\"Machine Learning\"},\"parameters\":{\"effect\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"\ + },{\"not\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/encryption.status\"\ + ,\"equals\":\"enabled\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ba769a63-b8cc-4b2d-abf6-ac33c7204be8\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1606 - Developer\ + \ Security Testing And Evaluation | Threat And Vulnerability Analyses\",\"\ + policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements\ + \ this System and Services Acquisition control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1606\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/baa8a9a4-5bbe-4c72-98f6-a3a47ae2b1ca\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"baa8a9a4-5bbe-4c72-98f6-a3a47ae2b1ca\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1726 - Information\ + \ Handling And Retention\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this System and Information Integrity\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1726\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/baff1279-05e0-4463-9a70-8ba5de4c7aa4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"baff1279-05e0-4463-9a70-8ba5de4c7aa4\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1166 - Continuous\ + \ Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Security Assessment and Authorization control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1166\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bb02733d-3cc5-4bb0-a6cd-695ba2c2272e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bb02733d-3cc5-4bb0-a6cd-695ba2c2272e\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1188 - Configuration\ + \ Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1188\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bb20548a-c926-4e4d-855c-bcddc6faf95e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bb20548a-c926-4e4d-855c-bcddc6faf95e\"\ + },{\"properties\":{\"displayName\":\"Non-internet-facing virtual machines\ + \ should be protected with network security groups\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"All\",\"description\":\"Protect your non-internet-facing virtual\ + \ machines from potential threats by restricting access with network security\ + \ groups (NSG). Learn more about controlling traffic with NSGs at https://aka.ms/nsg-doc\"\ + ,\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security Center\"},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"\ + Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"\ + ]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/assessments\",\"name\":\"a9341235-9389-42f0-a0bf-9bfb57960d44\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bb91dfba-c30d-4263-9add-9c2384e659a6\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1533 - Third-Party\ + \ Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1533\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bba2a036-fb3b-4261-b1be-a13dfb5fbcaa\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bba2a036-fb3b-4261-b1be-a13dfb5fbcaa\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'Security Options - Microsoft Network\ + \ Client'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy creates a Guest Configuration assignment to audit Windows virtual\ + \ machines with non-compliant settings in Group Policy category: 'Security\ + \ Options - Microsoft Network Client'. It also creates a system-assigned managed\ + \ identity and deploys the VM extension for Guest Configuration. This policy\ + \ should only be used along with its corresponding audit policy in an initiative.\ + \ For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Microsoft\ + \ network client: Digitally sign communications (always)\",\"description\"\ + :\"Specifies whether packet signing is required by the SMB client component.\"\ + },\"defaultValue\":\"1\"},\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Microsoft\ + \ network client: Send unencrypted password to third-party SMB servers\",\"\ + description\":\"Specifies whether the SMB redirector will send plaintext passwords\ + \ during authentication to third-party SMB servers that do not support password\ + \ encryption. It is recommended that you disable this policy setting unless\ + \ there is a strong business case to enable it.\"},\"defaultValue\":\"0\"\ + },\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Microsoft\ + \ network server: Amount of idle time required before suspending session\"\ + ,\"description\":\"Specifies the amount of continuous idle time that must\ + \ pass in an SMB session before the session is suspended because of inactivity.\ + \ The format of the value is two integers separated by a comma, denoting an\ + \ inclusive range.\"},\"defaultValue\":\"1,15\"},\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Microsoft\ + \ network server: Digitally sign communications (always)\",\"description\"\ + :\"Specifies whether packet signing is required by the SMB server component.\"\ + },\"defaultValue\":\"1\"},\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Microsoft\ + \ network server: Disconnect clients when logon hours expire\",\"description\"\ + :\"Specifies whether to disconnect users who are connected to the local computer\ + \ outside their user account's valid logon hours. This setting affects the\ + \ Server Message Block (SMB) component. If you enable this policy setting\ + \ you should also enable 'Network security: Force logoff when logon hours\ + \ expire'\"},\"defaultValue\":\"1\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Microsoft network client: Digitally sign communications\ + \ (always);ExpectedValue', '=', parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways'),\ + \ ',', 'Microsoft network client: Send unencrypted password to third-party\ + \ SMB servers;ExpectedValue', '=', parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers'),\ + \ ',', 'Microsoft network server: Amount of idle time required before suspending\ + \ session;ExpectedValue', '=', parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession'),\ + \ ',', 'Microsoft network server: Digitally sign communications (always);ExpectedValue',\ + \ '=', parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways'),\ + \ ',', 'Microsoft network server: Disconnect clients when logon hours expire;ExpectedValue',\ + \ '=', parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')))]\"\ + },\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\"\ + :{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\"\ + :\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\"},\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\"\ + :{\"value\":\"[parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways')]\"\ + },\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\"\ + :{\"value\":\"[parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers')]\"\ + },\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\"\ + :{\"value\":\"[parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession')]\"\ + },\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":{\"value\":\"\ + [parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways')]\"\ + },\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":{\"value\"\ + :\"[parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\"\ + :{\"type\":\"string\"},\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\"\ + :{\"type\":\"string\"},\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\"\ + :{\"type\":\"string\"},\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\"\ + :{\"type\":\"string\"},\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Microsoft network\ + \ client: Digitally sign communications (always);ExpectedValue\",\"value\"\ + :\"[parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways')]\"\ + },{\"name\":\"Microsoft network client: Send unencrypted password to third-party\ + \ SMB servers;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers')]\"\ + },{\"name\":\"Microsoft network server: Amount of idle time required before\ + \ suspending session;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession')]\"\ + },{\"name\":\"Microsoft network server: Digitally sign communications (always);ExpectedValue\"\ + ,\"value\":\"[parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways')]\"\ + },{\"name\":\"Microsoft network server: Disconnect clients when logon hours\ + \ expire;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Microsoft network\ + \ client: Digitally sign communications (always);ExpectedValue\",\"value\"\ + :\"[parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways')]\"\ + },{\"name\":\"Microsoft network client: Send unencrypted password to third-party\ + \ SMB servers;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers')]\"\ + },{\"name\":\"Microsoft network server: Amount of idle time required before\ + \ suspending session;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession')]\"\ + },{\"name\":\"Microsoft network server: Digitally sign communications (always);ExpectedValue\"\ + ,\"value\":\"[parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways')]\"\ + },{\"name\":\"Microsoft network server: Disconnect clients when logon hours\ + \ expire;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\"\ + ,\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\"\ + ,\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bbcdd8fa-b600-4ee3-85b8-d184e3339652\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bbcdd8fa-b600-4ee3-85b8-d184e3339652\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Audit API Applications\ + \ that are not using latest supported Python Framework\",\"policyType\":\"\ + BuiltIn\",\"mode\":\"All\",\"description\":\"Use the latest supported Python\ + \ version for the latest security classes. Using older classes and types can\ + \ make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Security Center\",\"deprecated\":true},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:\ + \ Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\"\ + ,\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\"\ + :\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\"\ + ,\"name\":\"UseLatestPython\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\"\ + ,\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc0378bb-d7ab-4614-a0f6-5a6e3f02d644\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc0378bb-d7ab-4614-a0f6-5a6e3f02d644\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1194 - Configuration\ + \ Change Control | Automated Document / Notification / Prohibition Of Changes\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Configuration Management control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1194\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc34667f-397e-4a65-9b72-d0358f0b6b09\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc34667f-397e-4a65-9b72-d0358f0b6b09\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1095 - Role-Based\ + \ Security Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Awareness and Training control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1095\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc3f6f7a-057b-433e-9834-e8c97b0194f6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc3f6f7a-057b-433e-9834-e8c97b0194f6\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'System Audit Policies - Account Logon'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy\ + \ should only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines with non-compliant settings in Group Policy category: 'System\ + \ Audit Policies - Account Logon'. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"deprecated\"\ + :true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc87d811-4a9b-47cc-ae54-0a41abda7768\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc87d811-4a9b-47cc-ae54-0a41abda7768\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1427 - Media\ + \ Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Media Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1427\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc90e44f-d83f-4bdf-900f-3d5eb4111b31\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc90e44f-d83f-4bdf-900f-3d5eb4111b31\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1351 - Incident\ + \ Response Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Incident Response control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1351\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bcfb6683-05e5-4ce6-9723-c3fbe9896bdd\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bcfb6683-05e5-4ce6-9723-c3fbe9896bdd\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1050 - Concurrent\ + \ Session Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1050\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bd20184c-b4ec-4ce5-8db6-6e86352d183f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bd20184c-b4ec-4ce5-8db6-6e86352d183f\"\ + },{\"properties\":{\"displayName\":\"IP Forwarding on your virtual machine\ + \ should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"Enabling IP forwarding on a virtual machine's NIC allows the machine to\ + \ receive traffic addressed to other destinations. IP forwarding is rarely\ + \ required (e.g., when using the VM as a network virtual appliance), and therefore,\ + \ this should be reviewed by the network security team.\",\"metadata\":{\"\ + version\":\"2.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\"\ + ,\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"c3b51c94-588b-426b-a892-24696f9e54cc\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bd352bd5-2853-4985-bf0d-73806b4a5744\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Advanced Threat Protection\ + \ types should be set to 'All' in SQL Managed Instance advanced data security\ + \ settings\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"It's recommended to enable all Advanced Threat Protection types on your\ + \ SQL Managed Instance. Enabling all types protects against SQL injection,\ + \ database vulnerabilities, and any other anomalous activities.\",\"metadata\"\ + :{\"version\":\"1.0.1-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"Disabled\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"\ + equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Sql/managedInstances/securityAlertPolicies\"\ + ,\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/disabledAlerts[*]\"\ + ,\"equals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bda18df3-5e41-4709-add9-2554ce68c966\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bda18df3-5e41-4709-add9-2554ce68c966\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs if the Administrators group contains any of the specified members\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy\ + \ should only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines in which the Administrators group contains any of the specified\ + \ members. For more information on Guest Configuration policies, please visit\ + \ https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"\ + category\":\"Guest Configuration\",\"deprecated\":true},\"policyRule\":{\"\ + if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AdministratorsGroupMembersToExclude\",\"existenceCondition\":{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bde62c94-ccca-4821-a815-92c1d31a76de\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bde62c94-ccca-4821-a815-92c1d31a76de\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Audit Web Applications\ + \ that are not using latest supported Java Framework\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"All\",\"description\":\"Use the latest supported Java version\ + \ for the latest security classes. Using older classes and types can make\ + \ your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Security Center\",\"deprecated\":true},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:\ + \ Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\"\ + ,\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\"\ + :\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"\ + equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestJava\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\"\ + :[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/be0a7681-bed4-48dc-9ff3-f0171ee170b6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"be0a7681-bed4-48dc-9ff3-f0171ee170b6\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1360 - Incident\ + \ Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Incident Response control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1360\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/be5b05e7-0b82-4ebc-9eda-25e447b1a41e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"be5b05e7-0b82-4ebc-9eda-25e447b1a41e\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Web Application Firewall\ + \ should be enabled for Azure Front Door Service or Application Gateway\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires\ + \ Web Application Firewall on any Azure Front Door Service or Application\ + \ Gateway. A Web Application Firewall provides greater security for your other\ + \ Azure resources.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\"\ + :\"Network\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"[Deprecated]: Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Deny\"}},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/frontdoors\"\ + },{\"field\":\"Microsoft.Network/frontdoors/frontendEndpoints[*].webApplicationFirewallPolicyLink.id\"\ + ,\"exists\":\"false\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/applicationGateways\"\ + },{\"field\":\"Microsoft.Network/applicationGateways/webApplicationFirewallConfiguration\"\ + ,\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/be7ed5c8-2660-4136-8216-e6f3412ba909\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"be7ed5c8-2660-4136-8216-e6f3412ba909\"\ + },{\"properties\":{\"displayName\":\"Audit Windows machines that have not\ + \ restarted within the specified number of days\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Requires that prerequisites are deployed\ + \ to the policy assignment scope. For details, visit https://aka.ms/gcpol.\ + \ Machines are non-compliant if the WMI property LastBootUpTime in class Win32_Operatingsystem\ + \ is outside the range of days provided by the policy parameter.\",\"metadata\"\ + :{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\"\ + :[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"MachineLastBootUpTime\"\ + ,\"version\":\"1.*\",\"configurationParameter\":{\"NumberOfDays\":\"[MachineUpTime]MachineLastBootUpTime;NumberOfDays\"\ + }}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"NumberOfDays\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Number of days\",\"\ + description\":\"The number of days without restart until the machine is considered\ + \ non-compliant\"},\"defaultValue\":\"12\"}},\"policyRule\":{\"if\":{\"anyOf\"\ + :[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"MachineLastBootUpTime\",\"existenceCondition\":{\"allOf\":[{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[MachineUpTime]MachineLastBootUpTime;NumberOfDays',\ + \ '=', parameters('NumberOfDays')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/beb6ccee-b6b8-4e91-9801-a5fa4260a104\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"beb6ccee-b6b8-4e91-9801-a5fa4260a104\"\ + },{\"properties\":{\"displayName\":\"Audit Windows machines on which Windows\ + \ Defender Exploit Guard is not enabled\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Requires that prerequisites are deployed to\ + \ the policy assignment scope. For details, visit https://aka.ms/gcpol. Machines\ + \ are non-compliant if the PowerShell command Get-MPPreference returns configuration\ + \ details that does not match expected values. Windows Defender Exploit Guard\ + \ helps protect against malware that uses exploits to infect devices and spread.\ + \ Exploit Guard protection consists of a number of mitigations that can be\ + \ applied to either the operating system or individual apps.\",\"metadata\"\ + :{\"category\":\"Guest Configuration\",\"version\":\"1.1.0\",\"requiredProviders\"\ + :[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsDefenderExploitGuard\"\ + ,\"version\":\"1.*\",\"configurationParameter\":{\"NotAvailableMachineState\"\ + :\"[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState\"\ + }}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"NotAvailableMachineState\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Status if Windows Defender\ + \ is not available on machine\",\"description\":\"Windows Defender Exploit\ + \ Guard is only available starting with Windows 10/Windows Server with update\ + \ 1709. Setting this value to 'Non-Compliant' shows machines with older versions\ + \ on which Windows Defender Exploit Guard is not available (such as Windows\ + \ Server 2012 R2) as non-compliant. Setting this value to 'Compliant' shows\ + \ these machines as compliant.\"},\"allowedValues\":[\"Compliant\",\"Non-Compliant\"\ + ],\"defaultValue\":\"Compliant\"},\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + WindowsDefenderExploitGuard\",\"existenceCondition\":{\"allOf\":[{\"field\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState',\ + \ '=', parameters('NotAvailableMachineState')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bed48b13-6647-468e-aa2f-1af1d3f4dd40\"\ + },{\"properties\":{\"displayName\":\"Deploy Diagnostic Settings for Key Vault\ + \ to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Deploys the diagnostic settings for Key Vault to stream\ + \ to a regional Log Analytics workspace when any Key Vault which is missing\ + \ this diagnostic settings is created or updated.\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"},\"profileName\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Profile name\",\"description\"\ + :\"The diagnostic settings profile name\"},\"defaultValue\":\"setbypolicy_logAnalytics\"\ + },\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log\ + \ Analytics workspace\",\"description\":\"Select Log Analytics workspace from\ + \ dropdown list. If this workspace is outside of the scope of the assignment\ + \ you must manually grant 'Log Analytics Contributor' permissions (or similar)\ + \ to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\"\ + ,\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Enable metrics\",\"description\":\"Whether to enable metrics\ + \ stream to the Log Analytics workspace - True or False\"},\"allowedValues\"\ + :[\"True\",\"False\"],\"defaultValue\":\"False\"},\"logsEnabled\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Enable logs\",\"description\"\ + :\"Whether to enable logs stream to the Log Analytics workspace - True or\ + \ False\"},\"allowedValues\":[\"True\",\"False\"],\"defaultValue\":\"True\"\ + }},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\"\ + ,\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"\ + /providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\"\ + ,\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\"\ + :\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\"\ + :\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"\ + type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"\ + resources\":[{\"type\":\"Microsoft.KeyVault/vaults/providers/diagnosticSettings\"\ + ,\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'),\ + \ '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"\ + [parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\"\ + :\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\"\ + ,\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\"\ + :false,\"days\":0}}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"\ + [parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\"\ + :{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"\ + },\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\"\ + :{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\"\ + :\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"\ + }}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bef3f64c-5290-43b7-85b0-9b254eef4c47\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bef3f64c-5290-43b7-85b0-9b254eef4c47\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1152 - System\ + \ Interconnections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Security Assessment and Authorization control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1152\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/beff0acf-7e67-40b2-b1ca-1a0e8205cf1b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"beff0acf-7e67-40b2-b1ca-1a0e8205cf1b\"\ + },{\"properties\":{\"displayName\":\"Geo-redundant storage should be enabled\ + \ for Storage Accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"\ + description\":\"This policy audits any Storage Account with geo-redundant\ + \ storage not enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\"\ + :\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Storage/storageAccounts\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/sku.name\"\ + ,\"in\":[\"Standard_GRS\",\"Standard_RAGRS\",\"Standard_GZRS\",\"Standard_RAGZRS\"\ + ]}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf045164-79ba-4215-8f95-f8048dc1780b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf045164-79ba-4215-8f95-f8048dc1780b\"\ + },{\"properties\":{\"displayName\":\"Audit Windows machines that do not have\ + \ the password complexity setting enabled\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"Indexed\",\"description\":\"Requires that prerequisites are deployed\ + \ to the policy assignment scope. For details, visit https://aka.ms/gcpol.\ + \ Machines are non-compliant if Windows machines that do not have the password\ + \ complexity setting enabled\",\"metadata\":{\"category\":\"Guest Configuration\"\ + ,\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"\ + ],\"guestConfiguration\":{\"name\":\"PasswordMustMeetComplexityRequirements\"\ + ,\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Include Arc connected servers\",\"\ + description\":\"By selecting this option, you agree to be charged monthly\ + \ per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"],\"\ + defaultValue\":\"false\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + PasswordMustMeetComplexityRequirements\",\"existenceCondition\":{\"field\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf16e0bb-31e1-4646-8202-60a235cc7e74\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf16e0bb-31e1-4646-8202-60a235cc7e74\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1590 - External\ + \ Information System Services | Risk Assessments / Organizational Approvals\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this System and Services Acquisition control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1590\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf296b8c-f391-4ea4-9198-be3c9d39dd1f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf296b8c-f391-4ea4-9198-be3c9d39dd1f\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1446 - Physical\ + \ And Environmental Protection Policy And Procedures\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Physical\ + \ and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1446\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf6850fe-abba-468e-9ef4-d09ec7d983cd\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf6850fe-abba-468e-9ef4-d09ec7d983cd\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'System Audit Policies - Logon-Logoff'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'System Audit Policies\ + \ - Logon-Logoff'. It also creates a system-assigned managed identity and\ + \ deploys the VM extension for Guest Configuration. This policy should only\ + \ be used along with its corresponding audit policy in an initiative. For\ + \ more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"AuditGroupMembership\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"[Deprecated]: Audit Group Membership\",\"description\":\"\ + Specifies whether audit events are generated when group memberships are enumerated\ + \ on the client computer.\"},\"allowedValues\":[\"No Auditing\",\"Success\"\ + ,\"Failure\",\"Success and Failure\"],\"defaultValue\":\"Success\"}},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Audit Group Membership;ExpectedValue', '=',\ + \ parameters('AuditGroupMembership')))]\"},\"deployment\":{\"properties\"\ + :{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\"\ + },\"AuditGroupMembership\":{\"value\":\"[parameters('AuditGroupMembership')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"AuditGroupMembership\":{\"type\":\"string\"}},\"\ + resources\":[{\"condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit Group Membership;ExpectedValue\"\ + ,\"value\":\"[parameters('AuditGroupMembership')]\"}]}}},{\"condition\":\"\ + [equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit Group Membership;ExpectedValue\"\ + ,\"value\":\"[parameters('AuditGroupMembership')]\"}]}}},{\"condition\":\"\ + [equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\"\ + ,\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\"\ + ,\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c04255ee-1b9f-42c1-abaa-bf1553f79930\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c04255ee-1b9f-42c1-abaa-bf1553f79930\"\ + },{\"properties\":{\"displayName\":\"Only approved VM extensions should be\ + \ installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy governs the virtual machine extensions that are not approved.\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"The effect determines what happens when the policy rule\ + \ is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"\ + ],\"defaultValue\":\"Audit\"},\"approvedExtensions\":{\"type\":\"Array\",\"\ + metadata\":{\"description\":\"The list of approved extension types that can\ + \ be installed. Example: AzureDiskEncryption\",\"displayName\":\"Approved\ + \ extensions\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"\ + equals\":\"Microsoft.Compute/virtualMachines/extensions\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\"\ + ,\"notIn\":\"[parameters('approvedExtensions')]\"}]},\"then\":{\"effect\"\ + :\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c0e996f8-39cf-4af9-9f45-83fbde810432\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c0e996f8-39cf-4af9-9f45-83fbde810432\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1124 - Audit\ + \ Reduction And Report Generation\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Audit and Accountability\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1124\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c10152dd-78f8-4335-ae2d-ad92cc028da4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c10152dd-78f8-4335-ae2d-ad92cc028da4\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1676 - Malicious\ + \ Code Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Information Integrity control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1676\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c10fb58b-56a8-489e-9ce3-7ffe24e78e4b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c10fb58b-56a8-489e-9ce3-7ffe24e78e4b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1719 - Spam\ + \ Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Information Integrity control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1719\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c13da9b4-fe14-4fe2-853a-5997c9d4215a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c13da9b4-fe14-4fe2-853a-5997c9d4215a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1226 - Information\ + \ System Component Inventory | Automated Unauthorized Component Detection\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Configuration Management control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1226\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c158eb1c-ae7e-4081-8057-d527140c4e0c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c158eb1c-ae7e-4081-8057-d527140c4e0c\"\ + },{\"properties\":{\"displayName\":\"Deploy associations for a custom provider\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys\ + \ an association resource that associates selected resource types to the specified\ + \ custom provider. This policy deployment does not support nested resource\ + \ types.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Custom Provider\"\ + },\"parameters\":{\"targetCustomProviderId\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Custom provider ID\",\"description\":\"Resource ID of\ + \ the Custom provider to which resources need to be associated.\"}},\"resourceTypesToAssociate\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Resource types to associate\"\ + ,\"description\":\"The list of resource types to be associated to the custom\ + \ provider.\",\"strongType\":\"resourceTypes\"}},\"associationNamePrefix\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Association name prefix\"\ + ,\"description\":\"Prefix to be added to the name of the association resource\ + \ being created.\"},\"defaultValue\":\"DeployedByPolicy\"}},\"policyRule\"\ + :{\"if\":{\"field\":\"type\",\"in\":\"[parameters('resourceTypesToAssociate')]\"\ + },\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.CustomProviders/Associations\"\ + ,\"name\":\"[concat(parameters('associationNamePrefix'), '-', uniqueString(parameters('targetCustomProviderId')))]\"\ + ,\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"associatedResourceName\"\ + :{\"type\":\"string\"},\"resourceTypesToAssociate\":{\"type\":\"string\"},\"\ + targetCustomProviderId\":{\"type\":\"string\"},\"associationNamePrefix\":{\"\ + type\":\"string\"}},\"variables\":{\"resourceType\":\"[concat(parameters('resourceTypesToAssociate'),\ + \ '/providers/associations')]\",\"resourceName\":\"[concat(parameters('associatedResourceName'),\ + \ '/microsoft.customproviders/', parameters('associationNamePrefix'), '-',\ + \ uniqueString(parameters('targetCustomProviderId')))]\"},\"resources\":[{\"\ + type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2017-05-10\",\"\ + name\":\"[concat(deployment().Name, '-2')]\",\"properties\":{\"mode\":\"Incremental\"\ + ,\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"resources\":[{\"type\":\"[variables('resourceType')]\"\ + ,\"name\":\"[variables('resourceName')]\",\"apiVersion\":\"2018-09-01-preview\"\ + ,\"properties\":{\"targetResourceId\":\"[parameters('targetCustomProviderId')]\"\ + }}]}}}]},\"parameters\":{\"resourceTypesToAssociate\":{\"value\":\"[field('type')]\"\ + },\"associatedResourceName\":{\"value\":\"[field('name')]\"},\"targetCustomProviderId\"\ + :{\"value\":\"[parameters('targetCustomProviderId')]\"},\"associationNamePrefix\"\ + :{\"value\":\"[parameters('associationNamePrefix')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c15c281f-ea5c-44cd-90b8-fc3c14d13f0c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c15c281f-ea5c-44cd-90b8-fc3c14d13f0c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1629 - Boundary\ + \ Protection | External Telecommunications Services\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this System and\ + \ Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1629\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c171b095-7756-41de-8644-a062a96043f2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c171b095-7756-41de-8644-a062a96043f2\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1004 - Account\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1004\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c17822dc-736f-4eb4-a97d-e6be662ff835\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c17822dc-736f-4eb4-a97d-e6be662ff835\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Allow resource creation\ + \ only in Asia data centers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Allows resource creation in the following locations only:\ + \ East Asia, Southeast Asia, West India, South India, Central India, Japan\ + \ East, Japan West\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\"\ + :\"General\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\"\ + :{\"not\":{\"field\":\"location\",\"in\":[\"eastasia\",\"southeastasia\",\"\ + westindia\",\"southindia\",\"centralindia\",\"japaneast\",\"japanwest\"]}},\"\ + then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c1b9cbed-08e3-427d-b9ce-7c535b1e9b94\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c1b9cbed-08e3-427d-b9ce-7c535b1e9b94\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'System Audit Policies - Account Logon'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'System Audit Policies\ + \ - Account Logon'. It also creates a system-assigned managed identity and\ + \ deploys the VM extension for Guest Configuration. This policy should only\ + \ be used along with its corresponding audit policy in an initiative. For\ + \ more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"AuditCredentialValidation\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Deprecated]: Audit Credential Validation\",\"description\"\ + :\"Specifies whether audit events are generated when credentials are submitted\ + \ for a user account logon request. This setting is especially useful for\ + \ monitoring unsuccessful attempts, to find brute-force attacks, account enumeration,\ + \ and potential account compromise events on domain controllers.\"},\"allowedValues\"\ + :[\"No Auditing\",\"Success\",\"Failure\",\"Success and Failure\"],\"defaultValue\"\ + :\"Success and Failure\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"\ + field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Audit Credential Validation;ExpectedValue',\ + \ '=', parameters('AuditCredentialValidation')))]\"},\"deployment\":{\"properties\"\ + :{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\"\ + },\"AuditCredentialValidation\":{\"value\":\"[parameters('AuditCredentialValidation')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"AuditCredentialValidation\":{\"type\":\"string\"\ + }},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit Credential\ + \ Validation;ExpectedValue\",\"value\":\"[parameters('AuditCredentialValidation')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit Credential\ + \ Validation;ExpectedValue\",\"value\":\"[parameters('AuditCredentialValidation')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\"\ + ,\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\"\ + ,\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c1e289c0-ffad-475d-a924-adc058765d65\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c1e289c0-ffad-475d-a924-adc058765d65\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1503 - Information\ + \ Security Architecture\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this Planning control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1503\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c1fa9c2f-d439-4ab9-8b83-81fb1934f81d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c1fa9c2f-d439-4ab9-8b83-81fb1934f81d\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs that are not set to the specified time zone\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy creates a\ + \ Guest Configuration assignment to audit Windows virtual machines that are\ + \ not set to the specified time zone. It also creates a system-assigned managed\ + \ identity and deploys the VM extension for Guest Configuration. This policy\ + \ should only be used along with its corresponding audit policy in an initiative.\ + \ For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"TimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Time zone\",\"description\":\"The expected time zone\"},\"\ + allowedValues\":[\"(UTC-12:00) International Date Line West\",\"(UTC-11:00)\ + \ Coordinated Universal Time-11\",\"(UTC-10:00) Aleutian Islands\",\"(UTC-10:00)\ + \ Hawaii\",\"(UTC-09:30) Marquesas Islands\",\"(UTC-09:00) Alaska\",\"(UTC-09:00)\ + \ Coordinated Universal Time-09\",\"(UTC-08:00) Baja California\",\"(UTC-08:00)\ + \ Coordinated Universal Time-08\",\"(UTC-08:00) Pacific Time (US & Canada)\"\ + ,\"(UTC-07:00) Arizona\",\"(UTC-07:00) Chihuahua, La Paz, Mazatlan\",\"(UTC-07:00)\ + \ Mountain Time (US & Canada)\",\"(UTC-06:00) Central America\",\"(UTC-06:00)\ + \ Central Time (US & Canada)\",\"(UTC-06:00) Easter Island\",\"(UTC-06:00)\ + \ Guadalajara, Mexico City, Monterrey\",\"(UTC-06:00) Saskatchewan\",\"(UTC-05:00)\ + \ Bogota, Lima, Quito, Rio Branco\",\"(UTC-05:00) Chetumal\",\"(UTC-05:00)\ + \ Eastern Time (US & Canada)\",\"(UTC-05:00) Haiti\",\"(UTC-05:00) Havana\"\ + ,\"(UTC-05:00) Indiana (East)\",\"(UTC-05:00) Turks and Caicos\",\"(UTC-04:00)\ + \ Asuncion\",\"(UTC-04:00) Atlantic Time (Canada)\",\"(UTC-04:00) Caracas\"\ + ,\"(UTC-04:00) Cuiaba\",\"(UTC-04:00) Georgetown, La Paz, Manaus, San Juan\"\ + ,\"(UTC-04:00) Santiago\",\"(UTC-03:30) Newfoundland\",\"(UTC-03:00) Araguaina\"\ + ,\"(UTC-03:00) Brasilia\",\"(UTC-03:00) Cayenne, Fortaleza\",\"(UTC-03:00)\ + \ City of Buenos Aires\",\"(UTC-03:00) Greenland\",\"(UTC-03:00) Montevideo\"\ + ,\"(UTC-03:00) Punta Arenas\",\"(UTC-03:00) Saint Pierre and Miquelon\",\"\ + (UTC-03:00) Salvador\",\"(UTC-02:00) Coordinated Universal Time-02\",\"(UTC-02:00)\ + \ Mid-Atlantic - Old\",\"(UTC-01:00) Azores\",\"(UTC-01:00) Cabo Verde Is.\"\ + ,\"(UTC) Coordinated Universal Time\",\"(UTC+00:00) Dublin, Edinburgh, Lisbon,\ + \ London\",\"(UTC+00:00) Monrovia, Reykjavik\",\"(UTC+00:00) Sao Tome\",\"\ + (UTC+01:00) Casablanca\",\"(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm,\ + \ Vienna\",\"(UTC+01:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague\"\ + ,\"(UTC+01:00) Brussels, Copenhagen, Madrid, Paris\",\"(UTC+01:00) Sarajevo,\ + \ Skopje, Warsaw, Zagreb\",\"(UTC+01:00) West Central Africa\",\"(UTC+02:00)\ + \ Amman\",\"(UTC+02:00) Athens, Bucharest\",\"(UTC+02:00) Beirut\",\"(UTC+02:00)\ + \ Cairo\",\"(UTC+02:00) Chisinau\",\"(UTC+02:00) Damascus\",\"(UTC+02:00)\ + \ Gaza, Hebron\",\"(UTC+02:00) Harare, Pretoria\",\"(UTC+02:00) Helsinki,\ + \ Kyiv, Riga, Sofia, Tallinn, Vilnius\",\"(UTC+02:00) Jerusalem\",\"(UTC+02:00)\ + \ Kaliningrad\",\"(UTC+02:00) Khartoum\",\"(UTC+02:00) Tripoli\",\"(UTC+02:00)\ + \ Windhoek\",\"(UTC+03:00) Baghdad\",\"(UTC+03:00) Istanbul\",\"(UTC+03:00)\ + \ Kuwait, Riyadh\",\"(UTC+03:00) Minsk\",\"(UTC+03:00) Moscow, St. Petersburg\"\ + ,\"(UTC+03:00) Nairobi\",\"(UTC+03:30) Tehran\",\"(UTC+04:00) Abu Dhabi, Muscat\"\ + ,\"(UTC+04:00) Astrakhan, Ulyanovsk\",\"(UTC+04:00) Baku\",\"(UTC+04:00) Izhevsk,\ + \ Samara\",\"(UTC+04:00) Port Louis\",\"(UTC+04:00) Saratov\",\"(UTC+04:00)\ + \ Tbilisi\",\"(UTC+04:00) Volgograd\",\"(UTC+04:00) Yerevan\",\"(UTC+04:30)\ + \ Kabul\",\"(UTC+05:00) Ashgabat, Tashkent\",\"(UTC+05:00) Ekaterinburg\"\ + ,\"(UTC+05:00) Islamabad, Karachi\",\"(UTC+05:00) Qyzylorda\",\"(UTC+05:30)\ + \ Chennai, Kolkata, Mumbai, New Delhi\",\"(UTC+05:30) Sri Jayawardenepura\"\ + ,\"(UTC+05:45) Kathmandu\",\"(UTC+06:00) Astana\",\"(UTC+06:00) Dhaka\",\"\ + (UTC+06:00) Omsk\",\"(UTC+06:30) Yangon (Rangoon)\",\"(UTC+07:00) Bangkok,\ + \ Hanoi, Jakarta\",\"(UTC+07:00) Barnaul, Gorno-Altaysk\",\"(UTC+07:00) Hovd\"\ + ,\"(UTC+07:00) Krasnoyarsk\",\"(UTC+07:00) Novosibirsk\",\"(UTC+07:00) Tomsk\"\ + ,\"(UTC+08:00) Beijing, Chongqing, Hong Kong, Urumqi\",\"(UTC+08:00) Irkutsk\"\ + ,\"(UTC+08:00) Kuala Lumpur, Singapore\",\"(UTC+08:00) Perth\",\"(UTC+08:00)\ + \ Taipei\",\"(UTC+08:00) Ulaanbaatar\",\"(UTC+08:45) Eucla\",\"(UTC+09:00)\ + \ Chita\",\"(UTC+09:00) Osaka, Sapporo, Tokyo\",\"(UTC+09:00) Pyongyang\"\ + ,\"(UTC+09:00) Seoul\",\"(UTC+09:00) Yakutsk\",\"(UTC+09:30) Adelaide\",\"\ + (UTC+09:30) Darwin\",\"(UTC+10:00) Brisbane\",\"(UTC+10:00) Canberra, Melbourne,\ + \ Sydney\",\"(UTC+10:00) Guam, Port Moresby\",\"(UTC+10:00) Hobart\",\"(UTC+10:00)\ + \ Vladivostok\",\"(UTC+10:30) Lord Howe Island\",\"(UTC+11:00) Bougainville\ + \ Island\",\"(UTC+11:00) Chokurdakh\",\"(UTC+11:00) Magadan\",\"(UTC+11:00)\ + \ Norfolk Island\",\"(UTC+11:00) Sakhalin\",\"(UTC+11:00) Solomon Is., New\ + \ Caledonia\",\"(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky\",\"(UTC+12:00)\ + \ Auckland, Wellington\",\"(UTC+12:00) Coordinated Universal Time+12\",\"\ + (UTC+12:00) Fiji\",\"(UTC+12:00) Petropavlovsk-Kamchatsky - Old\",\"(UTC+12:45)\ + \ Chatham Islands\",\"(UTC+13:00) Coordinated Universal Time+13\",\"(UTC+13:00)\ + \ Nuku'alofa\",\"(UTC+13:00) Samoa\",\"(UTC+14:00) Kiritimati Island\"]}},\"\ + policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsTimeZone\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[WindowsTimeZone]WindowsTimeZone1;TimeZone',\ + \ '=', parameters('TimeZone')))]\"},\"deployment\":{\"properties\":{\"mode\"\ + :\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"WindowsTimeZone\"},\"\ + TimeZone\":{\"value\":\"[parameters('TimeZone')]\"}},\"template\":{\"$schema\"\ + :\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"TimeZone\":{\"type\":\"string\"}},\"resources\":[{\"\ + condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\"\ + ,\"value\":\"[parameters('TimeZone')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\"\ + ,\"value\":\"[parameters('TimeZone')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c21f7060-c148-41cf-a68b-0ab3e14c764c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c21f7060-c148-41cf-a68b-0ab3e14c764c\"\ + },{\"properties\":{\"displayName\":\"Flow log should be configured for every\ + \ network security group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Audit for network security groups to verify if flow log\ + \ resource is configured. Flow log allows to log information about IP traffic\ + \ flowing through network security group. It can be used for optimizing network\ + \ flows, monitoring throughput, verifying compliance, detecting intrusions\ + \ and more.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"\ + },\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups\"\ + },{\"count\":{\"field\":\"Microsoft.Network/networkSecurityGroups/flowLogs[*]\"\ + },\"equals\":0}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c251913d-7d24-4958-af87-478ed3b9ba41\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c251913d-7d24-4958-af87-478ed3b9ba41\"\ + },{\"properties\":{\"displayName\":\"Azure Defender for container registries\ + \ should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"Azure Defender for container registries provides vulnerability scanning\ + \ of any images pulled within the last 30 days, pushed to your registry, or\ + \ imported, and exposes detailed findings per image.\",\"metadata\":{\"version\"\ + :\"1.0.3\",\"category\":\"Security Center\"},\"parameters\":{\"effect\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/pricings\",\"name\":\"ContainerRegistry\",\"existenceScope\"\ + :\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\"\ + ,\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c25d9a16-bc35-4e15-a7e5-9db606bf9ed4\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs on which the specified services are not installed and 'Running'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy\ + \ should only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines on which the specified services are not installed and 'Running'.\ + \ For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsServiceStatus\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c2dd2a9a-8a20-4a9c-b8d6-f17ccc26939a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c2dd2a9a-8a20-4a9c-b8d6-f17ccc26939a\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Ensure that '.NET Framework'\ + \ version is the latest, if used as a part of the API app\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy is not required\ + \ since Azure App Service automatically updates and maintains the .NET Framework\ + \ versions installed on the platform.\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"App Service\",\"deprecated\":true},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"\ + },{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"\ + existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.netFrameworkVersion\"\ + ,\"in\":[\"v3.0\",\"v4.0\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c2e7ca55-f62c-49b2-89a4-d41eb661d2f0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c2e7ca55-f62c-49b2-89a4-d41eb661d2f0\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1176 - Baseline\ + \ Configuration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1176\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c30690a5-7bf3-467f-b0cd-ef5c7c7449cd\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c30690a5-7bf3-467f-b0cd-ef5c7c7449cd\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1389 - Information\ + \ Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Incident Response control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1389\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c39e6fda-ae70-4891-a739-be7bba6d1062\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c39e6fda-ae70-4891-a739-be7bba6d1062\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1390 - Information\ + \ Spillage Response | Responsible Personnel\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Incident Response\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1390\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c3b65b63-09ec-4cb5-8028-7dd324d10eb0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c3b65b63-09ec-4cb5-8028-7dd324d10eb0\"\ + },{\"properties\":{\"displayName\":\"System updates on virtual machine scale\ + \ sets should be installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Audit whether there are any missing system security updates\ + \ and critical updates that should be installed to ensure that your Windows\ + \ and Linux virtual machine scale sets are secure.\",\"metadata\":{\"version\"\ + :\"2.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"effect\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/assessments\",\"name\":\"bd20bd91-aaf1-7f14-b6e4-866de2f43146\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c3f317a7-a95c-4547-b7e7-11017ebdf2fe\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Linux VMs that have accounts without passwords\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"All\",\"description\":\"This policy should only be used along\ + \ with its corresponding deploy policy in an initiative. This definition allows\ + \ Azure Policy to process the results of auditing Linux virtual machines that\ + \ have accounts without passwords. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"3.0.0-deprecated\",\"category\":\"Guest Configuration\",\"deprecated\"\ + :true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\"\ + ,\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\"\ + ,\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"\ + like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\"\ + ,\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"\ + ]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"\ + field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\"\ + ,\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\"\ + ,\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\"\ + ,\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"\ + cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\"\ + ,\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\"\ + ,\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"\ + ]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"\ + then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"PasswordPolicy_msid232\",\"existenceCondition\":{\"field\":\"\ + Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c40c9087-1981-4e73-9f53-39743eda9d05\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c40c9087-1981-4e73-9f53-39743eda9d05\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1220 - Least\ + \ Functionality | Authorized Software / Whitelisting\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Configuration\ + \ Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1220\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c40f31a7-81e1-4130-99e5-a02ceea2a1d6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c40f31a7-81e1-4130-99e5-a02ceea2a1d6\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1513 - Personnel\ + \ Screening | Information With Special Protection Measures\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1513\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c416970d-b12b-49eb-8af4-fb144cd7c290\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c416970d-b12b-49eb-8af4-fb144cd7c290\"\ + },{\"properties\":{\"displayName\":\"Microsoft Antimalware for Azure should\ + \ be configured to automatically update protection signatures\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy audits any\ + \ Windows virtual machine not configured with automatic update of Microsoft\ + \ Antimalware protection signatures.\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"equals\":\"Windows\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"\ + existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\"\ + ,\"equals\":\"IaaSAntimalware\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\"\ + ,\"equals\":\"Microsoft.Azure.Security\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/autoUpgradeMinorVersion\"\ + ,\"equals\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c43e4a30-77cb-48ab-a4dd-93f175c63b57\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c43e4a30-77cb-48ab-a4dd-93f175c63b57\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Container Registry should\ + \ use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"This policy audits any Container Registry not\ + \ configured to use a virtual network service endpoint.\",\"metadata\":{\"\ + version\":\"1.0.0-preview\",\"category\":\"Network\",\"preview\":true},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Preview]: Effect\",\"description\":\"Enable or disable the execution of\ + \ the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\"\ + :\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.ContainerRegistry/registries\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerRegistry/registries/networkRuleSet.defaultAction\"\ + ,\"notEquals\":\"Deny\"},{\"field\":\"Microsoft.ContainerRegistry/registries/networkRuleSet.virtualNetworkRules[*].action\"\ + ,\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c4857be7-912a-4c75-87e6-e30292bcdf78\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c4857be7-912a-4c75-87e6-e30292bcdf78\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1235 - Software\ + \ Usage Restrictions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1235\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c49c610b-ece4-44b3-988c-2172b70d6e46\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c49c610b-ece4-44b3-988c-2172b70d6e46\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1173 - Internal\ + \ System Connections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Security Assessment and Authorization control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1173\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c4aff9e7-2e60-46fa-86be-506b79033fc5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c4aff9e7-2e60-46fa-86be-506b79033fc5\"\ + },{\"properties\":{\"displayName\":\"Managed identity should be used in your\ + \ API App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Use a managed identity for enhanced authentication security\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"\ + },{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"\ + existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/managedServiceIdentityId\"\ + ,\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c4d441f8-f9d9-4a9e-9cef-e82117cb3eef\"\ + },{\"properties\":{\"displayName\":\"Authentication should be enabled on your\ + \ API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Azure App Service Authentication is a feature that can prevent anonymous\ + \ HTTP requests from reaching the API app, or authenticate those that have\ + \ tokens before they reach the API app\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\"\ + :\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"\ + existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/siteAuthEnabled\"\ + ,\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c4ebc54a-46e1-481a-bee2-d4411e95d828\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c4ebc54a-46e1-481a-bee2-d4411e95d828\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1600 - Developer\ + \ Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this System and Services\ + \ Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1600\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c53f3123-d233-44a7-930b-f40d3bfeb7d6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c53f3123-d233-44a7-930b-f40d3bfeb7d6\"\ + },{\"properties\":{\"displayName\":\"An activity log alert should exist for\ + \ specific Policy operations\",\"policyType\":\"BuiltIn\",\"mode\":\"All\"\ + ,\"description\":\"This policy audits specific Policy operations with no activity\ + \ log alerts configured.\",\"metadata\":{\"version\":\"3.0.0\",\"category\"\ + :\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"},\"operationName\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Operation Name\",\"description\":\"Policy\ + \ Operation name for which activity log alert should exist\"},\"allowedValues\"\ + :[\"Microsoft.Authorization/policyAssignments/write\",\"Microsoft.Authorization/policyAssignments/delete\"\ + ]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"\ + }]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.Insights/ActivityLogAlerts\",\"existenceCondition\":{\"allOf\"\ + :[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/enabled\",\"equals\":\"\ + true\"},{\"count\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]\"\ + ,\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\"\ + ,\"equals\":\"category\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\"\ + ,\"equals\":\"Administrative\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\"\ + ,\"equals\":\"operationName\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\"\ + ,\"equals\":\"[parameters('operationName')]\"}]}]}},\"equals\":2},{\"not\"\ + :{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\"\ + ,\"equals\":\"category\"}},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\"\ + ,\"equals\":\"operationName\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c5447c04-a4d7-4ba8-a263-c9ee321a6858\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c5447c04-a4d7-4ba8-a263-c9ee321a6858\"\ + },{\"properties\":{\"displayName\":\"Audit Windows machines that have the\ + \ specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"Requires that prerequisites are deployed to the\ + \ policy assignment scope. For details, visit https://aka.ms/gcpol. Machines\ + \ are non-compliant if the application name is found in any of the following\ + \ registry paths: HKLM:SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\ + \\Uninstall, HKLM:SOFTWARE\\\\Wow6432node\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\ + \\Uninstall, HKCU:Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"NotInstalledApplicationForWindows\",\"version\":\"1.*\",\"configurationParameter\"\ + :{\"ApplicationName\":\"[InstalledApplication]NotInstalledApplicationResource1;Name\"\ + }}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"ApplicationName\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application names (supports\ + \ wildcards)\",\"description\":\"A semicolon-separated list of the names of\ + \ the applications that should not be installed. e.g. 'Microsoft SQL Server\ + \ 2014 (64-bit); Microsoft Visual Studio Code' or 'Microsoft SQL Server 2014*'\ + \ (to match any application starting with 'Microsoft SQL Server 2014')\"}}},\"\ + policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"NotInstalledApplicationForWindows\",\"existenceCondition\":{\"\ + allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[InstalledApplication]NotInstalledApplicationResource1;Name',\ + \ '=', parameters('ApplicationName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c5b85cba-6e6f-4de4-95e1-f0233cd712ac\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c5b85cba-6e6f-4de4-95e1-f0233cd712ac\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1408 - Maintenance\ + \ Tools | Prevent Unauthorized Removal\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Maintenance control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1408\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c5f56ac6-4bb2-4086-bc41-ad76344ba2c2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c5f56ac6-4bb2-4086-bc41-ad76344ba2c2\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs that contain certificates expiring within the specified\ + \ number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy creates a Guest Configuration assignment to audit Windows virtual\ + \ machines that contain certificates expiring within the specified number\ + \ of days. It also creates a system-assigned managed identity and deploys\ + \ the VM extension for Guest Configuration. This policy should only be used\ + \ along with its corresponding audit policy in an initiative. For more information\ + \ on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"\ + metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"CertificateStorePath\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"[Deprecated]: Certificate store path\",\"description\":\"\ + The path to the certificate store containing the certificates to check the\ + \ expiration dates of. Default value is 'Cert:' which is the root certificate\ + \ store path, so all certificates on the machine will be checked. Other example\ + \ paths: 'Cert:\\\\LocalMachine', 'Cert:\\\\LocalMachine\\\\TrustedPublisher',\ + \ 'Cert:\\\\CurrentUser'\"},\"defaultValue\":\"Cert:\"},\"ExpirationLimitInDays\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Expiration\ + \ limit in days\",\"description\":\"An integer indicating the number of days\ + \ within which to check for certificates that are expiring. For example, if\ + \ this value is 30, any certificate expiring within the next 30 days will\ + \ cause this policy to be non-compliant.\"},\"defaultValue\":\"30\"},\"CertificateThumbprintsToInclude\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Certificate\ + \ thumbprints to include\",\"description\":\"A semicolon-separated list of\ + \ certificate thumbprints to check under the specified path. If a value is\ + \ not specified, all certificates under the certificate store path will be\ + \ checked. If a value is specified, no certificates other than those with\ + \ the thumbprints specified will be checked. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"\ + },\"defaultValue\":\"\"},\"CertificateThumbprintsToExclude\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"[Deprecated]: Certificate thumbprints\ + \ to exclude\",\"description\":\"A semicolon-separated list of certificate\ + \ thumbprints to ignore. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"},\"defaultValue\"\ + :\"\"},\"IncludeExpiredCertificates\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"[Deprecated]: Include expired certificates\",\"description\"\ + :\"Must be 'true' or 'false'. True indicates that any found certificates that\ + \ have already expired will also make this policy non-compliant. False indicates\ + \ that certificates that have expired will be be ignored.\"},\"allowedValues\"\ + :[\"true\",\"false\"],\"defaultValue\":\"false\"}},\"policyRule\":{\"if\"\ + :{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"CertificateExpiration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[CertificateStore]CertificateStore1;CertificateStorePath',\ + \ '=', parameters('CertificateStorePath'), ',', '[CertificateStore]CertificateStore1;ExpirationLimitInDays',\ + \ '=', parameters('ExpirationLimitInDays'), ',', '[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude',\ + \ '=', parameters('CertificateThumbprintsToInclude'), ',', '[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude',\ + \ '=', parameters('CertificateThumbprintsToExclude'), ',', '[CertificateStore]CertificateStore1;IncludeExpiredCertificates',\ + \ '=', parameters('IncludeExpiredCertificates')))]\"},\"deployment\":{\"properties\"\ + :{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"CertificateExpiration\"\ + },\"CertificateStorePath\":{\"value\":\"[parameters('CertificateStorePath')]\"\ + },\"ExpirationLimitInDays\":{\"value\":\"[parameters('ExpirationLimitInDays')]\"\ + },\"CertificateThumbprintsToInclude\":{\"value\":\"[parameters('CertificateThumbprintsToInclude')]\"\ + },\"CertificateThumbprintsToExclude\":{\"value\":\"[parameters('CertificateThumbprintsToExclude')]\"\ + },\"IncludeExpiredCertificates\":{\"value\":\"[parameters('IncludeExpiredCertificates')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"CertificateStorePath\":{\"type\":\"string\"},\"ExpirationLimitInDays\"\ + :{\"type\":\"string\"},\"CertificateThumbprintsToInclude\":{\"type\":\"string\"\ + },\"CertificateThumbprintsToExclude\":{\"type\":\"string\"},\"IncludeExpiredCertificates\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[CertificateStore]CertificateStore1;CertificateStorePath\"\ + ,\"value\":\"[parameters('CertificateStorePath')]\"},{\"name\":\"[CertificateStore]CertificateStore1;ExpirationLimitInDays\"\ + ,\"value\":\"[parameters('ExpirationLimitInDays')]\"},{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\"\ + ,\"value\":\"[parameters('CertificateThumbprintsToInclude')]\"},{\"name\"\ + :\"[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude\",\"\ + value\":\"[parameters('CertificateThumbprintsToExclude')]\"},{\"name\":\"\ + [CertificateStore]CertificateStore1;IncludeExpiredCertificates\",\"value\"\ + :\"[parameters('IncludeExpiredCertificates')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[CertificateStore]CertificateStore1;CertificateStorePath\"\ + ,\"value\":\"[parameters('CertificateStorePath')]\"},{\"name\":\"[CertificateStore]CertificateStore1;ExpirationLimitInDays\"\ + ,\"value\":\"[parameters('ExpirationLimitInDays')]\"},{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\"\ + ,\"value\":\"[parameters('CertificateThumbprintsToInclude')]\"},{\"name\"\ + :\"[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude\",\"\ + value\":\"[parameters('CertificateThumbprintsToExclude')]\"},{\"name\":\"\ + [CertificateStore]CertificateStore1;IncludeExpiredCertificates\",\"value\"\ + :\"[parameters('IncludeExpiredCertificates')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c5fbc59e-fb6f-494f-81e2-d99a671bdaa8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c5fbc59e-fb6f-494f-81e2-d99a671bdaa8\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1670 - Flaw\ + \ Remediation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Information Integrity control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1670\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c6108469-57ee-4666-af7e-79ba61c7ae0c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c6108469-57ee-4666-af7e-79ba61c7ae0c\"\ + },{\"properties\":{\"displayName\":\"Audit Windows machines that are not set\ + \ to the specified time zone\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Requires that prerequisites are deployed to the policy\ + \ assignment scope. For details, visit https://aka.ms/gcpol. Machines are\ + \ non-compliant if the value of the property StandardName in WMI class Win32_TimeZone\ + \ does not match the selected time zone for the policy parameter.\",\"metadata\"\ + :{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\"\ + :[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsTimeZone\"\ + ,\"version\":\"1.*\",\"configurationParameter\":{\"TimeZone\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\"\ + }}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"TimeZone\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Time zone\",\"description\"\ + :\"The expected time zone\"},\"allowedValues\":[\"(UTC-12:00) International\ + \ Date Line West\",\"(UTC-11:00) Coordinated Universal Time-11\",\"(UTC-10:00)\ + \ Aleutian Islands\",\"(UTC-10:00) Hawaii\",\"(UTC-09:30) Marquesas Islands\"\ + ,\"(UTC-09:00) Alaska\",\"(UTC-09:00) Coordinated Universal Time-09\",\"(UTC-08:00)\ + \ Baja California\",\"(UTC-08:00) Coordinated Universal Time-08\",\"(UTC-08:00)\ + \ Pacific Time (US & Canada)\",\"(UTC-07:00) Arizona\",\"(UTC-07:00) Chihuahua,\ + \ La Paz, Mazatlan\",\"(UTC-07:00) Mountain Time (US & Canada)\",\"(UTC-06:00)\ + \ Central America\",\"(UTC-06:00) Central Time (US & Canada)\",\"(UTC-06:00)\ + \ Easter Island\",\"(UTC-06:00) Guadalajara, Mexico City, Monterrey\",\"(UTC-06:00)\ + \ Saskatchewan\",\"(UTC-05:00) Bogota, Lima, Quito, Rio Branco\",\"(UTC-05:00)\ + \ Chetumal\",\"(UTC-05:00) Eastern Time (US & Canada)\",\"(UTC-05:00) Haiti\"\ + ,\"(UTC-05:00) Havana\",\"(UTC-05:00) Indiana (East)\",\"(UTC-05:00) Turks\ + \ and Caicos\",\"(UTC-04:00) Asuncion\",\"(UTC-04:00) Atlantic Time (Canada)\"\ + ,\"(UTC-04:00) Caracas\",\"(UTC-04:00) Cuiaba\",\"(UTC-04:00) Georgetown,\ + \ La Paz, Manaus, San Juan\",\"(UTC-04:00) Santiago\",\"(UTC-03:30) Newfoundland\"\ + ,\"(UTC-03:00) Araguaina\",\"(UTC-03:00) Brasilia\",\"(UTC-03:00) Cayenne,\ + \ Fortaleza\",\"(UTC-03:00) City of Buenos Aires\",\"(UTC-03:00) Greenland\"\ + ,\"(UTC-03:00) Montevideo\",\"(UTC-03:00) Punta Arenas\",\"(UTC-03:00) Saint\ + \ Pierre and Miquelon\",\"(UTC-03:00) Salvador\",\"(UTC-02:00) Coordinated\ + \ Universal Time-02\",\"(UTC-02:00) Mid-Atlantic - Old\",\"(UTC-01:00) Azores\"\ + ,\"(UTC-01:00) Cabo Verde Is.\",\"(UTC) Coordinated Universal Time\",\"(UTC+00:00)\ + \ Dublin, Edinburgh, Lisbon, London\",\"(UTC+00:00) Monrovia, Reykjavik\"\ + ,\"(UTC+00:00) Sao Tome\",\"(UTC+01:00) Casablanca\",\"(UTC+01:00) Amsterdam,\ + \ Berlin, Bern, Rome, Stockholm, Vienna\",\"(UTC+01:00) Belgrade, Bratislava,\ + \ Budapest, Ljubljana, Prague\",\"(UTC+01:00) Brussels, Copenhagen, Madrid,\ + \ Paris\",\"(UTC+01:00) Sarajevo, Skopje, Warsaw, Zagreb\",\"(UTC+01:00) West\ + \ Central Africa\",\"(UTC+02:00) Amman\",\"(UTC+02:00) Athens, Bucharest\"\ + ,\"(UTC+02:00) Beirut\",\"(UTC+02:00) Cairo\",\"(UTC+02:00) Chisinau\",\"\ + (UTC+02:00) Damascus\",\"(UTC+02:00) Gaza, Hebron\",\"(UTC+02:00) Harare,\ + \ Pretoria\",\"(UTC+02:00) Helsinki, Kyiv, Riga, Sofia, Tallinn, Vilnius\"\ + ,\"(UTC+02:00) Jerusalem\",\"(UTC+02:00) Kaliningrad\",\"(UTC+02:00) Khartoum\"\ + ,\"(UTC+02:00) Tripoli\",\"(UTC+02:00) Windhoek\",\"(UTC+03:00) Baghdad\"\ + ,\"(UTC+03:00) Istanbul\",\"(UTC+03:00) Kuwait, Riyadh\",\"(UTC+03:00) Minsk\"\ + ,\"(UTC+03:00) Moscow, St. Petersburg\",\"(UTC+03:00) Nairobi\",\"(UTC+03:30)\ + \ Tehran\",\"(UTC+04:00) Abu Dhabi, Muscat\",\"(UTC+04:00) Astrakhan, Ulyanovsk\"\ + ,\"(UTC+04:00) Baku\",\"(UTC+04:00) Izhevsk, Samara\",\"(UTC+04:00) Port Louis\"\ + ,\"(UTC+04:00) Saratov\",\"(UTC+04:00) Tbilisi\",\"(UTC+04:00) Volgograd\"\ + ,\"(UTC+04:00) Yerevan\",\"(UTC+04:30) Kabul\",\"(UTC+05:00) Ashgabat, Tashkent\"\ + ,\"(UTC+05:00) Ekaterinburg\",\"(UTC+05:00) Islamabad, Karachi\",\"(UTC+05:00)\ + \ Qyzylorda\",\"(UTC+05:30) Chennai, Kolkata, Mumbai, New Delhi\",\"(UTC+05:30)\ + \ Sri Jayawardenepura\",\"(UTC+05:45) Kathmandu\",\"(UTC+06:00) Astana\",\"\ + (UTC+06:00) Dhaka\",\"(UTC+06:00) Omsk\",\"(UTC+06:30) Yangon (Rangoon)\"\ + ,\"(UTC+07:00) Bangkok, Hanoi, Jakarta\",\"(UTC+07:00) Barnaul, Gorno-Altaysk\"\ + ,\"(UTC+07:00) Hovd\",\"(UTC+07:00) Krasnoyarsk\",\"(UTC+07:00) Novosibirsk\"\ + ,\"(UTC+07:00) Tomsk\",\"(UTC+08:00) Beijing, Chongqing, Hong Kong, Urumqi\"\ + ,\"(UTC+08:00) Irkutsk\",\"(UTC+08:00) Kuala Lumpur, Singapore\",\"(UTC+08:00)\ + \ Perth\",\"(UTC+08:00) Taipei\",\"(UTC+08:00) Ulaanbaatar\",\"(UTC+08:45)\ + \ Eucla\",\"(UTC+09:00) Chita\",\"(UTC+09:00) Osaka, Sapporo, Tokyo\",\"(UTC+09:00)\ + \ Pyongyang\",\"(UTC+09:00) Seoul\",\"(UTC+09:00) Yakutsk\",\"(UTC+09:30)\ + \ Adelaide\",\"(UTC+09:30) Darwin\",\"(UTC+10:00) Brisbane\",\"(UTC+10:00)\ + \ Canberra, Melbourne, Sydney\",\"(UTC+10:00) Guam, Port Moresby\",\"(UTC+10:00)\ + \ Hobart\",\"(UTC+10:00) Vladivostok\",\"(UTC+10:30) Lord Howe Island\",\"\ + (UTC+11:00) Bougainville Island\",\"(UTC+11:00) Chokurdakh\",\"(UTC+11:00)\ + \ Magadan\",\"(UTC+11:00) Norfolk Island\",\"(UTC+11:00) Sakhalin\",\"(UTC+11:00)\ + \ Solomon Is., New Caledonia\",\"(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky\"\ + ,\"(UTC+12:00) Auckland, Wellington\",\"(UTC+12:00) Coordinated Universal\ + \ Time+12\",\"(UTC+12:00) Fiji\",\"(UTC+12:00) Petropavlovsk-Kamchatsky -\ + \ Old\",\"(UTC+12:45) Chatham Islands\",\"(UTC+13:00) Coordinated Universal\ + \ Time+13\",\"(UTC+13:00) Nuku'alofa\",\"(UTC+13:00) Samoa\",\"(UTC+14:00)\ + \ Kiritimati Island\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"\ + field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsTimeZone\",\"existenceCondition\":{\"allOf\":[{\"field\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[WindowsTimeZone]WindowsTimeZone1;TimeZone',\ + \ '=', parameters('TimeZone')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c633f6a2-7f8b-4d9e-9456-02f0f04f5505\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c633f6a2-7f8b-4d9e-9456-02f0f04f5505\"\ + },{\"properties\":{\"displayName\":\"Audit Windows machines that do not have\ + \ the specified Windows PowerShell execution policy\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Requires that prerequisites are deployed\ + \ to the policy assignment scope. For details, visit https://aka.ms/gcpol.\ + \ Machines are non-compliant if the Windows PowerShell command Get-ExecutionPolicy\ + \ returns a value other than what was selected in the policy parameter.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"WindowsPowerShellExecutionPolicy\",\"version\":\"1.*\",\"configurationParameter\"\ + :{\"ExecutionPolicy\":\"[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy\"\ + }}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"ExecutionPolicy\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"PowerShell Execution\ + \ Policy\",\"description\":\"The expected PowerShell execution policy.\"},\"\ + allowedValues\":[\"AllSigned\",\"Bypass\",\"Default\",\"RemoteSigned\",\"\ + Restricted\",\"Undefined\",\"Unrestricted\"]},\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + WindowsPowerShellExecutionPolicy\",\"existenceCondition\":{\"allOf\":[{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy',\ + \ '=', parameters('ExecutionPolicy')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c648fbbb-591c-4acd-b465-ce9b176ca173\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c648fbbb-591c-4acd-b465-ce9b176ca173\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1190 - Configuration\ + \ Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1190\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c66a3d1e-465b-4f28-9da5-aef701b59892\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c66a3d1e-465b-4f28-9da5-aef701b59892\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1120 - Audit\ + \ Review, Analysis, And Reporting | Integration / Scanning And Monitoring\ + \ Capabilities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Audit and Accountability control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1120\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c69b870e-857b-458b-af02-bb234f7a00d3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c69b870e-857b-458b-af02-bb234f7a00d3\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1125 - Audit\ + \ Reduction And Report Generation\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Audit and Accountability\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1125\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c6ce745a-670e-47d3-a6c4-3cfe5ef00c10\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c6ce745a-670e-47d3-a6c4-3cfe5ef00c10\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Deploy Diagnostic Settings\ + \ for Recovery Services Vault to Log Analytics workspace for resource specific\ + \ categories.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Deploy Diagnostic Settings for Recovery Services Vault to stream to Log\ + \ Analytics workspace for Resource specific categories. If any of the Resource\ + \ specific categories are not enabled, a new diagnostic setting is created.\"\ + ,\"metadata\":{\"version\":\"1.0.1-preview\",\"preview\":true,\"category\"\ + :\"Backup\"},\"parameters\":{\"profileName\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Preview]: Profile name\",\"description\":\"The diagnostic\ + \ settings profile name\"},\"defaultValue\":\"setbypolicy_logAnalytics\"},\"\ + logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]:\ + \ Log Analytics workspace\",\"description\":\"Select Log Analytics workspace\ + \ from dropdown list. If this workspace is outside of the scope of the assignment\ + \ you must manually grant 'Log Analytics Contributor' permissions (or similar)\ + \ to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\"\ + ,\"assignPermissions\":true}},\"tagName\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Preview]: Exclusion Tag Name\",\"description\":\"Name\ + \ of the tag to use for excluding vaults from this policy. This should be\ + \ used along with the Exclusion Tag Value parameter.\"},\"defaultValue\":\"\ + \"},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]:\ + \ Exclusion Tag Value\",\"description\":\"Value of the tag to use for excluding\ + \ vaults from this policy. This should be used along with the Exclusion Tag\ + \ Name parameter.\"},\"defaultValue\":\"\"}},\"policyRule\":{\"if\":{\"allof\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.RecoveryServices/vaults\"},{\"\ + not\":{\"field\":\"[concat('tags[',parameters('tagName'), ']')]\",\"equals\"\ + :\"[parameters('tagValue')]\"}}]},\"then\":{\"effect\":\"deployIfNotExists\"\ + ,\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\"\ + :{\"allof\":[{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\"\ + ,\"where\":{\"allof\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].Category\"\ + ,\"in\":[\"CoreAzureBackup\",\"AddonAzureBackupJobs\",\"AddonAzureBackupAlerts\"\ + ,\"AddonAzureBackupPolicy\",\"AddonAzureBackupStorage\",\"AddonAzureBackupProtectedInstance\"\ + ]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].Enabled\",\"\ + equals\":\"True\"}]}},\"Equals\":6},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\"\ + ,\"notEquals\":\"\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logAnalyticsDestinationType\"\ + ,\"equals\":\"Dedicated\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\"\ + ,\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vaultName\":{\"type\":\"\ + string\"},\"logAnalytics\":{\"type\":\"string\"},\"profileName\":{\"type\"\ + :\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.RecoveryServices/vaults/providers/diagnosticSettings\"\ + ,\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('vaultName'),\ + \ '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"dependsOn\"\ + :[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"logAnalyticsDestinationType\"\ + :\"Dedicated\",\"metrics\":[],\"logs\":[{\"category\":\"CoreAzureBackup\"\ + ,\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupAlerts\",\"enabled\"\ + :\"true\"},{\"category\":\"AddonAzureBackupJobs\",\"enabled\":\"true\"},{\"\ + category\":\"AddonAzureBackupPolicy\",\"enabled\":\"true\"},{\"category\"\ + :\"AddonAzureBackupProtectedInstance\",\"enabled\":\"true\"},{\"category\"\ + :\"AddonAzureBackupStorage\",\"enabled\":\"true\"}]}}],\"outputs\":{\"policy\"\ + :{\"type\":\"string\",\"value\":\"[concat(parameters('logAnalytics'), 'configured\ + \ for diagnostic logs for ', ': ', parameters('vaultName'), '/', 'Microsoft.Insights/',\ + \ parameters('profileName'))]\"}}},\"parameters\":{\"logAnalytics\":{\"value\"\ + :\"[parameters('logAnalytics')]\"},\"vaultName\":{\"value\":\"[field('name')]\"\ + },\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\"\ + :\"/providers/Microsoft.Authorization/policyDefinitions/c717fb0c-d118-4c43-ab3d-ece30ac81fb3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c717fb0c-d118-4c43-ab3d-ece30ac81fb3\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1619 - Information\ + \ In Shared Resources\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this System and Communications Protection\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1619\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c722e569-cb52-45f3-a643-836547d016e1\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c722e569-cb52-45f3-a643-836547d016e1\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1121 - Audit\ + \ Review, Analysis, And Reporting | Correlation With Physical Monitoring\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Audit and Accountability control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1121\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c72b0eb9-1fc2-44e5-a866-e7cb0532f7c1\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c72b0eb9-1fc2-44e5-a866-e7cb0532f7c1\"\ + },{\"properties\":{\"displayName\":\"Authentication should be enabled on your\ + \ Function app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Azure App Service Authentication is a feature that can prevent anonymous\ + \ HTTP requests from reaching the Function app, or authenticate those that\ + \ have tokens before they reach the Function app\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"\ + field\":\"kind\",\"equals\":\"functionapp\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"\ + existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/siteAuthEnabled\"\ + ,\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1353 - Incident\ + \ Response Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Incident Response control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1353\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c785ad59-f78f-44ad-9a7f-d1202318c748\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c785ad59-f78f-44ad-9a7f-d1202318c748\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Email notifications to\ + \ admins should be enabled in SQL server advanced data security settings\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit that\ + \ 'email notification to admins and subscription owners' is enabled in the\ + \ SQL server advanced threat protection settings. This ensures that any detections\ + \ of anomalous activities on SQL server are reported as soon as possible to\ + \ the admins.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\"\ + :\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"[Deprecated]: Effect\",\"description\":\"\ + Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"Disabled\"}},\"policyRule\":{\"if\":{\"\ + field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\"\ + ,\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/securityAlertPolicies/emailAccountAdmins\"\ + ,\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c8343d2f-fdc9-4a97-b76f-fc71d1163bfc\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c8343d2f-fdc9-4a97-b76f-fc71d1163bfc\"\ + },{\"properties\":{\"displayName\":\"Deploy Diagnostic Settings for Batch\ + \ Account to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Deploys the diagnostic settings for Batch Account\ + \ to stream to a regional Log Analytics workspace when any Batch Account which\ + \ is missing this diagnostic settings is created or updated.\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"},\"\ + profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile\ + \ name\",\"description\":\"The diagnostic settings profile name\"},\"defaultValue\"\ + :\"setbypolicy_logAnalytics\"},\"logAnalytics\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Log Analytics workspace\",\"description\":\"Select Log\ + \ Analytics workspace from dropdown list. If this workspace is outside of\ + \ the scope of the assignment you must manually grant 'Log Analytics Contributor'\ + \ permissions (or similar) to the policy assignment's principal ID.\",\"strongType\"\ + :\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Enable metrics\",\"description\"\ + :\"Whether to enable metrics stream to the Log Analytics workspace - True\ + \ or False\"},\"allowedValues\":[\"True\",\"False\"],\"defaultValue\":\"False\"\ + },\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable\ + \ logs\",\"description\":\"Whether to enable logs stream to the Log Analytics\ + \ workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"],\"defaultValue\"\ + :\"True\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\"\ + ,\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"\ + /providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\"\ + ,\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\"\ + :\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\"\ + :\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"\ + type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"\ + resources\":[{\"type\":\"Microsoft.Batch/batchAccounts/providers/diagnosticSettings\"\ + ,\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'),\ + \ '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"\ + [parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\"\ + :\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\"\ + ,\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\"\ + :false,\"days\":0}}],\"logs\":[{\"category\":\"ServiceLog\",\"enabled\":\"\ + [parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\"\ + :{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"\ + },\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\"\ + :{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\"\ + :\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"\ + }}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c84e5349-db6d-4769-805e-e14037dab9b5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c84e5349-db6d-4769-805e-e14037dab9b5\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: API App should only be\ + \ accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"Use of HTTPS ensures server/service authentication and protects data in\ + \ transit from network layer eavesdropping attacks.\",\"metadata\":{\"version\"\ + :\"1.0.0-deprecated\",\"category\":\"Security Center\",\"deprecated\":true},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allof\":[{\"\ + field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\"\ + :\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"\ + then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\"\ + ,\"name\":\"OnlyHttpsForApiApp\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\"\ + ,\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c85538c1-b527-4ce4-bdb4-1dabcb3fd90d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c85538c1-b527-4ce4-bdb4-1dabcb3fd90d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1470 - Emergency\ + \ Shutoff\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Physical and Environmental Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1470\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c89ba09f-2e0f-44d0-8095-65b05bd151ef\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c89ba09f-2e0f-44d0-8095-65b05bd151ef\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'Security Options - Interactive Logon'\",\"\ + policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should\ + \ only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines with non-compliant settings in Group Policy category: 'Security\ + \ Options - Interactive Logon'. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"deprecated\"\ + :true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsInteractiveLogon\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c8abcef9-fc26-482f-b8db-5fa60ee4586d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c8abcef9-fc26-482f-b8db-5fa60ee4586d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1018 - Account\ + \ Management | Role-Based Schemes\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Access Control control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1018\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c9121abf-e698-4ee9-b1cf-71ee528ff07f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c9121abf-e698-4ee9-b1cf-71ee528ff07f\"\ + },{\"properties\":{\"displayName\":\"Public network access should be disabled\ + \ for MySQL flexible servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Disabling the public network access property improves security\ + \ by ensuring your Azure Database for MySQL flexible servers can only be accessed\ + \ from a private endpoint. This configuration strictly disables access from\ + \ any public address space outside of Azure IP range and denies all logins\ + \ that match IP or virtual network-based firewall rules.\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"\ + Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/flexibleServers\"\ + },{\"field\":\"Microsoft.DBforMySQL/flexibleServers/publicNetworkAccess\"\ + ,\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c9299215-ae47-4f50-9c54-8a392f68a052\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c9299215-ae47-4f50-9c54-8a392f68a052\"\ + },{\"properties\":{\"displayName\":\"Diagnostic logs in Data Lake Analytics\ + \ should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Audit enabling of diagnostic logs. This enables you to recreate activity\ + \ trails to use for investigation purposes; when a security incident occurs\ + \ or when your network is compromised\",\"metadata\":{\"version\":\"3.0.0\"\ + ,\"category\":\"Data Lake\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"},\"requiredRetentionDays\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required retention (days)\"\ + ,\"description\":\"The required diagnostic logs retention in days\"},\"defaultValue\"\ + :\"365\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeAnalytics/accounts\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\"\ + :{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"\ + anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\"\ + ,\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\"\ + ,\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\"\ + ,\"equals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\"\ + ,\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\"\ + ,\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c95c74d9-38fe-4f0d-af86-0c7d626a315c\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'User Rights Assignment'\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should only be\ + \ used along with its corresponding deploy policy in an initiative. This definition\ + \ allows Azure Policy to process the results of auditing Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'User Rights Assignment'.\ + \ For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_UserRightsAssignment\",\"existenceCondition\":{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c961dac9-5916-42e8-8fb1-703148323994\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c961dac9-5916-42e8-8fb1-703148323994\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs with a pending reboot\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"Indexed\",\"description\":\"This policy creates a Guest Configuration\ + \ assignment to audit Windows virtual machines with a pending reboot. It also\ + \ creates a system-assigned managed identity and deploys the VM extension\ + \ for Guest Configuration. This policy should only be used along with its\ + \ corresponding audit policy in an initiative. For more information on Guest\ + \ Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\"\ + :{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\",\"\ + requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsPendingReboot\",\"deployment\":{\"properties\":{\"mode\"\ + :\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"WindowsPendingReboot\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c96f3246-4382-4264-bf6b-af0b35e23c3c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c96f3246-4382-4264-bf6b-af0b35e23c3c\"\ + },{\"properties\":{\"displayName\":\"Deploy Diagnostic Settings for Network\ + \ Security Groups\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy automatically deploys diagnostic settings to network security\ + \ groups. A storage account with name '{storagePrefixParameter}{NSGLocation}'\ + \ will be automatically created.\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"Monitoring\"},\"parameters\":{\"storagePrefix\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Storage Account Prefix for Regional\ + \ Storage Account\",\"description\":\"This prefix will be combined with the\ + \ network security group location to form the created storage account name.\"\ + }},\"rgName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource\ + \ Group Name for Storage Account (must exist)\",\"description\":\"The resource\ + \ group that the storage account will be created in. This resource group must\ + \ already exist.\",\"strongType\":\"ExistingResourceGroups\"}}},\"policyRule\"\ + :{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups\"\ + },\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\"\ + ,\"name\":\"setbypolicy\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\"\ + ,\"/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"\ + string\"},\"storagePrefix\":{\"type\":\"string\"},\"nsgName\":{\"type\":\"\ + string\"},\"rgName\":{\"type\":\"string\"}},\"variables\":{\"storageDeployName\"\ + :\"[concat('policyStorage_', uniqueString(parameters('location'), parameters('nsgName')))]\"\ + },\"resources\":[{\"type\":\"Microsoft.Network/networkSecurityGroups/providers/diagnosticSettings\"\ + ,\"name\":\"[concat(parameters('nsgName'),'/Microsoft.Insights/setbypolicy')]\"\ + ,\"apiVersion\":\"2017-05-01-preview\",\"location\":\"[parameters('location')]\"\ + ,\"dependsOn\":[\"[variables('storageDeployName')]\"],\"properties\":{\"storageAccountId\"\ + :\"[reference(variables('storageDeployName')).outputs.storageAccountId.value]\"\ + ,\"logs\":[{\"category\":\"NetworkSecurityGroupEvent\",\"enabled\":true,\"\ + retentionPolicy\":{\"enabled\":false,\"days\":0}},{\"category\":\"NetworkSecurityGroupRuleCounter\"\ + ,\"enabled\":true,\"retentionPolicy\":{\"enabled\":false,\"days\":0}}]}},{\"\ + apiVersion\":\"2017-05-10\",\"name\":\"[variables('storageDeployName')]\"\ + ,\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('rgName')]\"\ + ,\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"location\":{\"\ + value\":\"[parameters('location')]\"},\"storagePrefix\":{\"value\":\"[parameters('storagePrefix')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"\ + string\"},\"storagePrefix\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\"\ + :\"2017-06-01\",\"type\":\"Microsoft.Storage/storageAccounts\",\"name\":\"\ + [concat(parameters('storageprefix'), parameters('location'))]\",\"sku\":{\"\ + name\":\"Standard_LRS\",\"tier\":\"Standard\"},\"kind\":\"Storage\",\"location\"\ + :\"[parameters('location')]\",\"tags\":{\"created-by\":\"policy\"},\"scale\"\ + :null,\"properties\":{\"networkAcls\":{\"bypass\":\"AzureServices\",\"defaultAction\"\ + :\"Allow\",\"ipRules\":[],\"virtualNetworkRules\":[]},\"supportsHttpsTrafficOnly\"\ + :true}}],\"outputs\":{\"storageAccountId\":{\"type\":\"string\",\"value\"\ + :\"[resourceId(parameters('rgName'), 'Microsoft.Storage/storageAccounts',concat(parameters('storagePrefix'),\ + \ parameters('location')))]\"}}}}}]},\"parameters\":{\"location\":{\"value\"\ + :\"[field('location')]\"},\"storagePrefix\":{\"value\":\"[parameters('storagePrefix')]\"\ + },\"rgName\":{\"value\":\"[parameters('rgName')]\"},\"nsgName\":{\"value\"\ + :\"[field('name')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c9c29499-c1d1-4195-99bd-2ec9e3a9dc89\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c9c29499-c1d1-4195-99bd-2ec9e3a9dc89\"\ + },{\"properties\":{\"displayName\":\"Storage accounts should allow access\ + \ from trusted Microsoft services\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"Some Microsoft services that interact with storage\ + \ accounts operate from networks that can't be granted access through network\ + \ rules. To help this type of service work as intended, allow the set of trusted\ + \ Microsoft services to bypass the network rules. These services will then\ + \ use strong authentication to access the storage account.\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"The effect determines what happens when the policy rule is evaluated to\ + \ match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\"\ + :\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Storage/storageAccounts\"},{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.bypass\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.bypass\"\ + ,\"notContains\":\"AzureServices\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c9d007d0-c057-4772-b18c-01e546713bcd\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c9d007d0-c057-4772-b18c-01e546713bcd\"\ + },{\"properties\":{\"displayName\":\"App Configuration should use a private\ + \ link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"\ + Private endpoint connections allow clients on a virtual network to securely\ + \ access Azure App Configuration over a private link.\",\"metadata\":{\"version\"\ + :\"1.0.1\",\"category\":\"App Configuration\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.AppConfiguration/configurationStores/privateEndpointConnections\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections/privateLinkServiceConnectionState.status\"\ + ,\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca610c1d-041c-4332-9d88-7ed3094967c7\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1035 - Least\ + \ Privilege | Authorize Access To Security Functions\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Access Control\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1035\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca94b046-45e2-444f-a862-dc8ce262a516\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca94b046-45e2-444f-a862-dc8ce262a516\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1243 - Contingency\ + \ Planning Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Contingency Planning control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1243\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca9a4469-d6df-4ab2-a42f-1213c396f0ec\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca9a4469-d6df-4ab2-a42f-1213c396f0ec\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'Security Options - Microsoft Network Server'\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'Security Options - Microsoft Network\ + \ Server' for disabling SMB v1 server. This policy requires that the Guest\ + \ Configuration prerequisites have been deployed to the policy assignment\ + \ scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\"\ + :\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"\ + ],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\"\ + ,\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Include Arc connected servers\",\"\ + description\":\"By selecting this option, you agree to be charged monthly\ + \ per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"],\"\ + defaultValue\":\"false\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_SecurityOptionsMicrosoftNetworkServer\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/caf2d518-f029-4f6b-833b-d7081702f253\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"caf2d518-f029-4f6b-833b-d7081702f253\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1306 - Identification\ + \ And Authentication (Org. Users) | Net. Access To Priv. Accts. - Replay\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Identification and Authentication control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1306\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cafc6c3c-5fc5-4c5e-a99b-a0ccb1d34eff\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cafc6c3c-5fc5-4c5e-a99b-a0ccb1d34eff\"\ + },{\"properties\":{\"displayName\":\"Remote debugging should be turned off\ + \ for Web Applications\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"\ + description\":\"Remote debugging requires inbound ports to be opened on a\ + \ web application. Remote debugging should be turned off.\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"\ + },{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Web/sites/config/web.remoteDebuggingEnabled\",\"equals\"\ + :\"false\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cb510bfd-1cba-4d9f-a230-cb0976f4bb71\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1486 - Alternate\ + \ Work Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Physical and Environmental Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1486\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cb790345-a51f-43de-934e-98dbfaf9dca5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cb790345-a51f-43de-934e-98dbfaf9dca5\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1167 - Continuous\ + \ Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Security Assessment and Authorization control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1167\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cbb2be76-4891-430b-95a7-ca0b0a3d1300\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cbb2be76-4891-430b-95a7-ca0b0a3d1300\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1374 - Incident\ + \ Response Assistance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this Incident Response control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1374\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cc5c8616-52ef-4e5e-8000-491634ed9249\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cc5c8616-52ef-4e5e-8000-491634ed9249\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs if the Administrators group doesn't contain only specified members\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy\ + \ should only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines in which the Administrators group does not contain only\ + \ the specified members. For more information on Guest Configuration policies,\ + \ please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Guest Configuration\",\"deprecated\":true},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AdministratorsGroupMembers\",\"existenceCondition\":{\"field\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cc7cda28-f867-4311-8497-a526129a8d19\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cc7cda28-f867-4311-8497-a526129a8d19\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Sensitive data in your SQL\ + \ databases should be classified\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"Azure Security Center monitors the data discovery\ + \ and classification scan results for your SQL databases and provides recommendations\ + \ to classify the sensitive data in your databases for better monitoring and\ + \ security\",\"metadata\":{\"version\":\"2.0.0-preview\",\"category\":\"Security\ + \ Center\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"[Preview]: Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"field\":\"type\",\"in\":[\"Microsoft.Sql/servers/databases\",\"Microsoft.Sql/managedInstances/databases\"\ + ]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/assessments\",\"name\":\"b0df6f56-862d-4730-8597-38c0fd4ebd59\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349\"\ + },{\"properties\":{\"displayName\":\"Allowed virtual machine size SKUs\",\"\ + policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ enables you to specify a set of virtual machine size SKUs that your organization\ + \ can deploy.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Compute\"\ + },\"parameters\":{\"listOfAllowedSKUs\":{\"type\":\"Array\",\"metadata\":{\"\ + description\":\"The list of size SKUs that can be specified for virtual machines.\"\ + ,\"displayName\":\"Allowed Size SKUs\",\"strongType\":\"VMSKUs\"}}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"not\":{\"field\":\"Microsoft.Compute/virtualMachines/sku.name\",\"in\"\ + :\"[parameters('listOfAllowedSKUs')]\"}}]},\"then\":{\"effect\":\"Deny\"}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/cccc23c7-8427-4f53-ad12-b6a63eb452b3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cccc23c7-8427-4f53-ad12-b6a63eb452b3\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1443 - Media\ + \ Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"\ + Microsoft implements this Media Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1443\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cd0ec6fa-a2e7-4361-aee4-a8688659a9ed\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cd0ec6fa-a2e7-4361-aee4-a8688659a9ed\"\ + },{\"properties\":{\"displayName\":\"Inherit a tag from the resource group\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds or\ + \ replaces the specified tag and value from the parent resource group when\ + \ any resource is created or updated. Existing resources can be remediated\ + \ by triggering a remediation task.\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"Tag Name\",\"description\":\"Name of the tag,\ + \ such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"[concat('tags[', parameters('tagName'), ']')]\",\"notEquals\":\"[resourceGroup().tags[parameters('tagName')]]\"\ + },{\"value\":\"[resourceGroup().tags[parameters('tagName')]]\",\"notEquals\"\ + :\"\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[',\ + \ parameters('tagName'), ']')]\",\"value\":\"[resourceGroup().tags[parameters('tagName')]]\"\ + }]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cd3aa116-8754-49c9-a813-ad46512ece54\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cd3aa116-8754-49c9-a813-ad46512ece54\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Allow resource creation\ + \ if 'department' tag set\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Allows resource creation only if the 'department' tag is\ + \ set\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Tags\"\ + ,\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"\ + field\":\"tags\",\"containsKey\":\"department\"}},\"then\":{\"effect\":\"\ + Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cd8dc879-a2ae-43c3-8211-1877c5755064\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cd8dc879-a2ae-43c3-8211-1877c5755064\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1582 - Information\ + \ System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this System and Services Acquisition\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1582\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cd9e2f38-259b-462c-bfad-0ad7ab4e65c5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cd9e2f38-259b-462c-bfad-0ad7ab4e65c5\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs that allow re-use of the previous 24 passwords\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should only be\ + \ used along with its corresponding deploy policy in an initiative. This definition\ + \ allows Azure Policy to process the results of auditing Windows virtual machines\ + \ that allow re-use of the previous 24 passwords. For more information on\ + \ Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\"\ + :{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"\ + deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"EnforcePasswordHistory\",\"existenceCondition\":{\"field\":\"\ + Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cdbf72d9-ac9c-4026-8a3a-491a5ac59293\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cdbf72d9-ac9c-4026-8a3a-491a5ac59293\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1104 - Audit\ + \ Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Audit and Accountability control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1104\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cdd8d244-18b2-4306-a1d1-df175ae0935f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cdd8d244-18b2-4306-a1d1-df175ae0935f\"\ + },{\"properties\":{\"displayName\":\"Deploy export to Event Hub for Azure\ + \ Security Center alerts and recommendations\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"All\",\"description\":\"Enable export to Event Hub of Azure Security\ + \ Center alerts and/or recommendations. This policy deploys an export to Event\ + \ Hub configuration with your conditions and target Event Hub on the assigned\ + \ scope. To deploy this policy on newly created subscriptions, open the Compliance\ + \ tab, select the relevant non-compliant assignment and create a remediation\ + \ task.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security Center\"\ + },\"parameters\":{\"resourceGroupName\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Resource group name\",\"description\":\"The resource group\ + \ name where the export to Event Hub configuration is created. If you enter\ + \ a name for a resource group that doesn't exist, it'll be created in the\ + \ subscription. Note that each resource group can only have one export to\ + \ Event Hub configured.\"}},\"resourceGroupLocation\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Resource group location\",\"description\"\ + :\"The location where the resource group and the export to Event Hub configuration\ + \ are created.\",\"strongType\":\"location\"}},\"exportedDataTypes\":{\"type\"\ + :\"Array\",\"metadata\":{\"displayName\":\"Exported data types\",\"description\"\ + :\"The data types to be exported. Example: Security recommendations;Security\ + \ alerts;\"},\"allowedValues\":[\"Security recommendations\",\"Security alerts\"\ + ],\"defaultValue\":[\"Security recommendations\",\"Security alerts\"]},\"\ + recommendationNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"\ + Recommendation IDs\",\"description\":\"Applicable only for export of security\ + \ recommendations. To export all recommendations, leave this empty. To export\ + \ specific recommendations, enter a list of recommendation IDs separated by\ + \ semicolons (';'). Recommendation IDs are available through the Assessments\ + \ API (https://docs.microsoft.com/rest/api/securitycenter/assessments), or\ + \ Azure Resource Graph Explorer (https://portal.azure.com/#blade/HubsExtension/ArgQueryBlade),\ + \ choose securityresources and microsoft.security/assessments.\"},\"defaultValue\"\ + :[]},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\"\ + :\"Recommendation severities\",\"description\":\"Applicable only for export\ + \ of security recommendations. Determines recommendation severities. Example:\ + \ High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\"\ + :[\"High\",\"Medium\",\"Low\"]},\"alertSeverities\":{\"type\":\"Array\",\"\ + metadata\":{\"displayName\":\"Alert severities\",\"description\":\"Applicable\ + \ only for export of security alerts. Determines alert severities. Example:\ + \ High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\"\ + :[\"High\",\"Medium\",\"Low\"]},\"eventHubDetails\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"Event Hub details\",\"description\":\"The Event\ + \ Hub details of where the data should be exported to: Subscription, Event\ + \ Hub Namespace, Event Hub, and Authorizations rules with 'Send' claim. If\ + \ you do not already have an event hub, visit Event Hubs to create one (https://portal.azure.com/#blade/HubsExtension/BrowseResource/resourceType/Microsoft.EventHub%2Fnamespaces).\"\ + ,\"strongType\":\"Microsoft.EventHub/namespaces/eventhubs/authorizationrules\"\ + ,\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"\ + deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\"\ + ,\"name\":\"exportToEventHub\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\"\ + :\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\"\ + ,\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"\ + incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceGroupName\":{\"\ + type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"exportedDataTypes\"\ + :{\"type\":\"array\"},\"recommendationNames\":{\"type\":\"array\"},\"recommendationSeverities\"\ + :{\"type\":\"array\"},\"alertSeverities\":{\"type\":\"array\"},\"eventHubDetails\"\ + :{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\"\ + :\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope for subscription\ + \ {0}\",\"recommendationNamesLength\":\"[length(parameters('recommendationNames'))]\"\ + ,\"recommendationSeveritiesLength\":\"[length(parameters('recommendationSeverities'))]\"\ + ,\"alertSeveritiesLength\":\"[length(parameters('alertSeverities'))]\",\"\ + recommendationNamesLengthIfEmpty\":\"[if(equals(variables('recommendationNamesLength'),\ + \ 0), 1, variables('recommendationNamesLength'))]\",\"recommendationSeveritiesLengthIfEmpty\"\ + :\"[if(equals(variables('recommendationSeveritiesLength'), 0), 1, variables('recommendationSeveritiesLength'))]\"\ + ,\"alertSeveritiesLengthIfEmpty\":\"[if(equals(variables('alertSeveritiesLength'),\ + \ 0), 1, variables('alertSeveritiesLength'))]\",\"totalRuleCombinationsForOneRecommendationName\"\ + :\"[variables('recommendationSeveritiesLengthIfEmpty')]\",\"totalRuleCombinationsForOneRecommendationSeverity\"\ + :1,\"exportedDataTypesLength\":\"[length(parameters('exportedDataTypes'))]\"\ + ,\"exportedDataTypesLengthIfEmpty\":\"[if(equals(variables('exportedDataTypesLength'),\ + \ 0), 1, variables('exportedDataTypesLength'))]\",\"SeperatedEventHubDetails\"\ + :\"[split(parameters('eventHubDetails'),'/')]\",\"dataTypeMap\":{\"Security\ + \ recommendations\":\"Assessments\",\"Security alerts\":\"Alerts\"},\"alertSeverityMap\"\ + :{\"High\":\"high\",\"Medium\":\"medium\",\"Low\":\"low\"},\"ruleSetsForAssessmentsObj\"\ + :{\"copy\":[{\"name\":\"ruleSetsForAssessmentsArr\",\"count\":\"[mul(variables('recommendationNamesLengthIfEmpty'),variables('recommendationSeveritiesLengthIfEmpty'))]\"\ + ,\"input\":{\"rules\":[{\"propertyJPath\":\"[if(equals(variables('recommendationNamesLength'),0),'type','name')]\"\ + ,\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'),0),'Microsoft.Security/assessments',parameters('recommendationNames')[mod(div(copyIndex('ruleSetsForAssessmentsArr'),variables('totalRuleCombinationsForOneRecommendationName')),variables('recommendationNamesLength'))])]\"\ + ,\"operator\":\"Contains\"},{\"propertyJPath\":\"properties.metadata.severity\"\ + ,\"propertyType\":\"string\",\"expectedValue\":\"[parameters('recommendationSeverities')[mod(div(copyIndex('ruleSetsForAssessmentsArr'),variables('totalRuleCombinationsForOneRecommendationSeverity')),variables('recommendationSeveritiesLength'))]]\"\ + ,\"operator\":\"Equals\"}]}}]},\"ruleSetsForAlertsObj\":{\"copy\":[{\"name\"\ + :\"ruleSetsForAlertsArr\",\"count\":\"[variables('alertSeveritiesLengthIfEmpty')]\"\ + ,\"input\":{\"rules\":[{\"propertyJPath\":\"Severity\",\"propertyType\":\"\ + string\",\"expectedValue\":\"[variables('alertSeverityMap')[parameters('alertSeverities')[mod(copyIndex('ruleSetsForAlertsArr'),variables('alertSeveritiesLengthIfEmpty'))]]]\"\ + ,\"operator\":\"Equals\"}]}}]}},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\"\ + ,\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\"\ + ,\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\"\ + :{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\"\ + ,\"name\":\"[concat('nestedAutomationDeployment', '_', parameters('guidValue'))]\"\ + ,\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"\ + [resourceId('Microsoft.Resources/resourceGroups/', parameters('resourceGroupName'))]\"\ + ],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\"\ + :[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\"\ + ,\"name\":\"exportToEventHub\",\"type\":\"Microsoft.Security/automations\"\ + ,\"dependsOn\":[],\"properties\":{\"description\":\"Export Azure Security\ + \ Center alerts and/or recommendations to Event Hub via policy\",\"isEnabled\"\ + :true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}',\ + \ subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"\ + }],\"copy\":[{\"name\":\"sources\",\"count\":\"[variables('exportedDataTypesLengthIfEmpty')]\"\ + ,\"input\":{\"eventSource\":\"[variables('dataTypeMap')[parameters('exportedDataTypes')[copyIndex('sources')]]]\"\ + ,\"ruleSets\":\"[if(equals(parameters('exportedDataTypes')[copyIndex('sources')],\ + \ 'Security recommendations'), variables('ruleSetsForAssessmentsObj').ruleSetsForAssessmentsArr,\ + \ variables('ruleSetsForAlertsObj').ruleSetsForAlertsArr)]\"}}],\"actions\"\ + :[{\"actionType\":\"EventHub\",\"eventHubResourceId\":\"[concat('/', variables('SeperatedEventHubDetails')[1],\ + \ '/', variables('SeperatedEventHubDetails')[2], '/', variables('SeperatedEventHubDetails')[3],\ + \ '/', variables('SeperatedEventHubDetails')[4], '/', variables('SeperatedEventHubDetails')[5],\ + \ '/', variables('SeperatedEventHubDetails')[6], '/', variables('SeperatedEventHubDetails')[7],\ + \ '/', variables('SeperatedEventHubDetails')[8], '/', variables('SeperatedEventHubDetails')[9],\ + \ '/', variables('SeperatedEventHubDetails')[10])]\",\"connectionString\"\ + :\"[listkeys(parameters('eventHubDetails'),'2017-04-01').primaryConnectionString]\"\ + }]}}]}}}]},\"parameters\":{\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"\ + },\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"\ + },\"exportedDataTypes\":{\"value\":\"[parameters('exportedDataTypes')]\"},\"\ + recommendationNames\":{\"value\":\"[parameters('recommendationNames')]\"},\"\ + recommendationSeverities\":{\"value\":\"[parameters('recommendationSeverities')]\"\ + },\"alertSeverities\":{\"value\":\"[parameters('alertSeverities')]\"},\"eventHubDetails\"\ + :{\"value\":\"[parameters('eventHubDetails')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cdfcce10-4578-4ecd-9703-530938e4abcb\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cdfcce10-4578-4ecd-9703-530938e4abcb\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'System Audit Policies - Privilege Use'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'System Audit Policies\ + \ - Privilege Use'. It also creates a system-assigned managed identity and\ + \ deploys the VM extension for Guest Configuration. This policy should only\ + \ be used along with its corresponding audit policy in an initiative. For\ + \ more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\",\"deployment\"\ + :{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"\ + value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\"\ + :\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\"}},\"template\":{\"$schema\"\ + :\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ce2370f6-0ac5-4d85-8ab4-10721cc640b0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ce2370f6-0ac5-4d85-8ab4-10721cc640b0\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1209 - Configuration\ + \ Settings\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1209\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ce669c31-9103-4552-ae9c-cdef4e03580d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ce669c31-9103-4552-ae9c-cdef4e03580d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1242 - Contingency\ + \ Planning Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Contingency Planning control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1242\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cf3b3293-667a-445e-a722-fa0b0afc0958\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cf3b3293-667a-445e-a722-fa0b0afc0958\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1097 - Role-Based\ + \ Security Training | Suspicious Communications And Anomalous System Behavior\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Awareness and Training control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1097\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cf3e4836-f19e-47eb-a8cd-c3ca150452c0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cf3e4836-f19e-47eb-a8cd-c3ca150452c0\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1424 - Maintenance\ + \ Personnel | Individuals Without Appropriate Access\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Maintenance\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1424\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cf55fc87-48e1-4676-a2f8-d9a8cf993283\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cf55fc87-48e1-4676-a2f8-d9a8cf993283\"\ + },{\"properties\":{\"displayName\":\"Diagnostic logs in Key Vault should be\ + \ enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Audit enabling of diagnostic logs. This enables you to recreate activity\ + \ trails to use for investigation purposes when a security incident occurs\ + \ or when your network is compromised\",\"metadata\":{\"version\":\"3.0.0\"\ + ,\"category\":\"Key Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"},\"requiredRetentionDays\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required retention (days)\"\ + ,\"description\":\"The required diagnostic logs retention in days\"},\"defaultValue\"\ + :\"365\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\"\ + :{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"\ + anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\"\ + ,\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\"\ + ,\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\"\ + ,\"equals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\"\ + ,\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\"\ + ,\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cf820ca0-f99e-4f3e-84fb-66e913812d21\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1292 - Information\ + \ System Backup | Test Restoration Using Sampling\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Contingency\ + \ Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1292\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d03516cf-0293-489f-9b32-a18f2a79f836\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d03516cf-0293-489f-9b32-a18f2a79f836\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1724 - Error\ + \ Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Information Integrity control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1724\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d07594d1-0307-4c08-94db-5d71ff31f0f6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d07594d1-0307-4c08-94db-5d71ff31f0f6\"\ + },{\"properties\":{\"displayName\":\"Container registries should not allow\ + \ unrestricted network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Audit container registries that do not have any network\ + \ or firewall (IP) rules configured and so allow all network access by default.\ + \ Restricting network access protects container registries from potential\ + \ threats. Container registries with at least one IP / firewall rule or configured\ + \ virtual network are deemed compliant. For more information on Container\ + \ Registry network rules, visit: https://aka.ms/acr/portal/public-network\ + \ and https://aka.ms/acr/vnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Container Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"\ + ],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"anyof\"\ + :[{\"field\":\"Microsoft.ContainerRegistry/registries/networkRuleSet.defaultAction\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerRegistry/registries/networkRuleSet.defaultAction\"\ + ,\"equals\":\"Allow\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d0793b48-0edc-4296-a390-4c75d1bdfd71\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1084 - Publicly\ + \ Accessible Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1084\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d0eb15db-dd1c-4d1d-b200-b12dd6cd060c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d0eb15db-dd1c-4d1d-b200-b12dd6cd060c\"\ + },{\"properties\":{\"displayName\":\"Add or replace a tag on resource groups\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Adds or replaces\ + \ the specified tag and value when any resource group is created or updated.\ + \ Existing resource groups can be remediated by triggering a remediation task.\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\"\ + :{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag Name\"\ + ,\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag Value\",\"description\"\ + :\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"\ + },{\"field\":\"[concat('tags[', parameters('tagName'), ']')]\",\"notEquals\"\ + :\"[parameters('tagValue')]\"}]},\"then\":{\"effect\":\"modify\",\"details\"\ + :{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[',\ + \ parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/d157c373-a6c4-483d-aaad-570756956268\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d157c373-a6c4-483d-aaad-570756956268\"\ + },{\"properties\":{\"displayName\":\"Enforce SSL connection should be enabled\ + \ for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"Azure Database for PostgreSQL supports connecting\ + \ your Azure Database for PostgreSQL server to client applications using Secure\ + \ Sockets Layer (SSL). Enforcing SSL connections between your database server\ + \ and your client applications helps protect against 'man in the middle' attacks\ + \ by encrypting the data stream between the server and your application. This\ + \ configuration enforces that SSL is always enabled for accessing your database\ + \ server.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"\ + if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"\ + },{\"field\":\"Microsoft.DBforPostgreSQL/servers/sslEnforcement\",\"exists\"\ + :\"true\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/sslEnforcement\"\ + ,\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d158790f-bfb0-486c-8631-2dc6b4e8e6af\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1620 - Denial\ + \ Of Service Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this System and Communications Protection\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1620\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d17c826b-1dec-43e1-a984-7b71c446649c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d17c826b-1dec-43e1-a984-7b71c446649c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1409 - Maintenance\ + \ Tools | Prevent Unauthorized Removal\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Maintenance control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1409\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d1880188-e51a-4772-b2ab-68f5e8bd27f6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d1880188-e51a-4772-b2ab-68f5e8bd27f6\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Audit Function Apps that\ + \ are not using custom domains\",\"policyType\":\"BuiltIn\",\"mode\":\"All\"\ + ,\"description\":\"Use of custom domains protects a Function app from common\ + \ attacks such as phishing and other DNS-related attacks.\",\"metadata\":{\"\ + version\":\"1.0.0-deprecated\",\"category\":\"Security Center\",\"deprecated\"\ + :true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allof\":[{\"\ + field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\"\ + :\"kind\",\"equals\":\"functionapp\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux\"\ + },{\"field\":\"kind\",\"equals\":\"functionapp,linux,container\"}]}]},\"then\"\ + :{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\"\ + ,\"name\":\"UsedCustomDomains\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\"\ + ,\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d1cb47db-b7a1-4c46-814e-aad1c0e84f3c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d1cb47db-b7a1-4c46-814e-aad1c0e84f3c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1195 - Configuration\ + \ Change Control | Automated Document / Notification / Prohibition Of Changes\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Configuration Management control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1195\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d1e1d65c-1013-4484-bd54-991332e6a0d2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d1e1d65c-1013-4484-bd54-991332e6a0d2\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1721 - Spam\ + \ Protection | Central Management\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this System and Information\ + \ Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1721\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d207aaef-7c4d-4f8c-9dce-4d62dfa3d29a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d207aaef-7c4d-4f8c-9dce-4d62dfa3d29a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1106 - Audit\ + \ Events | Reviews And Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Audit and Accountability control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1106\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d2b4feae-61ab-423f-a4c5-0e38ac4464d8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d2b4feae-61ab-423f-a4c5-0e38ac4464d8\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1030 - Information\ + \ Flow Enforcement | Physical / Logical Separation Of Information Flows\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1030\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d3531453-b869-4606-9122-29c1cd6e7ed1\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d3531453-b869-4606-9122-29c1cd6e7ed1\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs on which the DSC configuration is not compliant\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy creates a\ + \ Guest Configuration assignment to audit Windows VMs on which the Desired\ + \ State Configuration (DSC) configuration is not compliant. This policy is\ + \ only applicable to machines with WMF 4 and above. It also creates a system-assigned\ + \ managed identity and deploys the VM extension for Guest Configuration. This\ + \ policy should only be used along with its corresponding audit policy in\ + \ an initiative. For more information on Guest Configuration policies, please\ + \ visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\"\ + ,\"category\":\"Guest Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"\ + ],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"\ + field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsDscConfiguration\",\"deployment\":{\"properties\":{\"mode\"\ + :\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"WindowsDscConfiguration\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d38b4c26-9d2e-47d7-aefe-18d859a8706a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d38b4c26-9d2e-47d7-aefe-18d859a8706a\"\ + },{\"properties\":{\"displayName\":\"Long-term geo-redundant backup should\ + \ be enabled for Azure SQL Databases\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"This policy audits any Azure SQL Database with\ + \ long-term geo-redundant backup not enabled.\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\"\ + :{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},\"then\"\ + :{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies\"\ + ,\"name\":\"default\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies/weeklyRetention\"\ + ,\"notEquals\":\"PT0S\"},{\"field\":\"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies/monthlyRetention\"\ + ,\"notEquals\":\"PT0S\"},{\"field\":\"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies/yearlyRetention\"\ + ,\"notEquals\":\"PT0S\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d38fc420-0735-4ef3-ac11-c806f651a570\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d38fc420-0735-4ef3-ac11-c806f651a570\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1641 - Transmission\ + \ Confidentiality And Integrity | Cryptographic Or Alternate Physical Protection\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this System and Communications Protection control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1641\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d39d4f68-7346-4133-8841-15318a714a24\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d39d4f68-7346-4133-8841-15318a714a24\"\ + },{\"properties\":{\"displayName\":\"Audit Linux machines that don't have\ + \ the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Requires that prerequisites are deployed to\ + \ the policy assignment scope. For details, visit https://aka.ms/gcpol. Machines\ + \ are non-compliant if the Chef InSpec resource indicates that one or more\ + \ of the packages provided by the parameter are not installed.\",\"metadata\"\ + :{\"category\":\"Guest Configuration\",\"version\":\"3.0.0\",\"requiredProviders\"\ + :[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"installed_application_linux\"\ + ,\"version\":\"1.*\",\"configurationParameter\":{\"ApplicationName\":\"[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent\"\ + }}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"ApplicationName\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application names\"\ + ,\"description\":\"A semicolon-separated list of the names of the applications\ + \ that should be installed. e.g. 'python; powershell'\"}}},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\"\ + ,\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"\ + paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"\ + like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\"\ + ,\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"\ + ]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"\ + field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\"\ + ,\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\"\ + ,\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\"\ + ,\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"\ + cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\"\ + ,\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\"\ + ,\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"\ + ]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"\ + equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"\ + then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"installed_application_linux\",\"existenceCondition\":{\"allOf\"\ + :[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent',\ + \ '=', parameters('ApplicationName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d3b823c9-e0fc-4453-9fb2-8213b7338523\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d3b823c9-e0fc-4453-9fb2-8213b7338523\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1249 - Contingency\ + \ Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"\ + Microsoft implements this Contingency Planning control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1249\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d3bf4251-0818-42db-950b-afd5b25a51c2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d3bf4251-0818-42db-950b-afd5b25a51c2\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1562 - Allocation\ + \ Of Resources\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Services Acquisition control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1562\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d4142013-7964-4163-a313-a900301c2cef\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d4142013-7964-4163-a313-a900301c2cef\"\ + },{\"properties\":{\"displayName\":\"Virtual machines should be connected\ + \ to an approved virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"This policy audits any virtual machine connected\ + \ to a virtual network that is not approved.\",\"metadata\":{\"version\":\"\ + 1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The effect\ + \ determines what happens when the policy rule is evaluated to match\"},\"\ + allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"\ + },\"virtualNetworkId\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Virtual network Id\",\"description\":\"Resource Id of the virtual network.\ + \ Example: /subscriptions/YourSubscriptionId/resourceGroups/YourResourceGroupName/providers/Microsoft.Network/virtualNetworks/Name\"\ + }}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkInterfaces\"\ + },{\"not\":{\"field\":\"Microsoft.Network/networkInterfaces/ipconfigurations[*].subnet.id\"\ + ,\"like\":\"[concat(parameters('virtualNetworkId'),'/*')]\"}}]},\"then\":{\"\ + effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d416745a-506c-48b6-8ab1-83cb814bcaa3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d416745a-506c-48b6-8ab1-83cb814bcaa3\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1383 - Incident\ + \ Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Incident Response control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1383\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d4558451-e16a-4d2d-a066-fe12a6282bb9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d4558451-e16a-4d2d-a066-fe12a6282bb9\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'Security Options - Interactive Logon'\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'Security Options - Interactive Logon'\ + \ for displaying last user name and requiring ctrl-alt-del. This policy requires\ + \ that the Guest Configuration prerequisites have been deployed to the policy\ + \ assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\"\ + :{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\"\ + :[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsInteractiveLogon\"\ + ,\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Include Arc connected servers\",\"\ + description\":\"By selecting this option, you agree to be charged monthly\ + \ per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"],\"\ + defaultValue\":\"false\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_SecurityOptionsInteractiveLogon\",\"existenceCondition\":{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d472d2c9-d6a3-4500-9f5f-b15f123005aa\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d472d2c9-d6a3-4500-9f5f-b15f123005aa\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1112 - Response\ + \ To Audit Processing Failures\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Audit and Accountability control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1112\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d530aad8-4ee2-45f4-b234-c061dae683c0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d530aad8-4ee2-45f4-b234-c061dae683c0\"\ + },{\"properties\":{\"displayName\":\"Deploy Diagnostic Settings for Data Lake\ + \ Analytics to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Deploys the diagnostic settings for Data Lake\ + \ Analytics to stream to a regional Log Analytics workspace when any Data\ + \ Lake Analytics which is missing this diagnostic settings is created or updated.\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"\ + },\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile\ + \ name\",\"description\":\"The diagnostic settings profile name\"},\"defaultValue\"\ + :\"setbypolicy_logAnalytics\"},\"logAnalytics\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Log Analytics workspace\",\"description\":\"Select Log\ + \ Analytics workspace from dropdown list. If this workspace is outside of\ + \ the scope of the assignment you must manually grant 'Log Analytics Contributor'\ + \ permissions (or similar) to the policy assignment's principal ID.\",\"strongType\"\ + :\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Enable metrics\",\"description\"\ + :\"Whether to enable metrics stream to the Log Analytics workspace - True\ + \ or False\"},\"allowedValues\":[\"True\",\"False\"],\"defaultValue\":\"False\"\ + },\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable\ + \ logs\",\"description\":\"Whether to enable logs stream to the Log Analytics\ + \ workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"],\"defaultValue\"\ + :\"True\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeAnalytics/accounts\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\"\ + ,\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"\ + /providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\"\ + ,\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\"\ + :\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\"\ + :\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"\ + type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"\ + resources\":[{\"type\":\"Microsoft.DataLakeAnalytics/accounts/providers/diagnosticSettings\"\ + ,\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'),\ + \ '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"\ + [parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\"\ + :\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\"\ + ,\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\"\ + :false,\"days\":0}}],\"logs\":[{\"category\":\"Audit\",\"enabled\":\"[parameters('logsEnabled')]\"\ + },{\"category\":\"Requests\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"\ + outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"\ + },\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\"\ + :\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"\ + },\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\"\ + :{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d56a5a7c-72d7-42bc-8ceb-3baf4c0eae03\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d56a5a7c-72d7-42bc-8ceb-3baf4c0eae03\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1585 - Security\ + \ Engineering Principles\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this System and Services Acquisition\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1585\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d57f8732-5cdc-4cda-8d27-ab148e1f3a55\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d57f8732-5cdc-4cda-8d27-ab148e1f3a55\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1667 - System\ + \ And Information Integrity Policy And Procedures\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this System and\ + \ Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1667\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d61880dc-6e38-4f2a-a30c-3406a98f8220\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d61880dc-6e38-4f2a-a30c-3406a98f8220\"\ + },{\"properties\":{\"displayName\":\"Log Analytics agent health issues should\ + \ be resolved on your machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\"\ + ,\"description\":\"Security Center uses the Log Analytics agent, formerly\ + \ known as the Microsoft Monitoring Agent (MMA). To make sure your virtual\ + \ machines are successfully monitored, you need to make sure the agent is\ + \ installed on the virtual machines and properly collects security events\ + \ to the configured workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Security Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"in\":[\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachines\"\ + ]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/assessments\",\"name\":\"8e2b96ff-3de2-289b-b5c1-3b9921a3441e\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d62cfe2b-3ab0-4d41-980d-76803b58ca65\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d62cfe2b-3ab0-4d41-980d-76803b58ca65\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1150 - Security\ + \ Assessments | External Organizations\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Security Assessment\ + \ and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1150\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d630429d-e763-40b1-8fba-d20ba7314afb\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d630429d-e763-40b1-8fba-d20ba7314afb\"\ + },{\"properties\":{\"displayName\":\"Event Hub should use a virtual network\ + \ service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy audits any Event Hub not configured to use a virtual network\ + \ service endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"equals\":\"Microsoft.EventHub/namespaces\"},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/virtualNetworkRules\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.EventHub/namespaces/virtualNetworkRules/virtualNetworkSubnetId\"\ + ,\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d63edb4a-c612-454d-b47d-191a724fcbf0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d63edb4a-c612-454d-b47d-191a724fcbf0\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1549 - Vulnerability\ + \ Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Risk Assessment control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1549\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d6976a08-d969-4df2-bb38-29556c2eb48a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d6976a08-d969-4df2-bb38-29556c2eb48a\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Log Analytics agent should\ + \ be installed on your Windows Azure Arc machines\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"This policy audits Windows Azure Arc\ + \ machines if the Log Analytics agent is not installed.\",\"metadata\":{\"\ + version\":\"1.0.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Preview]: Effect\",\"description\":\"Enable or disable the execution of\ + \ the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\"\ + :\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\"\ + ,\"like\":\"windows*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"\ + existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\"\ + ,\"equals\":\"MicrosoftMonitoringAgent\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\"\ + ,\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\"\ + ,\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'Security Options - Microsoft Network Client'\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'Security Options - Microsoft Network\ + \ Client' for Microsoft network client/server and SMB v1. This policy requires\ + \ that the Guest Configuration prerequisites have been deployed to the policy\ + \ assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\"\ + :{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\"\ + :[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\"\ + ,\"version\":\"1.*\",\"configurationParameter\":{\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\"\ + :\"Microsoft network client: Digitally sign communications (always);ExpectedValue\"\ + ,\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":\"\ + Microsoft network client: Send unencrypted password to third-party SMB servers;ExpectedValue\"\ + ,\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\"\ + :\"Microsoft network server: Amount of idle time required before suspending\ + \ session;ExpectedValue\",\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\"\ + :\"Microsoft network server: Digitally sign communications (always);ExpectedValue\"\ + ,\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":\"Microsoft\ + \ network server: Disconnect clients when logon hours expire;ExpectedValue\"\ + }}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft network client:\ + \ Digitally sign communications (always)\",\"description\":\"Specifies whether\ + \ packet signing is required by the SMB client component.\"},\"defaultValue\"\ + :\"1\"},\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft network client:\ + \ Send unencrypted password to third-party SMB servers\",\"description\":\"\ + Specifies whether the SMB redirector will send plaintext passwords during\ + \ authentication to third-party SMB servers that do not support password encryption.\ + \ It is recommended that you disable this policy setting unless there is a\ + \ strong business case to enable it.\"},\"defaultValue\":\"0\"},\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft network server:\ + \ Amount of idle time required before suspending session\",\"description\"\ + :\"Specifies the amount of continuous idle time that must pass in an SMB session\ + \ before the session is suspended because of inactivity. The format of the\ + \ value is two integers separated by a comma, denoting an inclusive range.\"\ + },\"defaultValue\":\"1,15\"},\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft network server:\ + \ Digitally sign communications (always)\",\"description\":\"Specifies whether\ + \ packet signing is required by the SMB server component.\"},\"defaultValue\"\ + :\"1\"},\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft network server:\ + \ Disconnect clients when logon hours expire\",\"description\":\"Specifies\ + \ whether to disconnect users who are connected to the local computer outside\ + \ their user account's valid logon hours. This setting affects the Server\ + \ Message Block (SMB) component. If you enable this policy setting you should\ + \ also enable 'Network security: Force logoff when logon hours expire'\"},\"\ + defaultValue\":\"1\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of this policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_SecurityOptionsMicrosoftNetworkClient\",\"existenceCondition\"\ + :{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Microsoft network client: Digitally sign communications\ + \ (always);ExpectedValue', '=', parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways'),\ + \ ',', 'Microsoft network client: Send unencrypted password to third-party\ + \ SMB servers;ExpectedValue', '=', parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers'),\ + \ ',', 'Microsoft network server: Amount of idle time required before suspending\ + \ session;ExpectedValue', '=', parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession'),\ + \ ',', 'Microsoft network server: Digitally sign communications (always);ExpectedValue',\ + \ '=', parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways'),\ + \ ',', 'Microsoft network server: Disconnect clients when logon hours expire;ExpectedValue',\ + \ '=', parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')))]\"\ + }]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d6c69680-54f0-4349-af10-94dd05f4225e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d6c69680-54f0-4349-af10-94dd05f4225e\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1473 - Emergency\ + \ Power\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"\ + Microsoft implements this Physical and Environmental Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1473\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d7047705-d719-46a7-8bb0-76ad233eba71\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d7047705-d719-46a7-8bb0-76ad233eba71\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1529 - Third-Party\ + \ Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1529\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d74fdc92-1cb8-4a34-9978-8556425cd14c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d74fdc92-1cb8-4a34-9978-8556425cd14c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1350 - Identification\ + \ And Authentication (Non-Org. Users) | Use Of FICAM-Issued Profiles\",\"\ + policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements\ + \ this Identification and Authentication control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1350\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d77fd943-6ba6-4a21-ba07-22b03e347cc4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d77fd943-6ba6-4a21-ba07-22b03e347cc4\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows Server VMs on which Windows Serial Console is not enabled\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should only be\ + \ used along with its corresponding deploy policy in an initiative. This definition\ + \ allows Azure Policy to process the results of auditing Windows Server virtual\ + \ machines on which Windows Serial Console is not enabled. For more information\ + \ on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"\ + metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsSerialConsole\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d7ccd0ca-8d78-42af-a43d-6b7f928accbc\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d7ccd0ca-8d78-42af-a43d-6b7f928accbc\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1016 - Account\ + \ Management | Automated Audit Actions\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Access Control control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1016\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d8b43277-512e-40c3-ab00-14b3b6e72238\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d8b43277-512e-40c3-ab00-14b3b6e72238\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1488 - Alternate\ + \ Work Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Physical and Environmental Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1488\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d8ef30eb-a44f-47af-8524-ac19a36d41d2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d8ef30eb-a44f-47af-8524-ac19a36d41d2\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1577 - Acquisition\ + \ Process | Continuous Monitoring Plan\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this System and Services\ + \ Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1577\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d922484a-8cfc-4a6b-95a4-77d6a685407f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d922484a-8cfc-4a6b-95a4-77d6a685407f\"\ + },{\"properties\":{\"displayName\":\"Public network access should be disabled\ + \ for MySQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Disabling the public network access property improves security by ensuring\ + \ your Azure Database for MySQL can only be accessed from a private endpoint.\ + \ This configuration strictly disables access from any public address space\ + \ outside of Azure IP range, and denies all logins that match IP or virtual\ + \ network-based firewall rules.\",\"metadata\":{\"version\":\"1.0.1\",\"category\"\ + :\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\"\ + :\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.DBforMySQL/servers\"},{\"field\":\"Microsoft.DBforMySQL/servers/publicNetworkAccess\"\ + ,\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d9844e8a-1437-4aeb-a32c-0c992f056095\"\ + },{\"properties\":{\"displayName\":\"Audit Windows machines that do not store\ + \ passwords using reversible encryption\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Requires that prerequisites are deployed to\ + \ the policy assignment scope. For details, visit https://aka.ms/gcpol. Machines\ + \ are non-compliant if Windows machines that do not store passwords using\ + \ reversible encryption\",\"metadata\":{\"category\":\"Guest Configuration\"\ + ,\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"\ + ],\"guestConfiguration\":{\"name\":\"StorePasswordsUsingReversibleEncryption\"\ + ,\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Include Arc connected servers\",\"\ + description\":\"By selecting this option, you agree to be charged monthly\ + \ per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"],\"\ + defaultValue\":\"false\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + StorePasswordsUsingReversibleEncryption\",\"existenceCondition\":{\"field\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da0f98fe-a24b-4ad5-af69-bd0400233661\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da0f98fe-a24b-4ad5-af69-bd0400233661\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1271 - Alternate\ + \ Storage Site | Accessibility\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Contingency Planning control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1271\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da3bfb53-9c46-4010-b3db-a7ba1296dada\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da3bfb53-9c46-4010-b3db-a7ba1296dada\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1516 - Personnel\ + \ Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1516\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da3cd269-156f-435b-b472-c3af34c032ed\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da3cd269-156f-435b-b472-c3af34c032ed\"\ + },{\"properties\":{\"displayName\":\"Deploy Diagnostic Settings for Batch\ + \ Account to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"\ + description\":\"Deploys the diagnostic settings for Batch Account to stream\ + \ to a regional Event Hub when any Batch Account which is missing this diagnostic\ + \ settings is created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"\ + category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"},\"profileName\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Profile name\",\"description\"\ + :\"The diagnostic settings profile name\"},\"defaultValue\":\"setbypolicy_eventHub\"\ + },\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"\ + Event Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization\ + \ rule Id for Azure Diagnostics. The authorization rule needs to be at Event\ + \ Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource\ + \ group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization\ + \ rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\"\ + ,\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"Event Hub Location\",\"description\":\"The location\ + \ the Event Hub resides in. Only Batch Accounts in this location will be linked\ + \ to this Event Hub.\",\"strongType\":\"location\"},\"defaultValue\":\"\"\ + },\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"\ + Enable metrics\",\"description\":\"Whether to enable metrics stream to the\ + \ Event Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"],\"defaultValue\"\ + :\"False\"},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Enable logs\",\"description\":\"Whether to enable logs stream to the Event\ + \ Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"],\"defaultValue\"\ + :\"True\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Batch/batchAccounts\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\"\ + ,\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\"\ + ,\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"\ + /providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\"\ + :\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\"\ + :\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"\ + type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"\ + resources\":[{\"type\":\"Microsoft.Batch/batchAccounts/providers/diagnosticSettings\"\ + ,\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'),\ + \ '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"\ + [parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\"\ + :\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\"\ + ,\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\"\ + :false,\"days\":0}}],\"logs\":[{\"category\":\"ServiceLog\",\"enabled\":\"\ + [parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\"\ + :{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"\ + },\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\"\ + :{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\"\ + :\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"\ + }}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/db51110f-0865-4a6e-b274-e2e07a5b2cd7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"db51110f-0865-4a6e-b274-e2e07a5b2cd7\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1277 - Alternate\ + \ Processing Site | Priority Of Service\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Contingency Planning\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1277\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dc43e829-3d50-4a0a-aa0f-428d551862aa\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dc43e829-3d50-4a0a-aa0f-428d551862aa\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1439 - Media\ + \ Sanitization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Media Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1439\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dce72873-c5f1-47c3-9b4f-6b8207fd5a45\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dce72873-c5f1-47c3-9b4f-6b8207fd5a45\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1264 - Contingency\ + \ Plan Testing | Coordinate With Related Plans\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Contingency\ + \ Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1264\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd280d4b-50a1-42fb-a479-ece5878acf19\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd280d4b-50a1-42fb-a479-ece5878acf19\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Audit Web Applications\ + \ that are not using custom domains\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"All\",\"description\":\"Use of custom domains protects a web application\ + \ from common attacks such as phishing and other DNS-related attacks.\",\"\ + metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security Center\"\ + ,\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Deprecated]: Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\"\ + :{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\"\ + :[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"\ + WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\"\ + ,\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"\ + UsedCustomDomains\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\"\ + ,\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd2ea520-6b06-45c3-806e-ea297c23e06a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd2ea520-6b06-45c3-806e-ea297c23e06a\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'System Audit Policies - Policy Change'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy\ + \ should only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines with non-compliant settings in Group Policy category: 'System\ + \ Audit Policies - Policy Change'. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"deprecated\"\ + :true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd4680ed-0559-4a6a-ad10-081d14cbb484\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd4680ed-0559-4a6a-ad10-081d14cbb484\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1715 - Software,\ + \ Firmware, And Information Integrity | Automated Response To Integrity Violations\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this System and Information Integrity control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1715\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd469ae0-71a8-4adc-aafc-de6949ca3339\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd469ae0-71a8-4adc-aafc-de6949ca3339\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1678 - Malicious\ + \ Code Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Information Integrity control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1678\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd533cb0-b416-4be7-8e86-4d154824dfd7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd533cb0-b416-4be7-8e86-4d154824dfd7\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1391 - Information\ + \ Spillage Response | Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Incident Response control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1391\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd6ac1a1-660e-4810-baa8-74e868e2ed47\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd6ac1a1-660e-4810-baa8-74e868e2ed47\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1146 - Security\ + \ Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Security Assessment and Authorization control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1146\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd83410c-ecb6-4547-8f14-748c3cbdc7ac\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd83410c-ecb6-4547-8f14-748c3cbdc7ac\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1602 - Developer\ + \ Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this System and Services\ + \ Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1602\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ddae2e97-a449-499f-a1c8-aea4a7e52ec9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ddae2e97-a449-499f-a1c8-aea4a7e52ec9\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'Security Settings - Account Policies'\",\"\ + policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should\ + \ only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines with non-compliant settings in Group Policy category: 'Security\ + \ Settings - Account Policies'. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"deprecated\"\ + :true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecuritySettingsAccountPolicies\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ddb53c61-9db4-41d4-a953-2abff5b66c12\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ddb53c61-9db4-41d4-a953-2abff5b66c12\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'Security Options - Recovery console'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'Security Options\ + \ - Recovery console'. It also creates a system-assigned managed identity\ + \ and deploys the VM extension for Guest Configuration. This policy should\ + \ only be used along with its corresponding audit policy in an initiative.\ + \ For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Recovery\ + \ console: Allow floppy copy and access to all drives and all folders\",\"\ + description\":\"Specifies whether to make the Recovery Console SET command\ + \ available, which allows setting of recovery console environment variables.\"\ + },\"defaultValue\":\"0\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"\ + field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsRecoveryconsole\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Recovery console: Allow floppy copy and access\ + \ to all drives and all folders;ExpectedValue', '=', parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')))]\"\ + },\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\"\ + :{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\"\ + :\"AzureBaseline_SecurityOptionsRecoveryconsole\"},\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\"\ + :{\"value\":\"[parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Recovery console:\ + \ Allow floppy copy and access to all drives and all folders;ExpectedValue\"\ + ,\"value\":\"[parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Recovery console:\ + \ Allow floppy copy and access to all drives and all folders;ExpectedValue\"\ + ,\"value\":\"[parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\"\ + ,\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\"\ + ,\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ddc0a4d5-5e08-43d5-9fd9-b586d8d7116b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ddc0a4d5-5e08-43d5-9fd9-b586d8d7116b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1689 - Information\ + \ System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Information Integrity control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1689\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/de901f2f-a01a-4456-97f0-33cda7966172\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"de901f2f-a01a-4456-97f0-33cda7966172\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Deploy Dependency agent to\ + \ hybrid Linux Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"This policy deploys the Dependency agent to Linux\ + \ Azure Arc machines if the agent isn't installed.\",\"metadata\":{\"version\"\ + :\"1.1.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]},\"\ + then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\"\ + ,\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\ + ],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\"\ + ,\"equals\":\"DependencyAgentLinux\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\"\ + ,\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"\ + Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\"\ + :\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\"\ + ,\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"\ + DependencyAgentLinux\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\"\ + ,\"vmExtensionType\":\"DependencyAgentLinux\"},\"resources\":[{\"name\":\"\ + [concat(parameters('vmName'), '/', variables('vmExtensionName'))]\",\"type\"\ + :\"Microsoft.HybridCompute/machines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"apiVersion\":\"2019-12-12\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\"\ + ,\"type\":\"[variables('vmExtensionType')]\",\"settings\":{}}}],\"outputs\"\ + :{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled DA extension\ + \ for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"\ + value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + }}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/deacecc0-9f84-44d2-bb82-46f32d766d43\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deacecc0-9f84-44d2-bb82-46f32d766d43\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1528 - Access\ + \ Agreements\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1528\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/deb9797c-22f8-40e8-b342-a84003c924e6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deb9797c-22f8-40e8-b342-a84003c924e6\"\ + },{\"properties\":{\"displayName\":\"MariaDB server should use a virtual network\ + \ service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Virtual network based firewall rules are used to enable traffic from a\ + \ specific subnet to Azure Database for MariaDB while ensuring the traffic\ + \ stays within the Azure boundary. This policy provides a way to audit if\ + \ the Azure Database for MariaDB has virtual network service endpoint being\ + \ used.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMariaDB/servers\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.DBforMariaDB/servers/virtualNetworkRules\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.DBforMariaDB/servers/virtualNetworkRules/virtualNetworkSubnetId\"\ + ,\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dfbd9a64-6114-48de-a47d-90574dc2e489\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dfbd9a64-6114-48de-a47d-90574dc2e489\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1673 - Flaw\ + \ Remediation | Automated Flaw Remediation Status\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this System and\ + \ Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1673\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dff0b90d-5a6f-491c-b2f8-b90aa402d844\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dff0b90d-5a6f-491c-b2f8-b90aa402d844\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'User Rights Assignment'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Windows machines should have the specified Group Policy\ + \ settings in the category 'User Rights Assignment' for allowing log on locally,\ + \ RDP, access from the network, and many other user activities. This policy\ + \ requires that the Guest Configuration prerequisites have been deployed to\ + \ the policy assignment scope. For details, visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"AzureBaseline_UserRightsAssignment\",\"version\":\"1.*\",\"configurationParameter\"\ + :{\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":\"Access this computer\ + \ from the network;ExpectedValue\",\"UsersOrGroupsThatMayLogOnLocally\":\"\ + Allow log on locally;ExpectedValue\",\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\"\ + :\"Allow log on through Remote Desktop Services;ExpectedValue\",\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\"\ + :\"Deny access to this computer from the network;ExpectedValue\",\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\"\ + :\"Manage auditing and security log;ExpectedValue\",\"UsersOrGroupsThatMayBackUpFilesAndDirectories\"\ + :\"Back up files and directories;ExpectedValue\",\"UsersOrGroupsThatMayChangeTheSystemTime\"\ + :\"Change the system time;ExpectedValue\",\"UsersOrGroupsThatMayChangeTheTimeZone\"\ + :\"Change the time zone;ExpectedValue\",\"UsersOrGroupsThatMayCreateATokenObject\"\ + :\"Create a token object;ExpectedValue\",\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\"\ + :\"Deny log on as a batch job;ExpectedValue\",\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\"\ + :\"Deny log on as a service;ExpectedValue\",\"UsersAndGroupsThatAreDeniedLocalLogon\"\ + :\"Deny log on locally;ExpectedValue\",\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\"\ + :\"Deny log on through Remote Desktop Services;ExpectedValue\",\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\"\ + :\"Force shutdown from a remote system;ExpectedValue\",\"UsersAndGroupsThatMayRestoreFilesAndDirectories\"\ + :\"Restore files and directories;ExpectedValue\",\"UsersAndGroupsThatMayShutDownTheSystem\"\ + :\"Shut down the system;ExpectedValue\",\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\"\ + :\"Take ownership of files or other objects;ExpectedValue\"}}},\"parameters\"\ + :{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Include Arc connected servers\",\"description\":\"By selecting this option,\ + \ you agree to be charged monthly per Arc connected machine.\"},\"allowedValues\"\ + :[\"true\",\"false\"],\"defaultValue\":\"false\"},\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users or groups that\ + \ may access this computer from the network\",\"description\":\"Specifies\ + \ which remote users on the network are permitted to connect to the computer.\ + \ This does not include Remote Desktop Connection.\"},\"defaultValue\":\"\ + Administrators, Authenticated Users\"},\"UsersOrGroupsThatMayLogOnLocally\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users or groups that\ + \ may log on locally\",\"description\":\"Specifies which users or groups can\ + \ interactively log on to the computer. Users who attempt to log on via Remote\ + \ Desktop Connection or IIS also require this user right.\"},\"defaultValue\"\ + :\"Administrators\"},\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users or groups that\ + \ may log on through Remote Desktop Services\",\"description\":\"Specifies\ + \ which users or groups are permitted to log on as a Terminal Services client,\ + \ Remote Desktop, or for Remote Assistance.\"},\"defaultValue\":\"Administrators,\ + \ Remote Desktop Users\"},\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users and groups that\ + \ are denied access to this computer from the network\",\"description\":\"\ + Specifies which users or groups are explicitly prohibited from connecting\ + \ to the computer across the network.\"},\"defaultValue\":\"Guests\"},\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users or groups that\ + \ may manage auditing and security log\",\"description\":\"Specifies users\ + \ and groups permitted to change the auditing options for files and directories\ + \ and clear the Security log.\"},\"defaultValue\":\"Administrators\"},\"UsersOrGroupsThatMayBackUpFilesAndDirectories\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users or groups that\ + \ may back up files and directories\",\"description\":\"Specifies users and\ + \ groups allowed to circumvent file and directory permissions to back up the\ + \ system.\"},\"defaultValue\":\"Administrators, Backup Operators\"},\"UsersOrGroupsThatMayChangeTheSystemTime\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users or groups that\ + \ may change the system time\",\"description\":\"Specifies which users and\ + \ groups are permitted to change the time and date on the internal clock of\ + \ the computer.\"},\"defaultValue\":\"Administrators, LOCAL SERVICE\"},\"\ + UsersOrGroupsThatMayChangeTheTimeZone\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Users or groups that may change the time zone\",\"description\"\ + :\"Specifies which users and groups are permitted to change the time zone\ + \ of the computer.\"},\"defaultValue\":\"Administrators, LOCAL SERVICE\"},\"\ + UsersOrGroupsThatMayCreateATokenObject\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Users or groups that may create a token object\",\"description\"\ + :\"Specifies which users and groups are permitted to create an access token,\ + \ which may provide elevated rights to access sensitive data.\"},\"defaultValue\"\ + :\"No One\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Users and groups that are denied\ + \ logging on as a batch job\",\"description\":\"Specifies which users and\ + \ groups are explicitly not permitted to log on to the computer as a batch\ + \ job (i.e. scheduled task).\"},\"defaultValue\":\"Guests\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users and groups that\ + \ are denied logging on as a service\",\"description\":\"Specifies which service\ + \ accounts are explicitly not permitted to register a process as a service.\"\ + },\"defaultValue\":\"Guests\"},\"UsersAndGroupsThatAreDeniedLocalLogon\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Users and groups that are\ + \ denied local logon\",\"description\":\"Specifies which users and groups\ + \ are explicitly not permitted to log on to the computer.\"},\"defaultValue\"\ + :\"Guests\"},\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users and groups that\ + \ are denied log on through Remote Desktop Services\",\"description\":\"Specifies\ + \ which users and groups are explicitly not permitted to log on to the computer\ + \ via Terminal Services/Remote Desktop Client.\"},\"defaultValue\":\"Guests\"\ + },\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"User and groups that may force shutdown from\ + \ a remote system\",\"description\":\"Specifies which users and groups are\ + \ permitted to shut down the computer from a remote location on the network.\"\ + },\"defaultValue\":\"Administrators\"},\"UsersAndGroupsThatMayRestoreFilesAndDirectories\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users and groups that\ + \ may restore files and directories\",\"description\":\"Specifies which users\ + \ and groups are permitted to bypass file, directory, registry, and other\ + \ persistent object permissions when restoring backed up files and directories.\"\ + },\"defaultValue\":\"Administrators, Backup Operators\"},\"UsersAndGroupsThatMayShutDownTheSystem\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users and groups that\ + \ may shut down the system\",\"description\":\"Specifies which users and groups\ + \ who are logged on locally to the computers in your environment are permitted\ + \ to shut down the operating system with the Shut Down command.\"},\"defaultValue\"\ + :\"Administrators\"},\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users or groups that\ + \ may take ownership of files or other objects\",\"description\":\"Specifies\ + \ which users and groups are permitted to take ownership of files, folders,\ + \ registry keys, processes, or threads. This user right bypasses any permissions\ + \ that are in place to protect objects to give ownership to the specified\ + \ user.\"},\"defaultValue\":\"Administrators\"},\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_UserRightsAssignment\",\"existenceCondition\":{\"allOf\":[{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Access this computer from the network;ExpectedValue',\ + \ '=', parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork'),\ + \ ',', 'Allow log on locally;ExpectedValue', '=', parameters('UsersOrGroupsThatMayLogOnLocally'),\ + \ ',', 'Allow log on through Remote Desktop Services;ExpectedValue', '=',\ + \ parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices'), ',',\ + \ 'Deny access to this computer from the network;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork'),\ + \ ',', 'Manage auditing and security log;ExpectedValue', '=', parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog'),\ + \ ',', 'Back up files and directories;ExpectedValue', '=', parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories'),\ + \ ',', 'Change the system time;ExpectedValue', '=', parameters('UsersOrGroupsThatMayChangeTheSystemTime'),\ + \ ',', 'Change the time zone;ExpectedValue', '=', parameters('UsersOrGroupsThatMayChangeTheTimeZone'),\ + \ ',', 'Create a token object;ExpectedValue', '=', parameters('UsersOrGroupsThatMayCreateATokenObject'),\ + \ ',', 'Deny log on as a batch job;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob'),\ + \ ',', 'Deny log on as a service;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService'),\ + \ ',', 'Deny log on locally;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLocalLogon'),\ + \ ',', 'Deny log on through Remote Desktop Services;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices'),\ + \ ',', 'Force shutdown from a remote system;ExpectedValue', '=', parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem'),\ + \ ',', 'Restore files and directories;ExpectedValue', '=', parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories'),\ + \ ',', 'Shut down the system;ExpectedValue', '=', parameters('UsersAndGroupsThatMayShutDownTheSystem'),\ + \ ',', 'Take ownership of files or other objects;ExpectedValue', '=', parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')))]\"\ + }]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e068b215-0026-4354-b347-8fb2766f73a2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e068b215-0026-4354-b347-8fb2766f73a2\"\ + },{\"properties\":{\"displayName\":\"Cosmos DB should use a virtual network\ + \ service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy audits any Cosmos DB not configured to use a virtual network\ + \ service endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\"\ + :\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/virtualNetworkRules[*].id\"\ + ,\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/e0a2b1a3-f7f9-4569-807f-2a9edebdf4d9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e0a2b1a3-f7f9-4569-807f-2a9edebdf4d9\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'Administrative Templates - MSS (Legacy)'\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'Administrative Templates - MSS (Legacy)'\ + \ for automatic logon, screen saver, network behavior, safe DLL, and event\ + \ log. This policy requires that the Guest Configuration prerequisites have\ + \ been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\",\"version\":\"\ + 1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of this policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_AdminstrativeTemplatesMSSLegacy\",\"existenceCondition\":{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e0a7e899-2ce2-4253-8a13-d808fdeb75af\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e0a7e899-2ce2-4253-8a13-d808fdeb75af\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1206 - Access\ + \ Restrictions For Change | Limit Production / Operational Privileges\",\"\ + policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements\ + \ this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1206\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e0de232d-02a0-4652-872d-88afb4ae5e91\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e0de232d-02a0-4652-872d-88afb4ae5e91\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs that do not have the specified Windows PowerShell execution\ + \ policy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy creates a Guest Configuration assignment to audit Windows virtual\ + \ machines where Windows PowerShell is not configured to use the specified\ + \ PowerShell execution policy. It also creates a system-assigned managed identity\ + \ and deploys the VM extension for Guest Configuration. This policy should\ + \ only be used along with its corresponding audit policy in an initiative.\ + \ For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"ExecutionPolicy\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: PowerShell Execution Policy\",\"description\":\"The expected\ + \ PowerShell execution policy.\"},\"allowedValues\":[\"AllSigned\",\"Bypass\"\ + ,\"Default\",\"RemoteSigned\",\"Restricted\",\"Undefined\",\"Unrestricted\"\ + ]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"\ + equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"\ + Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\"\ + ,\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\"\ + ,\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsPowerShellExecutionPolicy\",\"existenceCondition\":{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy',\ + \ '=', parameters('ExecutionPolicy')))]\"},\"deployment\":{\"properties\"\ + :{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"WindowsPowerShellExecutionPolicy\"\ + },\"ExecutionPolicy\":{\"value\":\"[parameters('ExecutionPolicy')]\"}},\"\ + template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"ExecutionPolicy\":{\"type\":\"string\"}},\"resources\"\ + :[{\"condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy\"\ + ,\"value\":\"[parameters('ExecutionPolicy')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy\"\ + ,\"value\":\"[parameters('ExecutionPolicy')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e0efc13a-122a-47c5-b817-2ccfe5d12615\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e0efc13a-122a-47c5-b817-2ccfe5d12615\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1714 - Software,\ + \ Firmware, And Information Integrity | Automated Notifications Of Integrity\ + \ Violations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Information Integrity control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1714\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e12494fa-b81e-4080-af71-7dbacc2da0ec\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e12494fa-b81e-4080-af71-7dbacc2da0ec\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1686 - Information\ + \ System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Information Integrity control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1686\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e17085c5-0be8-4423-b39b-a52d3d1402e5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e17085c5-0be8-4423-b39b-a52d3d1402e5\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1722 - Spam\ + \ Protection | Automatic Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this System and Information Integrity\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1722\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e1da06bd-25b6-4127-a301-c313d6873fff\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e1da06bd-25b6-4127-a301-c313d6873fff\"\ + },{\"properties\":{\"displayName\":\"Vulnerabilities in security configuration\ + \ on your machines should be remediated\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"All\",\"description\":\"Servers which do not satisfy the configured baseline\ + \ will be monitored by Azure Security Center as recommendations\",\"metadata\"\ + :{\"version\":\"2.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"\ + description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\"\ + ,\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"181ac480-f7c4-544b-9865-11b8ffe87f47\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1047 - System\ + \ Use Notification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1047\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e1ff6d62-a55c-41ab-90ba-90bb5b7b6f62\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e1ff6d62-a55c-41ab-90ba-90bb5b7b6f62\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1276 - Alternate\ + \ Processing Site | Accessibility\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Contingency Planning\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1276\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e214e563-1206-4a43-a56b-ac5880c9c571\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e214e563-1206-4a43-a56b-ac5880c9c571\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1560 - System\ + \ And Services Acquisition Policy And Procedures\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this System and\ + \ Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1560\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e29e0915-5c2f-4d09-8806-048b749ad763\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e29e0915-5c2f-4d09-8806-048b749ad763\"\ + },{\"properties\":{\"displayName\":\"Ensure that 'HTTP Version' is the latest,\ + \ if used to run the Function app\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Indexed\",\"description\":\"Periodically, newer versions are released for\ + \ HTTP either due to security flaws or to include additional functionality.\ + \ Using the latest HTTP version for web apps to take advantage of security\ + \ fixes, if any, and/or new functionalities of the newer version.\",\"metadata\"\ + :{\"version\":\"2.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"\ + },{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"kind\",\"contains\"\ + :\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\"\ + :{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Web/sites/config/web.http20Enabled\",\"equals\":\"\ + true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e2c1c086-2d84-4019-bff3-c44ccd95113c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e2c1c086-2d84-4019-bff3-c44ccd95113c\"\ + },{\"properties\":{\"displayName\":\"Audit Dependency agent deployment in\ + \ virtual machine scale sets - VM Image (OS) unlisted\",\"policyType\":\"\ + BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports virtual machine scale\ + \ sets as non-compliant if the VM Image (OS) is not in the list defined and\ + \ the agent is not installed. The list of OS images will be updated over time\ + \ as support is updated.\",\"metadata\":{\"version\":\"1.0.1\",\"category\"\ + :\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude_windows\":{\"type\"\ + :\"Array\",\"metadata\":{\"displayName\":\"Optional: List of VM images that\ + \ have supported Windows OS to add to scope\",\"description\":\"Example value:\ + \ '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"\ + },\"defaultValue\":[]},\"listOfImageIdToInclude_linux\":{\"type\":\"Array\"\ + ,\"metadata\":{\"displayName\":\"Optional: List of VM images that have supported\ + \ Linux OS to add to scope\",\"description\":\"Example value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"\ + },\"defaultValue\":[]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"not\":{\"anyOf\"\ + :[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_windows')]\"\ + },{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_linux')]\"\ + },{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\"\ + ,\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\"\ + ,\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\"\ + ,\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\"\ + ,\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\"\ + ,\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\"\ + ,\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\"\ + ,\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\"\ + ,\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"\ + *-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\"\ + :\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"Windows-10\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\"\ + :[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"\ + }]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"\ + SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\"\ + ,\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\"\ + ,\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"\ + in\":[\"Centos\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\"\ + :\"7*\"}]}]}}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"\ + type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\"\ + ,\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"}}}}},\"id\":\"\ + /providers/Microsoft.Authorization/policyDefinitions/e2dd799a-a932-4e9d-ac17-d473bc3c6c10\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e2dd799a-a932-4e9d-ac17-d473bc3c6c10\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1161 - Continuous\ + \ Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Security Assessment and Authorization control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1161\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e2f8f6c6-dde4-436b-a79d-bc50e129eb3a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e2f8f6c6-dde4-436b-a79d-bc50e129eb3a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1387 - Information\ + \ Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Incident Response control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1387\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3007185-3857-43a9-8237-06ca94f1084c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3007185-3857-43a9-8237-06ca94f1084c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1479 - Fire\ + \ Protection | Automatic Fire Suppression\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Physical and Environmental\ + \ Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1479\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e327b072-281d-4f75-9c28-4216e5d72f26\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e327b072-281d-4f75-9c28-4216e5d72f26\"\ + },{\"properties\":{\"displayName\":\"Azure VPN gateways should not use 'basic'\ + \ SKU\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This\ + \ policy ensures that VPN gateways do not use 'basic' SKU.\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworkGateways\"\ + },{\"field\":\"Microsoft.Network/virtualNetworkGateways/gatewayType\",\"equals\"\ + :\"Vpn\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/sku.tier\"\ + ,\"equals\":\"Basic\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/e345b6c3-24bd-4c93-9bbb-7e5e49a17b78\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e345b6c3-24bd-4c93-9bbb-7e5e49a17b78\"\ + },{\"properties\":{\"displayName\":\"MFA should be enabled on accounts with\ + \ read permissions on your subscription\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"All\",\"description\":\"Multi-Factor Authentication (MFA) should be enabled\ + \ for all subscription accounts with read privileges to prevent a breach of\ + \ accounts or resources.\",\"metadata\":{\"version\":\"2.0.0\",\"category\"\ + :\"Security Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\"\ + ,\"name\":\"151e82c5-5341-a74b-1eb0-bc38d2c84bb5\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"Healthy\"\ + ]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3576e28-8b17-4677-84c3-db2990658d64\"\ + },{\"properties\":{\"displayName\":\"RDP access from the Internet should be\ + \ blocked\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"\ + This policy audits any network security rule that allows RDP access from Internet\"\ + ,\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Network\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"\ + if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups/securityRules\"\ + },{\"allOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/access\"\ + ,\"equals\":\"Allow\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/direction\"\ + ,\"equals\":\"Inbound\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange\"\ + ,\"equals\":\"*\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange\"\ + ,\"equals\":\"3389\"},{\"value\":\"[if(and(not(empty(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'))),\ + \ contains(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'),'-')),\ + \ and(lessOrEquals(int(first(split(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'),\ + \ '-'))),3389),greaterOrEquals(int(last(split(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'),\ + \ '-'))),3389)), 'false')]\",\"equals\":\"true\"},{\"count\":{\"field\":\"\ + Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\"\ + ,\"where\":{\"value\":\"[if(and(not(empty(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')))),\ + \ contains(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')),'-')),\ + \ and(lessOrEquals(int(first(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')),\ + \ '-'))),3389),greaterOrEquals(int(last(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')),\ + \ '-'))),3389)) , 'false')]\",\"equals\":\"true\"}},\"greater\":0},{\"not\"\ + :{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\"\ + ,\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\"\ + ,\"notEquals\":\"3389\"}}]},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\"\ + ,\"equals\":\"*\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\"\ + ,\"equals\":\"Internet\"},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\"\ + ,\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\"\ + ,\"notEquals\":\"Internet\"}}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e372f825-a257-4fb8-9175-797a8a8627d6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e372f825-a257-4fb8-9175-797a8a8627d6\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'Security Options - Shutdown'\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should only be\ + \ used along with its corresponding deploy policy in an initiative. This definition\ + \ allows Azure Policy to process the results of auditing Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'Security Options\ + \ - Shutdown'. For more information on Guest Configuration policies, please\ + \ visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Guest Configuration\",\"deprecated\":true},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsShutdown\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3a77a94-cf41-4ee8-b45c-98be28841c03\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3a77a94-cf41-4ee8-b45c-98be28841c03\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'Security Settings - Account Policies'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'Security Settings\ + \ - Account Policies'. It also creates a system-assigned managed identity\ + \ and deploys the VM extension for Guest Configuration. This policy should\ + \ only be used along with its corresponding audit policy in an initiative.\ + \ For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"EnforcePasswordHistory\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Deprecated]: Enforce password history\",\"description\"\ + :\"Specifies limits on password reuse - how many times a new password must\ + \ be created for a user account before the password can be repeated.\"},\"\ + defaultValue\":\"24\"},\"MaximumPasswordAge\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Deprecated]: Maximum password age\",\"description\":\"\ + Specifies the maximum number of days that may elapse before a user account\ + \ password must be changed. The format of the value is two integers separated\ + \ by a comma, denoting an inclusive range.\"},\"defaultValue\":\"1,70\"},\"\ + MinimumPasswordAge\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"\ + [Deprecated]: Minimum password age\",\"description\":\"Specifies the minimum\ + \ number of days that must elapse before a user account password can be changed.\"\ + },\"defaultValue\":\"1\"},\"MinimumPasswordLength\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"[Deprecated]: Minimum password length\",\"description\"\ + :\"Specifies the minimum number of characters that a user account password\ + \ may contain.\"},\"defaultValue\":\"14\"},\"PasswordMustMeetComplexityRequirements\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Password\ + \ must meet complexity requirements\",\"description\":\"Specifies whether\ + \ a user account password must be complex. If required, a complex password\ + \ must not contain part of user's account name or full name; be at least\ + \ 6 characters long; contain a mix of uppercase, lowercase, number, and non-alphabetic\ + \ characters.\"},\"defaultValue\":\"1\"}},\"policyRule\":{\"if\":{\"anyOf\"\ + :[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecuritySettingsAccountPolicies\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Enforce password history;ExpectedValue', '=',\ + \ parameters('EnforcePasswordHistory'), ',', 'Maximum password age;ExpectedValue',\ + \ '=', parameters('MaximumPasswordAge'), ',', 'Minimum password age;ExpectedValue',\ + \ '=', parameters('MinimumPasswordAge'), ',', 'Minimum password length;ExpectedValue',\ + \ '=', parameters('MinimumPasswordLength'), ',', 'Password must meet complexity\ + \ requirements;ExpectedValue', '=', parameters('PasswordMustMeetComplexityRequirements')))]\"\ + },\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\"\ + :{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\"\ + :\"AzureBaseline_SecuritySettingsAccountPolicies\"},\"EnforcePasswordHistory\"\ + :{\"value\":\"[parameters('EnforcePasswordHistory')]\"},\"MaximumPasswordAge\"\ + :{\"value\":\"[parameters('MaximumPasswordAge')]\"},\"MinimumPasswordAge\"\ + :{\"value\":\"[parameters('MinimumPasswordAge')]\"},\"MinimumPasswordLength\"\ + :{\"value\":\"[parameters('MinimumPasswordLength')]\"},\"PasswordMustMeetComplexityRequirements\"\ + :{\"value\":\"[parameters('PasswordMustMeetComplexityRequirements')]\"}},\"\ + template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"EnforcePasswordHistory\":{\"type\":\"string\"},\"\ + MaximumPasswordAge\":{\"type\":\"string\"},\"MinimumPasswordAge\":{\"type\"\ + :\"string\"},\"MinimumPasswordLength\":{\"type\":\"string\"},\"PasswordMustMeetComplexityRequirements\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Enforce password\ + \ history;ExpectedValue\",\"value\":\"[parameters('EnforcePasswordHistory')]\"\ + },{\"name\":\"Maximum password age;ExpectedValue\",\"value\":\"[parameters('MaximumPasswordAge')]\"\ + },{\"name\":\"Minimum password age;ExpectedValue\",\"value\":\"[parameters('MinimumPasswordAge')]\"\ + },{\"name\":\"Minimum password length;ExpectedValue\",\"value\":\"[parameters('MinimumPasswordLength')]\"\ + },{\"name\":\"Password must meet complexity requirements;ExpectedValue\",\"\ + value\":\"[parameters('PasswordMustMeetComplexityRequirements')]\"}]}}},{\"\ + condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Enforce password\ + \ history;ExpectedValue\",\"value\":\"[parameters('EnforcePasswordHistory')]\"\ + },{\"name\":\"Maximum password age;ExpectedValue\",\"value\":\"[parameters('MaximumPasswordAge')]\"\ + },{\"name\":\"Minimum password age;ExpectedValue\",\"value\":\"[parameters('MinimumPasswordAge')]\"\ + },{\"name\":\"Minimum password length;ExpectedValue\",\"value\":\"[parameters('MinimumPasswordLength')]\"\ + },{\"name\":\"Password must meet complexity requirements;ExpectedValue\",\"\ + value\":\"[parameters('PasswordMustMeetComplexityRequirements')]\"}]}}},{\"\ + condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\"\ + ,\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\"\ + ,\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3d95ab7-f47a-49d8-a347-784177b6c94c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3d95ab7-f47a-49d8-a347-784177b6c94c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1451 - Physical\ + \ Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Physical and Environmental Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1451\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3f1e5a3-25c1-4476-8cb6-3955031f8e65\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3f1e5a3-25c1-4476-8cb6-3955031f8e65\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1357 - Incident\ + \ Response Training | Automated Training Environments\",\"policyType\":\"\ + Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1357\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e4213689-05e8-4241-9d4e-8dd1cdafd105\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e4213689-05e8-4241-9d4e-8dd1cdafd105\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'Security Options - User Account Control'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'Security Options\ + \ - User Account Control'. It also creates a system-assigned managed identity\ + \ and deploys the VM extension for Guest Configuration. This policy should\ + \ only be used along with its corresponding audit policy in an initiative.\ + \ For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: UAC: Admin\ + \ Approval Mode for the Built-in Administrator account\",\"description\":\"\ + Specifies the behavior of Admin Approval Mode for the built-in Administrator\ + \ account.\"},\"defaultValue\":\"1\"},\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: UAC: Behavior\ + \ of the elevation prompt for administrators in Admin Approval Mode\",\"description\"\ + :\"Specifies the behavior of the elevation prompt for administrators.\"},\"\ + defaultValue\":\"2\"},\"UACDetectApplicationInstallationsAndPromptForElevation\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: UAC: Detect\ + \ application installations and prompt for elevation\",\"description\":\"\ + Specifies the behavior of application installation detection for the computer.\"\ + },\"defaultValue\":\"1\"},\"UACRunAllAdministratorsInAdminApprovalMode\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: UAC: Run all\ + \ administrators in Admin Approval Mode\",\"description\":\"Specifies the\ + \ behavior of all User Account Control (UAC) policy settings for the computer.\"\ + },\"defaultValue\":\"1\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"\ + field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsUserAccountControl\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('User Account Control: Admin Approval Mode for\ + \ the Built-in Administrator account;ExpectedValue', '=', parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount'),\ + \ ',', 'User Account Control: Behavior of the elevation prompt for administrators\ + \ in Admin Approval Mode;ExpectedValue', '=', parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode'),\ + \ ',', 'User Account Control: Detect application installations and prompt\ + \ for elevation;ExpectedValue', '=', parameters('UACDetectApplicationInstallationsAndPromptForElevation'),\ + \ ',', 'User Account Control: Run all administrators in Admin Approval Mode;ExpectedValue',\ + \ '=', parameters('UACRunAllAdministratorsInAdminApprovalMode')))]\"},\"deployment\"\ + :{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"\ + value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\"\ + :\"AzureBaseline_SecurityOptionsUserAccountControl\"},\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\"\ + :{\"value\":\"[parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount')]\"\ + },\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\"\ + :{\"value\":\"[parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode')]\"\ + },\"UACDetectApplicationInstallationsAndPromptForElevation\":{\"value\":\"\ + [parameters('UACDetectApplicationInstallationsAndPromptForElevation')]\"},\"\ + UACRunAllAdministratorsInAdminApprovalMode\":{\"value\":\"[parameters('UACRunAllAdministratorsInAdminApprovalMode')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\"\ + :{\"type\":\"string\"},\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\"\ + :{\"type\":\"string\"},\"UACDetectApplicationInstallationsAndPromptForElevation\"\ + :{\"type\":\"string\"},\"UACRunAllAdministratorsInAdminApprovalMode\":{\"\ + type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"User Account\ + \ Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue\"\ + ,\"value\":\"[parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount')]\"\ + },{\"name\":\"User Account Control: Behavior of the elevation prompt for administrators\ + \ in Admin Approval Mode;ExpectedValue\",\"value\":\"[parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode')]\"\ + },{\"name\":\"User Account Control: Detect application installations and prompt\ + \ for elevation;ExpectedValue\",\"value\":\"[parameters('UACDetectApplicationInstallationsAndPromptForElevation')]\"\ + },{\"name\":\"User Account Control: Run all administrators in Admin Approval\ + \ Mode;ExpectedValue\",\"value\":\"[parameters('UACRunAllAdministratorsInAdminApprovalMode')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"User Account\ + \ Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue\"\ + ,\"value\":\"[parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount')]\"\ + },{\"name\":\"User Account Control: Behavior of the elevation prompt for administrators\ + \ in Admin Approval Mode;ExpectedValue\",\"value\":\"[parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode')]\"\ + },{\"name\":\"User Account Control: Detect application installations and prompt\ + \ for elevation;ExpectedValue\",\"value\":\"[parameters('UACDetectApplicationInstallationsAndPromptForElevation')]\"\ + },{\"name\":\"User Account Control: Run all administrators in Admin Approval\ + \ Mode;ExpectedValue\",\"value\":\"[parameters('UACRunAllAdministratorsInAdminApprovalMode')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\"\ + ,\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\"\ + ,\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e425e402-a050-45e5-b010-bd3f934589fc\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e425e402-a050-45e5-b010-bd3f934589fc\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1340 - Authenticator\ + \ Management | No Embedded Unencrypted Static Authenticators\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Identification and Authentication control\",\"metadata\":{\"version\":\"\ + 1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"\ + /providers/Microsoft.PolicyInsights/policyMetadata/ACF1340\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e51ff84b-e5ea-408f-b651-2ecc2933e4c6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e51ff84b-e5ea-408f-b651-2ecc2933e4c6\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1381 - Incident\ + \ Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Incident Response control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1381\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e5368258-9684-4567-8126-269f34e65eab\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e5368258-9684-4567-8126-269f34e65eab\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1421 - Maintenance\ + \ Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Maintenance control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1421\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e539caaa-da8c-41b8-9e1e-449851e2f7a6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e539caaa-da8c-41b8-9e1e-449851e2f7a6\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1716 - Software,\ + \ Firmware, And Information Integrity | Integration Of Detection And Response\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this System and Information Integrity control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1716\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e54c325e-42a0-4dcf-b105-046e0f6f590f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e54c325e-42a0-4dcf-b105-046e0f6f590f\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1023 - Account\ + \ Management | Usage Conditions\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Access Control control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1023\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e55698b6-3dea-4aa9-99b9-d8218c6ab6e5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e55698b6-3dea-4aa9-99b9-d8218c6ab6e5\"\ + },{\"properties\":{\"displayName\":\"Allowed locations\",\"policyType\":\"\ + BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy enables you to\ + \ restrict the locations your organization can specify when deploying resources.\ + \ Use to enforce your geo-compliance requirements. Excludes resource groups,\ + \ Microsoft.AzureActiveDirectory/b2cDirectories, and resources that use the\ + \ 'global' region.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"General\"\ + },\"parameters\":{\"listOfAllowedLocations\":{\"type\":\"Array\",\"metadata\"\ + :{\"description\":\"The list of locations that can be specified when deploying\ + \ resources.\",\"strongType\":\"location\",\"displayName\":\"Allowed locations\"\ + }}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"location\",\"notIn\":\"\ + [parameters('listOfAllowedLocations')]\"},{\"field\":\"location\",\"notEquals\"\ + :\"global\"},{\"field\":\"type\",\"notEquals\":\"Microsoft.AzureActiveDirectory/b2cDirectories\"\ + }]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e56962a6-4747-49cd-b67b-bf8b01975c4c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e56962a6-4747-49cd-b67b-bf8b01975c4c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1296 - Information\ + \ System Recovery And Reconstitution | Transaction Recovery\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1296\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e57b98a0-a011-4956-a79d-5d17ed8b8e48\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e57b98a0-a011-4956-a79d-5d17ed8b8e48\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1499 - Rules\ + \ Of Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Planning control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1499\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e59671ab-9720-4ee2-9c60-170e8c82251e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e59671ab-9720-4ee2-9c60-170e8c82251e\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'Security Options - Accounts'\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy creates a\ + \ Guest Configuration assignment to audit Windows virtual machines with non-compliant\ + \ settings in Group Policy category: 'Security Options - Accounts'. It also\ + \ creates a system-assigned managed identity and deploys the VM extension\ + \ for Guest Configuration. This policy should only be used along with its\ + \ corresponding audit policy in an initiative. For more information on Guest\ + \ Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\"\ + :{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\",\"\ + requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"AccountsGuestAccountStatus\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Deprecated]: Accounts: Guest account status\",\"description\"\ + :\"Specifies whether the local Guest account is disabled.\"},\"defaultValue\"\ + :\"0\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsAccounts\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Accounts: Guest account status;ExpectedValue',\ + \ '=', parameters('AccountsGuestAccountStatus')))]\"},\"deployment\":{\"properties\"\ + :{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsAccounts\"\ + },\"AccountsGuestAccountStatus\":{\"value\":\"[parameters('AccountsGuestAccountStatus')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"AccountsGuestAccountStatus\":{\"type\":\"string\"\ + }},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Accounts: Guest\ + \ account status;ExpectedValue\",\"value\":\"[parameters('AccountsGuestAccountStatus')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Accounts: Guest\ + \ account status;ExpectedValue\",\"value\":\"[parameters('AccountsGuestAccountStatus')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\"\ + ,\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\"\ + ,\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e5b81f87-9185-4224-bf00-9f505e9f89f3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e5b81f87-9185-4224-bf00-9f505e9f89f3\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Audit Web Applications\ + \ that are not using latest supported Node.js Framework\",\"policyType\":\"\ + BuiltIn\",\"mode\":\"All\",\"description\":\"Use the latest supported Node.js\ + \ version for the latest security classes. Using older classes and types can\ + \ make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"Security Center\",\"deprecated\":true},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:\ + \ Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\"\ + ,\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\"\ + :\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"\ + then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\"\ + ,\"name\":\"UseLatestNodeJS\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\"\ + ,\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e67687e8-08d5-4e7f-8226-5b4753bba008\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e67687e8-08d5-4e7f-8226-5b4753bba008\"\ + },{\"properties\":{\"displayName\":\"Audit Linux machines that do not have\ + \ the passwd file permissions set to 0644\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"Indexed\",\"description\":\"Requires that prerequisites are deployed\ + \ to the policy assignment scope. For details, visit https://aka.ms/gcpol.\ + \ Machines are non-compliant if Linux machines that do not have the passwd\ + \ file permissions set to 0644\",\"metadata\":{\"category\":\"Guest Configuration\"\ + ,\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"\ + ],\"guestConfiguration\":{\"name\":\"PasswordPolicy_msid121\",\"version\"\ + :\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"Include Arc connected servers\",\"description\"\ + :\"By selecting this option, you agree to be charged monthly per Arc connected\ + \ machine.\"},\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"\ + },\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of this policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\"\ + ,\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"\ + Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"\ + Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\"\ + ,\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"\ + ]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"\ + field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\"\ + ,\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\"\ + ,\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\"\ + ,\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"\ + cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\"\ + ,\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\"\ + ,\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"\ + ]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"\ + equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"\ + then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"PasswordPolicy_msid121\",\"existenceCondition\":{\"field\":\"\ + Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e6955644-301c-44b5-a4c4-528577de6861\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e6955644-301c-44b5-a4c4-528577de6861\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1465 - Monitoring\ + \ Physical Access | Monitoring Physical Access To Information Systems\",\"\ + policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements\ + \ this Physical and Environmental Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1465\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e6e41554-86b5-4537-9f7f-4fc41a1d1640\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e6e41554-86b5-4537-9f7f-4fc41a1d1640\"\ + },{\"properties\":{\"displayName\":\"Audit Windows machines on which the specified\ + \ services are not installed and 'Running'\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"Indexed\",\"description\":\"Requires that prerequisites are deployed\ + \ to the policy assignment scope. For details, visit https://aka.ms/gcpol.\ + \ Machines are non-compliant if result of the Windows PowerShell command Get-Service\ + \ do not include the service name with matching status as specified by the\ + \ policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"\ + version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"\ + ],\"guestConfiguration\":{\"name\":\"WindowsServiceStatus\",\"version\":\"\ + 1.*\",\"configurationParameter\":{\"ServiceName\":\"[WindowsServiceStatus]WindowsServiceStatus1;ServiceName\"\ + }}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"ServiceName\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Service names (supports\ + \ wildcards)\",\"description\":\"A semicolon-separated list of the names of\ + \ the services that should be installed and 'Running'. e.g. 'WinRm;Wi*'\"\ + }}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"\ + equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"\ + Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\"\ + ,\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\"\ + ,\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsServiceStatus\",\"existenceCondition\":{\"allOf\":[{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[WindowsServiceStatus]WindowsServiceStatus1;ServiceName',\ + \ '=', parameters('ServiceName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e6ebf138-3d71-4935-a13b-9c7fdddd94df\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e6ebf138-3d71-4935-a13b-9c7fdddd94df\"\ + },{\"properties\":{\"displayName\":\"Subnets should be associated with a Network\ + \ Security Group\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"Protect your subnet from potential threats by restricting access to it\ + \ with a Network Security Group (NSG). NSGs contain a list of Access Control\ + \ List (ACL) rules that allow or deny network traffic to your subnet.\",\"\ + metadata\":{\"version\":\"3.0.0\",\"category\":\"Security Center\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks/subnets\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/assessments\",\"name\":\"eade5b56-eefd-444f-95c8-23f29e5d93cb\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e71308d3-144b-4262-b144-efdc3cc90517\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1567 - System\ + \ Development Life Cycle\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this System and Services Acquisition\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1567\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e72edbf6-aa61-436d-a227-0f32b77194b3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e72edbf6-aa61-436d-a227-0f32b77194b3\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1311 - Identifier\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Identification and Authentication control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1311\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e7568697-0c9e-4ea3-9cec-9e567d14f3c6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e7568697-0c9e-4ea3-9cec-9e567d14f3c6\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Advanced Threat Protection\ + \ types should be set to 'All' in SQL server Advanced Data Security settings\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"It is recommended\ + \ to enable all Advanced Threat Protection types on your SQL servers. Enabling\ + \ all types protects against SQL injection, database vulnerabilities, and\ + \ any other anomalous activities.\",\"metadata\":{\"version\":\"1.0.0-deprecated\"\ + ,\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Effect\",\"\ + description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"Disabled\"}},\"policyRule\"\ + :{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\"\ + :{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\"\ + ,\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/securityAlertPolicies/disabledAlerts[*]\"\ + ,\"equals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e756b945-1b1b-480b-8de8-9a0859d5f7ad\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e756b945-1b1b-480b-8de8-9a0859d5f7ad\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1154 - System\ + \ Interconnections | Unclassified Non-National Security System Connections\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Security Assessment and Authorization control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1154\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e757ceb9-93b3-45fe-a4f4-f43f64f1ac5a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e757ceb9-93b3-45fe-a4f4-f43f64f1ac5a\"\ + },{\"properties\":{\"displayName\":\"Allowed locations for resource groups\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy\ + \ enables you to restrict the locations your organization can create resource\ + \ groups in. Use to enforce your geo-compliance requirements.\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"General\"},\"parameters\":{\"listOfAllowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that resource groups can be created in.\",\"strongType\":\"location\",\"\ + displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"\ + field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"\ + },{\"field\":\"location\",\"notIn\":\"[parameters('listOfAllowedLocations')]\"\ + }]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e765b5de-1225-4ba3-bd56-1ac6695af988\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e765b5de-1225-4ba3-bd56-1ac6695af988\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1273 - Alternate\ + \ Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Contingency Planning control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1273\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e77fcbf2-a1e8-44f1-860e-ed6583761e65\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e77fcbf2-a1e8-44f1-860e-ed6583761e65\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Audit Web Sockets state\ + \ for a Web Application\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\"\ + :\"The Web Sockets protocol is vulnerable to different types of security threats.\ + \ Use of Web Sockets within a web application must be carefully reviewed.\"\ + ,\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security Center\"\ + ,\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Deprecated]: Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\"\ + :{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\"\ + :[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"\ + WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\"\ + ,\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"\ + DisableWebSockets\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\"\ + ,\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e797f851-8be7-4c40-bb56-2e3395215b0e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e797f851-8be7-4c40-bb56-2e3395215b0e\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1169 - Continuous\ + \ Monitoring | Trend Analyses\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Security Assessment and Authorization\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1169\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e7ba2cb3-5675-4468-8b50-8486bdd998a5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e7ba2cb3-5675-4468-8b50-8486bdd998a5\"\ + },{\"properties\":{\"displayName\":\"Enforce SSL connection should be enabled\ + \ for MySQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Azure Database for MySQL supports connecting your Azure\ + \ Database for MySQL server to client applications using Secure Sockets Layer\ + \ (SSL). Enforcing SSL connections between your database server and your client\ + \ applications helps protect against 'man in the middle' attacks by encrypting\ + \ the data stream between the server and your application. This configuration\ + \ enforces that SSL is always enabled for accessing your database server.\"\ + ,\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"\ + if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"\ + },{\"field\":\"Microsoft.DBforMySQL/servers/sslEnforcement\",\"exists\":\"\ + true\"},{\"field\":\"Microsoft.DBforMySQL/servers/sslEnforcement\",\"notEquals\"\ + :\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\"\ + :\"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e802a67a-daf5-4436-9ea6-f6d821dd0c5d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1237 - Software\ + \ Usage Restrictions | Open Source Software\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Configuration\ + \ Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1237\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e80b6812-0bfa-4383-8223-cdd86a46a890\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e80b6812-0bfa-4383-8223-cdd86a46a890\"\ + },{\"properties\":{\"displayName\":\"Vulnerabilities in container security\ + \ configurations should be remediated\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"All\",\"description\":\"Audit vulnerabilities in security configuration\ + \ on machines with Docker installed and display as recommendations in Azure\ + \ Security Center.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security\ + \ Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"\ + ,\"Microsoft.Compute/virtualMachineScaleSets\"]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"0677209d-e675-2c6f-e91a-54cef2878663\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8cbc669-f12d-49eb-93e7-9273119e9933\"\ + },{\"properties\":{\"displayName\":\"Deploy Diagnostic Settings for Data Lake\ + \ Storage Gen1 to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Deploys the diagnostic settings for Data Lake Storage Gen1\ + \ to stream to a regional Event Hub when any Data Lake Storage Gen1 which\ + \ is missing this diagnostic settings is created or updated.\",\"metadata\"\ + :{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"},\"\ + profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile\ + \ name\",\"description\":\"The diagnostic settings profile name\"},\"defaultValue\"\ + :\"setbypolicy_eventHub\"},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Event Hub Authorization Rule Id\",\"description\":\"The\ + \ Event Hub authorization rule Id for Azure Diagnostics. The authorization\ + \ rule needs to be at Event Hub namespace level. e.g. /subscriptions/{subscription\ + \ Id}/resourceGroups/{resource group}/providers/Microsoft.EventHub/namespaces/{Event\ + \ Hub namespace}/authorizationrules/{authorization rule}\",\"strongType\"\ + :\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\"\ + :true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Event Hub Location\",\"description\":\"The location the Event Hub resides\ + \ in. Only Data Lake Storage in this location will be linked to this Event\ + \ Hub.\",\"strongType\":\"location\"},\"defaultValue\":\"\"},\"metricsEnabled\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable metrics\",\"\ + description\":\"Whether to enable metrics stream to the Event Hub - True or\ + \ False\"},\"allowedValues\":[\"True\",\"False\"],\"defaultValue\":\"False\"\ + },\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable\ + \ logs\",\"description\":\"Whether to enable logs stream to the Event Hub\ + \ - True or False\"},\"allowedValues\":[\"True\",\"False\"],\"defaultValue\"\ + :\"True\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.DataLakeStore/accounts\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\"\ + ,\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\"\ + ,\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"\ + /providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\"\ + :\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\"\ + :\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"\ + type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"\ + resources\":[{\"type\":\"Microsoft.DataLakeStore/accounts/providers/diagnosticSettings\"\ + ,\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'),\ + \ '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"\ + [parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\"\ + :\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\"\ + ,\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\"\ + :false,\"days\":0}}],\"logs\":[{\"category\":\"Audit\",\"enabled\":\"[parameters('logsEnabled')]\"\ + },{\"category\":\"Requests\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"\ + outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"\ + },\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"\ + value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\"\ + :\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"\ + },\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\"\ + :\"/providers/Microsoft.Authorization/policyDefinitions/e8d096bc-85de-4c5f-8cfb-857bd1b9d62d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8d096bc-85de-4c5f-8cfb-857bd1b9d62d\"\ + },{\"properties\":{\"displayName\":\"Container registries should use private\ + \ links\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Audit container registries that do not have at least one approved private\ + \ endpoint connection. Clients in a virtual network can securely access resources\ + \ that have private endpoint connections through private links. Public access\ + \ can then be disabled to ensure that only private links can be used to connect\ + \ to the registry. For more information, visit: https://aka.ms/acr/private-link.\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container Registry\"},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"\ + },{\"count\":{\"field\":\"Microsoft.ContainerRegistry/registries/privateEndpointConnections[*]\"\ + ,\"where\":{\"field\":\"Microsoft.ContainerRegistry/registries/privateEndpointConnections[*].privateLinkServiceConnectionState.status\"\ + ,\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8eef0a8-67cf-4eb4-9386-14b0e78733d4\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1626 - Boundary\ + \ Protection | External Telecommunications Services\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this System and\ + \ Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1626\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8f6bddd-6d67-439a-88d4-c5fe39a79341\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8f6bddd-6d67-439a-88d4-c5fe39a79341\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1502 - Rules\ + \ Of Behavior | Social Media And Networking Restrictions\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1502\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e901375c-8f01-4ac8-9183-d5312f47fe63\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e901375c-8f01-4ac8-9183-d5312f47fe63\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1723 - Information\ + \ Input Validation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Information Integrity control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1723\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e91927a0-ac1d-44a0-95f8-5185f9dfce9f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e91927a0-ac1d-44a0-95f8-5185f9dfce9f\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1200 - Security\ + \ Impact Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1200\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e98fe9d7-2ed3-44f8-93b7-24dca69783ff\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e98fe9d7-2ed3-44f8-93b7-24dca69783ff\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1487 - Alternate\ + \ Work Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Physical and Environmental Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1487\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e9c3371d-c30c-4f58-abd9-30b8a8199571\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e9c3371d-c30c-4f58-abd9-30b8a8199571\"\ + },{\"properties\":{\"displayName\":\"Remote debugging should be turned off\ + \ for API Apps\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Remote debugging requires inbound ports to be opened on API apps. Remote\ + \ debugging should be turned off.\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\"\ + :\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"\ + existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/remoteDebuggingEnabled\"\ + ,\"equals\":\"false\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e9c8d085-d9cc-4b17-9cdc-059f1f01f19e\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1363 - Incident\ + \ Handling | Automated Incident Handling Processes\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Incident\ + \ Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1363\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea3e8156-89a1-45b1-8bd6-938abc79fdfd\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea3e8156-89a1-45b1-8bd6-938abc79fdfd\"\ + },{\"properties\":{\"displayName\":\"Inherit a tag from the resource group\ + \ if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Adds the specified tag with its value from the parent resource group when\ + \ any resource missing this tag is created or updated. Existing resources\ + \ can be remediated by triggering a remediation task. If the tag exists with\ + \ a different value it will not be changed.\",\"metadata\":{\"version\":\"\ + 1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Tag Name\",\"description\":\"Name of the\ + \ tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"[concat('tags[', parameters('tagName'), ']')]\",\"exists\":\"false\"},{\"\ + value\":\"[resourceGroup().tags[parameters('tagName')]]\",\"notEquals\":\"\ + \"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"\ + /providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', parameters('tagName'),\ + \ ']')]\",\"value\":\"[resourceGroup().tags[parameters('tagName')]]\"}]}}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea3f2387-9b95-492a-a190-fcdc54f7b070\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea3f2387-9b95-492a-a190-fcdc54f7b070\"\ + },{\"properties\":{\"displayName\":\"Key Vault should use a virtual network\ + \ service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy audits any Key Vault not configured to use a virtual network\ + \ service endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\"\ + :\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/vaults/networkAcls.defaultAction\"\ + ,\"notEquals\":\"Deny\"},{\"field\":\"Microsoft.KeyVault/vaults/networkAcls.virtualNetworkRules[*].id\"\ + ,\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea4d6841-2173-4317-9747-ff522a45120f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea4d6841-2173-4317-9747-ff522a45120f\"\ + },{\"properties\":{\"displayName\":\"Audit Linux machines that allow remote\ + \ connections from accounts without passwords\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Requires that prerequisites are deployed\ + \ to the policy assignment scope. For details, visit https://aka.ms/gcpol.\ + \ Machines are non-compliant if Linux machines that allow remote connections\ + \ from accounts without passwords\",\"metadata\":{\"category\":\"Guest Configuration\"\ + ,\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"\ + ],\"guestConfiguration\":{\"name\":\"PasswordPolicy_msid110\",\"version\"\ + :\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"Include Arc connected servers\",\"description\"\ + :\"By selecting this option, you agree to be charged monthly per Arc connected\ + \ machine.\"},\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"\ + },\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of this policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\"\ + ,\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"\ + Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"\ + Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\"\ + ,\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"\ + ]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"\ + field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\"\ + ,\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\"\ + ,\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\"\ + ,\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"\ + cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\"\ + ,\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\"\ + ,\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"\ + ]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"\ + equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"\ + then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"PasswordPolicy_msid110\",\"existenceCondition\":{\"field\":\"\ + Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea53dbee-c6c9-4f0e-9f9e-de0039b78023\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea53dbee-c6c9-4f0e-9f9e-de0039b78023\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1422 - Maintenance\ + \ Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Maintenance control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1422\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea556850-838d-4a37-8ce5-9d7642f95e11\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea556850-838d-4a37-8ce5-9d7642f95e11\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1542 - Risk\ + \ Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Risk Assessment control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1542\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eab340d0-3d55-4826-a0e5-feebfeb0131d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eab340d0-3d55-4826-a0e5-feebfeb0131d\"\ + },{\"properties\":{\"displayName\":\"Ensure Function app has 'Client Certificates\ + \ (Incoming client certificates)' set to 'On'\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Client certificates allow for the\ + \ app to request a certificate for incoming requests. Only clients that have\ + \ a valid certificate will be able to reach the app.\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"\ + Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\"\ + ,\"like\":\"functionapp*\"},{\"field\":\"Microsoft.Web/sites/clientCertEnabled\"\ + ,\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eaebaea7-8013-4ceb-9d14-7eb32271373c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1064 - Remote\ + \ Access | Privileged Commands / Access\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Access Control control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1064\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb4d9508-cbf0-4a3c-bb5c-6c95b159f3fb\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb4d9508-cbf0-4a3c-bb5c-6c95b159f3fb\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1321 - Authenticator\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Identification and Authentication control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1321\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb627cc6-3a9d-46b5-96b7-5fca49178a37\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb627cc6-3a9d-46b5-96b7-5fca49178a37\"\ + },{\"properties\":{\"displayName\":\"Log checkpoints should be enabled for\ + \ PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"This policy helps audit any PostgreSQL databases in your\ + \ environment without log_checkpoints setting enabled.\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"log_checkpoints\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\"\ + ,\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d\"\ + },{\"properties\":{\"displayName\":\"Log connections should be enabled for\ + \ PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"This policy helps audit any PostgreSQL databases in your\ + \ environment without log_connections setting enabled.\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"log_connections\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\"\ + ,\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e442\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb6f77b9-bd53-4e35-a23d-7f65d5f0e442\"\ + },{\"properties\":{\"displayName\":\"Disconnections should be logged for PostgreSQL\ + \ database servers.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy helps audit any PostgreSQL databases in your environment without\ + \ log_disconnections enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\"\ + ,\"name\":\"log_disconnections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\"\ + ,\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e446\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb6f77b9-bd53-4e35-a23d-7f65d5f0e446\"\ + },{\"properties\":{\"displayName\":\"Log duration should be enabled for PostgreSQL\ + \ database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy helps audit any PostgreSQL databases in your environment without\ + \ log_duration setting enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\"\ + ,\"name\":\"log_duration\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\"\ + ,\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e8f3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb6f77b9-bd53-4e35-a23d-7f65d5f0e8f3\"\ + },{\"properties\":{\"displayName\":\"Deprecated accounts with owner permissions\ + \ should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"All\",\"description\":\"Deprecated accounts with owner permissions\ + \ should be removed from your subscription. Deprecated accounts are accounts\ + \ that have been blocked from signing in.\",\"metadata\":{\"version\":\"2.0.0\"\ + ,\"category\":\"Security Center\"},\"parameters\":{\"effect\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/assessments\",\"name\":\"e52064aa-6853-e252-a11e-dffc675689c2\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ebb62a0c-3560-49e1-89ed-27e074e9f8ad\"\ + },{\"properties\":{\"displayName\":\"Audit Windows machines that don't have\ + \ the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Requires that prerequisites are deployed to\ + \ the policy assignment scope. For details, visit https://aka.ms/gcpol. Machines\ + \ are non-compliant if the application name is not found in any of the following\ + \ registry paths: HKLM:SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\ + \\Uninstall, HKLM:SOFTWARE\\\\Wow6432node\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\ + \\Uninstall, HKCU:Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"WhitelistedApplication\",\"version\":\"1.*\",\"configurationParameter\"\ + :{\"installedApplication\":\"[InstalledApplication]bwhitelistedapp;Name\"\ + }}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"installedApplication\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application names (supports\ + \ wildcards)\",\"description\":\"A semicolon-separated list of the names of\ + \ the applications that should be installed. e.g. 'Microsoft SQL Server 2014\ + \ (64-bit); Microsoft Visual Studio Code' or 'Microsoft SQL Server 2014*'\ + \ (to match any application starting with 'Microsoft SQL Server 2014')\"}}},\"\ + policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WhitelistedApplication\",\"existenceCondition\":{\"allOf\":[{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[InstalledApplication]bwhitelistedapp;Name',\ + \ '=', parameters('installedApplication')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ebb67efd-3c46-49b0-adfe-5599eb944998\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ebb67efd-3c46-49b0-adfe-5599eb944998\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Linux VMs that allow remote connections from accounts without passwords\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Linux virtual machines\ + \ that allow remote connections from accounts without passwords. It also creates\ + \ a system-assigned managed identity and deploys the VM extension for Guest\ + \ Configuration. This policy should only be used along with its corresponding\ + \ audit policy in an initiative. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"3.0.0-deprecated\",\"category\":\"Guest Configuration\",\"requiredProviders\"\ + :[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"\ + if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\"\ + ,\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"\ + paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"\ + like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\"\ + ,\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"\ + ]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"\ + field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\"\ + ,\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\"\ + ,\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\"\ + ,\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"\ + cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\"\ + ,\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\"\ + ,\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"\ + ]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"\ + then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"PasswordPolicy_msid110\",\"deployment\":{\"properties\":{\"mode\"\ + :\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"PasswordPolicy_msid110\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforLinux')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ec49586f-4939-402d-a29e-6ff502b20592\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ec49586f-4939-402d-a29e-6ff502b20592\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'Administrative Templates - Control\ + \ Panel'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"This policy creates a Guest Configuration assignment to audit Windows virtual\ + \ machines with non-compliant settings in Group Policy category: 'Administrative\ + \ Templates - Control Panel'. It also creates a system-assigned managed identity\ + \ and deploys the VM extension for Guest Configuration. This policy should\ + \ only be used along with its corresponding audit policy in an initiative.\ + \ For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_AdministrativeTemplatesControlPanel\",\"deployment\"\ + :{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"\ + value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\"\ + :\"AzureBaseline_AdministrativeTemplatesControlPanel\"}},\"template\":{\"\ + $schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ec7ac234-2af5-4729-94d2-c557c071799d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ec7ac234-2af5-4729-94d2-c557c071799d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1241 - User-Installed\ + \ Software | Alerts For Unauthorized Installations\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Configuration\ + \ Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1241\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eca4d7b2-65e2-4e04-95d4-c68606b063c3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eca4d7b2-65e2-4e04-95d4-c68606b063c3\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1622 - Boundary\ + \ Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Communications Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1622\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ecf56554-164d-499a-8d00-206b07c27bed\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ecf56554-164d-499a-8d00-206b07c27bed\"\ + },{\"properties\":{\"displayName\":\"Deploy Diagnostic Settings for Key Vault\ + \ to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Deploys the diagnostic settings for Key Vault to stream to a regional Event\ + \ Hub when any Key Vault which is missing this diagnostic settings is created\ + \ or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Key Vault\"\ + },\"parameters\":{\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Profile name\",\"description\":\"The diagnostic settings profile name\"\ + },\"defaultValue\":\"setbypolicy\"},\"eventHubRuleId\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Event Hub Authorization Rule Id\",\"description\"\ + :\"The Event Hub authorization rule Id for Azure Diagnostics. The authorization\ + \ rule needs to be at Event Hub namespace level. e.g. /subscriptions/{subscription\ + \ Id}/resourceGroups/{resource group}/providers/Microsoft.EventHub/namespaces/{Event\ + \ Hub namespace}/authorizationrules/{authorization rule}\",\"strongType\"\ + :\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\"\ + :true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Event Hub Location\",\"description\":\"The location the Event Hub resides\ + \ in. Only Key Vaults in this location will be linked to this Event Hub.\"\ + ,\"strongType\":\"location\"},\"defaultValue\":\"\"},\"metricsEnabled\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Enable metrics\",\"description\"\ + :\"Whether to enable metrics stream to the Event Hub - True or False\"},\"\ + allowedValues\":[\"True\",\"False\"],\"defaultValue\":\"False\"},\"logsEnabled\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable logs\",\"description\"\ + :\"Whether to enable logs stream to the Event Hub - True or False\"},\"allowedValues\"\ + :[\"True\",\"False\"],\"defaultValue\":\"True\"}},\"policyRule\":{\"if\":{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"\ + anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"\ + field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"\ + then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\"\ + ,\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\"\ + :[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\"\ + :\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\"\ + ,\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"\ + /providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vaultName\":{\"type\":\"\ + string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\"\ + :\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"\ + type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"resources\":[{\"\ + type\":\"Microsoft.KeyVault/vaults/providers/diagnosticSettings\",\"apiVersion\"\ + :\"2017-05-01-preview\",\"name\":\"[concat(parameters('vaultName'), '/', 'Microsoft.Insights/',\ + \ parameters('profileName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\"\ + ,\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\"\ + ,\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\"\ + :\"AuditEvent\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\"\ + :{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled diagnostic\ + \ settings for ', parameters('vaultName'))]\"}}},\"parameters\":{\"location\"\ + :{\"value\":\"[field('location')]\"},\"vaultName\":{\"value\":\"[field('name')]\"\ + },\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\"\ + :{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\"\ + :\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"\ + }}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ed7c8c13-51e7-49d1-8a43-8490431a0da2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ed7c8c13-51e7-49d1-8a43-8490431a0da2\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1217 - Least\ + \ Functionality | Periodic Review\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this Configuration Management\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1217\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/edea4f20-b02c-4115-be75-86c080e5c0ed\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"edea4f20-b02c-4115-be75-86c080e5c0ed\"\ + },{\"properties\":{\"displayName\":\"Deploy Diagnostic Settings for Stream\ + \ Analytics to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"Deploys the diagnostic settings for Stream Analytics to\ + \ stream to a regional Event Hub when any Stream Analytics which is missing\ + \ this diagnostic settings is created or updated.\",\"metadata\":{\"version\"\ + :\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"},\"profileName\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Profile name\",\"description\"\ + :\"The diagnostic settings profile name\"},\"defaultValue\":\"setbypolicy_eventHub\"\ + },\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"\ + Event Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization\ + \ rule Id for Azure Diagnostics. The authorization rule needs to be at Event\ + \ Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource\ + \ group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization\ + \ rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\"\ + ,\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"Event Hub Location\",\"description\":\"The location\ + \ the Event Hub resides in. Only Stream Analytics in this location will be\ + \ linked to this Event Hub.\",\"strongType\":\"location\"},\"defaultValue\"\ + :\"\"},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Enable metrics\",\"description\":\"Whether to enable metrics stream to\ + \ the Event Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"],\"\ + defaultValue\":\"False\"},\"logsEnabled\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Enable logs\",\"description\":\"Whether to enable logs\ + \ stream to the Event Hub - True or False\"},\"allowedValues\":[\"True\"\ + ,\"False\"],\"defaultValue\":\"True\"}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.StreamAnalytics/streamingjobs\"\ + },{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\ + \"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\"\ + ,\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"\ + /providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\"\ + :\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\"\ + :\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"\ + type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"\ + resources\":[{\"type\":\"Microsoft.StreamAnalytics/streamingjobs/providers/diagnosticSettings\"\ + ,\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'),\ + \ '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"\ + [parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\"\ + :\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\"\ + ,\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\"\ + :false,\"days\":0}}],\"logs\":[{\"category\":\"Execution\",\"enabled\":\"\ + [parameters('logsEnabled')]\"},{\"category\":\"Authoring\",\"enabled\":\"\ + [parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\"\ + :{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"\ + },\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\"\ + :{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\"\ + :\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"\ + }}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/edf3780c-3d70-40fe-b17e-ab72013dafca\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"edf3780c-3d70-40fe-b17e-ab72013dafca\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1189 - Configuration\ + \ Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1189\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ee45e02a-4140-416c-82c4-fecfea660b9d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ee45e02a-4140-416c-82c4-fecfea660b9d\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'Security Options - Accounts'\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'Security Options - Accounts' for\ + \ limiting local account use of blank passwords and guest account status.\ + \ This policy requires that the Guest Configuration prerequisites have been\ + \ deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"AzureBaseline_SecurityOptionsAccounts\",\"version\":\"1.*\",\"\ + configurationParameter\":{\"AccountsGuestAccountStatus\":\"Accounts: Guest\ + \ account status;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include Arc connected\ + \ servers\",\"description\":\"By selecting this option, you agree to be charged\ + \ monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"\ + ],\"defaultValue\":\"false\"},\"AccountsGuestAccountStatus\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Accounts: Guest account status\"\ + ,\"description\":\"Specifies whether the local Guest account is disabled.\"\ + },\"defaultValue\":\"0\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_SecurityOptionsAccounts\",\"existenceCondition\":{\"allOf\"\ + :[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Accounts: Guest account status;ExpectedValue',\ + \ '=', parameters('AccountsGuestAccountStatus')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ee984370-154a-4ee8-9726-19d900e56fc0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ee984370-154a-4ee8-9726-19d900e56fc0\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1089 - Security\ + \ Awareness Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Awareness and Training control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1089\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef080e67-0d1a-4f76-a0c5-fb9b0358485e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef080e67-0d1a-4f76-a0c5-fb9b0358485e\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1314 - Identifier\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Identification and Authentication control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1314\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef0c8530-efd9-45b8-b753-f03083d06295\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef0c8530-efd9-45b8-b753-f03083d06295\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1128 - Time\ + \ Stamps\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Audit and Accountability control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1128\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef212163-3bc4-4e86-bcf8-705127086393\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef212163-3bc4-4e86-bcf8-705127086393\"\ + },{\"properties\":{\"displayName\":\"Vulnerability assessment should be enabled\ + \ on your SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"\ + description\":\"Audit Azure SQL servers which do not have recurring vulnerability\ + \ assessment scans enabled. Vulnerability assessment can discover, track,\ + \ and help you remediate potential database vulnerabilities.\",\"metadata\"\ + :{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"\ + },{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/vulnerabilityAssessments\"\ + ,\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/vulnerabilityAssessments/recurringScans.isEnabled\"\ + ,\"equals\":\"True\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9\"\ + },{\"properties\":{\"displayName\":\"API Management services should use a\ + \ virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Virtual network on API Management services of the specified SKU should\ + \ be enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"API Management\"\ + },\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"},\"\ + evaluatedSkuNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"API\ + \ Management SKU Names\",\"description\":\"List of API Management SKUs against\ + \ which this policy will be evaluated.\"},\"allowedValues\":[\"Developer\"\ + ,\"Basic\",\"Standard\",\"Premium\",\"Consumption\"],\"defaultValue\":[\"\ + Developer\",\"Premium\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"\ + type\",\"equals\":\"Microsoft.ApiManagement/service\"},{\"field\":\"Microsoft.ApiManagement/service/sku.name\"\ + ,\"in\":\"[parameters('evaluatedSkuNames')]\"},{\"anyOf\":[{\"field\":\"Microsoft.ApiManagement/service/virtualNetworkType\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.ApiManagement/service/virtualNetworkType\"\ + ,\"equals\":\"None\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef619a2c-cc4d-4d03-b2ba-8c94a834d85b\"\ + },{\"properties\":{\"displayName\":\"Deploy Diagnostic Settings for Event\ + \ Hub to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Deploys the diagnostic settings for Event Hub to stream to a regional Event\ + \ Hub when any Event Hub which is missing this diagnostic settings is created\ + \ or updated.\",\"metadata\":{\"version\":\"2.1.0\",\"category\":\"Monitoring\"\ + },\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\"\ + :\"DeployIfNotExists\"},\"profileName\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Profile name\",\"description\":\"The diagnostic settings\ + \ profile name\"},\"defaultValue\":\"setbypolicy_eventHub\"},\"eventHubRuleId\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event Hub Authorization\ + \ Rule Id\",\"description\":\"The Event Hub authorization rule Id for Azure\ + \ Diagnostics. The authorization rule needs to be at Event Hub namespace level.\ + \ e.g. /subscriptions/{subscription Id}/resourceGroups/{resource group}/providers/Microsoft.EventHub/namespaces/{Event\ + \ Hub namespace}/authorizationrules/{authorization rule}\",\"strongType\"\ + :\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\"\ + :true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Event Hub Destination Location\",\"description\":\"The location the Event\ + \ Hub that will get diagnostic data resides in. Only source Event Hubs in\ + \ this location will be linked to this destination Event Hub.\",\"strongType\"\ + :\"location\"},\"defaultValue\":\"\"},\"metricsEnabled\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Enable metrics\",\"description\":\"Whether\ + \ to enable metrics stream to the Event Hub - True or False\"},\"allowedValues\"\ + :[\"True\",\"False\"],\"defaultValue\":\"False\"},\"logsEnabled\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Enable logs\",\"description\"\ + :\"Whether to enable logs stream to the Event Hub - True or False\"},\"allowedValues\"\ + :[\"True\",\"False\"],\"defaultValue\":\"True\"}},\"policyRule\":{\"if\":{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"\ + },{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\ + \"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\"\ + ,\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"\ + /providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\"\ + :\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\"\ + :\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"\ + type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"\ + resources\":[{\"type\":\"Microsoft.EventHub/namespaces/providers/diagnosticSettings\"\ + ,\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'),\ + \ '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"\ + [parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\"\ + :\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\"\ + ,\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\"\ + :false,\"days\":0}}],\"logs\":[{\"category\":\"ArchiveLogs\",\"enabled\":\"\ + [parameters('logsEnabled')]\"},{\"category\":\"OperationalLogs\",\"enabled\"\ + :\"[parameters('logsEnabled')]\"},{\"category\":\"AutoScaleLogs\",\"enabled\"\ + :\"[parameters('logsEnabled')]\"},{\"category\":\"KafkaCoordinatorLogs\",\"\ + enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"KafkaUserErrorLogs\"\ + ,\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"EventHubVNetConnectionEvent\"\ + ,\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"CustomerManagedKeyUserLogs\"\ + ,\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\"\ + :{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\"\ + :\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"\ + },\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\"\ + :{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"\ + [parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef7b61ef-b8e4-4c91-8e78-6946c6b0023f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef7b61ef-b8e4-4c91-8e78-6946c6b0023f\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1472 - Emergency\ + \ Shutoff\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Physical and Environmental Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1472\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef869332-921d-4c28-9402-3be73e6e50c8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef869332-921d-4c28-9402-3be73e6e50c8\"\ + },{\"properties\":{\"displayName\":\"The Log Analytics agent should be installed\ + \ on Virtual Machine Scale Sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"This policy audits any Windows/Linux Virtual Machine Scale\ + \ Sets if the Log Analytics agent is not installed.\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Compute/virtualMachineScaleSets/extensions\",\"existenceCondition\"\ + :{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\"\ + ,\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\"\ + ,\"in\":[\"MicrosoftMonitoringAgent\",\"OmsAgentForLinux\"]},{\"field\":\"\ + Microsoft.Compute/virtualMachineScaleSets/extensions/provisioningState\",\"\ + equals\":\"Succeeded\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/settings.workspaceId\"\ + ,\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/efbde977-ba53-4479-b8e9-10b957924fbf\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"efbde977-ba53-4479-b8e9-10b957924fbf\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1012 - Account\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1012\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/efd7b9ae-1db6-4eb6-b0fe-87e6565f9738\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"efd7b9ae-1db6-4eb6-b0fe-87e6565f9738\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1358 - Incident\ + \ Response Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Incident Response control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1358\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/effbaeef-5bf4-400d-895e-ef8cbc0e64c7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"effbaeef-5bf4-400d-895e-ef8cbc0e64c7\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Ensure that Register with\ + \ Azure Active Directory is enabled on Function App\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"This policy is a duplicate of the\ + \ respective Managed Identity policies. Please use /providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f\ + \ instead.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"\ + App Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"[Deprecated]: Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"\ + },{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"\ + [parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\"\ + ,\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.managedServiceIdentityId\"\ + ,\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0473e7a-a1ba-4e86-afb2-e829e11b01d8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0473e7a-a1ba-4e86-afb2-e829e11b01d8\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs that have the specified applications installed\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy creates a\ + \ Guest Configuration assignment to audit Windows virtual machines that have\ + \ the specified applications installed. It also creates a system-assigned\ + \ managed identity and deploys the VM extension for Guest Configuration. This\ + \ policy should only be used along with its corresponding audit policy in\ + \ an initiative. For more information on Guest Configuration policies, please\ + \ visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\"\ + ,\"category\":\"Guest Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"\ + ],\"deprecated\":true},\"parameters\":{\"ApplicationName\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"[Deprecated]: Application names (supports\ + \ wildcards)\",\"description\":\"A semicolon-separated list of the names of\ + \ the applications that should not be installed. e.g. 'Microsoft SQL Server\ + \ 2014 (64-bit); Microsoft Visual Studio Code' or 'Microsoft SQL Server 2014*'\ + \ (to match any application starting with 'Microsoft SQL Server 2014')\"}}},\"\ + policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"NotInstalledApplication\",\"existenceCondition\":{\"field\":\"\ + Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[InstalledApplication]NotInstalledApplicationResource1;Name',\ + \ '=', parameters('ApplicationName')))]\"},\"deployment\":{\"properties\"\ + :{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"NotInstalledApplication\"\ + },\"ApplicationName\":{\"value\":\"[parameters('ApplicationName')]\"}},\"\ + template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"ApplicationName\":{\"type\":\"string\"}},\"resources\"\ + :[{\"condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[InstalledApplication]NotInstalledApplicationResource1;Name\"\ + ,\"value\":\"[parameters('ApplicationName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[InstalledApplication]NotInstalledApplicationResource1;Name\"\ + ,\"value\":\"[parameters('ApplicationName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0633351-c7b2-41ff-9981-508fc08553c2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0633351-c7b2-41ff-9981-508fc08553c2\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1531 - Third-Party\ + \ Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1531\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0643e0c-eee5-4113-8684-c608d05c5236\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0643e0c-eee5-4113-8684-c608d05c5236\"\ + },{\"properties\":{\"displayName\":\"Latest TLS version should be used in\ + \ your Web App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Upgrade to the latest TLS version\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\"\ + :\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"\ + existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/minTlsVersion\"\ + ,\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b\"\ + },{\"properties\":{\"displayName\":\"Deploy Workflow Automation for Azure\ + \ Security Center alerts\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"\ + description\":\"Enable automation of Azure Security Center alerts. This policy\ + \ deploys a workflow automation with your conditions and triggers on the assigned\ + \ scope. To deploy this policy on newly created subscriptions, open the Compliance\ + \ tab, select the relevant non-compliant assignment and create a remediation\ + \ task.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security Center\"\ + },\"parameters\":{\"automationName\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Automation name\",\"description\":\"This is the automation\ + \ name.\"}},\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Resource group name\",\"description\":\"The resource group name where the\ + \ workflow automation is created. If you enter a name for a resource group\ + \ that doesn't exist, it'll be created in the subscription.\"}},\"resourceGroupLocation\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource group location\"\ + ,\"description\":\"The location where the resource group and the workflow\ + \ automation are created.\",\"strongType\":\"location\"}},\"alertName\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Alert name contains\",\"\ + description\":\"String included in the required alert name. For a full reference\ + \ list of Security Center's alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference.\"\ + },\"defaultValue\":\"\"},\"alertSeverities\":{\"type\":\"Array\",\"metadata\"\ + :{\"displayName\":\"Alert severities\",\"description\":\"Determines alert\ + \ severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"\ + Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"logicAppResourceId\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic App\",\"description\"\ + :\"The Logic App that is triggered. If you do not already have a logic app,\ + \ visit Logic Apps to create one (https://portal.azure.com/#blade/HubsExtension/BrowseResourceBlade/resourceType/Microsoft.Logic%2Fworkflows).\"\ + ,\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"\ + logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic\ + \ app trigger\",\"description\":\"The trigger connector of the logic app that\ + \ is triggered. Possible values: 'Manual (Incoming HTTP request)', 'When an\ + \ Azure Security Center Alert is created or triggered'.\"},\"allowedValues\"\ + :[\"Manual (Incoming HTTP request)\",\"When an Azure Security Center Alert\ + \ is created or triggered\"]}},\"policyRule\":{\"if\":{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"\ + deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\"\ + ,\"name\":\"[parameters('automationName')]\",\"existenceScope\":\"resourcegroup\"\ + ,\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\"\ + :\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"\ + incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"automationName\":{\"type\"\ + :\"string\"},\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\"\ + :{\"type\":\"string\"},\"alertName\":{\"type\":\"string\"},\"alertSeverities\"\ + :{\"type\":\"array\"},\"logicAppResourceId\":{\"type\":\"string\"},\"logicAppTrigger\"\ + :{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\"\ + :\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope for subscription\ + \ {0}\",\"alertSeveritiesLength\":\"[length(parameters('alertSeverities'))]\"\ + ,\"alertSeveritiesLengthIfEmpty\":\"[if(equals(variables('alertSeveritiesLength'),\ + \ 0), 1, variables('alertSeveritiesLength'))]\",\"severityMap\":{\"High\"\ + :\"high\",\"Medium\":\"medium\",\"Low\":\"low\"},\"triggerMap\":{\"Manual\ + \ (Incoming HTTP request)\":\"manual\",\"When an Azure Security Center Alert\ + \ is created or triggered\":\"When_an_Azure_Security_Center_Alert_is_created_or_triggered\"\ + }},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\"\ + :\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\"\ + :\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"\ + type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"\ + name\":\"[concat('nestedAutomationDeployment', '_', parameters('guidValue'))]\"\ + ,\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"\ + [resourceId('Microsoft.Resources/resourceGroups/', parameters('resourceGroupName'))]\"\ + ],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\"\ + :[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\"\ + ,\"name\":\"[parameters('automationName')]\",\"type\":\"Microsoft.Security/automations\"\ + ,\"dependsOn\":[],\"properties\":{\"description\":\"Workflow Automation for\ + \ Azure Security Center alerts via policy\",\"isEnabled\":true,\"scopes\"\ + :[{\"description\":\"[replace(variables('scopeDescription'),'{0}', subscription().subscriptionId)]\"\ + ,\"scopePath\":\"[subscription().id]\"}],\"sources\":[{\"eventSource\":\"\ + Alerts\",\"copy\":[{\"name\":\"ruleSets\",\"count\":\"[variables('alertSeveritiesLengthIfEmpty')]\"\ + ,\"input\":{\"rules\":[{\"propertyJPath\":\"[if(equals(parameters('alertName'),\ + \ ''), 'Version', 'AlertDisplayName')]\",\"propertyType\":\"string\",\"expectedValue\"\ + :\"[if(equals(parameters('alertName'), ''), '3.', parameters('alertName'))]\"\ + ,\"operator\":\"Contains\"},{\"propertyJPath\":\"Severity\",\"propertyType\"\ + :\"string\",\"expectedValue\":\"[variables('severityMap')[parameters('alertSeverities')[mod(copyIndex('ruleSets'),\ + \ variables('alertSeveritiesLengthIfEmpty'))]]]\",\"operator\":\"Equals\"\ + }]}}]}],\"actions\":[{\"actionType\":\"LogicApp\",\"logicAppResourceId\":\"\ + [parameters('logicAppResourceId')]\",\"uri\":\"[listCallbackUrl(concat(parameters('logicAppResourceId'),\ + \ '/triggers/', variables('triggerMap')[parameters('logicAppTrigger')]),'2016-06-01').value]\"\ + }]}}]}}}]},\"parameters\":{\"automationName\":{\"value\":\"[parameters('automationName')]\"\ + },\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"\ + resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"\ + },\"alertName\":{\"value\":\"[parameters('alertName')]\"},\"alertSeverities\"\ + :{\"value\":\"[parameters('alertSeverities')]\"},\"logicAppResourceId\":{\"\ + value\":\"[parameters('logicAppResourceId')]\"},\"logicAppTrigger\":{\"value\"\ + :\"[parameters('logicAppTrigger')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f1525828-9a90-4fcf-be48-268cdd02361e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f1525828-9a90-4fcf-be48-268cdd02361e\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1028 - Information\ + \ Flow Enforcement\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1028\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f171df5c-921b-41e9-b12b-50801c315475\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f171df5c-921b-41e9-b12b-50801c315475\"\ + },{\"properties\":{\"displayName\":\"Virtual networks should use specified\ + \ virtual network gateway\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\"\ + ,\"description\":\"This policy audits any virtual network if the default route\ + \ does not point to the specified virtual network gateway.\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"},\"\ + virtualNetworkGatewayId\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Virtual network gateway Id\",\"description\":\"Resource Id of the virtual\ + \ network gateway. Example: /subscriptions/YourSubscriptionId/resourceGroups/YourResourceGroup/providers/Microsoft.Network/virtualNetworkGateways/Name\"\ + }}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Network/virtualNetworks/subnets\",\"name\":\"GatewaySubnet\",\"\ + existenceCondition\":{\"not\":{\"field\":\"Microsoft.Network/virtualNetworks/subnets/ipConfigurations[*].id\"\ + ,\"notContains\":\"[concat(parameters('virtualNetworkGatewayId'), '/')]\"\ + }}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f1776c76-f58c-4245-a8d0-2b207198dc8b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f1776c76-f58c-4245-a8d0-2b207198dc8b\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Linux VMs that do not have the passwd file permissions set to 0644\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Linux virtual machines\ + \ that do not have the passwd file permissions set to 0644. It also creates\ + \ a system-assigned managed identity and deploys the VM extension for Guest\ + \ Configuration. This policy should only be used along with its corresponding\ + \ audit policy in an initiative. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"3.0.0-deprecated\",\"category\":\"Guest Configuration\",\"requiredProviders\"\ + :[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"\ + if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\"\ + ,\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"\ + paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"\ + like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\"\ + ,\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"\ + ]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"\ + field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\"\ + ,\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\"\ + ,\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\"\ + ,\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"\ + cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\"\ + ,\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\"\ + ,\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"\ + ]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"\ + then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"PasswordPolicy_msid121\",\"deployment\":{\"properties\":{\"mode\"\ + :\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"PasswordPolicy_msid121\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforLinux')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f19aa1c1-6b91-4c27-ae6a-970279f03db9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f19aa1c1-6b91-4c27-ae6a-970279f03db9\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'Administrative Templates - MSS (Legacy)'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'Administrative Templates\ + \ - MSS (Legacy)'. It also creates a system-assigned managed identity and\ + \ deploys the VM extension for Guest Configuration. This policy should only\ + \ be used along with its corresponding audit policy in an initiative. For\ + \ more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\",\"deployment\"\ + :{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"\ + value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\"\ + :\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\"}},\"template\":{\"$schema\"\ + :\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f1f4825d-58fb-4257-8016-8c00e3c9ed9d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f1f4825d-58fb-4257-8016-8c00e3c9ed9d\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'Security Settings - Account Policies'\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'Security Settings - Account Policies'\ + \ for password history, age, length, complexity, and storing passwords using\ + \ reversible encryption. This policy requires that the Guest Configuration\ + \ prerequisites have been deployed to the policy assignment scope. For details,\ + \ visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\"\ + ,\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"\ + ],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecuritySettingsAccountPolicies\"\ + ,\"version\":\"1.*\",\"configurationParameter\":{\"EnforcePasswordHistory\"\ + :\"Enforce password history;ExpectedValue\",\"MaximumPasswordAge\":\"Maximum\ + \ password age;ExpectedValue\",\"MinimumPasswordAge\":\"Minimum password age;ExpectedValue\"\ + ,\"MinimumPasswordLength\":\"Minimum password length;ExpectedValue\",\"PasswordMustMeetComplexityRequirements\"\ + :\"Password must meet complexity requirements;ExpectedValue\"}}},\"parameters\"\ + :{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Include Arc connected servers\",\"description\":\"By selecting this option,\ + \ you agree to be charged monthly per Arc connected machine.\"},\"allowedValues\"\ + :[\"true\",\"false\"],\"defaultValue\":\"false\"},\"EnforcePasswordHistory\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enforce password history\"\ + ,\"description\":\"Specifies limits on password reuse - how many times a new\ + \ password must be created for a user account before the password can be repeated.\"\ + },\"defaultValue\":\"24\"},\"MaximumPasswordAge\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"Maximum password age\",\"description\":\"Specifies\ + \ the maximum number of days that may elapse before a user account password\ + \ must be changed. The format of the value is two integers separated by a\ + \ comma, denoting an inclusive range.\"},\"defaultValue\":\"1,70\"},\"MinimumPasswordAge\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Minimum password age\"\ + ,\"description\":\"Specifies the minimum number of days that must elapse before\ + \ a user account password can be changed.\"},\"defaultValue\":\"1\"},\"MinimumPasswordLength\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Minimum password length\"\ + ,\"description\":\"Specifies the minimum number of characters that a user\ + \ account password may contain.\"},\"defaultValue\":\"14\"},\"PasswordMustMeetComplexityRequirements\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Password must meet complexity\ + \ requirements\",\"description\":\"Specifies whether a user account password\ + \ must be complex. If required, a complex password must not contain part of\ + \ user's account name or full name; be at least 6 characters long; contain\ + \ a mix of uppercase, lowercase, number, and non-alphabetic characters.\"\ + },\"defaultValue\":\"1\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Effect\",\"description\":\"Enable or disable the execution\ + \ of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"\ + defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_SecuritySettingsAccountPolicies\",\"existenceCondition\":{\"\ + allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Enforce password history;ExpectedValue', '=',\ + \ parameters('EnforcePasswordHistory'), ',', 'Maximum password age;ExpectedValue',\ + \ '=', parameters('MaximumPasswordAge'), ',', 'Minimum password age;ExpectedValue',\ + \ '=', parameters('MinimumPasswordAge'), ',', 'Minimum password length;ExpectedValue',\ + \ '=', parameters('MinimumPasswordLength'), ',', 'Password must meet complexity\ + \ requirements;ExpectedValue', '=', parameters('PasswordMustMeetComplexityRequirements')))]\"\ + }]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f2143251-70de-4e81-87a8-36cee5a2f29d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f2143251-70de-4e81-87a8-36cee5a2f29d\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1701 - Information\ + \ System Monitoring | Host-Based Devices\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this System and Information\ + \ Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1701\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f25bc08f-27cb-43b6-9a23-014d00700426\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f25bc08f-27cb-43b6-9a23-014d00700426\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1457 - Physical\ + \ Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Physical and Environmental Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1457\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f2d9d3e6-8886-4305-865d-639163e5c305\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f2d9d3e6-8886-4305-865d-639163e5c305\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1309 - Identification\ + \ And Authentication (Org. Users) | Acceptance Of Piv Credentials\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Identification and Authentication control\",\"metadata\":{\"version\":\"\ + 1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"\ + /providers/Microsoft.PolicyInsights/policyMetadata/ACF1309\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f355d62b-39a8-4ba3-abf7-90f71cb3b000\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f355d62b-39a8-4ba3-abf7-90f71cb3b000\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1615 - System\ + \ And Communications Protection Policy And Procedures\",\"policyType\":\"\ + Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ System and Communications Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1615\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f35e02aa-0a55-49f8-8811-8abfa7e6f2c0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f35e02aa-0a55-49f8-8811-8abfa7e6f2c0\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1255 - Contingency\ + \ Plan | Continue Essential Missions / Business Functions\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1255\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f3793f5e-937f-44f7-bfba-40647ef3efa0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f3793f5e-937f-44f7-bfba-40647ef3efa0\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs if the Administrators group doesn't contain all of the specified\ + \ members\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"\ + This policy should only be used along with its corresponding deploy policy\ + \ in an initiative. This definition allows Azure Policy to process the results\ + \ of auditing Windows virtual machines in which the Administrators group does\ + \ not contain all of the specified members. For more information on Guest\ + \ Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\"\ + :{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"\ + deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AdministratorsGroupMembersToInclude\",\"existenceCondition\":{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f3b44e5d-1456-475f-9c67-c66c4618e85a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f3b44e5d-1456-475f-9c67-c66c4618e85a\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs that do not contain the specified certificates in Trusted Root\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy\ + \ should only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ VMs that do not contain the specified certificates in the Trusted Root Certification\ + \ Authorities certificate store (Cert:\\\\LocalMachine\\\\Root). For more\ + \ information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsCertificateInTrustedRoot\",\"existenceCondition\":{\"field\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f3b9ad83-000d-4dc1-bff0-6d54533dd03f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f3b9ad83-000d-4dc1-bff0-6d54533dd03f\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1706 - Security\ + \ Alerts, Advisories, And Directives\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this System and Information\ + \ Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1706\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f475ee0e-f560-4c9b-876b-04a77460a404\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f475ee0e-f560-4c9b-876b-04a77460a404\"\ + },{\"properties\":{\"displayName\":\"Audit Log Analytics workspace for VM\ + \ - Report Mismatch\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Reports VMs as non-compliant if they aren't logging to the Log Analytics\ + \ workspace specified in the policy/initiative assignment.\",\"metadata\"\ + :{\"version\":\"1.0.1\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalyticsWorkspaceId\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log Analytics Workspace\ + \ Id that VMs should be configured for\",\"description\":\"This is the Id\ + \ (GUID) of the Log Analytics Workspace that the VMs should be configured\ + \ for.\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines/extensions\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\"\ + ,\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/settings.workspaceId\"\ + ,\"notEquals\":\"[parameters('logAnalyticsWorkspaceId')]\"}]},\"then\":{\"\ + effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f47b5582-33ec-4c5c-87c0-b010a6b2e917\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f47b5582-33ec-4c5c-87c0-b010a6b2e917\"\ + },{\"properties\":{\"displayName\":\"Authorization rules on the Event Hub\ + \ instance should be defined\",\"policyType\":\"BuiltIn\",\"mode\":\"All\"\ + ,\"description\":\"Audit existence of authorization rules on Event Hub entities\ + \ to grant least-privileged access\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"Event Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\"\ + :{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces/eventhubs\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.EventHub/namespaces/eventHubs/authorizationRules\"}}}},\"id\":\"\ + /providers/Microsoft.Authorization/policyDefinitions/f4826e5f-6a27-407c-ae3e-9582eb39891d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4826e5f-6a27-407c-ae3e-9582eb39891d\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs that do not have the password complexity setting enabled\",\"\ + policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should\ + \ only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines that do not have the password complexity setting enabled.\ + \ For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"PasswordMustMeetComplexityRequirements\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f48b2913-1dc5-4834-8c72-ccc1dfd819bb\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f48b2913-1dc5-4834-8c72-ccc1dfd819bb\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1495 - System\ + \ Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Planning control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1495\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4978d0e-a596-48e7-9f8c-bbf52554ce8d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4978d0e-a596-48e7-9f8c-bbf52554ce8d\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs that have not restarted within the specified number of\ + \ days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"\ + This policy creates a Guest Configuration assignment to audit Windows virtual\ + \ machines that have not restarted within the specified number of days. It\ + \ also creates a system-assigned managed identity and deploys the VM extension\ + \ for Guest Configuration. This policy should only be used along with its\ + \ corresponding audit policy in an initiative. For more information on Guest\ + \ Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\"\ + :{\"version\":\"1.1.0-deprecated\",\"category\":\"Guest Configuration\",\"\ + requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"NumberOfDays\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Number of days\",\"description\":\"The number of days without\ + \ restart until the machine is considered non-compliant\"},\"defaultValue\"\ + :\"12\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"MachineLastBootUpTime\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('[MachineUpTime]MachineLastBootUpTime;NumberOfDays',\ + \ '=', parameters('NumberOfDays')))]\"},\"deployment\":{\"properties\":{\"\ + mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"MachineLastBootUpTime\"\ + },\"NumberOfDays\":{\"value\":\"[parameters('NumberOfDays')]\"}},\"template\"\ + :{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"NumberOfDays\":{\"type\":\"string\"}},\"resources\"\ + :[{\"condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[MachineUpTime]MachineLastBootUpTime;NumberOfDays\"\ + ,\"value\":\"[parameters('NumberOfDays')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[MachineUpTime]MachineLastBootUpTime;NumberOfDays\"\ + ,\"value\":\"[parameters('NumberOfDays')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"\ + [parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\"\ + ,\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4b245d4-46c9-42be-9b1a-49e2b5b94194\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4b245d4-46c9-42be-9b1a-49e2b5b94194\"\ + },{\"properties\":{\"displayName\":\"Deploy Auditing on SQL servers\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy ensures that\ + \ Auditing is enabled on SQL Servers for enhanced security and compliance.\ + \ It will automatically create a storage account in the same region as the\ + \ SQL server to store audit records.\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"SQL\"},\"parameters\":{\"retentionDays\":{\"type\":\"String\"\ + ,\"metadata\":{\"description\":\"The value in days of the retention period\ + \ (0 indicates unlimited retention)\",\"displayName\":\"Retention days (optional,\ + \ 180 days if unspecified)\"},\"defaultValue\":\"180\"},\"storageAccountsResourceGroup\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource group name\ + \ for storage accounts\",\"description\":\"Auditing writes database events\ + \ to an audit log in your Azure Storage account (a storage account will be\ + \ created in each region where a SQL Server is created that will be shared\ + \ by all servers in that region). Important - for proper operation of Auditing\ + \ do not delete or rename the resource group or the storage accounts.\",\"\ + strongType\":\"existingResourceGroups\"}}},\"policyRule\":{\"if\":{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"DeployIfNotExists\"\ + ,\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\"\ + :\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/auditingSettings.state\"\ + ,\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\"\ + ,\"/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"\ + ],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"\ + $schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serverName\":{\"type\":\"\ + string\"},\"auditRetentionDays\":{\"type\":\"string\"},\"storageAccountsResourceGroup\"\ + :{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"\ + retentionDays\":\"[int(parameters('auditRetentionDays'))]\",\"subscriptionId\"\ + :\"[subscription().subscriptionId]\",\"uniqueStorage\":\"[uniqueString(variables('subscriptionId'),\ + \ parameters('location'), parameters('storageAccountsResourceGroup'))]\",\"\ + locationCode\":\"[substring(parameters('location'), 0, 3)]\",\"storageName\"\ + :\"[tolower(concat('sqlaudit', variables('locationCode'), variables('uniqueStorage')))]\"\ + ,\"createStorageAccountDeploymentName\":\"[concat('sqlServerAuditingStorageAccount-',\ + \ uniqueString(variables('locationCode'), parameters('serverName')))]\"},\"\ + resources\":[{\"apiVersion\":\"2017-05-10\",\"name\":\"[variables('createStorageAccountDeploymentName')]\"\ + ,\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('storageAccountsResourceGroup')]\"\ + ,\"properties\":{\"mode\":\"Incremental\",\"parameters\":{\"location\":{\"\ + value\":\"[parameters('location')]\"},\"storageName\":{\"value\":\"[variables('storageName')]\"\ + }},\"templateLink\":{\"uri\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/samples/SQL/deploy-sql-server-auditing/createStorage.template.json\"\ + ,\"contentVersion\":\"1.0.0.0\"}}},{\"name\":\"[concat(parameters('serverName'),\ + \ '/Default')]\",\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"apiVersion\"\ + :\"2017-03-01-preview\",\"properties\":{\"state\":\"Enabled\",\"storageEndpoint\"\ + :\"[reference(variables('createStorageAccountDeploymentName')).outputs.storageAccountEndPoint.value]\"\ + ,\"storageAccountAccessKey\":\"[reference(variables('createStorageAccountDeploymentName')).outputs.storageAccountKey.value]\"\ + ,\"retentionDays\":\"[variables('retentionDays')]\",\"auditActionsAndGroups\"\ + :null,\"storageAccountSubscriptionId\":\"[subscription().subscriptionId]\"\ + ,\"isStorageSecondaryKeyInUse\":false}}]},\"parameters\":{\"serverName\":{\"\ + value\":\"[field('name')]\"},\"auditRetentionDays\":{\"value\":\"[parameters('retentionDays')]\"\ + },\"storageAccountsResourceGroup\":{\"value\":\"[parameters('storageAccountsResourceGroup')]\"\ + },\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4c68484-132f-41f9-9b6d-3e4b1cb55036\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4c68484-132f-41f9-9b6d-3e4b1cb55036\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1469 - Power\ + \ Equipment And Cabling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this Physical and Environmental Protection\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1469\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f509c5b6-0de0-4a4e-9b2e-cd9cbf3a58fd\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f509c5b6-0de0-4a4e-9b2e-cd9cbf3a58fd\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1618 - Security\ + \ Function Isolation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Communications Protection control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1618\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f52f89aa-4489-4ec4-950e-8c96a036baa9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f52f89aa-4489-4ec4-950e-8c96a036baa9\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'Security Options - Network Access'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'Security Options\ + \ - Network Access'. It also creates a system-assigned managed identity and\ + \ deploys the VM extension for Guest Configuration. This policy should only\ + \ be used along with its corresponding audit policy in an initiative. For\ + \ more information on Guest Configuration policies, please visit https://aka.ms/gcpol\"\ + ,\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"NetworkAccessRemotelyAccessibleRegistryPaths\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"[Deprecated]: Network access: Remotely\ + \ accessible registry paths\",\"description\":\"Specifies which registry paths\ + \ will be accessible over the network, regardless of the users or groups listed\ + \ in the access control list (ACL) of the `winreg` registry key.\"},\"defaultValue\"\ + :\"System\\\\CurrentControlSet\\\\Control\\\\ProductOptions|#|System\\\\CurrentControlSet\\\ + \\Control\\\\Server Applications|#|Software\\\\Microsoft\\\\Windows NT\\\\\ + CurrentVersion\"},\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Network\ + \ access: Remotely accessible registry paths and sub-paths\",\"description\"\ + :\"Specifies which registry paths and sub-paths will be accessible over the\ + \ network, regardless of the users or groups listed in the access control\ + \ list (ACL) of the `winreg` registry key.\"},\"defaultValue\":\"System\\\\\ + CurrentControlSet\\\\Control\\\\Print\\\\Printers|#|System\\\\CurrentControlSet\\\ + \\Services\\\\Eventlog|#|Software\\\\Microsoft\\\\OLAP Server|#|Software\\\ + \\Microsoft\\\\Windows NT\\\\CurrentVersion\\\\Print|#|Software\\\\Microsoft\\\ + \\Windows NT\\\\CurrentVersion\\\\Windows|#|System\\\\CurrentControlSet\\\\\ + Control\\\\ContentIndex|#|System\\\\CurrentControlSet\\\\Control\\\\Terminal\ + \ Server|#|System\\\\CurrentControlSet\\\\Control\\\\Terminal Server\\\\UserConfig|#|System\\\ + \\CurrentControlSet\\\\Control\\\\Terminal Server\\\\DefaultUserConfiguration|#|Software\\\ + \\Microsoft\\\\Windows NT\\\\CurrentVersion\\\\Perflib|#|System\\\\CurrentControlSet\\\ + \\Services\\\\SysmonLog\"},\"NetworkAccessSharesThatCanBeAccessedAnonymously\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Network\ + \ access: Shares that can be accessed anonymously\",\"description\":\"Specifies\ + \ which network shares can be accessed by anonymous users. The default configuration\ + \ for this policy setting has little effect because all users have to be authenticated\ + \ before they can access shared resources on the server.\"},\"defaultValue\"\ + :\"0\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsNetworkAccess\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Network access: Remotely accessible registry\ + \ paths;ExpectedValue', '=', parameters('NetworkAccessRemotelyAccessibleRegistryPaths'),\ + \ ',', 'Network access: Remotely accessible registry paths and sub-paths;ExpectedValue',\ + \ '=', parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths'),\ + \ ',', 'Network access: Shares that can be accessed anonymously;ExpectedValue',\ + \ '=', parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')))]\"\ + },\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\"\ + :{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"\ + },\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\"\ + :\"AzureBaseline_SecurityOptionsNetworkAccess\"},\"NetworkAccessRemotelyAccessibleRegistryPaths\"\ + :{\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPaths')]\"\ + },\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":{\"value\":\"\ + [parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths')]\"\ + },\"NetworkAccessSharesThatCanBeAccessedAnonymously\":{\"value\":\"[parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"NetworkAccessRemotelyAccessibleRegistryPaths\":{\"\ + type\":\"string\"},\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\"\ + :{\"type\":\"string\"},\"NetworkAccessSharesThatCanBeAccessedAnonymously\"\ + :{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\"\ + ,\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Network access:\ + \ Remotely accessible registry paths;ExpectedValue\",\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPaths')]\"\ + },{\"name\":\"Network access: Remotely accessible registry paths and sub-paths;ExpectedValue\"\ + ,\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths')]\"\ + },{\"name\":\"Network access: Shares that can be accessed anonymously;ExpectedValue\"\ + ,\"value\":\"[parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Network access:\ + \ Remotely accessible registry paths;ExpectedValue\",\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPaths')]\"\ + },{\"name\":\"Network access: Remotely accessible registry paths and sub-paths;ExpectedValue\"\ + ,\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths')]\"\ + },{\"name\":\"Network access: Shares that can be accessed anonymously;ExpectedValue\"\ + ,\"value\":\"[parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\"\ + ,\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\"\ + ,\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f56a3ab2-89d1-44de-ac0d-2ada5962e22a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f56a3ab2-89d1-44de-ac0d-2ada5962e22a\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1198 - Configuration\ + \ Change Control | Security Representative\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Configuration\ + \ Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1198\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f56be5c3-660b-4c61-9078-f67cf072c356\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f56be5c3-660b-4c61-9078-f67cf072c356\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1328 - Authenticator\ + \ Management | Password-Based Authentication\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Identification\ + \ and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1328\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f5c66fdc-3d02-4034-9db5-ba57802609de\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f5c66fdc-3d02-4034-9db5-ba57802609de\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1193 - Configuration\ + \ Change Control | Automated Document / Notification / Prohibition Of Changes\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Configuration Management control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1193\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f5fd629f-3075-4cae-ab53-bad65495a4ac\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f5fd629f-3075-4cae-ab53-bad65495a4ac\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Web Application Firewall\ + \ should be a set mode for Application Gateway and Azure Front Door Service\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Mandates\ + \ detect or prevent mode to be active on all Web Application Firewall policies\ + \ for Azure Front Door and Application Gateway. Web Application Firewall policies\ + \ can have a consistent mode configuration across a resource group.\",\"metadata\"\ + :{\"version\":\"1.0.0-deprecated\",\"category\":\"Network\",\"deprecated\"\ + :true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"\ + defaultValue\":\"Deny\"},\"modeRequirement\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Deprecated]: Mode Requirement\",\"description\":\"Mode\ + \ required for all WAF policies\"},\"allowedValues\":[\"Prevention\",\"Detection\"\ + ],\"defaultValue\":\"Detection\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/frontdoorwebapplicationfirewallpolicies\"\ + },{\"field\":\"Microsoft.Network/frontdoorWebApplicationFirewallPolicies/policySettings.mode\"\ + ,\"notEquals\":\"[parameters('modeRequirement')]\"}]},{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies\"\ + },{\"field\":\"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/policySettings.mode\"\ + ,\"notEquals\":\"[parameters('modeRequirement')]\"}]}]},\"then\":{\"effect\"\ + :\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f6b68e5a-7207-4638-a1fb-47d90404209e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f6b68e5a-7207-4638-a1fb-47d90404209e\"\ + },{\"properties\":{\"displayName\":\"Internet-facing virtual machines should\ + \ be protected with network security groups\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"All\",\"description\":\"Protect your virtual machines from potential\ + \ threats by restricting access to them with network security groups (NSG).\ + \ Learn more about controlling traffic with NSGs at https://aka.ms/nsg-doc\"\ + ,\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security Center\"},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"\ + Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"\ + ]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Security/assessments\",\"name\":\"483f12ed-ae23-447e-a2de-a67a10db4353\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f6de0be7-9a8a-4b8a-b349-43cf02d22f7c\"\ + },{\"properties\":{\"displayName\":\"Audit Linux machines that have accounts\ + \ without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Requires that prerequisites are deployed to the policy assignment scope.\ + \ For details, visit https://aka.ms/gcpol. Machines are non-compliant if Linux\ + \ machines that have accounts without passwords\",\"metadata\":{\"category\"\ + :\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"\ + ],\"guestConfiguration\":{\"name\":\"PasswordPolicy_msid232\",\"version\"\ + :\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"Include Arc connected servers\",\"description\"\ + :\"By selecting this option, you agree to be charged monthly per Arc connected\ + \ machine.\"},\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"\ + },\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of this policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\"\ + ,\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"\ + Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"\ + Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\"\ + ,\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"\ + ]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"\ + field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\"\ + ,\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\"\ + ,\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\"\ + ,\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"\ + cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\"\ + ,\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\"\ + ,\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"\ + ]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"\ + equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"\ + then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"PasswordPolicy_msid232\",\"existenceCondition\":{\"field\":\"\ + Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f6ec09a3-78bf-4f8f-99dc-6c77182d0f99\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f6ec09a3-78bf-4f8f-99dc-6c77182d0f99\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1214 - Least\ + \ Functionality\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Configuration Management control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1214\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f714a4e2-b580-47b6-ae8c-f2812d3750f3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f714a4e2-b580-47b6-ae8c-f2812d3750f3\"\ + },{\"properties\":{\"displayName\":\"Windows machines should meet requirements\ + \ for 'Security Options - Recovery console'\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"Indexed\",\"description\":\"Windows machines should have the specified\ + \ Group Policy settings in the category 'Security Options - Recovery console'\ + \ for allowing floppy copy and access to all drives and folders. This policy\ + \ requires that the Guest Configuration prerequisites have been deployed to\ + \ the policy assignment scope. For details, visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\"\ + :{\"name\":\"AzureBaseline_SecurityOptionsRecoveryconsole\",\"version\":\"\ + 1.*\",\"configurationParameter\":{\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\"\ + :\"Recovery console: Allow floppy copy and access to all drives and all folders;ExpectedValue\"\ + }}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Include Arc connected servers\",\"description\":\"By selecting\ + \ this option, you agree to be charged monthly per Arc connected machine.\"\ + },\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"},\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Recovery console: Allow\ + \ floppy copy and access to all drives and all folders\",\"description\":\"\ + Specifies whether to make the Recovery Console SET command available, which\ + \ allows setting of recovery console environment variables.\"},\"defaultValue\"\ + :\"0\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"Enable or disable the execution of this policy\"},\"allowedValues\"\ + :[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"\ + }},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\"\ + ,\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"\ + ]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"\ + notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\"\ + :\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\"\ + ,\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"\ + AzureBaseline_SecurityOptionsRecoveryconsole\",\"existenceCondition\":{\"\ + allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Recovery console: Allow floppy copy and access\ + \ to all drives and all folders;ExpectedValue', '=', parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')))]\"\ + }]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f71be03e-e25b-4d0f-b8bc-9b3e309b66c0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f71be03e-e25b-4d0f-b8bc-9b3e309b66c0\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1591 - External\ + \ Information System Services | Ident. Of Functions / Ports / Protocols /\ + \ Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Services Acquisition control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1591\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f751cdb7-fbee-406b-969b-815d367cb9b3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f751cdb7-fbee-406b-969b-815d367cb9b3\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1330 - Authenticator\ + \ Management | Password-Based Authentication\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Identification\ + \ and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1330\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f75cedb2-5def-4b31-973e-b69e8c7bd031\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f75cedb2-5def-4b31-973e-b69e8c7bd031\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1540 - Security\ + \ Categorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Risk Assessment control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1540\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f771f8cb-6642-45cc-9a15-8a41cd5c6977\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f771f8cb-6642-45cc-9a15-8a41cd5c6977\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1449 - Physical\ + \ Access Authorizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this Physical and Environmental Protection\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1449\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f784d3b0-5f2b-49b7-b9f3-00ba8653ced5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f784d3b0-5f2b-49b7-b9f3-00ba8653ced5\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1506 - Personnel\ + \ Security Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Personnel Security control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1506\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f7d2ff17-d604-4dd9-b607-9ecf63f28ad2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f7d2ff17-d604-4dd9-b607-9ecf63f28ad2\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs that do not have the specified Windows PowerShell execution\ + \ policy\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"\ + This policy should only be used along with its corresponding deploy policy\ + \ in an initiative. This definition allows Azure Policy to process the results\ + \ of auditing Windows virtual machines where Windows PowerShell is not configured\ + \ to use the specified PowerShell execution policy. For more information on\ + \ Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\"\ + :{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"\ + deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\"\ + ,\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"WindowsPowerShellExecutionPolicy\",\"existenceCondition\":{\"\ + field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8036bd0-c10b-4931-86bb-94a878add855\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8036bd0-c10b-4931-86bb-94a878add855\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1705 - Security\ + \ Alerts, Advisories, And Directives\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this System and Information\ + \ Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1705\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f82e3639-fa2b-4e06-a786-932d8379b972\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f82e3639-fa2b-4e06-a786-932d8379b972\"\ + },{\"properties\":{\"displayName\":\"External accounts with owner permissions\ + \ should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"All\",\"description\":\"External accounts with owner permissions\ + \ should be removed from your subscription in order to prevent unmonitored\ + \ access.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security Center\"\ + },\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"\ + AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\"\ + :\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"c3b6ae71-f1f0-31b4-e6c1-d5951285d03d\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8456c1c-aa66-4dfb-861a-25d127b775c9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1345 - Cryptographic\ + \ Module Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this Identification and Authentication\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1345\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f86aa129-7c07-4aa4-bbf5-792d93ffd9ea\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f86aa129-7c07-4aa4-bbf5-792d93ffd9ea\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1065 - Remote\ + \ Access | Privileged Commands / Access\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Access Control control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1065\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f87b8085-dca9-4cf1-8f7b-9822b997797c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f87b8085-dca9-4cf1-8f7b-9822b997797c\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ audit Windows VMs configurations in 'System Audit Policies - System'\",\"\ + policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy\ + \ creates a Guest Configuration assignment to audit Windows virtual machines\ + \ with non-compliant settings in Group Policy category: 'System Audit Policies\ + \ - System'. It also creates a system-assigned managed identity and deploys\ + \ the VM extension for Guest Configuration. This policy should only be used\ + \ along with its corresponding audit policy in an initiative. For more information\ + \ on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"\ + metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + parameters\":{\"AuditOtherSystemEvents\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Deprecated]: Audit Other System Events\",\"description\"\ + :\"Specifies whether audit events are generated for Windows Firewall Service\ + \ and Windows Firewall driver start and stop events, failure events for these\ + \ services and Windows Firewall Service policy processing failures.\"},\"\ + allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success and Failure\"\ + ],\"defaultValue\":\"No Auditing\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"\ + allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\"\ + ,\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\"\ + ,\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SystemAuditPoliciesSystem\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\"\ + ,\"equals\":\"[base64(concat('Audit Other System Events;ExpectedValue', '=',\ + \ parameters('AuditOtherSystemEvents')))]\"},\"deployment\":{\"properties\"\ + :{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"\ + },\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"\ + [field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesSystem\"\ + },\"AuditOtherSystemEvents\":{\"value\":\"[parameters('AuditOtherSystemEvents')]\"\ + }},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\"\ + :{\"type\":\"string\"},\"AuditOtherSystemEvents\":{\"type\":\"string\"}},\"\ + resources\":[{\"condition\":\"[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit Other System\ + \ Events;ExpectedValue\",\"value\":\"[parameters('AuditOtherSystemEvents')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\"\ + ,\"name\":\"[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/',\ + \ parameters('configurationName'))]\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\"\ + ,\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit Other System\ + \ Events;ExpectedValue\",\"value\":\"[parameters('AuditOtherSystemEvents')]\"\ + }]}}},{\"condition\":\"[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]\"\ + ,\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\"\ + ,\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\"\ + ,\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')),\ + \ toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\"\ + ,\"name\":\"[concat(parameters('vmName'), '/AzurePolicyforWindows')]\",\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\"\ + ,\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"\ + ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\"\ + :true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"\ + ]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8b0158d-4766-490f-bea0-259e52dba473\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8b0158d-4766-490f-bea0-259e52dba473\"\ + },{\"properties\":{\"displayName\":\"Diagnostic logs in Service Bus should\ + \ be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Audit enabling of diagnostic logs. This enables you to recreate activity\ + \ trails to use for investigation purposes; when a security incident occurs\ + \ or when your network is compromised\",\"metadata\":{\"version\":\"3.0.0\"\ + ,\"category\":\"Service Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"},\"requiredRetentionDays\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required retention (days)\"\ + ,\"description\":\"The required diagnostic logs retention in days\"},\"defaultValue\"\ + :\"365\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\"\ + :{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"\ + anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\"\ + ,\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\"\ + ,\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\"\ + ,\"equals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\"\ + ,\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\"\ + ,\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8d36e2f-389b-4ee4-898d-21aeb69a0f45\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1203 - Access\ + \ Restrictions For Change | Automated Access Enforcement / Auditing\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1203\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9012d14-e3e6-4d7b-b926-9f37b5537066\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9012d14-e3e6-4d7b-b926-9f37b5537066\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1697 - Information\ + \ System Monitoring | Analyze Traffic / Covert Exfiltration\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ System and Information Integrity control\",\"metadata\":{\"version\":\"\ + 1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"\ + /providers/Microsoft.PolicyInsights/policyMetadata/ACF1697\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9873db2-18ad-46b3-a11a-1a1f8cbf0335\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9873db2-18ad-46b3-a11a-1a1f8cbf0335\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1478 - Fire\ + \ Protection | Suppression Devices / Systems\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Physical and\ + \ Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1478\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f997df46-cfbb-4cc8-aac8-3fecdaf6a183\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f997df46-cfbb-4cc8-aac8-3fecdaf6a183\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1535 - Personnel\ + \ Sanctions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Personnel Security control\",\"metadata\":{\"\ + version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1535\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9a165d2-967d-4733-8399-1074270dae2e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9a165d2-967d-4733-8399-1074270dae2e\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1108 - Content\ + \ Of Audit Records | Additional Audit Information\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Audit and\ + \ Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1108\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9ad559e-c12d-415e-9a78-e50fdd7da7ba\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9ad559e-c12d-415e-9a78-e50fdd7da7ba\"\ + },{\"properties\":{\"displayName\":\"Diagnostic logs in Azure Stream Analytics\ + \ should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Audit enabling of diagnostic logs. This enables you to recreate activity\ + \ trails to use for investigation purposes; when a security incident occurs\ + \ or when your network is compromised\",\"metadata\":{\"version\":\"3.0.0\"\ + ,\"category\":\"Stream Analytics\"},\"parameters\":{\"effect\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"},\"requiredRetentionDays\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required retention (days)\"\ + ,\"description\":\"The required diagnostic logs retention in days\"},\"defaultValue\"\ + :\"365\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.StreamAnalytics/streamingJobs\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"\ + Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\"\ + :{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"\ + anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\"\ + ,\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\"\ + ,\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\"\ + ,\"equals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\"\ + ,\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\"\ + ,\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\"\ + ,\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9be5368-9bf5-4b84-9e0a-7850da98bb46\"\ + },{\"properties\":{\"displayName\":\"Latest TLS version should be used in\ + \ your Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\"\ + :\"Upgrade to the latest TLS version\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"\ + Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\"\ + :\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"\ + existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/minTlsVersion\"\ + ,\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9d614c5-c173-4d56-95a7-b4437057d193\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1280 - Telecommunications\ + \ Services | Priority Of Service Provisions\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Contingency\ + \ Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1280\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa108498-b3a8-4ffb-9e79-1107e76afad3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa108498-b3a8-4ffb-9e79-1107e76afad3\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1037 - Least\ + \ Privilege | Network Access To Privileged Commands\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this Access Control\ + \ control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory\ + \ Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1037\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa4c2a3d-1294-41a3-9ada-0e540471e9fb\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa4c2a3d-1294-41a3-9ada-0e540471e9fb\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1435 - Media\ + \ Transport\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Media Protection control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1435\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa8d221b-d130-4637-ba16-501e666628bb\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa8d221b-d130-4637-ba16-501e666628bb\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1675 - Flaw\ + \ Remediation | Time To Remediate Flaws / Benchmarks For Corrective Actions\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this System and Information Integrity control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1675\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/facb66e0-1c48-478a-bed5-747a312323e1\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"facb66e0-1c48-478a-bed5-747a312323e1\"\ + },{\"properties\":{\"displayName\":\"Audit Linux virtual machines on which\ + \ the Linux Guest Configuration extension is not enabled\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This policy audits Linux\ + \ virtual machines hosted in Azure that are supported by Guest Configuration\ + \ but do not have the Guest Configuration extension enabled. For more information\ + \ on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Guest Configuration\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\"\ + ,\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"\ + paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"\ + like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\"\ + ,\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"\ + ]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"\ + field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\"\ + ,\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\"\ + ,\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\"\ + ,\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"\ + cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\"\ + ,\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\"\ + ,\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"\ + ]}]}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"\ + type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforLinux\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\"\ + ,\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\"\ + ,\"equals\":\"ConfigurationforLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\"\ + ,\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/faf25c8c-9598-4305-b4de-0aee1317fb31\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"faf25c8c-9598-4305-b4de-0aee1317fb31\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Deploy prerequisites to\ + \ enable Guest Configuration Policy on Linux VMs.\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"This policy creates a system-assigned\ + \ managed identity and deploys the VM extension for Guest Configuration on\ + \ Linux VMs. This is a prerequisite for Guest Configuration Policy and must\ + \ be assigned to the scope before using any Guest Configuration policy. For\ + \ more information on Guest Configuration policies, please visit https://aka.ms/gcpol.\"\ + ,\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\"\ + ,\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"\ + paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"\ + like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\"\ + ,\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"\ + ]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"\ + field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\"\ + ,\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\"\ + ,\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\"\ + ,\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"\ + cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\"\ + ,\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\"\ + ,\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"\ + ]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\"\ + :[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforLinux\"\ + ,\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\"\ + ,\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\"\ + ,\"equals\":\"ConfigurationforLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\"\ + ,\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\"\ + ,\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"\ + value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"\ + },\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-07-01\"\ + ,\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"\ + SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"\ + },{\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'),\ + \ '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\"\ + ,\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"\ + Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\"\ + :\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\"\ + :{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb27e9e0-526e-4ae1-89f2-a2a0bf0f8a50\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb27e9e0-526e-4ae1-89f2-a2a0bf0f8a50\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1086 - Publicly\ + \ Accessible Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Access Control control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1086\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb321e6f-16a0-4be3-878f-500956e309c5\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb321e6f-16a0-4be3-878f-500956e309c5\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1222 - Information\ + \ System Component Inventory\",\"policyType\":\"Static\",\"mode\":\"Indexed\"\ + ,\"description\":\"Microsoft implements this Configuration Management control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1222\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb39e62f-6bda-4558-8088-ec03d5670914\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb39e62f-6bda-4558-8088-ec03d5670914\"\ + },{\"properties\":{\"displayName\":\"Kubernetes Services should be upgraded\ + \ to a non-vulnerable Kubernetes version\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Indexed\",\"description\":\"Upgrade your Kubernetes service cluster to\ + \ a later Kubernetes version to protect against known vulnerabilities in your\ + \ current Kubernetes version. Vulnerability CVE-2019-9946 has been patched\ + \ in Kubernetes versions 1.11.9+, 1.12.7+, 1.13.5+, and 1.14.0+\",\"metadata\"\ + :{\"version\":\"1.0.2\",\"category\":\"Security Center\"},\"parameters\":{\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"\ + description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"\ + if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\"\ + ,\"in\":[\"1.13.4\",\"1.13.3\",\"1.13.2\",\"1.13.1\",\"1.13.0\"]},{\"field\"\ + :\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"in\":[\"\ + 1.12.6\",\"1.12.5\",\"1.12.4\",\"1.12.3\",\"1.12.2\",\"1.12.1\",\"1.12.0\"\ + ]},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\"\ + ,\"in\":[\"1.11.8\",\"1.11.7\",\"1.11.6\",\"1.11.5\",\"1.11.4\",\"1.11.3\"\ + ,\"1.11.2\",\"1.11.1\",\"1.11.0\"]},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\"\ + ,\"Like\":\"1.10.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\"\ + ,\"Like\":\"1.9.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\"\ + ,\"Like\":\"1.8.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\"\ + ,\"Like\":\"1.7.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\"\ + ,\"Like\":\"1.6.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\"\ + ,\"Like\":\"1.5.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\"\ + ,\"Like\":\"1.4.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\"\ + ,\"Like\":\"1.3.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\"\ + ,\"Like\":\"1.2.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\"\ + ,\"Like\":\"1.1.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\"\ + ,\"Like\":\"1.0.*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb893a29-21bb-418c-a157-e99480ec364c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb893a29-21bb-418c-a157-e99480ec364c\"\ + },{\"properties\":{\"displayName\":\"Storage account containing the container\ + \ with activity logs must be encrypted with BYOK\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"All\",\"description\":\"This policy audits if the Storage account\ + \ containing the container with activity logs is encrypted with BYOK. The\ + \ policy works only if the storage account lies on the same subscription as\ + \ activity logs by design. More information on Azure Storage encryption at\ + \ rest can be found here https://aka.ms/azurestoragebyok. \",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/logProfiles\"\ + },{\"field\":\"Microsoft.Insights/logProfiles/storageAccountId\",\"exists\"\ + :\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"\ + type\":\"Microsoft.Storage/storageAccounts\",\"existenceScope\":\"subscription\"\ + ,\"existenceCondition\":{\"allOf\":[{\"value\":\"[contains(field('Microsoft.Insights/logProfiles/storageAccountId'),\ + \ subscription().Id)]\",\"equals\":\"true\"},{\"field\":\"name\",\"equals\"\ + :\"[last(split(field('Microsoft.Insights/logProfiles/storageAccountId'),'/'))]\"\ + },{\"field\":\"Microsoft.Storage/storageAccounts/encryption.keySource\",\"\ + equals\":\"Microsoft.Keyvault\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fbb99e8e-e444-4da0-9ff1-75c92f5a85b2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fbb99e8e-e444-4da0-9ff1-75c92f5a85b2\"\ + },{\"properties\":{\"displayName\":\"[Preview]: All Internet traffic should\ + \ be routed via your deployed Azure Firewall\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"All\",\"description\":\"Azure Security Center has identified that\ + \ some of your subnets aren't protected with a next generation firewall. Protect\ + \ your subnets from potential threats by restricting access to them with Azure\ + \ Firewall or a supported next generation firewall\",\"metadata\":{\"version\"\ + :\"3.0.0-preview\",\"category\":\"Network\",\"preview\":true},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]:\ + \ Effect\",\"description\":\"Enable or disable All Internet traffic should\ + \ be routed via your deployed Azure Firewall\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks\"\ + },{\"count\":{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*]\",\"\ + where\":{\"allOf\":[{\"count\":{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*].ipConfigurations[*]\"\ + ,\"where\":{\"value\":\"[empty(field('Microsoft.Network/virtualNetworks/subnets[*].ipConfigurations[*].id'))]\"\ + ,\"equals\":false}},\"greaterOrEquals\":2},{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*].routeTable\"\ + ,\"exists\":false},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*].name\"\ + ,\"equals\":\"AzureBastionSubnet\"},{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*].name\"\ + ,\"equals\":\"GatewaySubnet\"}]}}]}},\"greater\":0}]},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/azureFirewalls\"\ + ,\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Network/azureFirewalls/ipConfigurations[*]\"\ + ,\"where\":{\"field\":\"Microsoft.Network/azureFirewalls/ipConfigurations[*].subnet.id\"\ + ,\"like\":\"[concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/*/providers/Microsoft.Network/virtualNetworks/',\ + \ first(split(field('fullName'), '/')), '/subnets/AzureFirewallSubnet')]\"\ + }},\"equals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fc5e4038-4584-4632-8c85-c0448d374b2c\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1075 - Access\ + \ Control For Mobile Devices | Full Device / Container-Based Encryption\"\ + ,\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft\ + \ implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1075\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fc933d22-04df-48ed-8f87-22a3773d4309\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fc933d22-04df-48ed-8f87-22a3773d4309\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Linux machines should meet\ + \ requirements for the Azure security baseline\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Indexed\",\"description\":\"Requires that prerequisites are deployed\ + \ to the policy assignment scope. For details, visit https://aka.ms/gcpol.\ + \ Machines are non-compliant if Linux machines should meet the requirements\ + \ for the Azure security baseline\",\"metadata\":{\"category\":\"Guest Configuration\"\ + ,\"version\":\"1.0.0-preview\",\"preview\":true,\"requiredProviders\":[\"\ + Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"LinuxOMSBaseline\"\ + ,\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"[Preview]: Include Arc connected\ + \ servers\",\"description\":\"By selecting this option, you agree to be charged\ + \ monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"\ + ],\"defaultValue\":\"false\"},\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Preview]: Effect\",\"description\":\"Enable or disable\ + \ the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\"\ + ,\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"\ + if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\"\ + ,\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"\ + paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"\ + like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\"\ + ,\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"\ + ]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"\ + field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\"\ + ,\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\"\ + ,\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\"\ + ,\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"\ + cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\"\ + ,\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\"\ + ,\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"\ + ]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"\ + equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"\ + then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"LinuxOMSBaseline\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fc9b3da7-8347-4380-8e70-0a0361d8dedd\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Windows VMs configurations in 'Security Options - Microsoft Network Client'\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy\ + \ should only be used along with its corresponding deploy policy in an initiative.\ + \ This definition allows Azure Policy to process the results of auditing Windows\ + \ virtual machines with non-compliant settings in Group Policy category: 'Security\ + \ Options - Microsoft Network Client'. For more information on Guest Configuration\ + \ policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\"\ + :\"1.0.0-deprecated\",\"category\":\"Guest Configuration\",\"deprecated\"\ + :true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"\ + MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"\ + MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"\ + },{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\"\ + :\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"\ + }]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\"\ + ,\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\"\ + :\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"\ + }]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\",\"existenceCondition\"\ + :{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fcbc55c9-f25a-4e55-a6cb-33acb3be778b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fcbc55c9-f25a-4e55-a6cb-33acb3be778b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1318 - Authenticator\ + \ Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Identification and Authentication control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1318\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fced5fda-3bdb-4d73-bfea-0e2c80428b66\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fced5fda-3bdb-4d73-bfea-0e2c80428b66\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1543 - Risk\ + \ Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Risk Assessment control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1543\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd00b778-b5b5-49c0-a994-734ea7bd3624\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd00b778-b5b5-49c0-a994-734ea7bd3624\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1707 - Security\ + \ Alerts, Advisories, And Directives | Automated Alerts And Advisories\",\"\ + policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements\ + \ this System and Information Integrity control\",\"metadata\":{\"version\"\ + :\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1707\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd4a2ac8-868a-4702-a345-6c896c3361ce\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd4a2ac8-868a-4702-a345-6c896c3361ce\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1299 - Identification\ + \ And Authentication Policy And Procedures\",\"policyType\":\"Static\",\"\ + mode\":\"Indexed\",\"description\":\"Microsoft implements this Identification\ + \ and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\"\ + :\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1299\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd4e54f7-9ab0-4bae-b6cc-457809948a89\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd4e54f7-9ab0-4bae-b6cc-457809948a89\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1627 - Boundary\ + \ Protection | External Telecommunications Services\",\"policyType\":\"Static\"\ + ,\"mode\":\"Indexed\",\"description\":\"Microsoft implements this System and\ + \ Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\"\ + ,\"category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1627\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd73310d-76fc-422d-bda4-3a077149f179\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd73310d-76fc-422d-bda4-3a077149f179\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1130 - Time\ + \ Stamps | Synchronization With Authoritative Time Source\",\"policyType\"\ + :\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft implements this\ + \ Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"\ + category\":\"Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1130\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd7c4c1d-51ee-4349-9dab-89a7f8c8d102\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd7c4c1d-51ee-4349-9dab-89a7f8c8d102\"\ + },{\"properties\":{\"displayName\":\"Public network access should be disabled\ + \ for MariaDB servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"\ + description\":\"Disabling the public network access property improves security\ + \ by ensuring your Azure Database for MariaDB can only be accessed from a\ + \ private endpoint. This configuration strictly disables access from any public\ + \ address space outside of Azure IP range, and denies all logins that match\ + \ IP or virtual network-based firewall rules.\",\"metadata\":{\"version\"\ + :\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"\ + ],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.DBforMariaDB/servers\"},{\"field\":\"Microsoft.DBforMariaDB/servers/publicNetworkAccess\"\ + ,\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fdccbe47-f3e3-4213-ad5d-ea459b2fa077\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1611 - Developer-Provided\ + \ Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this System and Services Acquisition control\",\"\ + metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"\ + additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1611\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fdda8a0c-ac32-43f6-b2f4-7dc1df03f43f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fdda8a0c-ac32-43f6-b2f4-7dc1df03f43f\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1405 - Maintenance\ + \ Tools | Inspect Tools\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"\ + description\":\"Microsoft implements this Maintenance control\",\"metadata\"\ + :{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\",\"additionalMetadataId\"\ + :\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1405\"},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fe1a0bf3-409a-4b00-b60d-0b1f917f7e7b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fe1a0bf3-409a-4b00-b60d-0b1f917f7e7b\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1613 - Developer\ + \ Security Architecture And Design\",\"policyType\":\"Static\",\"mode\":\"\ + Indexed\",\"description\":\"Microsoft implements this System and Services\ + \ Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"\ + Regulatory Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1613\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fe2ad78b-8748-4bff-a924-f74dfca93f30\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fe2ad78b-8748-4bff-a924-f74dfca93f30\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Show audit results from\ + \ Linux VMs that do not have the specified applications installed\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"All\",\"description\":\"This policy should only be\ + \ used along with its corresponding deploy policy in an initiative. This definition\ + \ allows Azure Policy to process the results of auditing Linux virtual machines\ + \ that do not have the specified applications installed. For more information\ + \ on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"\ + metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest Configuration\"\ + ,\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"\ + field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"\ + qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\"\ + ,\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"\ + like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\"\ + ,\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"\ + ]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\"\ + :[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"\ + field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\"\ + ,\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\"\ + ,\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\"\ + ,\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"\ + cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\"\ + ,\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"\ + allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"\ + },{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\"\ + :\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"\ + 12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\"\ + :\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"\ + linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\"\ + :\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\"\ + :\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\"\ + ,\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\"\ + ,\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\"\ + ,\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\"\ + ,\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"\ + notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\"\ + ,\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"\ + ]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"\ + },{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"\ + then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"\ + ,\"name\":\"installed_application_linux\",\"existenceCondition\":{\"field\"\ + :\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\"\ + ,\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fee5cb2b-9d9b-410e-afe3-2902d90d0004\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fee5cb2b-9d9b-410e-afe3-2902d90d0004\"\ + },{\"properties\":{\"displayName\":\"Vulnerabilities on your SQL databases\ + \ should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"\ + description\":\"Monitor Vulnerability Assessment scan results and recommendations\ + \ for how to remediate database vulnerabilities.\",\"metadata\":{\"version\"\ + :\"2.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"effect\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"\ + AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Sql/servers/databases\"\ + ,\"Microsoft.Sql/managedinstances/databases\"]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"82e20e14-edc5-4373-bfc4-f13121257c37\"\ + ,\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\"\ + ,\"in\":[\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"feedbf84-6b99-488c-acc2-71c829aa5ffc\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1407 - Maintenance\ + \ Tools | Prevent Unauthorized Removal\",\"policyType\":\"Static\",\"mode\"\ + :\"Indexed\",\"description\":\"Microsoft implements this Maintenance control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1407\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ff9fbd83-1d8d-4b41-aac2-94cb44b33976\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ff9fbd83-1d8d-4b41-aac2-94cb44b33976\"\ + },{\"properties\":{\"displayName\":\"Deploy export to Log Analytics workspace\ + \ for Azure Security Center alerts and recommendations\",\"policyType\":\"\ + BuiltIn\",\"mode\":\"All\",\"description\":\"Enable export to Log Analytics\ + \ workspace of Azure Security Center alerts and/or recommendations. This policy\ + \ deploys an export to Log Analytics workspace configuration with your conditions\ + \ and target workspace on the assigned scope. To deploy this policy on newly\ + \ created subscriptions, open the Compliance tab, select the relevant non-compliant\ + \ assignment and create a remediation task.\",\"metadata\":{\"version\":\"\ + 1.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"resourceGroupName\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource group name\"\ + ,\"description\":\"The resource group name where the export to Log Analytics\ + \ workspace configuration is created. If you enter a name for a resource group\ + \ that doesn't exist, it'll be created in the subscription. Note that each\ + \ resource group can only have one export to Log Analytics workspace configured.\"\ + }},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Resource group location\",\"description\":\"The location where the resource\ + \ group and the export to Log Analytics workspace configuration are created.\"\ + ,\"strongType\":\"location\"}},\"exportedDataTypes\":{\"type\":\"Array\",\"\ + metadata\":{\"displayName\":\"Exported data types\",\"description\":\"The\ + \ data types to be exported. Example: Security recommendations;Security alerts;\"\ + },\"allowedValues\":[\"Security recommendations\",\"Security alerts\"],\"\ + defaultValue\":[\"Security recommendations\",\"Security alerts\"]},\"recommendationNames\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation IDs\"\ + ,\"description\":\"Applicable only for export of security recommendations.\ + \ To export all recommendations, leave this empty. To export specific recommendations,\ + \ enter a list of recommendation IDs separated by semicolons (';'). Recommendation\ + \ IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),\ + \ or Azure Resource Graph Explorer (https://portal.azure.com/#blade/HubsExtension/ArgQueryBlade),\ + \ choose securityresources and microsoft.security/assessments.\"},\"defaultValue\"\ + :[]},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\"\ + :\"Recommendation severities\",\"description\":\"Applicable only for export\ + \ of security recommendations. Determines recommendation severities. Example:\ + \ High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\"\ + :[\"High\",\"Medium\",\"Low\"]},\"alertSeverities\":{\"type\":\"Array\",\"\ + metadata\":{\"displayName\":\"Alert severities\",\"description\":\"Applicable\ + \ only for export of security alerts. Determines alert severities. Example:\ + \ High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\"\ + :[\"High\",\"Medium\",\"Low\"]},\"workspaceResourceId\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Log Analytics workspace\",\"description\"\ + :\"The Log Analytics workspace of where the data should be exported to. If\ + \ you do not already have a log analytics workspace, visit Log Analytics workspaces\ + \ to create one (https://portal.azure.com/#blade/HubsExtension/BrowseResource/resourceType/Microsoft.OperationalInsights%2Fworkspaces).\"\ + ,\"strongType\":\"Microsoft.OperationalInsights/workspaces\",\"assignPermissions\"\ + :true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"\ + },\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\"\ + ,\"name\":\"ExportToWorkspace\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\"\ + :\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\"\ + ,\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\ + ],\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"\ + incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceGroupName\":{\"\ + type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"exportedDataTypes\"\ + :{\"type\":\"array\"},\"recommendationNames\":{\"type\":\"array\"},\"recommendationSeverities\"\ + :{\"type\":\"array\"},\"alertSeverities\":{\"type\":\"array\"},\"workspaceResourceId\"\ + :{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\"\ + :\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope for subscription\ + \ {0}\",\"recommendationNamesLength\":\"[length(parameters('recommendationNames'))]\"\ + ,\"recommendationSeveritiesLength\":\"[length(parameters('recommendationSeverities'))]\"\ + ,\"alertSeveritiesLength\":\"[length(parameters('alertSeverities'))]\",\"\ + recommendationNamesLengthIfEmpty\":\"[if(equals(variables('recommendationNamesLength'),\ + \ 0), 1, variables('recommendationNamesLength'))]\",\"recommendationSeveritiesLengthIfEmpty\"\ + :\"[if(equals(variables('recommendationSeveritiesLength'), 0), 1, variables('recommendationSeveritiesLength'))]\"\ + ,\"alertSeveritiesLengthIfEmpty\":\"[if(equals(variables('alertSeveritiesLength'),\ + \ 0), 1, variables('alertSeveritiesLength'))]\",\"totalRuleCombinationsForOneRecommendationName\"\ + :\"[variables('recommendationSeveritiesLengthIfEmpty')]\",\"totalRuleCombinationsForOneRecommendationSeverity\"\ + :1,\"exportedDataTypesLength\":\"[length(parameters('exportedDataTypes'))]\"\ + ,\"exportedDataTypesLengthIfEmpty\":\"[if(equals(variables('exportedDataTypesLength'),\ + \ 0), 1, variables('exportedDataTypesLength'))]\",\"dataTypeMap\":{\"Security\ + \ recommendations\":\"Assessments\",\"Security alerts\":\"Alerts\"},\"alertSeverityMap\"\ + :{\"High\":\"high\",\"Medium\":\"medium\",\"Low\":\"low\"},\"ruleSetsForAssessmentsObj\"\ + :{\"copy\":[{\"name\":\"ruleSetsForAssessmentsArr\",\"count\":\"[mul(variables('recommendationNamesLengthIfEmpty'),variables('recommendationSeveritiesLengthIfEmpty'))]\"\ + ,\"input\":{\"rules\":[{\"propertyJPath\":\"[if(equals(variables('recommendationNamesLength'),0),'type','name')]\"\ + ,\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'),0),'Microsoft.Security/assessments',parameters('recommendationNames')[mod(div(copyIndex('ruleSetsForAssessmentsArr'),variables('totalRuleCombinationsForOneRecommendationName')),variables('recommendationNamesLength'))])]\"\ + ,\"operator\":\"Contains\"},{\"propertyJPath\":\"properties.metadata.severity\"\ + ,\"propertyType\":\"string\",\"expectedValue\":\"[parameters('recommendationSeverities')[mod(div(copyIndex('ruleSetsForAssessmentsArr'),variables('totalRuleCombinationsForOneRecommendationSeverity')),variables('recommendationSeveritiesLength'))]]\"\ + ,\"operator\":\"Equals\"}]}}]},\"ruleSetsForAlertsObj\":{\"copy\":[{\"name\"\ + :\"ruleSetsForAlertsArr\",\"count\":\"[variables('alertSeveritiesLengthIfEmpty')]\"\ + ,\"input\":{\"rules\":[{\"propertyJPath\":\"Severity\",\"propertyType\":\"\ + string\",\"expectedValue\":\"[variables('alertSeverityMap')[parameters('alertSeverities')[mod(copyIndex('ruleSetsForAlertsArr'),variables('alertSeveritiesLengthIfEmpty'))]]]\"\ + ,\"operator\":\"Equals\"}]}}]}},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\"\ + ,\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\"\ + ,\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\"\ + :{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\"\ + ,\"name\":\"[concat('nestedAutomationDeployment', '_', parameters('guidValue'))]\"\ + ,\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"\ + [resourceId('Microsoft.Resources/resourceGroups/', parameters('resourceGroupName'))]\"\ + ],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\"\ + ,\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\"\ + :[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\"\ + ,\"name\":\"ExportToWorkspace\",\"type\":\"Microsoft.Security/automations\"\ + ,\"dependsOn\":[],\"properties\":{\"description\":\"Export Azure Security\ + \ Center alerts and/or recommendations to Log Analytics workspace via policy\"\ + ,\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}',\ + \ subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"\ + }],\"copy\":[{\"name\":\"sources\",\"count\":\"[variables('exportedDataTypesLengthIfEmpty')]\"\ + ,\"input\":{\"eventSource\":\"[variables('dataTypeMap')[parameters('exportedDataTypes')[copyIndex('sources')]]]\"\ + ,\"ruleSets\":\"[if(equals(parameters('exportedDataTypes')[copyIndex('sources')],\ + \ 'Security recommendations'), variables('ruleSetsForAssessmentsObj').ruleSetsForAssessmentsArr,\ + \ variables('ruleSetsForAlertsObj').ruleSetsForAlertsArr)]\"}}],\"actions\"\ + :[{\"actionType\":\"Workspace\",\"workspaceResourceId\":\"[parameters('workspaceResourceId')]\"\ + }]}}]}}}]},\"parameters\":{\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"\ + },\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"\ + },\"exportedDataTypes\":{\"value\":\"[parameters('exportedDataTypes')]\"},\"\ + recommendationNames\":{\"value\":\"[parameters('recommendationNames')]\"},\"\ + recommendationSeverities\":{\"value\":\"[parameters('recommendationSeverities')]\"\ + },\"alertSeverities\":{\"value\":\"[parameters('alertSeverities')]\"},\"workspaceResourceId\"\ + :{\"value\":\"[parameters('workspaceResourceId')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ffb6f416-7bd2-4488-8828-56585fef2be9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ffb6f416-7bd2-4488-8828-56585fef2be9\"\ + },{\"properties\":{\"displayName\":\"Microsoft Managed Control 1158 - Security\ + \ Authorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\"\ + :\"Microsoft implements this Security Assessment and Authorization control\"\ + ,\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory Compliance\"\ + ,\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1158\"\ + },\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"\ + ,\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\"\ + ,\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fff50cf2-28eb-45b4-b378-c99412688907\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fff50cf2-28eb-45b4-b378-c99412688907\"\ + },{\"properties\":{\"displayName\":\"Kubernetes cluster pod hostPath volumes\ + \ should only use allowed host paths\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Microsoft.Kubernetes.Data\",\"description\":\"This policy ensures pod hostPath\ + \ volumes can only use allowed host paths in a Kubernetes Cluster. This policy\ + \ is generally available for Kubernetes Service (AKS), and preview for AKS\ + \ Engine and Azure Arc enabled Kubernetes. For instructions on using this\ + \ policy, visit https://aka.ms/kubepolicydoc.\",\"metadata\":{\"version\"\ + :\"1.0.1\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit'\ + \ allows a non-compliant resource to be created or updated, but flags it as\ + \ non-compliant. 'Deny' blocks the non-compliant resource creation or update.\ + \ 'Disabled' turns off the policy.\"},\"allowedValues\":[\"audit\",\"deny\"\ + ,\"disabled\"],\"defaultValue\":\"audit\"},\"excludedNamespaces\":{\"type\"\ + :\"Array\",\"metadata\":{\"displayName\":\"Namespace exclusions\",\"description\"\ + :\"List of Kubernetes namespaces to exclude from policy evaluation.\"},\"\ + defaultValue\":[\"kube-system\",\"gatekeeper-system\",\"azure-arc\"]},\"allowedHostPaths\"\ + :{\"type\":\"Object\",\"metadata\":{\"displayName\":\"Allowed host paths\"\ + ,\"description\":\"The host paths allowed for pod hostPath volumes to use.\ + \ Provide an empty paths list to block all host paths.\",\"schema\":{\"type\"\ + :\"object\",\"properties\":{\"paths\":{\"type\":\"array\",\"items\":{\"type\"\ + :\"object\",\"properties\":{\"pathPrefix\":{\"type\":\"string\"},\"readOnly\"\ + :{\"type\":\"boolean\"}},\"required\":[\"pathPrefix\",\"readOnly\"],\"additionalProperties\"\ + :false}}},\"required\":[\"paths\"],\"additionalProperties\":false}},\"defaultValue\"\ + :{\"paths\":[]}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"AKS\ + \ Engine\",\"Microsoft.Kubernetes/connectedClusters\",\"Microsoft.ContainerService/managedClusters\"\ + ]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"constraintTemplate\"\ + :\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/allowed-host-paths/template.yaml\"\ + ,\"constraint\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/allowed-host-paths/constraint.yaml\"\ + ,\"values\":{\"allowedHostPaths\":\"[parameters('allowedHostPaths').paths]\"\ + ,\"excludedNamespaces\":\"[parameters('excludedNamespaces')]\"}}}}},\"id\"\ + :\"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"098fc59e-46c7-4d99-9b16-64990e543d75\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Certificates should have the\ + \ specified maximum validity period\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Microsoft.KeyVault.Data\",\"description\":\"Manage your organizational\ + \ compliance requirements by specifying the maximum amount of time that a\ + \ certificate can be valid within your key vault.\",\"metadata\":{\"version\"\ + :\"2.0.0-preview\",\"category\":\"Key Vault\",\"preview\":true},\"parameters\"\ + :{\"maximumValidityInMonths\":{\"type\":\"Integer\",\"metadata\":{\"displayName\"\ + :\"[Preview]: The maximum validity in months\",\"description\":\"The limit\ + \ to how long a certificate may be valid for. Certificates with lengthy validity\ + \ periods aren't best practice.\"}},\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Preview]: Effect\",\"description\":\"'Audit' allows a\ + \ non-compliant resource to be created, but flags it as non-compliant. 'Deny'\ + \ blocks the resource creation. 'Disable' turns off the policy.\"},\"allowedValues\"\ + :[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault.Data/vaults/certificates\"\ + },{\"field\":\"Microsoft.KeyVault.Data/vaults/certificates/properties.validityInMonths\"\ + ,\"greater\":\"[parameters('maximumValidityInMonths')]\"}]},\"then\":{\"effect\"\ + :\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a075868-4c26-42ef-914c-5bc007359560\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Ensure containers listen\ + \ only on allowed ports in AKS\",\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.ContainerService.Data\"\ + ,\"description\":\"This policy enforces containers to listen only on allowed\ + \ ports in an Azure Kubernetes Service cluster. This policy is deprecated,\ + \ please visit https://aka.ms/kubepolicydoc for instructions on using new\ + \ Kubernetes policies.\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"\ + category\":\"Kubernetes service\",\"deprecated\":true},\"parameters\":{\"\ + allowedContainerPortsRegex\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Allowed container ports regex\",\"description\":\"Regex representing\ + \ container ports allowed in Kubernetes cluster. E.g. Regex for allowing ports\ + \ 443,446 is ^(443|446)$\"}},\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Deprecated]: Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"EnforceRegoPolicy\"\ + ,\"Disabled\"],\"defaultValue\":\"EnforceRegoPolicy\"}},\"policyRule\":{\"\ + if\":{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"policyId\"\ + :\"ContainerAllowedPorts\",\"policy\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/KubernetesService/container-allowed-ports/limited-preview/gatekeeperpolicy.rego\"\ + ,\"policyParameters\":{\"allowedContainerPortsRegex\":\"[parameters('allowedContainerPortsRegex')]\"\ + }}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f636243-1b1c-4d50-880f-310f6199f2cb\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f636243-1b1c-4d50-880f-310f6199f2cb\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Certificates should use allowed\ + \ key types\",\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.KeyVault.Data\"\ + ,\"description\":\"Manage your organizational compliance requirements by restricting\ + \ the key types allowed for certificates.\",\"metadata\":{\"version\":\"2.0.0-preview\"\ + ,\"category\":\"Key Vault\",\"preview\":true},\"parameters\":{\"allowedKeyTypes\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: Allowed key\ + \ types\",\"description\":\"The list of allowed certificate key types.\"},\"\ + allowedValues\":[\"RSA\",\"RSA-HSM\",\"EC\",\"EC-HSM\"],\"defaultValue\":[\"\ + RSA\",\"RSA-HSM\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Preview]: Effect\",\"description\":\"'Audit' allows a non-compliant resource\ + \ to be created, but flags it as non-compliant. 'Deny' blocks the resource\ + \ creation. 'Disable' turns off the policy.\"},\"allowedValues\":[\"audit\"\ + ,\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\"\ + :{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault.Data/vaults/certificates\"\ + },{\"field\":\"Microsoft.KeyVault.Data/vaults/certificates/keyProperties.keyType\"\ + ,\"notIn\":\"[parameters('allowedKeyTypes')]\"}]},\"then\":{\"effect\":\"\ + [parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1151cede-290b-4ba0-8b38-0ad145ac888f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1151cede-290b-4ba0-8b38-0ad145ac888f\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Certificates should have the\ + \ specified lifetime action triggers\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Microsoft.KeyVault.Data\",\"description\":\"Manage your organizational\ + \ compliance requirements by specifying whether a certificate lifetime action\ + \ is triggered at a specific percentage of its lifetime or at a certain number\ + \ of days prior to its expiration.\",\"metadata\":{\"version\":\"2.0.0-preview\"\ + ,\"category\":\"Key Vault\",\"preview\":true},\"parameters\":{\"maximumPercentageLife\"\ + :{\"type\":\"Integer\",\"metadata\":{\"displayName\":\"[Preview]: The maximum\ + \ lifetime percentage\",\"description\":\"Enter the percentage of lifetime\ + \ of the certificate when you want to trigger the policy action. For example,\ + \ to trigger a policy action at 80% of the certificate's valid life, enter\ + \ '80'.\"}},\"minimumDaysBeforeExpiry\":{\"type\":\"Integer\",\"metadata\"\ + :{\"displayName\":\"[Preview]: The minimum days before expiry\",\"description\"\ + :\"Enter the days before expiration of the certificate when you want to trigger\ + \ the policy action. For example, to trigger a policy action 90 days before\ + \ the certificate's expiration, enter '90'.\"}},\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"[Preview]: Effect\",\"description\":\"'Audit'\ + \ allows a non-compliant resource to be created, but flags it as non-compliant.\ + \ 'Deny' blocks the resource creation. 'Disable' turns off the policy.\"},\"\ + allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"\ + }},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault.Data/vaults/certificates\"\ + },{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.KeyVault.Data/vaults/certificates/lifetimeAction.daysBeforeExpiry\"\ + ,\"exists\":true},{\"field\":\"Microsoft.KeyVault.Data/vaults/certificates/lifetimeAction.daysBeforeExpiry\"\ + ,\"less\":\"[parameters('minimumDaysBeforeExpiry')]\"}]},{\"allOf\":[{\"field\"\ + :\"Microsoft.KeyVault.Data/vaults/certificates/lifetimeAction.lifetimePercentage\"\ + ,\"exists\":true},{\"field\":\"Microsoft.KeyVault.Data/vaults/certificates/lifetimeAction.lifetimePercentage\"\ + ,\"greater\":\"[parameters('maximumPercentageLife')]\"}]}]}]},\"then\":{\"\ + effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12ef42cb-9903-4e39-9c26-422d29570417\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12ef42cb-9903-4e39-9c26-422d29570417\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Keys should have expiration\ + \ dates set\",\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.KeyVault.Data\"\ + ,\"description\":\"Cryptographic keys should have a defined expiration date\ + \ and not be permanent. Keys that are valid forever provide a potential attacker\ + \ with more time to compromise the key. It is a recommended security practice\ + \ to set expiration dates on cryptographic keys.\",\"metadata\":{\"version\"\ + :\"1.0.0-preview\",\"category\":\"Key Vault\",\"preview\":true},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"'Audit' allows a non-compliant resource to be created,\ + \ but flags it as non-compliant. 'Deny' blocks the resource creation. 'Disable'\ + \ turns off the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"\ + ],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.KeyVault.Data/vaults/keys\"},{\"field\":\"\ + Microsoft.KeyVault.Data/vaults/keys/attributes.expiresOn\",\"exists\":false}]},\"\ + then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0\"\ + },{\"properties\":{\"displayName\":\"Kubernetes cluster pods should only use\ + \ allowed volume types\",\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.Kubernetes.Data\"\ + ,\"description\":\"This policy ensures pods can only use allowed volume types\ + \ in a Kubernetes cluster. This policy is generally available for Kubernetes\ + \ Service (AKS), and preview for AKS Engine and Azure Arc enabled Kubernetes.\ + \ For instructions on using this policy, visit https://aka.ms/kubepolicydoc.\"\ + ,\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Kubernetes\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"'Audit' allows a non-compliant resource to be created or\ + \ updated, but flags it as non-compliant. 'Deny' blocks the non-compliant\ + \ resource creation or update. 'Disabled' turns off the policy.\"},\"allowedValues\"\ + :[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"},\"excludedNamespaces\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Namespace exclusions\"\ + ,\"description\":\"List of Kubernetes namespaces to exclude from policy evaluation.\"\ + },\"defaultValue\":[\"kube-system\",\"gatekeeper-system\",\"azure-arc\"]},\"\ + allowedVolumeTypes\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"\ + Allowed volume types\",\"description\":\"The list of volume types that can\ + \ be used by a pod. Provide empty list as input to block everything.\"},\"\ + defaultValue\":[]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"\ + AKS Engine\",\"Microsoft.Kubernetes/connectedClusters\",\"Microsoft.ContainerService/managedClusters\"\ + ]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"constraintTemplate\"\ + :\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/allowed-volume-types/template.yaml\"\ + ,\"constraint\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/allowed-volume-types/constraint.yaml\"\ + ,\"values\":{\"volumes\":\"[parameters('allowedVolumeTypes')]\",\"excludedNamespaces\"\ + :\"[parameters('excludedNamespaces')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16697877-1118-4fb1-9b65-9898ec2509ec\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16697877-1118-4fb1-9b65-9898ec2509ec\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Enforce labels on pods\ + \ in AKS\",\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.ContainerService.Data\"\ + ,\"description\":\"This policy enforces the specified labels are provided\ + \ for pods in an Azure Kubernetes Service cluster. This policy is deprecated,\ + \ please visit https://aka.ms/kubepolicydoc for instructions on using new\ + \ Kubernetes policies.\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"\ + category\":\"Kubernetes service\",\"deprecated\":true},\"parameters\":{\"\ + commaSeparatedListOfLabels\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Comma-separated list of labels\",\"description\":\"A comma-separated\ + \ list of labels to be specified on Pods in Kubernetes cluster. E.g. test1,test2\"\ + }},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:\ + \ Effect\",\"description\":\"Enable or disable the execution of the policy\"\ + },\"allowedValues\":[\"EnforceRegoPolicy\",\"Disabled\"],\"defaultValue\"\ + :\"EnforceRegoPolicy\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\"\ + :\"Microsoft.ContainerService/managedClusters\"},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"policyId\":\"PodEnforceLabels\",\"policy\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/KubernetesService/pod-enforce-labels/limited-preview/gatekeeperpolicy.rego\"\ + ,\"policyParameters\":{\"commaSeparatedListOfLabels\":\"[parameters('commaSeparatedListOfLabels')]\"\ + }}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16c6ca72-89d2-4798-b87e-496f9de7fcb7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16c6ca72-89d2-4798-b87e-496f9de7fcb7\"\ + },{\"properties\":{\"displayName\":\"Enforce HTTPS ingress in Kubernetes cluster\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.Kubernetes.Data\",\"description\"\ + :\"This policy enforces HTTPS ingress in a Kubernetes cluster. This policy\ + \ is generally available for Kubernetes Service (AKS), and preview for AKS\ + \ Engine and Azure Arc enabled Kubernetes. For instructions on using this\ + \ policy, visit https://aka.ms/kubepolicydoc.\",\"metadata\":{\"version\"\ + :\"4.0.1\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit'\ + \ allows a non-compliant resource to be created, but flags it as non-compliant.\ + \ 'Deny' blocks the resource creation. 'Disable' turns off the policy.\"},\"\ + allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"deny\"\ + },\"excludedNamespaces\":{\"type\":\"Array\",\"metadata\":{\"displayName\"\ + :\"Namespace exclusions\",\"description\":\"List of Kubernetes namespaces\ + \ to exclude from policy evaluation.\"},\"defaultValue\":[\"kube-system\"\ + ,\"gatekeeper-system\",\"azure-arc\"]}},\"policyRule\":{\"if\":{\"field\"\ + :\"type\",\"in\":[\"AKS Engine\",\"Microsoft.Kubernetes/connectedClusters\"\ + ,\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"\ + [parameters('effect')]\",\"details\":{\"constraintTemplate\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/ingress-https-only/template.yaml\"\ + ,\"constraint\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/ingress-https-only/constraint.yaml\"\ + ,\"values\":{\"excludedNamespaces\":\"[parameters('excludedNamespaces')]\"\ + }}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d\"\ + },{\"properties\":{\"displayName\":\"Kubernetes clusters should not allow\ + \ container privilege escalation\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Microsoft.Kubernetes.Data\",\"description\":\"This policy does not allow containers\ + \ to use privilege escalation in a Kubernetes cluster. This policy is generally\ + \ available for Kubernetes Service (AKS), and preview for AKS Engine and Azure\ + \ Arc enabled Kubernetes. For instructions on using this policy, visit https://aka.ms/kubepolicydoc.\"\ + ,\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Kubernetes\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"'Audit' allows a non-compliant resource to be created or\ + \ updated, but flags it as non-compliant. 'Deny' blocks the non-compliant\ + \ resource creation or update. 'Disabled' turns off the policy.\"},\"allowedValues\"\ + :[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"},\"excludedNamespaces\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Namespace exclusions\"\ + ,\"description\":\"List of Kubernetes namespaces to exclude from policy evaluation.\"\ + },\"defaultValue\":[\"kube-system\",\"gatekeeper-system\",\"azure-arc\"]}},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"AKS Engine\",\"Microsoft.Kubernetes/connectedClusters\"\ + ,\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"\ + [parameters('effect')]\",\"details\":{\"constraintTemplate\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/container-no-privilege-escalation/template.yaml\"\ + ,\"constraint\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/container-no-privilege-escalation/constraint.yaml\"\ + ,\"values\":{\"excludedNamespaces\":\"[parameters('excludedNamespaces')]\"\ + }}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c6e92c9-99f0-4e55-9cf2-0c234dc48f99\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Configure log filter expressions\ + \ and datastore to be used for full logs for specified Azure Machine Learning\ + \ computes\",\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.MachineLearningServices.Data\"\ + ,\"description\":\"This policy helps provide log filter expression and datastore\ + \ to be used for full logs in specified Azure Machine Learning computes and\ + \ can be assigned at the workspace. For more information, visit https://aka.ms/amlpolicydoc.\"\ + ,\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Machine Learning\"\ + ,\"preview\":true},\"parameters\":{\"computeNames\":{\"type\":\"Array\",\"\ + metadata\":{\"displayName\":\"[Preview]: Compute names where Azure ML jobs\ + \ run\",\"description\":\"List of compute names where this policy should be\ + \ applied. Ex. cpu-cluster;gpu-cluster. If no value is provided to this parameter\ + \ then policy is applicable to all computes.\"},\"defaultValue\":[]},\"logFilters\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: Log filter\ + \ expressions\",\"description\":\"List of log filter expressions used to filter\ + \ logs. Ex. ^prefix1.*$\"},\"defaultValue\":[]},\"datastore\":{\"type\":\"\ + String\",\"metadata\":{\"displayName\":\"[Preview]: Datastore\",\"description\"\ + :\"Datastore used to store filtered logs. Ex. LogsDatastore which is configured\ + \ in AML.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Preview]: Effect\",\"description\":\"Enable or disable the execution of\ + \ the policy.\"},\"allowedValues\":[\"enforceSetting\",\"disabled\"],\"defaultValue\"\ + :\"enforceSetting\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"field\":\"Microsoft.MachineLearningServices.Data/workspaces/computes/name\"\ + ,\"in\":\"[parameters('computeNames')]\"},{\"value\":\"[length(parameters('computeNames'))]\"\ + ,\"equals\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\"\ + :{\"setting\":{\"name\":\"logFilter\",\"value\":{\"filters\":\"[parameters('logFilters')]\"\ + ,\"datastore\":\"[parameters('datastore')]\"}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d413020-63de-11ea-bc55-0242ac130003\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d413020-63de-11ea-bc55-0242ac130003\"\ + },{\"properties\":{\"displayName\":\"Ensure services listen only on allowed\ + \ ports in Kubernetes cluster\",\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.Kubernetes.Data\"\ + ,\"description\":\"This policy enforces services to listen only on allowed\ + \ ports in a Kubernetes cluster. This policy is generally available for Kubernetes\ + \ Service (AKS), and preview for AKS Engine and Azure Arc enabled Kubernetes.\ + \ For instructions on using this policy, visit https://aka.ms/kubepolicydoc.\"\ + ,\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Kubernetes\"},\"parameters\"\ + :{\"allowedServicePortsList\":{\"type\":\"Array\",\"metadata\":{\"displayName\"\ + :\"Allowed service ports list\",\"description\":\"The list of service ports\ + \ allowed in a Kubernetes cluster.\"}},\"effect\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit' allows a\ + \ non-compliant resource to be created, but flags it as non-compliant. 'Deny'\ + \ blocks the resource creation. 'Disable' turns off the policy.\"},\"allowedValues\"\ + :[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"deny\"},\"excludedNamespaces\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Namespace exclusions\"\ + ,\"description\":\"List of Kubernetes namespaces to exclude from policy evaluation.\"\ + },\"defaultValue\":[\"kube-system\",\"gatekeeper-system\",\"azure-arc\"]}},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"AKS Engine\",\"Microsoft.Kubernetes/connectedClusters\"\ + ,\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"\ + [parameters('effect')]\",\"details\":{\"constraintTemplate\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/service-allowed-ports/template.yaml\"\ + ,\"constraint\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/service-allowed-ports/constraint.yaml\"\ + ,\"values\":{\"allowedServicePorts\":\"[parameters('allowedServicePortsList')]\"\ + ,\"excludedNamespaces\":\"[parameters('excludedNamespaces')]\"}}}}},\"id\"\ + :\"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"233a2a17-77ca-4fb1-9b6b-69223d272a44\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Ensure services listen\ + \ only on allowed ports in AKS\",\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.ContainerService.Data\"\ + ,\"description\":\"This policy enforces services to listen only on allowed\ + \ ports in an Azure Kubernetes Service cluster. This policy is deprecated,\ + \ please visit https://aka.ms/kubepolicydoc for instructions on using new\ + \ Kubernetes policies.\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"\ + category\":\"Kubernetes service\",\"deprecated\":true},\"parameters\":{\"\ + allowedServicePortsRegex\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Allowed service ports regex\",\"description\":\"Regex representing\ + \ service ports allowed in Kubernetes cluster. E.g. Regex for allowing ports\ + \ 443,446 is ^(443|446)$\"}},\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Deprecated]: Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"EnforceRegoPolicy\"\ + ,\"Disabled\"],\"defaultValue\":\"EnforceRegoPolicy\"}},\"policyRule\":{\"\ + if\":{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"policyId\"\ + :\"ServiceAllowedPorts\",\"policy\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/KubernetesService/service-allowed-ports/limited-preview/gatekeeperpolicy.rego\"\ + ,\"policyParameters\":{\"allowedServicePortsRegex\":\"[parameters('allowedServicePortsRegex')]\"\ + }}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/25dee3db-6ce0-4c02-ab5d-245887b24077\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"25dee3db-6ce0-4c02-ab5d-245887b24077\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Enforce HTTPS ingress in\ + \ AKS\",\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.ContainerService.Data\"\ + ,\"description\":\"This policy enforces HTTPS ingress in an Azure Kubernetes\ + \ Service cluster. This policy is deprecated, please visit https://aka.ms/kubepolicydoc\ + \ for instructions on using new Kubernetes policies.\",\"metadata\":{\"version\"\ + :\"1.0.1-deprecated\",\"category\":\"Kubernetes service\",\"deprecated\":true},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"EnforceRegoPolicy\",\"Disabled\"],\"\ + defaultValue\":\"EnforceRegoPolicy\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},\"then\"\ + :{\"effect\":\"[parameters('effect')]\",\"details\":{\"policyId\":\"HttpsIngressOnly\"\ + ,\"policy\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/KubernetesService/ingress-https-only/limited-preview/gatekeeperpolicy.rego\"\ + }}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2fbff515-eecc-4b7e-9b63-fcc7138b7dc3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2fbff515-eecc-4b7e-9b63-fcc7138b7dc3\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Secrets should have the specified\ + \ maximum validity period\",\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.KeyVault.Data\"\ + ,\"description\":\"Manage your organizational compliance requirements by specifying\ + \ the maximum amount of time in days that a secret can be valid within your\ + \ key vault.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"\ + Key Vault\",\"preview\":true},\"parameters\":{\"maximumValidityInDays\":{\"\ + type\":\"Integer\",\"metadata\":{\"displayName\":\"The maximum validity period\ + \ in days\",\"description\":\"Specify the maximum number of days a secret\ + \ can be valid for. Secrets should be ephemeral. Using a secret with a long\ + \ validity period is not recommended.\"}},\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit' allows\ + \ a non-compliant resource to be created, but flags it as non-compliant. 'Deny'\ + \ blocks the resource creation. 'Disable' turns off the policy.\"},\"allowedValues\"\ + :[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault.Data/vaults/secrets\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.KeyVault.Data/vaults/secrets/attributes.expiresOn\"\ + ,\"exists\":false},{\"field\":\"Microsoft.KeyVault.Data/vaults/secrets/attributes.expiresOn\"\ + ,\"greater\":\"[addDays(field('Microsoft.KeyVault.Data/vaults/secrets/attributes.createdOn'),\ + \ parameters('maximumValidityInDays'))]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/342e8053-e12e-4c44-be01-c3c2f318400f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"342e8053-e12e-4c44-be01-c3c2f318400f\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Configure an approval endpoint\ + \ called prior to jobs running for specified Azure Machine Learning computes\"\ + ,\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.MachineLearningServices.Data\"\ + ,\"description\":\"This policy helps configure an approval endpoint called\ + \ prior to jobs running for specified Azure Machine Learning computes and\ + \ can be assigned at the workspace. For more information. For more information,\ + \ visit https://aka.ms/amlpolicydoc.\",\"metadata\":{\"version\":\"1.0.0-preview\"\ + ,\"category\":\"Machine Learning\",\"preview\":true},\"parameters\":{\"computeNames\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: Compute names\ + \ where Azure ML jobs run\",\"description\":\"List of compute names where\ + \ this policy should be applied. Ex. cpu-cluster;gpu-cluster. If no value\ + \ is provided to this parameter then policy is applicable to all computes.\"\ + },\"defaultValue\":[]},\"approvalEndpoint\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Preview]: Approval endpoint\",\"description\":\"Approval\ + \ endpoint that needs to be called before an Azure ML job is run. Ex. http://amlrunapproval/approve\"\ + }},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]:\ + \ Effect\",\"description\":\"Enable or disable the execution of the policy.\"\ + },\"allowedValues\":[\"enforceSetting\",\"disabled\"],\"defaultValue\":\"\ + enforceSetting\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"field\":\"Microsoft.MachineLearningServices.Data/workspaces/computes/name\"\ + ,\"in\":\"[parameters('computeNames')]\"},{\"value\":\"[length(parameters('computeNames'))]\"\ + ,\"equals\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\"\ + :{\"setting\":{\"name\":\"approvalEndpoint\",\"value\":\"[parameters('approvalEndpoint')]\"\ + }}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3948394e-63de-11ea-bc55-0242ac130003\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3948394e-63de-11ea-bc55-0242ac130003\"\ + },{\"properties\":{\"displayName\":\"Enforce internal load balancers in Kubernetes\ + \ cluster\",\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.Kubernetes.Data\"\ + ,\"description\":\"This policy enforces load balancers do not have public\ + \ IPs in a Kubernetes cluster. This policy is generally available for Kubernetes\ + \ Service (AKS), and preview for AKS Engine and Azure Arc enabled Kubernetes.\ + \ For instructions on using this policy, visit https://aka.ms/kubepolicydoc.\"\ + ,\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Kubernetes\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"'Audit' allows a non-compliant resource to be created,\ + \ but flags it as non-compliant. 'Deny' blocks the resource creation. 'Disable'\ + \ turns off the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"\ + ],\"defaultValue\":\"deny\"},\"excludedNamespaces\":{\"type\":\"Array\",\"\ + metadata\":{\"displayName\":\"Namespace exclusions\",\"description\":\"List\ + \ of Kubernetes namespaces to exclude from policy evaluation.\"},\"defaultValue\"\ + :[\"kube-system\",\"gatekeeper-system\",\"azure-arc\"]}},\"policyRule\":{\"\ + if\":{\"field\":\"type\",\"in\":[\"AKS Engine\",\"Microsoft.Kubernetes/connectedClusters\"\ + ,\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"\ + [parameters('effect')]\",\"details\":{\"constraintTemplate\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/load-balancer-no-public-ips/template.yaml\"\ + ,\"constraint\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/load-balancer-no-public-ips/constraint.yaml\"\ + ,\"values\":{\"excludedNamespaces\":\"[parameters('excludedNamespaces')]\"\ + }}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3fc4dc25-5baf-40d8-9b05-7fe74c1bc64e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3fc4dc25-5baf-40d8-9b05-7fe74c1bc64e\"\ + },{\"properties\":{\"displayName\":\"Ensure containers listen only on allowed\ + \ ports in Kubernetes cluster\",\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.Kubernetes.Data\"\ + ,\"description\":\"This policy enforces containers to listen only on allowed\ + \ ports in a Kubernetes cluster. This policy is generally available for Kubernetes\ + \ Service (AKS), and preview for AKS Engine and Azure Arc enabled Kubernetes.\ + \ For instructions on using this policy, visit https://aka.ms/kubepolicydoc.\"\ + ,\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Kubernetes\"},\"parameters\"\ + :{\"allowedContainerPortsList\":{\"type\":\"Array\",\"metadata\":{\"displayName\"\ + :\"Allowed container ports list\",\"description\":\"The list of container\ + \ ports allowed in a Kubernetes cluster.\"}},\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit' allows\ + \ a non-compliant resource to be created, but flags it as non-compliant. 'Deny'\ + \ blocks the resource creation. 'Disable' turns off the policy.\"},\"allowedValues\"\ + :[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"deny\"},\"excludedNamespaces\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Namespace exclusions\"\ + ,\"description\":\"List of Kubernetes namespaces to exclude from policy evaluation.\"\ + },\"defaultValue\":[\"kube-system\",\"gatekeeper-system\",\"azure-arc\"]}},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"AKS Engine\",\"Microsoft.Kubernetes/connectedClusters\"\ + ,\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"\ + [parameters('effect')]\",\"details\":{\"constraintTemplate\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/container-allowed-ports/template.yaml\"\ + ,\"constraint\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/container-allowed-ports/constraint.yaml\"\ + ,\"values\":{\"allowedContainerPorts\":\"[parameters('allowedContainerPortsList')]\"\ + ,\"excludedNamespaces\":\"[parameters('excludedNamespaces')]\"}}}}},\"id\"\ + :\"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"440b515e-a580-421e-abeb-b159a61ddcbc\"\ + },{\"properties\":{\"displayName\":\"Enforce labels on pods in Kubernetes\ + \ cluster\",\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.Kubernetes.Data\"\ + ,\"description\":\"This policy enforces the specified labels are provided\ + \ for pods in a Kubernetes cluster. This policy is generally available for\ + \ Kubernetes Service (AKS), and preview for AKS Engine and Azure Arc enabled\ + \ Kubernetes. For instructions on using this policy, visit https://aka.ms/kubepolicydoc.\"\ + ,\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Kubernetes\"},\"parameters\"\ + :{\"labelsList\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"List\ + \ of labels\",\"description\":\"The list of labels to be specified on Pods\ + \ in a Kubernetes cluster.\"}},\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"'Audit' allows a non-compliant\ + \ resource to be created, but flags it as non-compliant. 'Deny' blocks the\ + \ resource creation. 'Disable' turns off the policy.\"},\"allowedValues\"\ + :[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"deny\"},\"excludedNamespaces\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Namespace exclusions\"\ + ,\"description\":\"List of Kubernetes namespaces to exclude from policy evaluation.\"\ + },\"defaultValue\":[\"kube-system\",\"gatekeeper-system\",\"azure-arc\"]}},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"AKS Engine\",\"Microsoft.Kubernetes/connectedClusters\"\ + ,\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"\ + [parameters('effect')]\",\"details\":{\"constraintTemplate\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/pod-enforce-labels/template.yaml\"\ + ,\"constraint\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/pod-enforce-labels/constraint.yaml\"\ + ,\"values\":{\"labels\":\"[parameters('labelsList')]\",\"excludedNamespaces\"\ + :\"[parameters('excludedNamespaces')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/46592696-4c7b-4bf3-9e45-6c2763bdc0a6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"46592696-4c7b-4bf3-9e45-6c2763bdc0a6\"\ + },{\"properties\":{\"displayName\":\"Kubernetes cluster containers should\ + \ not share host process ID or host IPC namespace\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Microsoft.Kubernetes.Data\",\"description\":\"This policy blocks\ + \ pod containers from sharing the host process ID namespace and host IPC namespace\ + \ in a Kubernetes cluster. This policy is generally available for Kubernetes\ + \ Service (AKS), and preview for AKS Engine and Azure Arc enabled Kubernetes.\ + \ For instructions on using this policy, visit https://aka.ms/kubepolicydoc/.\"\ + ,\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Kubernetes\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"'Audit' allows a non-compliant resource to be created or\ + \ updated, but flags it as non-compliant. 'Deny' blocks the non-compliant\ + \ resource creation or update. 'Disabled' turns off the policy.\"},\"allowedValues\"\ + :[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"},\"excludedNamespaces\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Namespace exclusions\"\ + ,\"description\":\"List of Kubernetes namespaces to exclude from policy evaluation.\"\ + },\"defaultValue\":[\"kube-system\",\"gatekeeper-system\",\"azure-arc\"]}},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"AKS Engine\",\"Microsoft.Kubernetes/connectedClusters\"\ + ,\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"\ + [parameters('effect')]\",\"details\":{\"constraintTemplate\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/block-host-namespace/template.yaml\"\ + ,\"constraint\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/block-host-namespace/constraint.yaml\"\ + ,\"values\":{\"excludedNamespaces\":\"[parameters('excludedNamespaces')]\"\ + }}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Keys should have the specified\ + \ maximum validity period\",\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.KeyVault.Data\"\ + ,\"description\":\"Manage your organizational compliance requirements by specifying\ + \ the maximum amount of time in days that a key can be valid within your key\ + \ vault.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key\ + \ Vault\",\"preview\":true},\"parameters\":{\"maximumValidityInDays\":{\"\ + type\":\"Integer\",\"metadata\":{\"displayName\":\"The maximum validity period\ + \ in days\",\"description\":\"Specify the maximum number of days a key can\ + \ be valid for. Keys should be ephemeral. Using a key with a long validity\ + \ period is not recommended.\"}},\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"Effect\",\"description\":\"'Audit' allows a non-compliant\ + \ resource to be created, but flags it as non-compliant. 'Deny' blocks the\ + \ resource creation. 'Disable' turns off the policy.\"},\"allowedValues\"\ + :[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault.Data/vaults/keys\"\ + },{\"anyOf\":[{\"field\":\"Microsoft.KeyVault.Data/vaults/keys/attributes.expiresOn\"\ + ,\"exists\":false},{\"field\":\"Microsoft.KeyVault.Data/vaults/keys/attributes.expiresOn\"\ + ,\"greater\":\"[addDays(field('Microsoft.KeyVault.Data/vaults/keys/attributes.createdOn'),\ + \ parameters('maximumValidityInDays'))]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/49a22571-d204-4c91-a7b6-09b1a586fbc9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"49a22571-d204-4c91-a7b6-09b1a586fbc9\"\ + },{\"properties\":{\"displayName\":\"Kubernetes cluster containers should\ + \ only use allowed AppArmor profiles\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Microsoft.Kubernetes.Data\",\"description\":\"This policy ensures containers\ + \ only use allowed AppArmor profiles in a Kubernetes cluster. This policy\ + \ is generally available for Kubernetes Service (AKS), and preview for AKS\ + \ Engine and Azure Arc enabled Kubernetes. For instructions on using this\ + \ policy, visit https://aka.ms/kubepolicydoc.\",\"metadata\":{\"version\"\ + :\"1.0.1\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit'\ + \ allows a non-compliant resource to be created or updated, but flags it as\ + \ non-compliant. 'Deny' blocks the non-compliant resource creation or update.\ + \ 'Disabled' turns off the policy.\"},\"allowedValues\":[\"audit\",\"deny\"\ + ,\"disabled\"],\"defaultValue\":\"audit\"},\"excludedNamespaces\":{\"type\"\ + :\"Array\",\"metadata\":{\"displayName\":\"Namespace exclusions\",\"description\"\ + :\"List of Kubernetes namespaces to exclude from policy evaluation.\"},\"\ + defaultValue\":[\"kube-system\",\"gatekeeper-system\",\"azure-arc\"]},\"allowedProfiles\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed AppArmor profiles\"\ + ,\"description\":\"The list of AppArmor profiles that containers are allowed\ + \ to use. E.g. 'runtime/default;docker/default'. Provide empty list as input\ + \ to block everything.\"},\"defaultValue\":[]}},\"policyRule\":{\"if\":{\"\ + field\":\"type\",\"in\":[\"AKS Engine\",\"Microsoft.Kubernetes/connectedClusters\"\ + ,\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"\ + [parameters('effect')]\",\"details\":{\"constraintTemplate\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/enforce-apparmor-profile/template.yaml\"\ + ,\"constraint\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/enforce-apparmor-profile/constraint.yaml\"\ + ,\"values\":{\"allowedProfiles\":\"[parameters('allowedProfiles')]\",\"excludedNamespaces\"\ + :\"[parameters('excludedNamespaces')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"511f5417-5d12-434d-ab2e-816901e72a5e\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Configure allowed module authors\ + \ for specified Azure Machine Learning computes\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Microsoft.MachineLearningServices.Data\",\"description\":\"This\ + \ policy helps provide allowed module authors in specified Azure Machine Learning\ + \ computes and can be assigned at the workspace. For more information, visit\ + \ https://aka.ms/amlpolicydoc.\",\"metadata\":{\"version\":\"1.0.1-preview\"\ + ,\"category\":\"Machine Learning\",\"preview\":true},\"parameters\":{\"computeNames\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: Compute names\ + \ where Azure ML jobs run\",\"description\":\"List of compute names where\ + \ this policy should be applied. Ex. cpu-cluster;gpu-cluster. If no value\ + \ is provided to this parameter then policy is applicable to all computes.\"\ + },\"defaultValue\":[]},\"allowedModuleAuthors\":{\"type\":\"Array\",\"metadata\"\ + :{\"displayName\":\"[Preview]: Allowed module authors\",\"description\":\"\ + List of allowed module authors.\"},\"defaultValue\":[]},\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"[Preview]: Effect\",\"description\"\ + :\"Enable or disable the execution of the policy.\"},\"allowedValues\":[\"\ + enforceSetting\",\"disabled\"],\"defaultValue\":\"enforceSetting\"}},\"policyRule\"\ + :{\"if\":{\"anyOf\":[{\"field\":\"Microsoft.MachineLearningServices.Data/workspaces/computes/name\"\ + ,\"in\":\"[parameters('computeNames')]\"},{\"value\":\"[length(parameters('computeNames'))]\"\ + ,\"equals\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\"\ + :{\"setting\":{\"name\":\"allowedModuleAuthors\",\"value\":\"[parameters('allowedModuleAuthors')]\"\ + }}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53c70b02-63dd-11ea-bc55-0242ac130003\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53c70b02-63dd-11ea-bc55-0242ac130003\"\ + },{\"properties\":{\"displayName\":\"Kubernetes cluster containers should\ + \ not use forbidden sysctl interfaces\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Microsoft.Kubernetes.Data\",\"description\":\"This policy ensures containers\ + \ do not use forbidden sysctl interfaces in a Kubernetes cluster. This policy\ + \ is generally available for Kubernetes Service (AKS), and preview for AKS\ + \ Engine and Azure Arc enabled Kubernetes. For instructions on using this\ + \ policy, visit https://aka.ms/kubepolicydoc.\",\"metadata\":{\"version\"\ + :\"2.0.1\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit'\ + \ allows a non-compliant resource to be created or updated, but flags it as\ + \ non-compliant. 'Deny' blocks the non-compliant resource creation or update.\ + \ 'Disabled' turns off the policy.\"},\"allowedValues\":[\"audit\",\"deny\"\ + ,\"disabled\"],\"defaultValue\":\"audit\"},\"excludedNamespaces\":{\"type\"\ + :\"Array\",\"metadata\":{\"displayName\":\"Namespace exclusions\",\"description\"\ + :\"List of Kubernetes namespaces to exclude from policy evaluation.\"},\"\ + defaultValue\":[\"kube-system\",\"gatekeeper-system\",\"azure-arc\"]},\"forbiddenSysctls\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Forbidden sysctls\",\"\ + description\":\"The list of plain sysctl names or sysctl patterns which end\ + \ with *. The string * matches all sysctls. For more information, visit https://aka.ms/k8s-policy-sysctl-interfaces.\"\ + }}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"AKS Engine\",\"Microsoft.Kubernetes/connectedClusters\"\ + ]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"constraintTemplate\"\ + :\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/forbidden-sysctl-interfaces/template.yaml\"\ + ,\"constraint\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/forbidden-sysctl-interfaces/constraint.yaml\"\ + ,\"values\":{\"forbiddenSysctls\":\"[parameters('forbiddenSysctls')]\",\"\ + excludedNamespaces\":\"[parameters('excludedNamespaces')]\"}}}}},\"id\":\"\ + /providers/Microsoft.Authorization/policyDefinitions/56d0a13f-712f-466b-8416-56fb354fb823\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"56d0a13f-712f-466b-8416-56fb354fb823\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Configure allowed registries\ + \ for specified Azure Machine Learning computes\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Microsoft.MachineLearningServices.Data\",\"description\":\"This\ + \ policy helps provide registries that are allowed in specified Azure Machine\ + \ Learning computes and can be assigned at the workspace. For more information,\ + \ visit https://aka.ms/amlpolicydoc.\",\"metadata\":{\"version\":\"1.0.0-preview\"\ + ,\"category\":\"Machine Learning\",\"preview\":true},\"parameters\":{\"computeNames\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: Compute names\ + \ where Azure ML jobs run\",\"description\":\"List of compute names where\ + \ this policy should be applied. Ex. cpu-cluster;gpu-cluster. If no value\ + \ is provided to this parameter then policy is applicable to all computes.\"\ + },\"defaultValue\":[]},\"allowedACRs\":{\"type\":\"Array\",\"metadata\":{\"\ + displayName\":\"[Preview]: Azure Container Registries\",\"description\":\"\ + List of Azure Container Registries that can be used with Azure ML. Ex. amlrepo.azurecr.io;amlrepo.azurecr.io/foo\"\ + },\"defaultValue\":[]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Preview]: Effect\",\"description\":\"Enable or disable the execution of\ + \ the policy.\"},\"allowedValues\":[\"enforceSetting\",\"disabled\"],\"defaultValue\"\ + :\"enforceSetting\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"field\":\"Microsoft.MachineLearningServices.Data/workspaces/computes/name\"\ + ,\"in\":\"[parameters('computeNames')]\"},{\"value\":\"[length(parameters('computeNames'))]\"\ + ,\"equals\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\"\ + :{\"setting\":{\"name\":\"allowedACRs\",\"value\":\"[parameters('allowedACRs')]\"\ + }}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5853517a-63de-11ea-bc55-0242ac130003\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5853517a-63de-11ea-bc55-0242ac130003\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Keys should be backed by a\ + \ hardware security module (HSM)\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Microsoft.KeyVault.Data\",\"description\":\"An HSM is a hardware security\ + \ module that stores keys. An HSM provides a physical layer of protection\ + \ for cryptographic keys. The cryptographic key cannot leave a physical HSM\ + \ which provides a greater level of security than a software key.\",\"metadata\"\ + :{\"version\":\"1.0.0-preview\",\"category\":\"Key Vault\",\"preview\":true},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"'Audit' allows a non-compliant resource to be\ + \ created, but flags it as non-compliant. 'Deny' blocks the resource creation.\ + \ 'Disable' turns off the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\"\ + ,\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault.Data/vaults/keys\"},{\"\ + field\":\"Microsoft.KeyVault.Data/vaults/keys/keyType\",\"notIn\":[\"RSA-HSM\"\ + ,\"EC-HSM\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\"\ + :\"/providers/Microsoft.Authorization/policyDefinitions/587c79fe-dd04-4a5e-9d0b-f89598c7261b\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"587c79fe-dd04-4a5e-9d0b-f89598c7261b\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Ensure only allowed container\ + \ images in AKS\",\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.ContainerService.Data\"\ + ,\"description\":\"This policy ensures only allowed container images are running\ + \ in an Azure Kubernetes Service cluster. This policy is deprecated, please\ + \ visit https://aka.ms/kubepolicydoc for instructions on using new Kubernetes\ + \ policies.\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"category\"\ + :\"Kubernetes service\",\"deprecated\":true},\"parameters\":{\"allowedContainerImagesRegex\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Allowed\ + \ container images regex\",\"description\":\"Regex representing container\ + \ images allowed in Kubernetes cluster. E.g. Regex of azure container registry\ + \ images is ^.+azurecr.io/.+$\"}},\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Deprecated]: Effect\",\"description\":\"Enable or disable\ + \ the execution of the policy\"},\"allowedValues\":[\"EnforceRegoPolicy\"\ + ,\"Disabled\"],\"defaultValue\":\"EnforceRegoPolicy\"}},\"policyRule\":{\"\ + if\":{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"policyId\"\ + :\"ContainerAllowedImages\",\"policy\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/KubernetesService/container-allowed-images/limited-preview/gatekeeperpolicy.rego\"\ + ,\"policyParameters\":{\"allowedContainerImagesRegex\":\"[parameters('allowedContainerImagesRegex')]\"\ + }}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f86cb6e-c4da-441b-807c-44bd0cc14e66\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f86cb6e-c4da-441b-807c-44bd0cc14e66\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Keys should have more than\ + \ the specified number of days before expiration\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Microsoft.KeyVault.Data\",\"description\":\"If a key is too close\ + \ to expiration, an organizational delay to rotate the key may result in an\ + \ outage. Keys should be rotated at a specified number of days prior to expiration\ + \ to provide sufficient time to react to a failure.\",\"metadata\":{\"version\"\ + :\"1.0.0-preview\",\"category\":\"Key Vault\",\"preview\":true},\"parameters\"\ + :{\"minimumDaysBeforeExpiration\":{\"type\":\"Integer\",\"metadata\":{\"displayName\"\ + :\"The minimum days before expiration\",\"description\":\"Specify the minimum\ + \ number of days that a key should remain usable prior to expiration.\"}},\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"\ + description\":\"'Audit' allows a non-compliant resource to be created, but\ + \ flags it as non-compliant. 'Deny' blocks the resource creation. 'Disable'\ + \ turns off the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"\ + ],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.KeyVault.Data/vaults/keys\"},{\"field\":\"\ + Microsoft.KeyVault.Data/vaults/keys/attributes.expiresOn\",\"exists\":true},{\"\ + field\":\"Microsoft.KeyVault.Data/vaults/keys/attributes.expiresOn\",\"less\"\ + :\"[addDays(utcNow(), parameters('minimumDaysBeforeExpiration'))]\"}]},\"\ + then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ff38825-c5d8-47c5-b70e-069a21955146\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ff38825-c5d8-47c5-b70e-069a21955146\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Configure code signing for\ + \ training code for specified Azure Machine Learning computes\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Microsoft.MachineLearningServices.Data\",\"description\"\ + :\"This policy helps provide code signing for training code in specified Azure\ + \ Machine Learning computes and can be assigned at the workspace. For more\ + \ information, visit https://aka.ms/amlpolicydoc.\",\"metadata\":{\"version\"\ + :\"1.0.0-preview\",\"category\":\"Machine Learning\",\"preview\":true},\"\ + parameters\":{\"computeNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\"\ + :\"[Preview]: Compute names where Azure Machine Learning jobs run\",\"description\"\ + :\"List of compute names where this policy should be applied. Example: 'cpu-cluster;gpu-cluster'.\ + \ If no value is provided to this parameter, policy is applicable to all computes.\"\ + },\"defaultValue\":[]},\"signingKey\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"[Preview]: PGP public key\",\"description\":\"Public key text\ + \ in PGP public key format, with newline characters encoded as string literals\ + \ \\\"\\\\r\\\" and \\\"\\\\n\\\".\"}},\"effect\":{\"type\":\"String\",\"\ + metadata\":{\"displayName\":\"[Preview]: Effect\",\"description\":\"Enable\ + \ or disable the execution of the policy.\"},\"allowedValues\":[\"enforceSetting\"\ + ,\"disabled\"],\"defaultValue\":\"enforceSetting\"}},\"policyRule\":{\"if\"\ + :{\"anyOf\":[{\"field\":\"Microsoft.MachineLearningServices.Data/workspaces/computes/name\"\ + ,\"in\":\"[parameters('computeNames')]\"},{\"value\":\"[length(parameters('computeNames'))]\"\ + ,\"equals\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\"\ + :{\"setting\":{\"name\":\"signingKey\",\"value\":\"[parameters('signingKey')]\"\ + }}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a6f7384-63de-11ea-bc55-0242ac130003\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a6f7384-63de-11ea-bc55-0242ac130003\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Secrets should have content\ + \ type set\",\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.KeyVault.Data\"\ + ,\"description\":\"A content type tag helps identify whether a secret is a\ + \ password, connection string, etc. Different secrets have different rotation\ + \ requirements. Content type tag should be set on secrets.\",\"metadata\"\ + :{\"version\":\"1.0.0-preview\",\"category\":\"Key Vault\",\"preview\":true},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"'Audit' allows a non-compliant resource to be\ + \ created, but flags it as non-compliant. 'Deny' blocks the resource creation.\ + \ 'Disable' turns off the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\"\ + ,\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault.Data/vaults/secrets\"\ + },{\"field\":\"Microsoft.KeyVault.Data/vaults/secrets/contentType\",\"exists\"\ + :false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/75262d3e-ba4a-4f43-85f8-9f72c090e5e3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"75262d3e-ba4a-4f43-85f8-9f72c090e5e3\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Keys should be the specified\ + \ cryptographic type RSA or EC\",\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.KeyVault.Data\"\ + ,\"description\":\"Some applications require the use of keys backed by a specific\ + \ cryptographic type. Enforce a particular cryptographic key type, RSA or\ + \ EC, in your environment.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"\ + category\":\"Key Vault\",\"preview\":true},\"parameters\":{\"allowedKeyTypes\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed key types\",\"\ + description\":\"The list of allowed key types\"},\"allowedValues\":[\"RSA\"\ + ,\"RSA-HSM\",\"EC\",\"EC-HSM\"],\"defaultValue\":[\"RSA\",\"RSA-HSM\",\"EC\"\ + ,\"EC-HSM\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"'Audit' allows a non-compliant resource to be\ + \ created, but flags it as non-compliant. 'Deny' blocks the resource creation.\ + \ 'Disable' turns off the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\"\ + ,\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault.Data/vaults/keys\"},{\"\ + field\":\"Microsoft.KeyVault.Data/vaults/keys/keyType\",\"notIn\":\"[parameters('allowedKeyTypes')]\"\ + }]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/75c4f823-d65c-4f29-a733-01d0077fdbcb\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"75c4f823-d65c-4f29-a733-01d0077fdbcb\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Configure allowed Python packages\ + \ for specified Azure Machine Learning computes\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Microsoft.MachineLearningServices.Data\",\"description\":\" This\ + \ policy helps provide allowed Python packages in specified Azure Machine\ + \ Learning computes and can be assigned at the workspace. For more information,\ + \ visit https://aka.ms/amlpolicydoc.\",\"metadata\":{\"version\":\"1.0.0-preview\"\ + ,\"category\":\"Machine Learning\",\"preview\":true},\"parameters\":{\"computeNames\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: Compute names\ + \ where Azure ML jobs run\",\"description\":\"List of compute names where\ + \ this policy should be applied. Ex. cpu-cluster;gpu-cluster. If no value\ + \ is provided to this parameter then policy is applicable to all computes.\"\ + },\"defaultValue\":[]},\"allowedPythonPackageChannels\":{\"type\":\"Array\"\ + ,\"metadata\":{\"displayName\":\"[Preview]: Allowed Python package indexes\"\ + ,\"description\":\"List of allowed Python package indexes. Ex. http://somepythonindex.org\ + \ \"},\"defaultValue\":[]},\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"[Preview]: Effect\",\"description\":\"Enable or disable the\ + \ execution of the policy.\"},\"allowedValues\":[\"enforceSetting\",\"disabled\"\ + ],\"defaultValue\":\"enforceSetting\"}},\"policyRule\":{\"if\":{\"anyOf\"\ + :[{\"field\":\"Microsoft.MachineLearningServices.Data/workspaces/computes/name\"\ + ,\"in\":\"[parameters('computeNames')]\"},{\"value\":\"[length(parameters('computeNames'))]\"\ + ,\"equals\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\"\ + :{\"setting\":{\"name\":\"allowedPythonPackageChannels\",\"value\":\"[parameters('allowedPythonPackageChannels')]\"\ + }}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/77eeea86-7e81-4a7d-9067-de844d096752\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"77eeea86-7e81-4a7d-9067-de844d096752\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Do not allow privileged\ + \ containers in AKS\",\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.ContainerService.Data\"\ + ,\"description\":\"This policy does not allow privileged containers creation\ + \ in an Azure Kubernetes Service cluster. This policy is deprecated, please\ + \ visit https://aka.ms/kubepolicydoc for instructions on using new Kubernetes\ + \ policies.\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"category\"\ + :\"Kubernetes service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Effect\",\"\ + description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"EnforceRegoPolicy\",\"Disabled\"],\"defaultValue\":\"EnforceRegoPolicy\"\ + }},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"policyId\"\ + :\"ContainerNoPrivilege\",\"policy\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/KubernetesService/container-no-privilege/limited-preview/gatekeeperpolicy.rego\"\ + }}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ce7ac02-a5c6-45d6-8d1b-844feb1c1531\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ce7ac02-a5c6-45d6-8d1b-844feb1c1531\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Keys using RSA cryptography\ + \ should have a specified minimum key size\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"Microsoft.KeyVault.Data\",\"description\":\"Set the minimum allowed\ + \ key size for use with your key vaults. Use of RSA keys with small key sizes\ + \ is not a secure practice and doesn't meet many industry certification requirements.\"\ + ,\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key Vault\",\"\ + preview\":true},\"parameters\":{\"minimumRSAKeySize\":{\"type\":\"Integer\"\ + ,\"metadata\":{\"displayName\":\"Minimum RSA key size\",\"description\":\"\ + The minimum key size for RSA keys.\"},\"allowedValues\":[2048,3072,4096]},\"\ + effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"\ + description\":\"'Audit' allows a non-compliant resource to be created, but\ + \ flags it as non-compliant. 'Deny' blocks the resource creation. 'Disable'\ + \ turns off the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"\ + ],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\"\ + :\"type\",\"equals\":\"Microsoft.KeyVault.Data/vaults/keys\"},{\"field\":\"\ + Microsoft.KeyVault.Data/vaults/keys/keyType\",\"in\":[\"RSA\",\"RSA-HSM\"\ + ]},{\"field\":\"Microsoft.KeyVault.Data/vaults/keys/keySize\",\"less\":\"\ + [parameters('minimumRSAKeySize')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/82067dbb-e53b-4e06-b631-546d197452d9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"82067dbb-e53b-4e06-b631-546d197452d9\"\ + },{\"properties\":{\"displayName\":\"Kubernetes cluster pods should only use\ + \ approved host network and port range\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Microsoft.Kubernetes.Data\",\"description\":\"This policy controls pod\ + \ access to the host network and the allowable host port range in a Kubernetes\ + \ cluster. This policy is generally available for Kubernetes Service (AKS),\ + \ and preview for AKS Engine and Azure Arc enabled Kubernetes. For instructions\ + \ on using this policy, visit https://aka.ms/kubepolicydoc.\",\"metadata\"\ + :{\"version\":\"1.0.1\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\"\ + :\"'Audit' allows a non-compliant resource to be created or updated, but flags\ + \ it as non-compliant. 'Deny' blocks the non-compliant resource creation or\ + \ update. 'Disabled' turns off the policy.\"},\"allowedValues\":[\"audit\"\ + ,\"deny\",\"disabled\"],\"defaultValue\":\"audit\"},\"excludedNamespaces\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Namespace exclusions\"\ + ,\"description\":\"List of Kubernetes namespaces to exclude from policy evaluation.\"\ + },\"defaultValue\":[\"kube-system\",\"gatekeeper-system\",\"azure-arc\"]},\"\ + allowHostNetwork\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"\ + Allow host network usage\",\"description\":\"Set this value to true if pod\ + \ is allowed to use host network otherwise false.\"},\"defaultValue\":false},\"\ + minPort\":{\"type\":\"Integer\",\"metadata\":{\"displayName\":\"Min host port\"\ + ,\"description\":\"The minimum value in the allowable host port range that\ + \ pods can use in the host network namespace.\"},\"defaultValue\":0},\"maxPort\"\ + :{\"type\":\"Integer\",\"metadata\":{\"displayName\":\"Max host port\",\"\ + description\":\"The maximum value in the allowable host port range that pods\ + \ can use in the host network namespace.\"},\"defaultValue\":0}},\"policyRule\"\ + :{\"if\":{\"field\":\"type\",\"in\":[\"AKS Engine\",\"Microsoft.Kubernetes/connectedClusters\"\ + ,\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"\ + [parameters('effect')]\",\"details\":{\"constraintTemplate\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/host-network-ports/template.yaml\"\ + ,\"constraint\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/host-network-ports/constraint.yaml\"\ + ,\"values\":{\"allowHostNetwork\":\"[parameters('allowHostNetwork')]\",\"\ + minPort\":\"[parameters('minPort')]\",\"maxPort\":\"[parameters('maxPort')]\"\ + ,\"excludedNamespaces\":\"[parameters('excludedNamespaces')]\"}}}}},\"id\"\ + :\"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"82985f06-dc18-4a48-bc1c-b9f4f0098cfe\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Certificates should be issued\ + \ by the specified integrated certificate authority\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Microsoft.KeyVault.Data\",\"description\":\"Manage your organizational\ + \ compliance requirements by specifying the Azure integrated certificate authorities\ + \ that can issue certificates in your key vault such as Digicert or GlobalSign.\"\ + ,\"metadata\":{\"version\":\"2.0.0-preview\",\"category\":\"Key Vault\",\"\ + preview\":true},\"parameters\":{\"allowedCAs\":{\"type\":\"Array\",\"metadata\"\ + :{\"displayName\":\"[Preview]: Allowed Azure Key Vault Supported CAs\",\"\ + description\":\"The list of allowed certificate authorities supported by Azure\ + \ Key Vault.\"},\"allowedValues\":[\"DigiCert\",\"GlobalSign\"],\"defaultValue\"\ + :[\"DigiCert\",\"GlobalSign\"]},\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Preview]: Effect\",\"description\":\"'Audit' allows a\ + \ non-compliant resource to be created, but flags it as non-compliant. 'Deny'\ + \ blocks the resource creation. 'Disable' turns off the policy.\"},\"allowedValues\"\ + :[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault.Data/vaults/certificates\"\ + },{\"field\":\"Microsoft.KeyVault.Data/vaults/certificates/issuer.name\",\"\ + notIn\":\"[parameters('allowedCAs')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8e826246-c976-48f6-b03e-619bb92b3d82\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8e826246-c976-48f6-b03e-619bb92b3d82\"\ + },{\"properties\":{\"displayName\":\"Do not allow privileged containers in\ + \ Kubernetes cluster\",\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.Kubernetes.Data\"\ + ,\"description\":\"This policy does not allow privileged containers creation\ + \ in a Kubernetes cluster. This policy is generally available for Kubernetes\ + \ Service (AKS), and preview for AKS Engine and Azure Arc enabled Kubernetes.\ + \ For instructions on using this policy, visit https://aka.ms/kubepolicydoc.\"\ + ,\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Kubernetes\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"'Audit' allows a non-compliant resource to be created,\ + \ but flags it as non-compliant. 'Deny' blocks the resource creation. 'Disable'\ + \ turns off the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"\ + ],\"defaultValue\":\"deny\"},\"excludedNamespaces\":{\"type\":\"Array\",\"\ + metadata\":{\"displayName\":\"Namespace exclusions\",\"description\":\"List\ + \ of Kubernetes namespaces to exclude from policy evaluation.\"},\"defaultValue\"\ + :[\"kube-system\",\"gatekeeper-system\",\"azure-arc\"]}},\"policyRule\":{\"\ + if\":{\"field\":\"type\",\"in\":[\"AKS Engine\",\"Microsoft.Kubernetes/connectedClusters\"\ + ,\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"\ + [parameters('effect')]\",\"details\":{\"constraintTemplate\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/container-no-privilege/template.yaml\"\ + ,\"constraint\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/container-no-privilege/constraint.yaml\"\ + ,\"values\":{\"excludedNamespaces\":\"[parameters('excludedNamespaces')]\"\ + }}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"95edb821-ddaf-4404-9732-666045e056b4\"\ + },{\"properties\":{\"displayName\":\"Kubernetes cluster containers should\ + \ only use allowed seccomp profiles\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Microsoft.Kubernetes.Data\",\"description\":\"This policy ensures containers\ + \ only use allowed seccomp profiles in a Kubernetes cluster. This policy is\ + \ generally available for Kubernetes Service (AKS), and preview for AKS Engine\ + \ and Azure Arc enabled Kubernetes. For instructions on using this policy,\ + \ visit https://aka.ms/kubepolicydoc.\",\"metadata\":{\"version\":\"1.0.1\"\ + ,\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit' allows\ + \ a non-compliant resource to be created or updated, but flags it as non-compliant.\ + \ 'Deny' blocks the non-compliant resource creation or update. 'Disabled'\ + \ turns off the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"\ + ],\"defaultValue\":\"audit\"},\"excludedNamespaces\":{\"type\":\"Array\",\"\ + metadata\":{\"displayName\":\"Namespace exclusions\",\"description\":\"List\ + \ of Kubernetes namespaces to exclude from policy evaluation.\"},\"defaultValue\"\ + :[\"kube-system\",\"gatekeeper-system\",\"azure-arc\"]},\"allowedProfiles\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed seccomp profiles\"\ + ,\"description\":\"The list of seccomp profiles that containers are allowed\ + \ to use. E.g. 'runtime/default;docker/default'. Provide empty list as input\ + \ to block everything.\"},\"defaultValue\":[]}},\"policyRule\":{\"if\":{\"\ + field\":\"type\",\"in\":[\"AKS Engine\",\"Microsoft.Kubernetes/connectedClusters\"\ + ,\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"\ + [parameters('effect')]\",\"details\":{\"constraintTemplate\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/allowed-seccomp-profiles/template.yaml\"\ + ,\"constraint\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/allowed-seccomp-profiles/constraint.yaml\"\ + ,\"values\":{\"allowedProfiles\":\"[parameters('allowedProfiles')]\",\"excludedNamespaces\"\ + :\"[parameters('excludedNamespaces')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/975ce327-682c-4f2e-aa46-b9598289b86c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"975ce327-682c-4f2e-aa46-b9598289b86c\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Secrets should have expiration\ + \ dates set\",\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.KeyVault.Data\"\ + ,\"description\":\"It is a recommended security practice to set expiration\ + \ dates on secrets.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\"\ + :\"Key Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit' allows\ + \ a non-compliant resource to be created, but flags it as non-compliant. 'Deny'\ + \ blocks the resource creation. 'Disable' turns off the policy.\"},\"allowedValues\"\ + :[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault.Data/vaults/secrets\"\ + },{\"field\":\"Microsoft.KeyVault.Data/vaults/secrets/attributes.expiresOn\"\ + ,\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"\ + id\":\"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"98728c90-32c7-4049-8429-847dc0f4fe37\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Certificates should be issued\ + \ by the specified non-integrated certificate authority\",\"policyType\":\"\ + BuiltIn\",\"mode\":\"Microsoft.KeyVault.Data\",\"description\":\"Manage your\ + \ organizational compliance requirements by specifying the custom or internal\ + \ certificate authorities that can issue certificates in your key vault.\"\ + ,\"metadata\":{\"version\":\"2.0.0-preview\",\"category\":\"Key Vault\",\"\ + preview\":true},\"parameters\":{\"caCommonName\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Preview]: The common name of the certificate authority\"\ + ,\"description\":\"The common name (CN) of the Certificate Authority (CA)\ + \ provider. For example, for an issuer CN = Contoso, OU = .., DC = .., you\ + \ can specify Contoso\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"[Preview]: Effect\",\"description\":\"'Audit' allows a non-compliant\ + \ resource to be created, but flags it as non-compliant. 'Deny' blocks the\ + \ resource creation. 'Disable' turns off the policy.\"},\"allowedValues\"\ + :[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault.Data/vaults/certificates\"\ + },{\"field\":\"Microsoft.KeyVault.Data/vaults/certificates/issuer.commonName\"\ + ,\"notContains\":\"[parameters('caCommonName')]\"}]},\"then\":{\"effect\"\ + :\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a22f4a40-01d3-4c7d-8071-da157eeff341\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a22f4a40-01d3-4c7d-8071-da157eeff341\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Ensure CPU and memory resource\ + \ limits defined on containers in AKS\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Microsoft.ContainerService.Data\",\"description\":\"This policy ensures\ + \ CPU and memory resource limits are defined on containers in an Azure Kubernetes\ + \ Service cluster. This policy is deprecated, please visit https://aka.ms/kubepolicydoc\ + \ for instructions on using new Kubernetes policies.\",\"metadata\":{\"version\"\ + :\"1.0.1-deprecated\",\"category\":\"Kubernetes service\",\"deprecated\":true},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"EnforceRegoPolicy\",\"Disabled\"],\"\ + defaultValue\":\"EnforceRegoPolicy\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},\"then\"\ + :{\"effect\":\"[parameters('effect')]\",\"details\":{\"policyId\":\"ContainerResourceLimits\"\ + ,\"policy\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/KubernetesService/container-resource-limits/limited-preview/gatekeeperpolicy.rego\"\ + }}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2d3ed81-8d11-4079-80a5-1faadc0024f4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2d3ed81-8d11-4079-80a5-1faadc0024f4\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Enforce internal load balancers\ + \ in AKS\",\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.ContainerService.Data\"\ + ,\"description\":\"This policy enforces load balancers do not have public\ + \ IPs in an Azure Kubernetes Service cluster. This policy is deprecated, please\ + \ visit https://aka.ms/kubepolicydoc for instructions on using new Kubernetes\ + \ policies.\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"category\"\ + :\"Kubernetes service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: Effect\",\"\ + description\":\"Enable or disable the execution of the policy\"},\"allowedValues\"\ + :[\"EnforceRegoPolicy\",\"Disabled\"],\"defaultValue\":\"EnforceRegoPolicy\"\ + }},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"\ + },\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"policyId\"\ + :\"LoadBalancersInternal\",\"policy\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/KubernetesService/loadbalancer-no-publicips/limited-preview/gatekeeperpolicy.rego\"\ + }}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a74d8f00-2fd9-4ce4-968e-0ee1eb821698\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a74d8f00-2fd9-4ce4-968e-0ee1eb821698\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Secrets should have more than\ + \ the specified number of days before expiration\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Microsoft.KeyVault.Data\",\"description\":\"If a secret is too\ + \ close to expiration, an organizational delay to rotate the secret may result\ + \ in an outage. Secrets should be rotated at a specified number of days prior\ + \ to expiration to provide sufficient time to react to a failure.\",\"metadata\"\ + :{\"version\":\"1.0.0-preview\",\"category\":\"Key Vault\",\"preview\":true},\"\ + parameters\":{\"minimumDaysBeforeExpiration\":{\"type\":\"Integer\",\"metadata\"\ + :{\"displayName\":\"The minimum days before expiration\",\"description\":\"\ + Specify the minimum number of days that a secret should remain usable prior\ + \ to expiration.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"'Audit' allows a non-compliant resource to be\ + \ created, but flags it as non-compliant. 'Deny' blocks the resource creation.\ + \ 'Disable' turns off the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\"\ + ,\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault.Data/vaults/secrets\"\ + },{\"field\":\"Microsoft.KeyVault.Data/vaults/secrets/attributes.expiresOn\"\ + ,\"exists\":true},{\"field\":\"Microsoft.KeyVault.Data/vaults/secrets/attributes.expiresOn\"\ + ,\"less\":\"[addDays(utcNow(), parameters('minimumDaysBeforeExpiration'))]\"\ + }]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b0eb591a-5e70-4534-a8bf-04b9c489584a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b0eb591a-5e70-4534-a8bf-04b9c489584a\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Enforce unique ingress\ + \ hostnames across namespaces in Kubernetes cluster\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Microsoft.Kubernetes.Data\",\"description\":\"This policy enforces\ + \ unique ingress hostnames across namespaces in a Kubernetes cluster. For\ + \ instructions on using this policy, please go to https://aka.ms/kubepolicydoc.\"\ + ,\"metadata\":{\"version\":\"3.0.1-deprecated\",\"category\":\"Kubernetes\"\ + ,\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Deprecated]: Effect\",\"description\":\"'Audit' allows\ + \ a non-compliant resource to be created, but flags it as non-compliant. 'Deny'\ + \ blocks the resource creation. 'Disable' turns off the policy.\"},\"allowedValues\"\ + :[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"deny\"},\"excludedNamespaces\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Deprecated]: Namespace\ + \ exclusions\",\"description\":\"List of Kubernetes namespaces to exclude\ + \ from policy evaluation.\"},\"defaultValue\":[\"kube-system\",\"gatekeeper-system\"\ + ,\"azure-arc\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"AKS\ + \ Engine\",\"Microsoft.Kubernetes/connectedClusters\"]},\"then\":{\"effect\"\ + :\"[parameters('effect')]\",\"details\":{\"constraintTemplate\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/ingress-hostnames-conflict/template.yaml\"\ + ,\"constraint\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/ingress-hostnames-conflict/constraint.yaml\"\ + ,\"values\":{\"excludedNamespaces\":\"[parameters('excludedNamespaces')]\"\ + }}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b2fd3e59-6390-4f2b-8247-ea676bd03e2d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b2fd3e59-6390-4f2b-8247-ea676bd03e2d\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Certificates using elliptic\ + \ curve cryptography should have allowed curve names\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Microsoft.KeyVault.Data\",\"description\":\"Manage the allowed\ + \ elliptic curve names for ECC Certificates stored in key vault. More information\ + \ can be found at https://aka.ms/akvpolicy.\",\"metadata\":{\"version\":\"\ + 2.0.0-preview\",\"category\":\"Key Vault\",\"preview\":true},\"parameters\"\ + :{\"allowedECNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"\ + [Preview]: Allowed elliptic curve names\",\"description\":\"The list of allowed\ + \ curve names for elliptic curve cryptography certificates.\"},\"allowedValues\"\ + :[\"P-256\",\"P-256K\",\"P-384\",\"P-521\"],\"defaultValue\":[\"P-256\",\"\ + P-256K\",\"P-384\",\"P-521\"]},\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Preview]: Effect\",\"description\":\"'Audit' allows a\ + \ non-compliant resource to be created, but flags it as non-compliant. 'Deny'\ + \ blocks the resource creation. 'Disable' turns off the policy.\"},\"allowedValues\"\ + :[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault.Data/vaults/certificates\"\ + },{\"field\":\"Microsoft.KeyVault.Data/vaults/certificates/keyProperties.keyType\"\ + ,\"in\":[\"EC\",\"EC-HSM\"]},{\"field\":\"Microsoft.KeyVault.Data/vaults/certificates/keyProperties.ellipticCurveName\"\ + ,\"notIn\":\"[parameters('allowedECNames')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bd78111f-4953-4367-9fd5-7e08808b54bf\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bd78111f-4953-4367-9fd5-7e08808b54bf\"\ + },{\"properties\":{\"displayName\":\"Kubernetes cluster containers should\ + \ only use allowed capabilities\",\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.Kubernetes.Data\"\ + ,\"description\":\"This policy ensures containers only use allowed capabilities\ + \ in a Kubernetes cluster. This policy is generally available for Kubernetes\ + \ Service (AKS), and preview for AKS Engine and Azure Arc enabled Kubernetes.\ + \ For instructions on using this policy, visit https://aka.ms/kubepolicydoc.\"\ + ,\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Kubernetes\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"'Audit' allows a non-compliant resource to be created or\ + \ updated, but flags it as non-compliant. 'Deny' blocks the non-compliant\ + \ resource creation or update. 'Disabled' turns off the policy.\"},\"allowedValues\"\ + :[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"},\"excludedNamespaces\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Namespace exclusions\"\ + ,\"description\":\"List of Kubernetes namespaces to exclude from policy evaluation.\"\ + },\"defaultValue\":[\"kube-system\",\"gatekeeper-system\",\"azure-arc\"]},\"\ + allowedCapabilities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"\ + Allowed capabilities\",\"description\":\"The list of capabilities that are\ + \ allowed to be added to a container. Provide empty list as input to block\ + \ everything.\"},\"defaultValue\":[]},\"requiredDropCapabilities\":{\"type\"\ + :\"Array\",\"metadata\":{\"displayName\":\"Required drop capabilities\",\"\ + description\":\"The list of capabilities that must be dropped by a container.\"\ + },\"defaultValue\":[]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\"\ + :[\"AKS Engine\",\"Microsoft.Kubernetes/connectedClusters\",\"Microsoft.ContainerService/managedClusters\"\ + ]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"constraintTemplate\"\ + :\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/container-allowed-capabilities/template.yaml\"\ + ,\"constraint\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/container-allowed-capabilities/constraint.yaml\"\ + ,\"values\":{\"allowedCapabilities\":\"[parameters('allowedCapabilities')]\"\ + ,\"requiredDropCapabilities\":\"[parameters('requiredDropCapabilities')]\"\ + ,\"excludedNamespaces\":\"[parameters('excludedNamespaces')]\"}}}}},\"id\"\ + :\"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c26596ff-4d70-4e6a-9a30-c2506bd2f80c\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Keys should not be active\ + \ for longer than the specified number of days\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Microsoft.KeyVault.Data\",\"description\":\"Specify the number\ + \ of days that a key should be active. Keys that are used for an extended\ + \ period of time increase the probability that an attacker could compromise\ + \ the key. As a good security practice, make sure that your keys have not\ + \ been active longer than two years.\",\"metadata\":{\"version\":\"1.0.0-preview\"\ + ,\"category\":\"Key Vault\",\"preview\":true},\"parameters\":{\"maximumValidityInDays\"\ + :{\"type\":\"Integer\",\"metadata\":{\"displayName\":\"The maximum validity\ + \ period in days\",\"description\":\"Specify the maximum number of days a\ + \ key can be valid for after activation.\"}},\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit' allows\ + \ a non-compliant resource to be created, but flags it as non-compliant. 'Deny'\ + \ blocks the resource creation. 'Disable' turns off the policy.\"},\"allowedValues\"\ + :[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault.Data/vaults/keys\"\ + },{\"value\":\"[utcNow()]\",\"greater\":\"[addDays(if(empty(field('Microsoft.KeyVault.Data/vaults/keys/attributes.notBefore')),\ + \ field('Microsoft.KeyVault.Data/vaults/keys/attributes.createdOn'), field('Microsoft.KeyVault.Data/vaults/keys/attributes.notBefore')),\ + \ parameters('maximumValidityInDays'))]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c26e4b24-cf98-4c67-b48b-5a25c4c69eb9\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c26e4b24-cf98-4c67-b48b-5a25c4c69eb9\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Certificates using RSA cryptography\ + \ should have the specified minimum key size\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Microsoft.KeyVault.Data\",\"description\":\"Manage your organizational\ + \ compliance requirements by specifying a minimum key size for RSA certificates\ + \ stored in your key vault.\",\"metadata\":{\"version\":\"2.0.0-preview\"\ + ,\"category\":\"Key Vault\",\"preview\":true},\"parameters\":{\"minimumRSAKeySize\"\ + :{\"type\":\"Integer\",\"metadata\":{\"displayName\":\"[Preview]: Minimum\ + \ RSA key size\",\"description\":\"The minimum key size for RSA certificates.\"\ + },\"allowedValues\":[2048,3072,4096]},\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Preview]: Effect\",\"description\":\"'Audit' allows a\ + \ non-compliant resource to be created, but flags it as non-compliant. 'Deny'\ + \ blocks the resource creation. 'Disable' turns off the policy.\"},\"allowedValues\"\ + :[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault.Data/vaults/certificates\"\ + },{\"field\":\"Microsoft.KeyVault.Data/vaults/certificates/keyProperties.keyType\"\ + ,\"in\":[\"RSA\",\"RSA-HSM\"]},{\"field\":\"Microsoft.KeyVault.Data/vaults/certificates/keyProperties.keySize\"\ + ,\"less\":\"[parameters('minimumRSAKeySize')]\"}]},\"then\":{\"effect\":\"\ + [parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cee51871-e572-4576-855c-047c820360f0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cee51871-e572-4576-855c-047c820360f0\"\ + },{\"properties\":{\"displayName\":\"[Deprecated]: Enforce unique ingress\ + \ hostnames across namespaces in AKS\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Microsoft.ContainerService.Data\",\"description\":\"This policy enforces\ + \ unique ingress hostnames across namespaces in an Azure Kubernetes Service\ + \ cluster. This policy is deprecated, please visit https://aka.ms/kubepolicydoc\ + \ for instructions on using new Kubernetes policies.\",\"metadata\":{\"version\"\ + :\"1.0.1-deprecated\",\"category\":\"Kubernetes service\",\"deprecated\":true},\"\ + parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"[Deprecated]: Effect\",\"description\":\"Enable or disable the execution\ + \ of the policy\"},\"allowedValues\":[\"EnforceRegoPolicy\",\"Disabled\"],\"\ + defaultValue\":\"EnforceRegoPolicy\"}},\"policyRule\":{\"if\":{\"field\":\"\ + type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},\"then\"\ + :{\"effect\":\"[parameters('effect')]\",\"details\":{\"policyId\":\"UniqueIngressHostnames\"\ + ,\"policy\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/KubernetesService/ingress-hostnames-conflict/limited-preview/gatekeeperpolicy.rego\"\ + }}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d011d9f7-ba32-4005-b727-b3d09371ca60\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d011d9f7-ba32-4005-b727-b3d09371ca60\"\ + },{\"properties\":{\"displayName\":\"Kubernetes cluster containers should\ + \ run with a read only root file system\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Microsoft.Kubernetes.Data\",\"description\":\"This policy ensures containers\ + \ run with a read only root file system in a Kubernetes cluster. This policy\ + \ is generally available for Kubernetes Service (AKS), and preview for AKS\ + \ Engine and Azure Arc enabled Kubernetes. For instructions on using this\ + \ policy, visit https://aka.ms/kubepolicydoc/.\",\"metadata\":{\"version\"\ + :\"1.0.1\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit'\ + \ allows a non-compliant resource to be created or updated, but flags it as\ + \ non-compliant. 'Deny' blocks the non-compliant resource creation or update.\ + \ 'Disabled' turns off the policy.\"},\"allowedValues\":[\"audit\",\"deny\"\ + ,\"disabled\"],\"defaultValue\":\"audit\"},\"excludedNamespaces\":{\"type\"\ + :\"Array\",\"metadata\":{\"displayName\":\"Namespace exclusions\",\"description\"\ + :\"List of Kubernetes namespaces to exclude from policy evaluation.\"},\"\ + defaultValue\":[\"kube-system\",\"gatekeeper-system\",\"azure-arc\"]}},\"\ + policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"AKS Engine\",\"Microsoft.Kubernetes/connectedClusters\"\ + ,\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"\ + [parameters('effect')]\",\"details\":{\"constraintTemplate\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/read-only-root-filesystem/template.yaml\"\ + ,\"constraint\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/read-only-root-filesystem/constraint.yaml\"\ + ,\"values\":{\"excludedNamespaces\":\"[parameters('excludedNamespaces')]\"\ + }}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"df49d893-a74c-421d-bc95-c663042e5b80\"\ + },{\"properties\":{\"displayName\":\"Kubernetes cluster pods and containers\ + \ should only use allowed SELinux options\",\"policyType\":\"BuiltIn\",\"\ + mode\":\"Microsoft.Kubernetes.Data\",\"description\":\"This policy ensures\ + \ pods and containers only use allowed SELinux options in a Kubernetes cluster.\ + \ This policy is generally available for Kubernetes Service (AKS), and preview\ + \ for AKS Engine and Azure Arc enabled Kubernetes. For instructions on using\ + \ this policy, visit https://aka.ms/kubepolicydoc.\",\"metadata\":{\"version\"\ + :\"2.0.1\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit'\ + \ allows a non-compliant resource to be created or updated, but flags it as\ + \ non-compliant. 'Deny' blocks the non-compliant resource creation or update.\ + \ 'Disabled' turns off the policy.\"},\"allowedValues\":[\"audit\",\"deny\"\ + ,\"disabled\"],\"defaultValue\":\"audit\"},\"excludedNamespaces\":{\"type\"\ + :\"Array\",\"metadata\":{\"displayName\":\"Namespace exclusions\",\"description\"\ + :\"List of Kubernetes namespaces to exclude from policy evaluation.\"},\"\ + defaultValue\":[\"kube-system\",\"gatekeeper-system\",\"azure-arc\"]},\"allowedSELinuxOptions\"\ + :{\"type\":\"Object\",\"metadata\":{\"displayName\":\"Allowed SELinux options\"\ + ,\"description\":\"The allowed configurations for pod and container level\ + \ SELinux Options. Provide empty options list as input to block everything.\"\ + ,\"schema\":{\"type\":\"object\",\"properties\":{\"options\":{\"type\":\"\ + array\",\"items\":{\"type\":\"object\",\"properties\":{\"level\":{\"type\"\ + :\"string\"},\"role\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"\ + },\"user\":{\"type\":\"string\"}},\"additionalProperties\":false}}},\"required\"\ + :[\"options\"],\"additionalProperties\":false}},\"defaultValue\":{\"options\"\ + :[]}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"AKS Engine\",\"\ + Microsoft.Kubernetes/connectedClusters\"]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"constraintTemplate\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/selinux/template.yaml\"\ + ,\"constraint\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/selinux/constraint.yaml\"\ + ,\"values\":{\"excludedNamespaces\":\"[parameters('excludedNamespaces')]\"\ + ,\"allowedSELinuxOptions\":\"[parameters('allowedSELinuxOptions').options]\"\ + }}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e1e6c427-07d9-46ab-9689-bfa85431e636\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e1e6c427-07d9-46ab-9689-bfa85431e636\"\ + },{\"properties\":{\"displayName\":\"Ensure container CPU and memory resource\ + \ limits do not exceed the specified limits in Kubernetes cluster\",\"policyType\"\ + :\"BuiltIn\",\"mode\":\"Microsoft.Kubernetes.Data\",\"description\":\"This\ + \ policy ensures container CPU and memory resource limits are defined and\ + \ do not exceed the specified limits in a Kubernetes cluster. This policy\ + \ is generally available for Kubernetes Service (AKS), and preview for AKS\ + \ Engine and Azure Arc enabled Kubernetes. For instructions on using this\ + \ policy, visit https://aka.ms/kubepolicydoc.\",\"metadata\":{\"version\"\ + :\"4.0.1\",\"category\":\"Kubernetes\"},\"parameters\":{\"cpuLimit\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Max allowed CPU units\",\"description\"\ + :\"The maximum CPU units allowed for a container. E.g. 200m. For more information,\ + \ please refer https://aka.ms/k8s-policy-pod-limits\"}},\"memoryLimit\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Max allowed memory bytes\"\ + ,\"description\":\"The maximum memory bytes allowed for a container. E.g.\ + \ 1Gi. For more information, please refer https://aka.ms/k8s-policy-pod-limits\"\ + }},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"'Audit' allows a non-compliant resource to be created,\ + \ but flags it as non-compliant. 'Deny' blocks the resource creation. 'Disable'\ + \ turns off the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"\ + ],\"defaultValue\":\"deny\"},\"excludedNamespaces\":{\"type\":\"Array\",\"\ + metadata\":{\"displayName\":\"Namespace exclusions\",\"description\":\"List\ + \ of Kubernetes namespaces to exclude from policy evaluation.\"},\"defaultValue\"\ + :[\"kube-system\",\"gatekeeper-system\",\"azure-arc\"]}},\"policyRule\":{\"\ + if\":{\"field\":\"type\",\"in\":[\"AKS Engine\",\"Microsoft.Kubernetes/connectedClusters\"\ + ,\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"\ + [parameters('effect')]\",\"details\":{\"constraintTemplate\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/container-resource-limits/template.yaml\"\ + ,\"constraint\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/container-resource-limits/constraint.yaml\"\ + ,\"values\":{\"cpuLimit\":\"[parameters('cpuLimit')]\",\"memoryLimit\":\"\ + [parameters('memoryLimit')]\",\"excludedNamespaces\":\"[parameters('excludedNamespaces')]\"\ + }}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e345eecc-fa47-480f-9e88-67dcc122b164\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Secrets should not be active\ + \ for longer than the specified number of days\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Microsoft.KeyVault.Data\",\"description\":\"If your secrets were\ + \ created with an activation date set in the future, you must ensure that\ + \ your secrets have not been active for longer than the specified duration.\"\ + ,\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key Vault\",\"\ + preview\":true},\"parameters\":{\"maximumValidityInDays\":{\"type\":\"Integer\"\ + ,\"metadata\":{\"displayName\":\"The maximum validity period in days\",\"\ + description\":\"Specify the maximum number of days a secret can be valid for\ + \ after activation.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Effect\",\"description\":\"'Audit' allows a non-compliant resource to be\ + \ created, but flags it as non-compliant. 'Deny' blocks the resource creation.\ + \ 'Disable' turns off the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\"\ + ,\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\"\ + :[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault.Data/vaults/secrets\"\ + },{\"value\":\"[utcNow()]\",\"greater\":\"[addDays(if(empty(field('Microsoft.KeyVault.Data/vaults/secrets/attributes.notBefore')),\ + \ field('Microsoft.KeyVault.Data/vaults/secrets/attributes.createdOn'), field('Microsoft.KeyVault.Data/vaults/secrets/attributes.notBefore')),\ + \ parameters('maximumValidityInDays'))]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8d99835-8a06-45ae-a8e0-87a91941ccfe\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8d99835-8a06-45ae-a8e0-87a91941ccfe\"\ + },{\"properties\":{\"displayName\":\"Kubernetes cluster pods and containers\ + \ should only run with approved user and group IDs\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Microsoft.Kubernetes.Data\",\"description\":\"This policy controls\ + \ the user, primary group, supplemental group and file system group IDs that\ + \ pods and containers can use to run in a Kubernetes Cluster. This policy\ + \ is generally available for Kubernetes Service (AKS), and preview for AKS\ + \ Engine and Azure Arc enabled Kubernetes. For instructions on using this\ + \ policy, visit https://aka.ms/kubepolicydoc.\",\"metadata\":{\"version\"\ + :\"1.0.1\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\"\ + :\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit'\ + \ allows a non-compliant resource to be created or updated, but flags it as\ + \ non-compliant. 'Deny' blocks the non-compliant resource creation or update.\ + \ 'Disabled' turns off the policy.\"},\"allowedValues\":[\"audit\",\"deny\"\ + ,\"disabled\"],\"defaultValue\":\"audit\"},\"excludedNamespaces\":{\"type\"\ + :\"Array\",\"metadata\":{\"displayName\":\"Namespace exclusions\",\"description\"\ + :\"List of Kubernetes namespaces to exclude from policy evaluation.\"},\"\ + defaultValue\":[\"kube-system\",\"gatekeeper-system\",\"azure-arc\"]},\"runAsUserRule\"\ + :{\"type\":\"String\",\"metadata\":{\"displayName\":\"Run as user rule\",\"\ + description\":\"The 'RunAsUser' rule that containers are allowed to run with.\"\ + },\"allowedValues\":[\"MustRunAs\",\"MustRunAsNonRoot\",\"RunAsAny\"],\"defaultValue\"\ + :\"MustRunAsNonRoot\"},\"runAsUserRanges\":{\"type\":\"Object\",\"metadata\"\ + :{\"displayName\":\"Allowed user ID ranges\",\"description\":\"The user ID\ + \ ranges that are allowed for containers to use.\",\"schema\":{\"type\":\"\ + object\",\"properties\":{\"ranges\":{\"type\":\"array\",\"items\":{\"type\"\ + :\"object\",\"properties\":{\"min\":{\"type\":\"integer\"},\"max\":{\"type\"\ + :\"integer\"}},\"required\":[\"min\",\"max\"],\"additionalProperties\":false}}},\"\ + required\":[\"ranges\"],\"additionalProperties\":false}},\"defaultValue\"\ + :{\"ranges\":[]}},\"runAsGroupRule\":{\"type\":\"String\",\"metadata\":{\"\ + displayName\":\"Run as group rule\",\"description\":\"The 'RunAsGroup' rule\ + \ that containers are allowed to run with.\"},\"allowedValues\":[\"MustRunAs\"\ + ,\"MayRunAs\",\"RunAsAny\"],\"defaultValue\":\"RunAsAny\"},\"runAsGroupRanges\"\ + :{\"type\":\"Object\",\"metadata\":{\"displayName\":\"Allowed group ID ranges\"\ + ,\"description\":\"The group ID ranges that are allowed for containers to\ + \ use.\",\"schema\":{\"type\":\"object\",\"properties\":{\"ranges\":{\"type\"\ + :\"array\",\"items\":{\"type\":\"object\",\"properties\":{\"min\":{\"type\"\ + :\"integer\"},\"max\":{\"type\":\"integer\"}},\"required\":[\"min\",\"max\"\ + ],\"additionalProperties\":false}}},\"required\":[\"ranges\"],\"additionalProperties\"\ + :false}},\"defaultValue\":{\"ranges\":[]}},\"supplementalGroupsRule\":{\"\ + type\":\"String\",\"metadata\":{\"displayName\":\"Supplemental group rule\"\ + ,\"description\":\"The 'SupplementalGroups' rule that containers are allowed\ + \ to run with.\"},\"allowedValues\":[\"MustRunAs\",\"MayRunAs\",\"RunAsAny\"\ + ],\"defaultValue\":\"RunAsAny\"},\"supplementalGroupsRanges\":{\"type\":\"\ + Object\",\"metadata\":{\"displayName\":\"Allowed supplemental group ID ranges\"\ + ,\"description\":\"The supplemental group ID ranges that are allowed for containers\ + \ to use.\",\"schema\":{\"type\":\"object\",\"properties\":{\"ranges\":{\"\ + type\":\"array\",\"items\":{\"type\":\"object\",\"properties\":{\"min\":{\"\ + type\":\"integer\"},\"max\":{\"type\":\"integer\"}},\"required\":[\"min\"\ + ,\"max\"],\"additionalProperties\":false}}},\"required\":[\"ranges\"],\"additionalProperties\"\ + :false}},\"defaultValue\":{\"ranges\":[]}},\"fsGroupRule\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"File system group rule\",\"description\"\ + :\"The 'FSGroup' rule that containers are allowed to run with.\"},\"allowedValues\"\ + :[\"MustRunAs\",\"MayRunAs\",\"RunAsAny\"],\"defaultValue\":\"RunAsAny\"},\"\ + fsGroupRanges\":{\"type\":\"Object\",\"metadata\":{\"displayName\":\"Allowed\ + \ file system group ID ranges\",\"description\":\"The file system group ranges\ + \ that are allowed for pods to use.\",\"schema\":{\"type\":\"object\",\"properties\"\ + :{\"ranges\":{\"type\":\"array\",\"items\":{\"type\":\"object\",\"properties\"\ + :{\"min\":{\"type\":\"integer\"},\"max\":{\"type\":\"integer\"}},\"required\"\ + :[\"min\",\"max\"],\"additionalProperties\":false}}},\"required\":[\"ranges\"\ + ],\"additionalProperties\":false}},\"defaultValue\":{\"ranges\":[]}}},\"policyRule\"\ + :{\"if\":{\"field\":\"type\",\"in\":[\"AKS Engine\",\"Microsoft.Kubernetes/connectedClusters\"\ + ,\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"\ + [parameters('effect')]\",\"details\":{\"constraintTemplate\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/allowed-users-groups/template.yaml\"\ + ,\"constraint\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/allowed-users-groups/constraint.yaml\"\ + ,\"values\":{\"runAsUser\":{\"rule\":\"[parameters('runAsUserRule')]\",\"\ + ranges\":\"[parameters('runAsUserRanges').ranges]\"},\"runAsGroup\":{\"rule\"\ + :\"[parameters('runAsGroupRule')]\",\"ranges\":\"[parameters('runAsGroupRanges').ranges]\"\ + },\"supplementalGroups\":{\"rule\":\"[parameters('supplementalGroupsRule')]\"\ + ,\"ranges\":\"[parameters('supplementalGroupsRanges').ranges]\"},\"fsGroup\"\ + :{\"rule\":\"[parameters('fsGroupRule')]\",\"ranges\":\"[parameters('fsGroupRanges').ranges]\"\ + },\"excludedNamespaces\":\"[parameters('excludedNamespaces')]\"}}}}},\"id\"\ + :\"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f06ddb64-5fa3-4b77-b166-acb36f7f6042\"\ + },{\"properties\":{\"displayName\":\"Kubernetes cluster pod FlexVolume volumes\ + \ should only use allowed drivers\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Microsoft.Kubernetes.Data\",\"description\":\"This policy ensures pod FlexVolume\ + \ volumes only use allowed drivers in a Kubernetes cluster. This policy is\ + \ generally available for Kubernetes Service (AKS), and preview for AKS Engine\ + \ and Azure Arc enabled Kubernetes. For instructions on using this policy,\ + \ visit https://aka.ms/kubepolicydoc.\",\"metadata\":{\"version\":\"1.0.1\"\ + ,\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit' allows\ + \ a non-compliant resource to be created or updated, but flags it as non-compliant.\ + \ 'Deny' blocks the non-compliant resource creation or update. 'Disabled'\ + \ turns off the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"\ + ],\"defaultValue\":\"audit\"},\"excludedNamespaces\":{\"type\":\"Array\",\"\ + metadata\":{\"displayName\":\"Namespace exclusions\",\"description\":\"List\ + \ of Kubernetes namespaces to exclude from policy evaluation.\"},\"defaultValue\"\ + :[\"kube-system\",\"gatekeeper-system\",\"azure-arc\"]},\"allowedFlexVolumeDrivers\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed FlexVolume drivers\"\ + ,\"description\":\"The list of drivers that FlexVolume volumes are allowed\ + \ to use. Provide empty list as input to block everything.\"},\"defaultValue\"\ + :[]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"AKS Engine\",\"\ + Microsoft.Kubernetes/connectedClusters\",\"Microsoft.ContainerService/managedClusters\"\ + ]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"constraintTemplate\"\ + :\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/flexvolume-drivers/template.yaml\"\ + ,\"constraint\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/flexvolume-drivers/constraint.yaml\"\ + ,\"values\":{\"allowedFlexVolumeDrivers\":\"[parameters('allowedFlexVolumeDrivers')]\"\ + ,\"excludedNamespaces\":\"[parameters('excludedNamespaces')]\"}}}}},\"id\"\ + :\"/providers/Microsoft.Authorization/policyDefinitions/f4a8fce0-2dd5-4c21-9a36-8f0ec809d663\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4a8fce0-2dd5-4c21-9a36-8f0ec809d663\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Certificates should not expire\ + \ within the specified number of days\",\"policyType\":\"BuiltIn\",\"mode\"\ + :\"Microsoft.KeyVault.Data\",\"description\":\"Manage certificates that will\ + \ expire within a specified number of days to ensure your organization has\ + \ sufficient time to rotate the certificate prior to expiration.\",\"metadata\"\ + :{\"version\":\"2.0.0-preview\",\"category\":\"Key Vault\",\"preview\":true},\"\ + parameters\":{\"daysToExpire\":{\"type\":\"Integer\",\"metadata\":{\"displayName\"\ + :\"[Preview]: Days to expire\",\"description\":\"The number of days for a\ + \ certificate to expire.\"}},\"effect\":{\"type\":\"String\",\"metadata\"\ + :{\"displayName\":\"[Preview]: Effect\",\"description\":\"'Audit' allows a\ + \ non-compliant resource to be created, but flags it as non-compliant. 'Deny'\ + \ blocks the resource creation. 'Disable' turns off the policy.\"},\"allowedValues\"\ + :[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault.Data/vaults/certificates\"\ + },{\"field\":\"Microsoft.KeyVault.Data/vaults/certificates/attributes.expiresOn\"\ + ,\"lessOrEquals\":\"[addDays(utcNow(), parameters('daysToExpire'))]\"}]},\"\ + then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f772fb64-8e40-40ad-87bc-7706e1949427\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f772fb64-8e40-40ad-87bc-7706e1949427\"\ + },{\"properties\":{\"displayName\":\"Kubernetes cluster containers should\ + \ only use allowed ProcMountType\",\"policyType\":\"BuiltIn\",\"mode\":\"\ + Microsoft.Kubernetes.Data\",\"description\":\"This policy ensures containers\ + \ only use allowed ProcMountType in a Kubernetes cluster. This policy is generally\ + \ available for Kubernetes Service (AKS), and preview for AKS Engine and Azure\ + \ Arc enabled Kubernetes. For instructions on using this policy, visit https://aka.ms/kubepolicydoc.\"\ + ,\"metadata\":{\"version\":\"2.0.1\",\"category\":\"Kubernetes\"},\"parameters\"\ + :{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"'Audit' allows a non-compliant resource to be created or\ + \ updated, but flags it as non-compliant. 'Deny' blocks the non-compliant\ + \ resource creation or update. 'Disabled' turns off the policy.\"},\"allowedValues\"\ + :[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"},\"excludedNamespaces\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Namespace exclusions\"\ + ,\"description\":\"List of Kubernetes namespaces to exclude from policy evaluation.\"\ + },\"defaultValue\":[\"kube-system\",\"gatekeeper-system\",\"azure-arc\"]},\"\ + procMountType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"ProcMountType\"\ + ,\"description\":\"The ProcMountType that containers are allowed to use in\ + \ the cluster.\"},\"allowedValues\":[\"Unmasked\",\"Default\"],\"defaultValue\"\ + :\"Default\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"AKS Engine\"\ + ,\"Microsoft.Kubernetes/connectedClusters\"]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + ,\"details\":{\"constraintTemplate\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/allowed-proc-mount-types/template.yaml\"\ + ,\"constraint\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/allowed-proc-mount-types/constraint.yaml\"\ + ,\"values\":{\"procMount\":\"[parameters('procMountType')]\",\"excludedNamespaces\"\ + :\"[parameters('excludedNamespaces')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f85eb0dd-92ee-40e9-8a76-db25a507d6d3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f85eb0dd-92ee-40e9-8a76-db25a507d6d3\"\ + },{\"properties\":{\"displayName\":\"Ensure only allowed container images\ + \ in Kubernetes cluster\",\"policyType\":\"BuiltIn\",\"mode\":\"Microsoft.Kubernetes.Data\"\ + ,\"description\":\"This policy ensures only allowed container images are running\ + \ in a Kubernetes cluster. This policy is generally available for Kubernetes\ + \ Service (AKS), and preview for AKS Engine and Azure Arc enabled Kubernetes.\ + \ For instructions on using this policy, visit https://aka.ms/kubepolicydoc.\"\ + ,\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Kubernetes\"},\"parameters\"\ + :{\"allowedContainerImagesRegex\":{\"type\":\"String\",\"metadata\":{\"displayName\"\ + :\"Allowed container images regex\",\"description\":\"The RegEx rule used\ + \ to match allowed container images in a Kubernetes cluster. For example,\ + \ to allow any Azure Container Registry image by matching partial path: ^.+azurecr.io/.+$\"\ + }},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\"\ + ,\"description\":\"'Audit' allows a non-compliant resource to be created,\ + \ but flags it as non-compliant. 'Deny' blocks the resource creation. 'Disable'\ + \ turns off the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"\ + ],\"defaultValue\":\"deny\"},\"excludedNamespaces\":{\"type\":\"Array\",\"\ + metadata\":{\"displayName\":\"Namespace exclusions\",\"description\":\"List\ + \ of Kubernetes namespaces to exclude from policy evaluation.\"},\"defaultValue\"\ + :[\"kube-system\",\"gatekeeper-system\",\"azure-arc\"]}},\"policyRule\":{\"\ + if\":{\"field\":\"type\",\"in\":[\"AKS Engine\",\"Microsoft.Kubernetes/connectedClusters\"\ + ,\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"\ + [parameters('effect')]\",\"details\":{\"constraintTemplate\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/container-allowed-images/template.yaml\"\ + ,\"constraint\":\"https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/Kubernetes/container-allowed-images/constraint.yaml\"\ + ,\"values\":{\"allowedContainerImagesRegex\":\"[parameters('allowedContainerImagesRegex')]\"\ + ,\"excludedNamespaces\":\"[parameters('excludedNamespaces')]\"}}}}},\"id\"\ + :\"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"febd0533-8e55-448f-b837-bd0e06f16469\"\ + },{\"properties\":{\"displayName\":\"[Preview]: Keys using elliptic curve\ + \ cryptography should have the specified curve names\",\"policyType\":\"BuiltIn\"\ + ,\"mode\":\"Microsoft.KeyVault.Data\",\"description\":\"Keys backed by elliptic\ + \ curve cryptography can have different curve names. Some applications are\ + \ only compatible with specific elliptic curve keys. Enforce the types of\ + \ elliptic curve keys that are allowed to be created in your environment.\"\ + ,\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key Vault\",\"\ + preview\":true},\"parameters\":{\"allowedECNames\":{\"type\":\"Array\",\"\ + metadata\":{\"displayName\":\"Allowed elliptic curve names\",\"description\"\ + :\"The list of allowed curve names for elliptic curve cryptography certificates.\"\ + },\"allowedValues\":[\"P-256\",\"P-256K\",\"P-384\",\"P-521\"],\"defaultValue\"\ + :[\"P-256\",\"P-256K\",\"P-384\",\"P-521\"]},\"effect\":{\"type\":\"String\"\ + ,\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit' allows\ + \ a non-compliant resource to be created, but flags it as non-compliant. 'Deny'\ + \ blocks the resource creation. 'Disable' turns off the policy.\"},\"allowedValues\"\ + :[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault.Data/vaults/keys\"\ + },{\"field\":\"Microsoft.KeyVault.Data/vaults/keys/keyType\",\"in\":[\"EC\"\ + ,\"EC-HSM\"]},{\"field\":\"Microsoft.KeyVault.Data/vaults/keys/ellipticCurveName\"\ + ,\"notIn\":\"[parameters('allowedECNames')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"\ + }}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ff25f3c8-b739-4538-9d07-3d6d25cfb255\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ff25f3c8-b739-4538-9d07-3d6d25cfb255\"\ + },{\"properties\":{\"displayName\":\"zhoxing-test\",\"policyType\":\"Custom\"\ + ,\"mode\":\"All\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\"\ + ,\"createdOn\":\"2020-02-25T09:41:45.9065425Z\",\"updatedBy\":null,\"updatedOn\"\ + :null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\"\ + :{\"displayName\":\"Allowed locations\",\"description\":\"The list of allowed\ + \ locations for resources.\",\"strongType\":\"location\"}}},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/04a22d7e-273d-45f2-8a10-02070dbcefca\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04a22d7e-273d-45f2-8a10-02070dbcefca\"\ + },{\"properties\":{\"displayName\":\"Audit virtual machines without disaster\ + \ recovery configured\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\"\ + :\"test\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\"\ + ,\"createdOn\":\"2019-12-25T03:21:49.7174918Z\",\"updatedBy\":null,\"updatedOn\"\ + :null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\"\ + :{\"displayName\":\"Allowed locations\",\"description\":\"The list of allowed\ + \ locations for resources.\",\"strongType\":\"location\"}}},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1c510c21-8404-40b2-a351-73e881e707dc\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c510c21-8404-40b2-a351-73e881e707dc\"\ + },{\"properties\":{\"displayName\":\"ValidatePolicySetDefinitionErrorHandling\ + \ Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\"\ + ,\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\"\ + :\"2020-05-20T05:27:12.8058713Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"\ + },\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2252\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2252\"\ + },{\"properties\":{\"displayName\":\"CanCrudPolicyDefinition Policy Definition\ + \ $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\"\ + :{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"\ + 2020-05-20T05:23:21.8111815Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\"\ + :{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"\ + },\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2591\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2591\"\ + },{\"properties\":{\"displayName\":\"ValidatePolicySetDefinitionErrorHandling\ + \ Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\"\ + ,\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\"\ + :\"2020-05-20T05:26:50.197239Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"\ + },\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3580\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3580\"\ + },{\"properties\":{\"displayName\":\"CanCrudPolicyDefinition Policy Definition\ + \ $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\"\ + :{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"\ + 2020-05-20T05:22:08.493423Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\"\ + :{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"\ + },\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3738\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3738\"\ + },{\"properties\":{\"displayName\":\"ValidatePolicySetDefinitionErrorHandling\ + \ Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\"\ + ,\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\"\ + :\"2020-05-20T05:28:26.9683736Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"\ + },\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7204\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7204\"\ + },{\"properties\":{\"displayName\":\"ValidatePolicySetDefinitionErrorHandling\ + \ Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\"\ + ,\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\"\ + :\"2020-05-20T05:28:03.7222043Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"\ + },\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7771\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7771\"\ + },{\"properties\":{\"displayName\":\"zhoxing_test_new_policy_test_length_exceed_name\"\ + ,\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"\u6D4B\u8BD5\ + \u4E00\u4E0B\u540D\u5B57\u8D85\u957F\u7684\u7B56\u7565\u54E6\",\"metadata\"\ + :{\"category\":\"test\",\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\"\ + ,\"createdOn\":\"2019-12-25T03:14:59.2983062Z\",\"updatedBy\":null,\"updatedOn\"\ + :null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\"\ + :{\"displayName\":\"Allowed locations\",\"description\":\"The list of allowed\ + \ locations for resources.\",\"strongType\":\"location\"}}},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/8720f898-d316-4608-b43d-203ce23c2a8d\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8720f898-d316-4608-b43d-203ce23c2a8d\"\ + },{\"properties\":{\"displayName\":\"test_policyzkglcmhug\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\"\ + ,\"createdOn\":\"2020-07-15T16:22:21.5862872Z\",\"updatedBy\":null,\"updatedOn\"\ + :null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\"\ + :{\"displayName\":\"Allowed locations\",\"description\":\"The list of locations\ + \ that can be specified when deploying resources\"}}},\"policyRule\":{\"if\"\ + :{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy2noobkz62\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy2noobkz62\"\ + },{\"properties\":{\"displayName\":\"test_policy6iqdav32l\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2019-12-06T10:20:01.1577308Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\"\ + :\"The list of locations that can be specified when deploying resources\"\ + ,\"strongType\":\"location\",\"displayName\":\"Allowed locations\"}}},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy4zz266ek6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy4zz266ek6\"\ + },{\"properties\":{\"displayName\":\"test_policybsix632z6\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2019-12-09T03:24:37.437303Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\"\ + :\"The list of locations that can be specified when deploying resources\"\ + ,\"strongType\":\"location\",\"displayName\":\"Allowed locations\"}}},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy57hfk7oid\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy57hfk7oid\"\ + },{\"properties\":{\"displayName\":\"test_policyy7ioozyyj\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2020-10-27T10:04:23.9954862Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\"\ + :\"Allowed locations\",\"description\":\"The list of locations that can be\ + \ specified when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy5erexjjq4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy5erexjjq4\"\ + },{\"properties\":{\"displayName\":\"test_policy3ulbefgq5\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy5rxcsbgyu\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy5rxcsbgyu\"\ + },{\"properties\":{\"displayName\":\"test_policy66vwzao4g\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2019-12-09T02:12:26.4310804Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\"\ + :\"The list of locations that can be specified when deploying resources\"\ + ,\"strongType\":\"location\",\"displayName\":\"Allowed locations\"}}},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy63bzujayf\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy63bzujayf\"\ + },{\"properties\":{\"displayName\":\"test_policyvrud2j572\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy6rmvrx2ug\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy6rmvrx2ug\"\ + },{\"properties\":{\"displayName\":\"test_policyqr33lcjpy\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2019-12-09T02:02:21.3055647Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\"\ + :\"The list of locations that can be specified when deploying resources\"\ + ,\"strongType\":\"location\",\"displayName\":\"Allowed locations\"}}},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy6vduv5kcq\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy6vduv5kcq\"\ + },{\"properties\":{\"displayName\":\"test_policyeezgnn3tf\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy72fpbk6om\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy72fpbk6om\"\ + },{\"properties\":{\"displayName\":\"test_policylzld56g3c\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy75lhjp2qz\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy75lhjp2qz\"\ + },{\"properties\":{\"displayName\":\"test_policyoe7miqz26\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2020-07-23T11:47:49.5570894Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\"\ + ,\"updatedOn\":\"2020-07-23T11:47:50.4353792Z\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy767hseibh\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy767hseibh\"\ + },{\"properties\":{\"displayName\":\"test_policyac3dg2mjn\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2019-12-06T09:20:41.768722Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\"\ + :\"The list of locations that can be specified when deploying resources\"\ + ,\"strongType\":\"location\",\"displayName\":\"Allowed locations\"}}},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy7nfzu5aac\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy7nfzu5aac\"\ + },{\"properties\":{\"displayName\":\"test_policyf5jlokaxi\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"f0f844e0-d2fe-4aa3-8e2c-2e429618f305\",\"createdOn\"\ + :\"2020-04-26T03:07:58.9010046Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\"\ + :\"The list of locations that can be specified when deploying resources\"\ + ,\"strongType\":\"location\",\"displayName\":\"Allowed locations\"}}},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy7o4ad6aix\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy7o4ad6aix\"\ + },{\"properties\":{\"displayName\":\"test_policy4leaozaze\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyafjaspbln\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyafjaspbln\"\ + },{\"properties\":{\"displayName\":\"test_policytz5xijuco\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"\ + description\":\"The list of locations that can be specified when deploying\ + \ resources\",\"displayName\":\"Allowed locations\",\"strongType\":\"location\"\ + }}},\"policyRule\":{\"if\":{\"not\":{\"in\":\"[parameters('allowedLocations')]\"\ + ,\"field\":\"location\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyaip6dvuui\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyaip6dvuui\"\ + },{\"properties\":{\"displayName\":\"test_policy7f4jaqite\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2020-02-26T03:12:15.3049726Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\"\ + :\"Allowed locations\",\"description\":\"The list of locations that can be\ + \ specified when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyakuce4o7r\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyakuce4o7r\"\ + },{\"properties\":{\"displayName\":\"test_policyk2ipvteje\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policycc24wg2ai\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policycc24wg2ai\"\ + },{\"properties\":{\"displayName\":\"test_policy3fqevgg5o\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2019-12-26T07:30:30.8196821Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\"\ + :\"Allowed locations\",\"description\":\"The list of locations that can be\ + \ specified when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyda63cvhit\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyda63cvhit\"\ + },{\"properties\":{\"displayName\":\"test_policymjacbnsg7_new\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\",\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\"\ + ,\"createdOn\":\"2020-10-27T10:04:25.7488473Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\"\ + ,\"updatedOn\":\"2020-10-27T10:04:27.1575214Z\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed locations 2\"\ + }}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policydmu7kh7xj\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policydmu7kh7xj\"\ + },{\"properties\":{\"displayName\":\"test_policytxax3vq3l\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2019-12-09T08:13:20.7569455Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\"\ + :\"The list of locations that can be specified when deploying resources\"\ + ,\"strongType\":\"location\",\"displayName\":\"Allowed locations\"}}},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyeal5hjxel\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyeal5hjxel\"\ + },{\"properties\":{\"displayName\":\"test_policynek2j6dvx\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyebyt2or2s\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyebyt2or2s\"\ + },{\"properties\":{\"displayName\":\"test_policym2n2mkhuj\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"f0f844e0-d2fe-4aa3-8e2c-2e429618f305\",\"createdOn\"\ + :\"2020-04-26T02:36:14.7157952Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\"\ + :\"The list of locations that can be specified when deploying resources\"\ + ,\"strongType\":\"location\",\"displayName\":\"Allowed locations\"}}},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyeertdx3jy\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyeertdx3jy\"\ + },{\"properties\":{\"displayName\":\"test_policyptdmg43m5\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\"\ + ,\"createdOn\":\"2020-07-11T01:19:22.5360453Z\",\"updatedBy\":null,\"updatedOn\"\ + :null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\"\ + :{\"displayName\":\"Allowed locations\",\"description\":\"The list of locations\ + \ that can be specified when deploying resources\"}}},\"policyRule\":{\"if\"\ + :{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyf3muninsw\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyf3muninsw\"\ + },{\"properties\":{\"displayName\":\"test_policyo57mbgttt\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyf4gvztvgz\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyf4gvztvgz\"\ + },{\"properties\":{\"displayName\":\"test_policycw5l4ec3o\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2020-07-23T09:53:22.3770924Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\"\ + ,\"updatedOn\":\"2020-07-23T09:53:23.5360696Z\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyf4ltzkbwi\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyf4ltzkbwi\"\ + },{\"properties\":{\"displayName\":\"test_policyry7ktdqpn\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyfneqctrjx\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyfneqctrjx\"\ + },{\"properties\":{\"displayName\":\"test_policyhproaqyb2\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2019-12-09T07:55:49.8973296Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\"\ + :\"The list of locations that can be specified when deploying resources\"\ + ,\"strongType\":\"location\",\"displayName\":\"Allowed locations\"}}},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyfo7wr4vix\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyfo7wr4vix\"\ + },{\"properties\":{\"displayName\":\"test_policy4leengd3v\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2020-07-23T11:12:58.1947822Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\"\ + ,\"updatedOn\":\"2020-07-23T11:12:59.1206342Z\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyfr4tbot23\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyfr4tbot23\"\ + },{\"properties\":{\"displayName\":\"test_policyfufe2htyd\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2019-12-06T10:17:08.3329915Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\"\ + :\"The list of locations that can be specified when deploying resources\"\ + ,\"strongType\":\"location\",\"displayName\":\"Allowed locations\"}}},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyftxdxfati\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyftxdxfati\"\ + },{\"properties\":{\"displayName\":\"test_policypq5w4fcp5\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhavmopeay\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyhavmopeay\"\ + },{\"properties\":{\"displayName\":\"test_policyzhxn622hb\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhb6kmyq63\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyhb6kmyq63\"\ + },{\"properties\":{\"displayName\":\"test_policydharb4zp4\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\"\ + ,\"createdOn\":\"2020-07-23T02:05:42.6649124Z\",\"updatedBy\":null,\"updatedOn\"\ + :null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\"\ + :{\"displayName\":\"Allowed locations\",\"description\":\"The list of locations\ + \ that can be specified when deploying resources\"}}},\"policyRule\":{\"if\"\ + :{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhbjxkxwks\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyhbjxkxwks\"\ + },{\"properties\":{\"displayName\":\"test_policykgwumxuqb\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\"\ + ,\"createdOn\":\"2020-07-13T06:17:21.0669019Z\",\"updatedBy\":null,\"updatedOn\"\ + :null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\"\ + :{\"displayName\":\"Allowed locations\",\"description\":\"The list of locations\ + \ that can be specified when deploying resources\"}}},\"policyRule\":{\"if\"\ + :{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhkjjldsou\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyhkjjldsou\"\ + },{\"properties\":{\"displayName\":\"test_policyzbi2xb6y7\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyismcbfzwf\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyismcbfzwf\"\ + },{\"properties\":{\"displayName\":\"test_policyyulsilxiw\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyjp2hqpyxg\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyjp2hqpyxg\"\ + },{\"properties\":{\"displayName\":\"test_policy3b7x23vtu\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2019-12-09T02:09:59.3205891Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\"\ + :\"The list of locations that can be specified when deploying resources\"\ + ,\"strongType\":\"location\",\"displayName\":\"Allowed locations\"}}},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyk7i5cvli7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyk7i5cvli7\"\ + },{\"properties\":{\"displayName\":\"test_policykr5rg52qb\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"category\":\"test\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\"\ + ,\"createdOn\":\"2019-02-20T07:02:32.8430887Z\",\"updatedBy\":null,\"updatedOn\"\ + :null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\"\ + :{\"description\":\"The list of locations that can be specified when deploying\ + \ resources\",\"strongType\":\"location\",\"displayName\":\"Allowed locations\"\ + }}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyko7fuaryl\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyko7fuaryl\"\ + },{\"properties\":{\"displayName\":\"test_policyjkxzydsm5\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2020-07-23T05:09:53.6571753Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\"\ + ,\"updatedOn\":\"2020-07-23T05:09:54.3894578Z\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyky6dtxljg\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyky6dtxljg\"\ + },{\"properties\":{\"displayName\":\"test_policy4atse2a5f\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\"\ + ,\"createdOn\":\"2020-07-18T01:16:56.8049894Z\",\"updatedBy\":null,\"updatedOn\"\ + :null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\"\ + :{\"displayName\":\"Allowed locations\",\"description\":\"The list of locations\ + \ that can be specified when deploying resources\"}}},\"policyRule\":{\"if\"\ + :{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyl23wlrlgw\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyl23wlrlgw\"\ + },{\"properties\":{\"displayName\":\"test_policym7v6bzkep\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyl5e3igsku\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyl5e3igsku\"\ + },{\"properties\":{\"displayName\":\"test_policyr5ivz4uoy\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policylw4dif6k4\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policylw4dif6k4\"\ + },{\"properties\":{\"displayName\":\"test_policytbp7jr4ui\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2019-12-09T02:32:31.9256236Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\"\ + :\"The list of locations that can be specified when deploying resources\"\ + ,\"strongType\":\"location\",\"displayName\":\"Allowed locations\"}}},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyma7xpif5f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyma7xpif5f\"\ + },{\"properties\":{\"displayName\":\"test_policyrtqlhqwqd\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2020-07-23T10:17:54.6200885Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\"\ + ,\"updatedOn\":\"2020-07-23T10:17:55.4591371Z\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policymh2rzn2jb\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policymh2rzn2jb\"\ + },{\"properties\":{\"displayName\":\"test_policyltbuxqxmj\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2019-12-09T02:01:18.5679417Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\"\ + :\"The list of locations that can be specified when deploying resources\"\ + ,\"strongType\":\"location\",\"displayName\":\"Allowed locations\"}}},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policymhawrsfdj\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policymhawrsfdj\"\ + },{\"properties\":{\"displayName\":\"test_policytl4ywcz3z\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2020-07-23T11:59:59.5189007Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\"\ + ,\"updatedOn\":\"2020-07-23T12:00:00.440502Z\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policympgeea7oc\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policympgeea7oc\"\ + },{\"properties\":{\"displayName\":\"test_policyjgu2d4mwc\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2020-02-25T11:29:24.0188349Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\"\ + :\"Allowed locations\",\"description\":\"The list of locations that can be\ + \ specified when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policymroawkgak\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policymroawkgak\"\ + },{\"properties\":{\"displayName\":\"test_policyp2yhkolhg\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policymxx4vzibo\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policymxx4vzibo\"\ + },{\"properties\":{\"displayName\":\"test_policy7o4q6lhb3\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\"\ + :\"2020-08-24T14:26:08.158904Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\"\ + :\"Allowed locations\",\"description\":\"The list of locations that can be\ + \ specified when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyn6dnypap3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyn6dnypap3\"\ + },{\"properties\":{\"displayName\":\"test_policyt252aa3in\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyose3kehj3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyose3kehj3\"\ + },{\"properties\":{\"displayName\":\"test_policybdhp4fxco\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2020-07-23T10:48:46.5988423Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\"\ + ,\"updatedOn\":\"2020-07-23T10:48:47.7233071Z\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyp2ohl2hf3\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyp2ohl2hf3\"\ + },{\"properties\":{\"displayName\":\"test_policy7q6xzfojd\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2020-02-26T02:48:58.771927Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\"\ + :\"Allowed locations\",\"description\":\"The list of locations that can be\ + \ specified when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policypm6ined27\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policypm6ined27\"\ + },{\"properties\":{\"displayName\":\"test_policyg5g7wrd63\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyqcexugiyb\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyqcexugiyb\"\ + },{\"properties\":{\"displayName\":\"test_policyrhqz2lkr7\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2019-12-09T08:06:49.1738752Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\"\ + :\"The list of locations that can be specified when deploying resources\"\ + ,\"strongType\":\"location\",\"displayName\":\"Allowed locations\"}}},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyqsscwoy4k\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyqsscwoy4k\"\ + },{\"properties\":{\"displayName\":\"test_policyfn5bvohrv\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"category\":\"test\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\"\ + ,\"createdOn\":\"2019-02-15T07:02:13.594025Z\",\"updatedBy\":null,\"updatedOn\"\ + :null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\"\ + :{\"description\":\"The list of locations that can be specified when deploying\ + \ resources\",\"strongType\":\"location\",\"displayName\":\"Allowed locations\"\ + }}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyr45j67nyp\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyr45j67nyp\"\ + },{\"properties\":{\"displayName\":\"test_policygciiyb5ye\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2019-12-09T02:07:22.3409618Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\"\ + :\"The list of locations that can be specified when deploying resources\"\ + ,\"strongType\":\"location\",\"displayName\":\"Allowed locations\"}}},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyr7fhjcb3r\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyr7fhjcb3r\"\ + },{\"properties\":{\"displayName\":\"test_policyqq6qt33lj\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2020-07-23T12:20:54.595452Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\"\ + ,\"updatedOn\":\"2020-07-23T12:20:55.7954891Z\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyr7kvszw3l\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyr7kvszw3l\"\ + },{\"properties\":{\"displayName\":\"test_policy6x3ypmkcv\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"createdBy\":\"f0f844e0-d2fe-4aa3-8e2c-2e429618f305\",\"createdOn\"\ + :\"2020-04-26T02:34:00.9817352Z\",\"updatedBy\":\"f0f844e0-d2fe-4aa3-8e2c-2e429618f305\"\ + ,\"updatedOn\":\"2020-04-26T02:34:01.934025Z\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrdnkhjxie\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrdnkhjxie\"\ + },{\"properties\":{\"displayName\":\"test_policy2k3hcktfx\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2019-12-09T08:18:07.741136Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\"\ + :\"The list of locations that can be specified when deploying resources\"\ + ,\"strongType\":\"location\",\"displayName\":\"Allowed locations\"}}},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrnepsjpsa\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrnepsjpsa\"\ + },{\"properties\":{\"displayName\":\"test_policy5u5ook2zf\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"\ + description\":\"The list of locations that can be specified when deploying\ + \ resources\",\"strongType\":\"location\",\"displayName\":\"Allowed locations\"\ + }}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrs5zxfokx\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrs5zxfokx\"\ + },{\"properties\":{\"displayName\":\"test_policyepxuvmnrs\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrtseayuym\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrtseayuym\"\ + },{\"properties\":{\"displayName\":\"test_policyeglfwi2os\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrzih7n7ws\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrzih7n7ws\"\ + },{\"properties\":{\"displayName\":\"test_policyrjb7ausww\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"category\":\"test\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\"\ + ,\"createdOn\":\"2019-02-26T07:06:57.89264Z\",\"updatedBy\":null,\"updatedOn\"\ + :null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\"\ + :{\"description\":\"The list of locations that can be specified when deploying\ + \ resources\",\"strongType\":\"location\",\"displayName\":\"Allowed locations\"\ + }}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policysh2ld2fbf\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policysh2ld2fbf\"\ + },{\"properties\":{\"displayName\":\"test_policyeop2lxcb7\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytaxuus2zo\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policytaxuus2zo\"\ + },{\"properties\":{\"displayName\":\"test_policyx5a3znshs\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2019-12-26T09:10:23.421479Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\"\ + :\"Allowed locations\",\"description\":\"The list of locations that can be\ + \ specified when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytl5ocnpv2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policytl5ocnpv2\"\ + },{\"properties\":{\"displayName\":\"test_policymichd2ukj\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytrkoh7vio\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policytrkoh7vio\"\ + },{\"properties\":{\"displayName\":\"test_policylx6vwejtr\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\"\ + ,\"createdOn\":\"2020-07-21T12:40:37.6778137Z\",\"updatedBy\":null,\"updatedOn\"\ + :null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\"\ + :{\"displayName\":\"Allowed locations\",\"description\":\"The list of locations\ + \ that can be specified when deploying resources\"}}},\"policyRule\":{\"if\"\ + :{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytuqroqvkg\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policytuqroqvkg\"\ + },{\"properties\":{\"displayName\":\"test_policymhqqjyizg\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyunv6j3gfp\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyunv6j3gfp\"\ + },{\"properties\":{\"displayName\":\"test_policykwxjihjgn\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2020-10-27T10:06:34.9091521Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\"\ + :\"Allowed locations\",\"description\":\"The list of locations that can be\ + \ specified when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyuwuomvfjq\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyuwuomvfjq\"\ + },{\"properties\":{\"displayName\":\"test_policyf2qzg3ba4\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"\ + description\":\"The list of locations that can be specified when deploying\ + \ resources\",\"displayName\":\"Allowed locations\",\"strongType\":\"location\"\ + }}},\"policyRule\":{\"if\":{\"not\":{\"in\":\"[parameters('allowedLocations')]\"\ + ,\"field\":\"location\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyv3qavzpbx\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyv3qavzpbx\"\ + },{\"properties\":{\"displayName\":\"test_policy5koxubsg5\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyv53qgvql6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyv53qgvql6\"\ + },{\"properties\":{\"displayName\":\"test_policycaxoe7agu\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2019-12-09T02:14:31.5587491Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\"\ + :\"The list of locations that can be specified when deploying resources\"\ + ,\"strongType\":\"location\",\"displayName\":\"Allowed locations\"}}},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyv6bc2zdey\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyv6bc2zdey\"\ + },{\"properties\":{\"displayName\":\"test_policy65zhk56oe\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2019-12-06T09:12:22.7078165Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\"\ + :\"The list of locations that can be specified when deploying resources\"\ + ,\"strongType\":\"location\",\"displayName\":\"Allowed locations\"}}},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyvmph7iatk\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyvmph7iatk\"\ + },{\"properties\":{\"displayName\":\"test_policy7t2i6ysv7\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyvpb2ircbl\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyvpb2ircbl\"\ + },{\"properties\":{\"displayName\":\"test_policyc2n4hwvff\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2019-12-06T10:21:23.3432499Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\"\ + :\"The list of locations that can be specified when deploying resources\"\ + ,\"strongType\":\"location\",\"displayName\":\"Allowed locations\"}}},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policywsslcs6dz\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policywsslcs6dz\"\ + },{\"properties\":{\"displayName\":\"test_policyn67yt2fld_new\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\"\ + ,\"createdOn\":\"2019-06-11T06:51:10.2516Z\",\"updatedBy\":\"93a01e49-673a-4e15-8230-51214a737962\"\ + ,\"updatedOn\":\"2019-06-11T06:51:13.9885473Z\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed locations 2\"\ + }}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyx5j3fsjzb\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyx5j3fsjzb\"\ + },{\"properties\":{\"displayName\":\"test_policyltxpwmbyi\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2020-02-26T02:44:15.0960062Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\"\ + :\"Allowed locations\",\"description\":\"The list of locations that can be\ + \ specified when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyy3ipsjspu\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyy3ipsjspu\"\ + },{\"properties\":{\"displayName\":\"test_policy574uc23jc\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2019-12-09T08:14:59.7674009Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\"\ + :\"The list of locations that can be specified when deploying resources\"\ + ,\"strongType\":\"location\",\"displayName\":\"Allowed locations\"}}},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyy7mglfglo\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyy7mglfglo\"\ + },{\"properties\":{\"displayName\":\"test_policyao7uqj3gn\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2020-02-26T01:39:03.0784792Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\"\ + :\"Allowed locations\",\"description\":\"The list of locations that can be\ + \ specified when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyyc6uhp7bs\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyyc6uhp7bs\"\ + },{\"properties\":{\"displayName\":\"test_policyycy3trxsx\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2020-02-26T03:03:25.8356774Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\"\ + :\"Allowed locations\",\"description\":\"The list of locations that can be\ + \ specified when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyym2rnjbh7\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyym2rnjbh7\"\ + },{\"properties\":{\"displayName\":\"test_policyif4bjggk7\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyyuuoin4oc\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyyuuoin4oc\"\ + },{\"properties\":{\"displayName\":\"test_policyzfxjndvdt\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2020-07-23T12:30:20.8339545Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\"\ + ,\"updatedOn\":\"2020-07-23T12:30:21.6951075Z\"},\"parameters\":{\"allowedLocations\"\ + :{\"type\":\"Array\",\"metadata\":{\"description\":\"The list of locations\ + \ that can be specified when deploying resources\",\"strongType\":\"location\"\ + ,\"displayName\":\"Allowed locations\"}}},\"policyRule\":{\"if\":{\"not\"\ + :{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyyymu25cvk\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyyymu25cvk\"\ + },{\"properties\":{\"displayName\":\"test_policyvy7eweevk\",\"policyType\"\ + :\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\"\ + ,\"metadata\":{\"category\":\"test\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\"\ + ,\"createdOn\":\"2019-02-19T07:01:55.8648869Z\",\"updatedBy\":null,\"updatedOn\"\ + :null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\"\ + :{\"description\":\"The list of locations that can be specified when deploying\ + \ resources\",\"strongType\":\"location\",\"displayName\":\"Allowed locations\"\ + }}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"\ + }},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyzyhzyddss\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyzyhzyddss\"\ + },{\"properties\":{\"displayName\":\"deny_load_balancer_rules_and_inbound_nat_rules\"\ + ,\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"\ + b5ed59e8-f00d-4396-af62-8297e36d8b52\",\"createdOn\":\"2020-04-16T10:26:15.3658751Z\"\ + ,\"updatedBy\":\"b5ed59e8-f00d-4396-af62-8297e36d8b52\",\"updatedOn\":\"2020-04-16T10:30:05.8140661Z\"\ + },\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\"\ + ,\"equals\":\"Microsoft.Network/loadBalancers\"},{\"anyOf\":[{\"value\":\"\ + [greater(length(field('Microsoft.Network/loadBalancers/inboundNatRules')),\ + \ 0)]\",\"equals\":\"true\"},{\"value\":\"[greater(length(field('Microsoft.Network/loadBalancers/loadBalancingRules')),\ + \ 0)]\",\"equals\":\"true\"}]}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"\ + /subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bfedda4d-ba65-4ba3-9df1-9eb8a13a0f09\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bfedda4d-ba65-4ba3-9df1-9eb8a13a0f09\"\ + },{\"properties\":{\"displayName\":\"deny-nic-no-nsg\",\"policyType\":\"Custom\"\ + ,\"mode\":\"All\",\"metadata\":{\"createdBy\":\"0d504196-1423-4569-9a6e-15149656f0ee\"\ + ,\"createdOn\":\"2020-03-02T10:36:38.9080299Z\",\"updatedBy\":\"0a592c45-613e-4f1b-9023-7c4414fd53bf\"\ + ,\"updatedOn\":\"2020-05-08T06:00:01.7905233Z\"},\"parameters\":{},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkInterfaces\"\ + },{\"field\":\"Microsoft.Network/networkInterfaces/networkSecurityGroup\"\ + ,\"exists\":false},{\"count\":{\"field\":\"Microsoft.Network/networkInterfaces/ipConfigurations[*]\"\ + ,\"where\":{\"field\":\"Microsoft.Network/networkInterfaces/ipConfigurations[*].publicIpAddress\"\ + ,\"exists\":true}},\"greater\":0}]},\"then\":{\"effect\":\"deny\"}}},\"id\"\ + :\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nic-no-nsg\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deny-nic-no-nsg\"\ + },{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\"\ + :{\"createdBy\":\"0d504196-1423-4569-9a6e-15149656f0ee\",\"createdOn\":\"\ + 2020-03-02T10:36:17.0826822Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups\"\ + },{\"count\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*]\"\ + ,\"where\":{\"allOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*].access\"\ + ,\"equals\":\"Allow\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*].direction\"\ + ,\"equals\":\"Inbound\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*].sourceAddressPrefix\"\ + ,\"in\":[\"*\",\"Internet\"]},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*].sourceAddressPrefixes[*]\"\ + ,\"notIn\":[\"*\",\"Internet\"]}}]}]}},\"greaterOrEquals\":1}]},\"then\":{\"\ + effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-internet-inbound\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deny-nsg-internet-inbound\"\ + },{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\"\ + :{\"createdBy\":\"0d504196-1423-4569-9a6e-15149656f0ee\",\"createdOn\":\"\ + 2020-03-02T10:36:31.0309112Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\"\ + :{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups/securityRules\"\ + },{\"allOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/access\"\ + ,\"equals\":\"Allow\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/direction\"\ + ,\"equals\":\"Inbound\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\"\ + ,\"in\":[\"*\",\"Internet\"]},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\"\ + ,\"notIn\":[\"*\",\"Internet\"]}}]}]}]},\"then\":{\"effect\":\"deny\"}}},\"\ + id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-rule-internet-inbound\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deny-nsg-rule-internet-inbound\"\ + },{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\"\ + :\"Deny cool access tiering for storage\",\"metadata\":{\"createdBy\":\"89ed5be8-ff97-41b5-ab11-055e1e3cc34b\"\ + ,\"createdOn\":\"2019-03-09T04:29:39.8836867Z\",\"updatedBy\":null,\"updatedOn\"\ + :null},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"\ + Microsoft.Storage/storageAccounts\"},{\"field\":\"kind\",\"equals\":\"BlobStorage\"\ + },{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/accessTier\",\"\ + equals\":\"cool\"}}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/denyCoolTiering\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"denyCoolTiering\"\ + },{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\"\ + :{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"\ + 2019-11-08T05:58:35.9462109Z\",\"updatedBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\"\ + ,\"updatedOn\":\"2019-11-08T05:58:36.2899714Z\"},\"policyRule\":{\"if\":{\"\ + not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pd1d6a287496763bd\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pd1d6a287496763bd\"\ + },{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\"\ + :{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"\ + 2019-11-08T04:25:20.3616782Z\",\"updatedBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\"\ + ,\"updatedOn\":\"2019-11-08T04:25:20.5689022Z\"},\"policyRule\":{\"if\":{\"\ + not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pd1ff115351d7d620\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pd1ff115351d7d620\"\ + },{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\"\ + :{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"\ + 2019-11-08T05:58:36.5087248Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"\ + ]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pd226f944793a0edd\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pd226f944793a0edd\"\ + },{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\"\ + :{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"\ + 2019-11-08T04:25:20.9593945Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"\ + ]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pd248103959e1b89a\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pd248103959e1b89a\"\ + },{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\"\ + :{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"\ + 2019-11-08T05:53:56.4821495Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"\ + ]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pdn4b00229168b529\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pdn4b00229168b529\"\ + },{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\"\ + :{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"\ + 2019-11-08T05:12:02.5562119Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"\ + ]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pdn7d459478c62e5f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pdn7d459478c62e5f\"\ + },{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\"\ + :{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"\ + 2019-11-08T05:16:25.1651266Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"\ + ]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pdndd5095457eae7f\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pdndd5095457eae7f\"\ + },{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\"\ + :{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"\ + 2019-11-08T05:21:56.3757672Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"\ + ]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pdnfc173081e3e1c6\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pdnfc173081e3e1c6\"\ + },{\"properties\":{\"displayName\":\"pol-defdis-2169\",\"policyType\":\"Custom\"\ + ,\"mode\":\"All\",\"description\":\"policy definition description\",\"metadata\"\ + :{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"\ + 2019-11-07T10:43:22.5629692Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"\ + ]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-2601\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-2601\"\ + },{\"properties\":{\"displayName\":\"pol-dis-5258\",\"policyType\":\"Custom\"\ + ,\"mode\":\"Indexed\",\"description\":\"policy definition description\",\"\ + metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\"\ + :\"2019-11-07T09:57:59.3671014Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\"\ + ,\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-3066\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-3066\"\ + },{\"properties\":{\"displayName\":\"pol-defdis-1797\",\"policyType\":\"Custom\"\ + ,\"mode\":\"All\",\"description\":\"policy definition description\",\"metadata\"\ + :{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"\ + 2019-11-08T05:59:42.1212637Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"\ + ]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-3604\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-3604\"\ + },{\"properties\":{\"displayName\":\"pol-defdis-8885\",\"policyType\":\"Custom\"\ + ,\"mode\":\"All\",\"description\":\"policy definition description\",\"metadata\"\ + :{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"\ + 2019-11-07T10:51:26.6479837Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"\ + ]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-4703\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-4703\"\ + },{\"properties\":{\"displayName\":\"pol-defdis-5984\",\"policyType\":\"Custom\"\ + ,\"mode\":\"All\",\"description\":\"policy definition description\",\"metadata\"\ + :{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"\ + 2019-11-07T10:44:44.5908405Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"\ + ]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-4803\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-4803\"\ + },{\"properties\":{\"displayName\":\"pol-dis-2866\",\"policyType\":\"Custom\"\ + ,\"mode\":\"Indexed\",\"description\":\"policy definition description\",\"\ + metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\"\ + :\"2019-11-07T09:59:29.3473453Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\"\ + ,\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-7444\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-7444\"\ + },{\"properties\":{\"displayName\":\"pol-defdis-3052\",\"policyType\":\"Custom\"\ + ,\"mode\":\"All\",\"description\":\"policy definition description\",\"metadata\"\ + :{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"\ + 2019-11-07T10:50:49.8743418Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"\ + ]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-834\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-834\"\ + },{\"properties\":{\"displayName\":\"pol-dis-6545\",\"policyType\":\"Custom\"\ + ,\"mode\":\"Indexed\",\"description\":\"policy definition description\",\"\ + metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\"\ + :\"2019-11-07T10:01:11.8439197Z\",\"updatedBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\"\ + ,\"updatedOn\":\"2019-11-07T10:01:13.5984375Z\"},\"policyRule\":{\"if\":{\"\ + not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-900\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-900\"\ + },{\"properties\":{\"displayName\":\"pol-defdis-412\",\"policyType\":\"Custom\"\ + ,\"mode\":\"All\",\"description\":\"policy definition description\",\"metadata\"\ + :{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"\ + 2019-11-07T10:39:00.9481726Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\"\ + :{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"\ + ]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-9447\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-9447\"\ + },{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\"\ + :{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"\ + 2020-10-27T09:43:19.4425679Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\"\ + :{},\"policyRule\":{\"if\":{\"field\":\"location\",\"equals\":\"northeurope\"\ + },\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policy2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policy2\"\ + },{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\"\ + :{\"createdBy\":\"a9aa6a31-a53e-4776-afab-8ba3ea5dd918\",\"createdOn\":\"\ + 2020-05-26T10:35:24.5235655Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\"\ + ,\"updatedOn\":\"2020-10-27T09:43:03.4594535Z\"},\"policyRule\":{\"if\":{\"\ + field\":\"location\",\"equals\":\"northeurope\"},\"then\":{\"effect\":\"deny\"\ + }}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policy-for-what-if-test\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policy-for-what-if-test\"\ + },{\"properties\":{\"displayName\":\"mypolicy017769\",\"policyType\":\"Custom\"\ + ,\"mode\":\"Indexed\",\"description\":\"This is my policy\",\"metadata\":{\"\ + createdBy\":\"d36e0017-aac8-4dd3-8ccf-0ab8a7049c35\",\"createdOn\":\"2020-04-28T09:30:12.0928123Z\"\ + ,\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"\ + field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"\ + effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policye4e52460\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policye4e52460\"\ + },{\"properties\":{\"displayName\":\"mypolicy934651\",\"policyType\":\"Custom\"\ + ,\"mode\":\"Indexed\",\"description\":\"This is my policy\",\"metadata\":{\"\ + createdBy\":\"d36e0017-aac8-4dd3-8ccf-0ab8a7049c35\",\"createdOn\":\"2020-04-28T09:41:17.395858Z\"\ + ,\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"\ + field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"\ + effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policyf7441099\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policyf7441099\"\ + },{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\"\ + :\"Don't create a VM anywhere\",\"metadata\":{\"createdBy\":\"78977f10-9b8e-42f0-a820-b66e67fe9f1a\"\ + ,\"createdOn\":\"2020-10-29T05:38:28.2771569Z\",\"updatedBy\":null,\"updatedOn\"\ + :null},\"policyRule\":{\"if\":{\"allOf\":[{\"source\":\"action\",\"equals\"\ + :\"Microsoft.Compute/virtualMachines/write\"},{\"field\":\"location\",\"in\"\ + :[\"eastus\",\"eastus2\",\"centralus\"]}]},\"then\":{\"effect\":\"deny\"}}},\"\ + id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pypolicyea4a13f0\"\ + },{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\"\ + :{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"\ + 2020-02-12T13:23:03.0790705Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\"\ + ,\"updatedOn\":\"2020-02-12T13:23:32.6581852Z\"},\"policyRule\":{\"if\":{\"\ + field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts/write\"},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/readOnlyStorage\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"readOnlyStorage\"\ + },{\"properties\":{\"displayName\":\"Sumit- NSG X on every subnet\",\"policyType\"\ + :\"Custom\",\"mode\":\"All\",\"description\":\"This policy enforces a specific\ + \ NSG on every subnet\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\"\ + ,\"createdOn\":\"2020-01-02T03:24:40.1850198Z\",\"updatedBy\":null,\"updatedOn\"\ + :null},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts/write\"\ + },\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/sumit-enforce-nsg-on-subnett2\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"sumit-enforce-nsg-on-subnett2\"\ + },{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\"\ + :{\"'version\":\"1.0.0\",\"category\":\"location'\",\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\"\ + ,\"createdOn\":\"2020-08-07T07:23:08.643979Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\"\ + ,\"updatedOn\":\"2020-08-07T07:23:54.2756856Z\"},\"policyRule\":{\"if\":{\"\ + field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts/write\"},\"\ + then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/zhoxing-test\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"zhoxing-test\"\ + },{\"properties\":{\"displayName\":\"test_data_policyhdgk\",\"policyType\"\ + :\"Custom\",\"mode\":\"Microsoft.DataCatalog.Data\",\"description\":\"desc_for_test_data_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2020-02-25T11:29:26.403926Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + policyRule\":{\"if\":{\"field\":\"Microsoft.DataCatalog.Data/catalog/entity/type\"\ + ,\"equals\":\"SomeEntityType\"},\"then\":{\"effect\":\"ModifyClassifications\"\ + ,\"details\":{\"classificationsToAdd\":[\"foo\"],\"classificationsToRemove\"\ + :[\"bar\"]}}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-data-policy6jjr\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-data-policy6jjr\"\ + },{\"properties\":{\"displayName\":\"test_data_policypcmv\",\"policyType\"\ + :\"Custom\",\"mode\":\"Microsoft.DataCatalog.Data\",\"description\":\"desc_for_test_data_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2020-02-26T01:39:05.696658Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + policyRule\":{\"if\":{\"field\":\"Microsoft.DataCatalog.Data/catalog/entity/type\"\ + ,\"equals\":\"SomeEntityType\"},\"then\":{\"effect\":\"ModifyClassifications\"\ + ,\"details\":{\"classificationsToAdd\":[\"foo\"],\"classificationsToRemove\"\ + :[\"bar\"]}}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-data-policyc6ve\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-data-policyc6ve\"\ + },{\"properties\":{\"displayName\":\"test_data_policygnmb\",\"policyType\"\ + :\"Custom\",\"mode\":\"Microsoft.DataCatalog.Data\",\"description\":\"desc_for_test_data_policy_123\"\ + ,\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\"\ + :\"2020-10-27T10:06:35.782961Z\",\"updatedBy\":null,\"updatedOn\":null},\"\ + policyRule\":{\"if\":{\"field\":\"Microsoft.DataCatalog.Data/catalog/entity/type\"\ + ,\"equals\":\"SomeEntityType\"},\"then\":{\"effect\":\"ModifyClassifications\"\ + ,\"details\":{\"classificationsToAdd\":[\"foo\"],\"classificationsToRemove\"\ + :[\"bar\"]}}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-data-policyujjf\"\ + ,\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-data-policyujjf\"\ + }]}" headers: cache-control: - no-cache content-length: - - '2642503' + - '2497486' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:58:00 GMT + - Thu, 29 Oct 2020 05:38:29 GMT expires: - '-1' pragma: @@ -8562,7 +31672,7 @@ interactions: code: 200 message: OK - request: - body: 'b''b\''{"properties": {"policyDefinitionId": "/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0"}}\''''' + body: 'b''{"properties": {"policyDefinitionId": "/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0"}}''' headers: Accept: - application/json @@ -8575,24 +31685,24 @@ interactions: Content-Type: - application/json; charset=utf-8 User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: PUT uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0/providers/Microsoft.Authorization/policyAssignments/pypolicyassignmentea4a13f0?api-version=2019-09-01 response: body: - string: '{"sku":{"name":"A0","tier":"Free"},"properties":{"policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0","metadata":{"createdBy":"123743cc-88ef-49ee-920e-13958fe5697d","createdOn":"2020-07-01T00:58:14.945943Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0/providers/Microsoft.Authorization/policyAssignments/pypolicyassignmentea4a13f0","type":"Microsoft.Authorization/policyAssignments","name":"pypolicyassignmentea4a13f0"}' + string: '{"sku":{"name":"A0","tier":"Free"},"properties":{"policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0","metadata":{"createdBy":"78977f10-9b8e-42f0-a820-b66e67fe9f1a","createdOn":"2020-10-29T05:38:30.0504412Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0/providers/Microsoft.Authorization/policyAssignments/pypolicyassignmentea4a13f0","type":"Microsoft.Authorization/policyAssignments","name":"pypolicyassignmentea4a13f0"}' headers: cache-control: - no-cache content-length: - - '793' + - '794' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:58:14 GMT + - Thu, 29 Oct 2020 05:38:29 GMT expires: - '-1' pragma: @@ -8616,24 +31726,24 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0/providers/Microsoft.Authorization/policyAssignments/pypolicyassignmentea4a13f0?api-version=2019-09-01 response: body: - string: '{"sku":{"name":"A0","tier":"Free"},"properties":{"policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0","metadata":{"createdBy":"123743cc-88ef-49ee-920e-13958fe5697d","createdOn":"2020-07-01T00:58:14.945943Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0/providers/Microsoft.Authorization/policyAssignments/pypolicyassignmentea4a13f0","type":"Microsoft.Authorization/policyAssignments","name":"pypolicyassignmentea4a13f0"}' + string: '{"sku":{"name":"A0","tier":"Free"},"properties":{"policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0","metadata":{"createdBy":"78977f10-9b8e-42f0-a820-b66e67fe9f1a","createdOn":"2020-10-29T05:38:30.0504412Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0/providers/Microsoft.Authorization/policyAssignments/pypolicyassignmentea4a13f0","type":"Microsoft.Authorization/policyAssignments","name":"pypolicyassignmentea4a13f0"}' headers: cache-control: - no-cache content-length: - - '793' + - '794' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:58:14 GMT + - Thu, 29 Oct 2020 05:38:30 GMT expires: - '-1' pragma: @@ -8659,113 +31769,65 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments?api-version=2019-09-01 response: body: - string: '{"value":[{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"ASC - Default (subscription: 00000000-0000-0000-0000-000000000000)","policyDefinitionId":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{"diagnosticsLogsInServiceFabricMonitoringEffect":{"value":"AuditIfNotExists"},"systemUpdatesMonitoringEffect":{"value":"AuditIfNotExists"},"systemConfigurationsMonitoringEffect":{"value":"AuditIfNotExists"},"endpointProtectionMonitoringEffect":{"value":"AuditIfNotExists"},"diskEncryptionMonitoringEffect":{"value":"AuditIfNotExists"},"networkSecurityGroupsMonitoringEffect":{"value":"AuditIfNotExists"},"webApplicationFirewallMonitoringEffect":{"value":"AuditIfNotExists"},"sqlAuditingMonitoringEffect":{"value":"AuditIfNotExists"},"sqlEncryptionMonitoringEffect":{"value":"AuditIfNotExists"},"nextGenerationFirewallMonitoringEffect":{"value":"AuditIfNotExists"},"vulnerabilityAssesmentMonitoringEffect":{"value":"AuditIfNotExists"},"storageEncryptionMonitoringEffect":{"value":"Audit"},"jitNetworkAccessMonitoringEffect":{"value":"AuditIfNotExists"},"adaptiveApplicationControlsMonitoringEffect":{"value":"AuditIfNotExists"},"identityDesignateLessThanOwnersMonitoringEffect":{"value":"AuditIfNotExists"},"identityDesignateMoreThanOneOwnerMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForWritePermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForReadPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveDeprecatedAccountMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithWritePermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithReadPermissionsMonitoringEffect":{"value":"AuditIfNotExists"}},"description":"This + string: '{"value":[{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"8032a9ae-37af-4156-b5bf-b065ee7ef558","createdOn":"2020-10-23T06:56:30.0849505Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/0186f7371ad4827b01eb736b8b527eea46246480fcd8f5db3755a5437fd20519","type":"Microsoft.Authorization/policyAssignments","name":"0186f7371ad4827b01eb736b8b527eea46246480fcd8f5db3755a5437fd20519"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"2c4ad291-088a-4833-9d12-65562168e61f","createdOn":"2020-03-11T15:04:17.0333963Z","updatedBy":"1b585ce5-cb70-4610-a52c-8434e58389be","updatedOn":"2020-10-23T05:59:48.2744773Z"},"enforcementMode":"DoNotEnforce"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/0aa1605f5affd03d6155fcdc5fa7781afe03220801d799bb8cbb9e1dc6ec9c07","type":"Microsoft.Authorization/policyAssignments","name":"0aa1605f5affd03d6155fcdc5fa7781afe03220801d799bb8cbb9e1dc6ec9c07"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"8032a9ae-37af-4156-b5bf-b065ee7ef558","createdOn":"2020-10-23T06:56:34.1054769Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/11bbafbb3fb6da38aca6f1f5dc8a8e3f3f8cf57e7aa457f8b7604ba02985fd2b","type":"Microsoft.Authorization/policyAssignments","name":"11bbafbb3fb6da38aca6f1f5dc8a8e3f3f8cf57e7aa457f8b7604ba02985fd2b"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"f7fc6747-4a76-40d0-bb82-7ea0b8bb1da7","createdOn":"2020-10-23T08:47:43.3824654Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/16a2338575dff5a278080bb4f25dc2513adc998d67193d769b0d2e8ca3a97aa4","type":"Microsoft.Authorization/policyAssignments","name":"16a2338575dff5a278080bb4f25dc2513adc998d67193d769b0d2e8ca3a97aa4"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"f7fc6747-4a76-40d0-bb82-7ea0b8bb1da7","createdOn":"2020-10-23T08:47:41.0080207Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/1da5cba8ba7ea30d23d012dda633b3ba9bf63d86d393362e90750d0ce1f4c647","type":"Microsoft.Authorization/policyAssignments","name":"1da5cba8ba7ea30d23d012dda633b3ba9bf63d86d393362e90750d0ce1f4c647"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"73ceaec2-29b6-4d6d-ba64-40c27b311914","createdOn":"2020-10-23T13:09:39.7273136Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/334b975d5d128fcb4dda85974474d16a44c28ea111f6ffaa3c29539411daadb4","type":"Microsoft.Authorization/policyAssignments","name":"334b975d5d128fcb4dda85974474d16a44c28ea111f6ffaa3c29539411daadb4"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"2894667e-8bb8-4ca4-9808-b15b62955393","createdOn":"2020-10-23T08:38:45.3497758Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/3475bc79749c2a265e2937ae397f6e61dfde662f090b3965b0639fa1386de27b","type":"Microsoft.Authorization/policyAssignments","name":"3475bc79749c2a265e2937ae397f6e61dfde662f090b3965b0639fa1386de27b"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"9a139daf-05d7-45d5-ae95-7c9a6bbaaf4f","createdOn":"2020-10-23T06:10:15.7000252Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/3540263c5c20ac261e16d49e46ec5f50746e24bdc8d2f69ac420abf32baf5282","type":"Microsoft.Authorization/policyAssignments","name":"3540263c5c20ac261e16d49e46ec5f50746e24bdc8d2f69ac420abf32baf5282"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"deny-nsg-rule-internet-inbound","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-rule-internet-inbound","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{},"description":"The + policy block deployment of domain service, I deleted the policy in my resource + group, and found that will apply to the whole subscription. Assign the policy + again.","metadata":{"assignedBy":"jiasli@microsoft.com","parameterScopes":{},"createdBy":"97233d81-8d2d-4e63-8bd2-ae5707805489","createdOn":"2020-03-04T10:07:29.1757898Z","updatedBy":"f0f844e0-d2fe-4aa3-8e2c-2e429618f305","updatedOn":"2020-09-11T07:45:35.593868Z"},"enforcementMode":"DoNotEnforce"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/36e07b214d59455886a2b76b","type":"Microsoft.Authorization/policyAssignments","name":"36e07b214d59455886a2b76b"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"deny-nsg-internet-inbound","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-internet-inbound","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{},"description":"The + policy block deployment of domain service, I deleted it from my resource group + and found that it applied to the the whole subscription.\nRe assign the policy.","metadata":{"assignedBy":"jiasli@microsoft.com","parameterScopes":{},"createdBy":"97233d81-8d2d-4e63-8bd2-ae5707805489","createdOn":"2020-03-04T10:06:22.2583329Z","updatedBy":"f0f844e0-d2fe-4aa3-8e2c-2e429618f305","updatedOn":"2020-09-11T07:45:42.2359171Z"},"enforcementMode":"DoNotEnforce"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/5b5ec388a1b6480391640d13","type":"Microsoft.Authorization/policyAssignments","name":"5b5ec388a1b6480391640d13"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"deny_load_balancer_rules_and_inbound_nat_rules","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bfedda4d-ba65-4ba3-9df1-9eb8a13a0f09","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":["/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_azure-sample-node06b5c4550e194ae5ac_nodejs-sample06b5c4550e194ae5acdev_eastus","/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xichengroup"],"parameters":{},"description":"","metadata":{"assignedBy":"xiaojxu@microsoft.com + ","parameterScopes":{},"createdBy":"b5ed59e8-f00d-4396-af62-8297e36d8b52","createdOn":"2020-04-16T10:28:45.5317863Z","updatedBy":"f0f844e0-d2fe-4aa3-8e2c-2e429618f305","updatedOn":"2020-09-11T07:45:55.4578065Z"},"enforcementMode":"DoNotEnforce"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/5d00856604b74b80927cca6e","type":"Microsoft.Authorization/policyAssignments","name":"5d00856604b74b80927cca6e"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"9bba6f61-f9c5-4d80-9a10-f94d4aeca5d2","createdOn":"2020-10-23T06:34:59.6081673Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/5d58c0cb3d24b2c1ef92721d92d462fd11decf381165f9230d6187188a59247e","type":"Microsoft.Authorization/policyAssignments","name":"5d58c0cb3d24b2c1ef92721d92d462fd11decf381165f9230d6187188a59247e"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"880858bf-1fda-4b21-b130-305839837c36","createdOn":"2020-10-23T09:46:05.7486818Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/66848e2c5b51ee7b62e931a38227fd1b5c573c8b9b93f74e030aa5072f1899f0","type":"Microsoft.Authorization/policyAssignments","name":"66848e2c5b51ee7b62e931a38227fd1b5c573c8b9b93f74e030aa5072f1899f0"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"5e573efd-6557-457b-bf2a-abe5f14a58f8","createdOn":"2020-10-23T06:38:35.9982813Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/72af59925ba14135150ee79a01584df3c4546902215634793152fc899bc577a5","type":"Microsoft.Authorization/policyAssignments","name":"72af59925ba14135150ee79a01584df3c4546902215634793152fc899bc577a5"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"2894667e-8bb8-4ca4-9808-b15b62955393","createdOn":"2020-10-23T08:38:47.0879755Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/748fd77e9b5a8ac6439b6149b0ff3a6aedd50caac9cf34f49feebe5dc291b055","type":"Microsoft.Authorization/policyAssignments","name":"748fd77e9b5a8ac6439b6149b0ff3a6aedd50caac9cf34f49feebe5dc291b055"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"5e573efd-6557-457b-bf2a-abe5f14a58f8","createdOn":"2020-10-23T06:38:39.3822931Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/7e45599229a6204e11e3ddcd45572e2a0e61ce43a4a0674f48d3e991841fa2e2","type":"Microsoft.Authorization/policyAssignments","name":"7e45599229a6204e11e3ddcd45572e2a0e61ce43a4a0674f48d3e991841fa2e2"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"deny-nic-no-nsg","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nic-no-nsg","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":["/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/wls-admin"],"parameters":{},"description":"The + policy block deployment of domain service, I deleted the policy in my resource + group, and found that will apply to the whole subscription. \nAssign the policy + again.","metadata":{"assignedBy":"jiasli@microsoft.com ","parameterScopes":{},"createdBy":"97233d81-8d2d-4e63-8bd2-ae5707805489","createdOn":"2020-03-04T10:04:31.0026973Z","updatedBy":"f0f844e0-d2fe-4aa3-8e2c-2e429618f305","updatedOn":"2020-09-11T07:46:03.3893374Z"},"enforcementMode":"DoNotEnforce"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/8805e4466db647d1beda40e2","type":"Microsoft.Authorization/policyAssignments","name":"8805e4466db647d1beda40e2"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"cad24367-0649-42e5-9556-7f3fc784dae1","createdOn":"2020-10-23T10:25:03.0659513Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/8a093699e75384ba0552d0456ff6c68068f8d86aa021a49af7a598469233268e","type":"Microsoft.Authorization/policyAssignments","name":"8a093699e75384ba0552d0456ff6c68068f8d86aa021a49af7a598469233268e"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"146086a1-579c-41a5-a611-bd9e770f1a5c","createdOn":"2020-03-11T14:03:42.970365Z","updatedBy":"1b585ce5-cb70-4610-a52c-8434e58389be","updatedOn":"2020-10-23T05:59:46.1650545Z"},"enforcementMode":"DoNotEnforce"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/8c6ee8d403e4302ff7775f7abd0ff27b978ba9973618abfe47f611de4d0bad95","type":"Microsoft.Authorization/policyAssignments","name":"8c6ee8d403e4302ff7775f7abd0ff27b978ba9973618abfe47f611de4d0bad95"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"11719005-54ab-41cb-93c2-f687d6bcac49","createdOn":"2020-10-23T12:41:15.1262538Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/8e769f8d968f3e4288c00a40d29b1b0bc26aedfc2eba80ac41df44471e883225","type":"Microsoft.Authorization/policyAssignments","name":"8e769f8d968f3e4288c00a40d29b1b0bc26aedfc2eba80ac41df44471e883225"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"5ebda3aa-0c06-40c3-a219-834a2b848a5b","createdOn":"2020-10-23T13:36:23.2035513Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/945c7c2b8490ac1d5bb263baddccf9bc31b5716ab50aeb11506485d3335ca9ad","type":"Microsoft.Authorization/policyAssignments","name":"945c7c2b8490ac1d5bb263baddccf9bc31b5716ab50aeb11506485d3335ca9ad"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"880858bf-1fda-4b21-b130-305839837c36","createdOn":"2020-10-23T09:46:08.783453Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/a3b545566179ddb73c01e7895b0de6aa99f7be35da3f87b9b2738b3adce7f747","type":"Microsoft.Authorization/policyAssignments","name":"a3b545566179ddb73c01e7895b0de6aa99f7be35da3f87b9b2738b3adce7f747"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"9a139daf-05d7-45d5-ae95-7c9a6bbaaf4f","createdOn":"2020-10-23T06:10:11.7784727Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/ae512fda507ccfc6aca2d0737040afc93e55433dcf5f77bfa1fe5d81f4b00e68","type":"Microsoft.Authorization/policyAssignments","name":"ae512fda507ccfc6aca2d0737040afc93e55433dcf5f77bfa1fe5d81f4b00e68"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"013e5286-7aa5-45d4-96c9-ad93cea42d44","createdOn":"2020-10-23T08:36:04.045105Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/b656670cb63d76c35bc724f0e95ed3b9e3edc62f21617ba4a9b097c75869b2a8","type":"Microsoft.Authorization/policyAssignments","name":"b656670cb63d76c35bc724f0e95ed3b9e3edc62f21617ba4a9b097c75869b2a8"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"73ceaec2-29b6-4d6d-ba64-40c27b311914","createdOn":"2020-10-23T13:09:37.7507592Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/be8d0e1c45271ddaedb22b3a447cbb3134ff25eeb1cf45d33cc9b51f1d07e6d8","type":"Microsoft.Authorization/policyAssignments","name":"be8d0e1c45271ddaedb22b3a447cbb3134ff25eeb1cf45d33cc9b51f1d07e6d8"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"5ebda3aa-0c06-40c3-a219-834a2b848a5b","createdOn":"2020-10-23T13:36:25.2051109Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/d4740b2a748c971b67013843adda2147a5b18fc1f2418a3dc37c5bd68f1252e2","type":"Microsoft.Authorization/policyAssignments","name":"d4740b2a748c971b67013843adda2147a5b18fc1f2418a3dc37c5bd68f1252e2"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"ASC + DataProtection (subscription: 00000000-0000-0000-0000-000000000000)","policyDefinitionId":"/providers/Microsoft.Authorization/policySetDefinitions/9cb3cc7a-b39b-4b82-bc89-e5a5d9ff7b97","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{},"description":"This + policy assignment was automatically created by Azure Security Center","metadata":{"assignedBy":"Security + Center","createdBy":"2f8a138f-0955-44e1-9124-c386dfaecad4","createdOn":"2019-11-25T02:19:57.9086573Z","updatedBy":"f0f844e0-d2fe-4aa3-8e2c-2e429618f305","updatedOn":"2020-09-11T07:46:19.7881156Z","parameterScopes":{}},"enforcementMode":"DoNotEnforce"},"identity":{"principalId":"30601973-dcd6-4c4e-85e8-dc6e057238fa","tenantId":"00000000-0000-0000-0000-000000000000","type":"SystemAssigned"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/DataProtectionSecurityCenter","type":"Microsoft.Authorization/policyAssignments","name":"DataProtectionSecurityCenter","location":"eastus"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"11719005-54ab-41cb-93c2-f687d6bcac49","createdOn":"2020-10-23T12:41:16.4563257Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/dc368c429e27873d4168207359ca5ff7923671ec03a1a915f5259dfeb550fb02","type":"Microsoft.Authorization/policyAssignments","name":"dc368c429e27873d4168207359ca5ff7923671ec03a1a915f5259dfeb550fb02"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"013e5286-7aa5-45d4-96c9-ad93cea42d44","createdOn":"2020-10-23T08:36:01.5512696Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/dd29296d5e0ee0e45aac6eb5b8c1324db32d1ff5c235b538c8878dcc9e00ce73","type":"Microsoft.Authorization/policyAssignments","name":"dd29296d5e0ee0e45aac6eb5b8c1324db32d1ff5c235b538c8878dcc9e00ce73"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"cad24367-0649-42e5-9556-7f3fc784dae1","createdOn":"2020-10-23T10:25:07.3694898Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/f2a5ba41dfaac3f7fcd64ba635a5a23c1aaae817697277b2f4742dd760f39370","type":"Microsoft.Authorization/policyAssignments","name":"f2a5ba41dfaac3f7fcd64ba635a5a23c1aaae817697277b2f4742dd760f39370"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"9bba6f61-f9c5-4d80-9a10-f94d4aeca5d2","createdOn":"2020-10-23T06:35:00.7964993Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/f414be1067a15c7425cdc97daecfa093adf18779efe54c142c2c82abd36a3b85","type":"Microsoft.Authorization/policyAssignments","name":"f414be1067a15c7425cdc97daecfa093adf18779efe54c142c2c82abd36a3b85"},{"sku":{"name":"A0","tier":"Free"},"properties":{"policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policy2","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","metadata":{"createdBy":"9ac534f1-d577-4034-a32d-48de400dacbf","createdOn":"2020-10-27T09:43:19.7706753Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/location-lock","type":"Microsoft.Authorization/policyAssignments","name":"location-lock"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"ASC + Default (subscription: 00000000-0000-0000-0000-000000000000)","policyDefinitionId":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"systemUpdatesMonitoringEffect":{"value":"AuditIfNotExists"},"systemConfigurationsMonitoringEffect":{"value":"AuditIfNotExists"},"endpointProtectionMonitoringEffect":{"value":"AuditIfNotExists"},"diskEncryptionMonitoringEffect":{"value":"AuditIfNotExists"},"networkSecurityGroupsMonitoringEffect":{"value":"AuditIfNotExists"},"webApplicationFirewallMonitoringEffect":{"value":"AuditIfNotExists"},"nextGenerationFirewallMonitoringEffect":{"value":"AuditIfNotExists"},"vulnerabilityAssesmentMonitoringEffect":{"value":"AuditIfNotExists"},"storageEncryptionMonitoringEffect":{"value":"Audit"},"jitNetworkAccessMonitoringEffect":{"value":"AuditIfNotExists"},"adaptiveApplicationControlsMonitoringEffect":{"value":"AuditIfNotExists"},"sqlAuditingMonitoringEffect":{"value":"AuditIfNotExists"},"sqlEncryptionMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInBatchAccountMonitoringEffect":{"value":"AuditIfNotExists"},"metricAlertsInBatchAccountMonitoringEffect":{"value":"AuditIfNotExists"},"classicComputeVMsMonitoringEffect":{"value":"Audit"},"classicStorageAccountsMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInDataLakeAnalyticsMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInDataLakeStoreMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInEventHubMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInKeyVaultMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInLogicAppsMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInRedisCacheMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInSearchServiceMonitoringEffect":{"value":"AuditIfNotExists"},"aadAuthenticationInServiceFabricMonitoringEffect":{"value":"Audit"},"clusterProtectionLevelInServiceFabricMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInServiceBusMonitoringEffect":{"value":"AuditIfNotExists"},"namespaceAuthorizationRulesInServiceBusMonitoringEffect":{"value":"Audit"},"aadAuthenticationInSqlServerMonitoringEffect":{"value":"AuditIfNotExists"},"secureTransferToStorageAccountMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInStreamAnalyticsMonitoringEffect":{"value":"AuditIfNotExists"},"disableUnrestrictedNetworkToStorageAccountMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInServiceFabricMonitoringEffect":{"value":"AuditIfNotExists"},"sqlDbVulnerabilityAssesmentMonitoringEffect":{"value":"AuditIfNotExists"},"identityDesignateLessThanOwnersMonitoringEffect":{"value":"AuditIfNotExists"},"identityDesignateMoreThanOneOwnerMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForWritePermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForReadPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveDeprecatedAccountMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithWritePermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithReadPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"azurePolicyAddonStatusEffect":{"value":"Audit"},"allowedContainerImagesInKubernetesClusterEffect":{"value":"audit"},"privilegedContainersShouldBeAvoidedEffect":{"value":"audit"},"allowedContainerPortsInKubernetesClusterEffect":{"value":"audit"},"allowedServicePortsInKubernetesClusterEffect":{"value":"audit"},"noPrivilegeEscalationInKubernetesClusterEffect":{"value":"audit"},"noSharingSensitiveHostNamespacesInKubernetesEffect":{"value":"audit"},"readOnlyRootFileSystemInKubernetesClusterEffect":{"value":"audit"},"allowedCapabilitiesInKubernetesClusterEffect":{"value":"audit"},"allowedAppArmorProfilesInKubernetesClusterEffect":{"value":"audit"},"allowedHostNetworkingAndPortsInKubernetesClusterEffect":{"value":"audit"},"allowedHostPathVolumesInKubernetesClusterEffect":{"value":"audit"},"memoryAndCPULimitsInKubernetesClusterEffect":{"value":"audit"},"mustRunAsNonRootNamespaceEffect":{"value":"audit"}},"description":"This policy assignment was automatically created by Azure Security Center","metadata":{"assignedBy":"Security - Center"},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/SecurityCenterBuiltIn","type":"Microsoft.Authorization/policyAssignments","name":"SecurityCenterBuiltIn"},{"sku":{"name":"A0","tier":"Free"},"properties":{"policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0","metadata":{"createdBy":"123743cc-88ef-49ee-920e-13958fe5697d","createdOn":"2020-07-01T00:58:14.945943Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0/providers/Microsoft.Authorization/policyAssignments/pypolicyassignmentea4a13f0","type":"Microsoft.Authorization/policyAssignments","name":"pypolicyassignmentea4a13f0"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"audit - ssh auth_1.4","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policySetDefinitions/3be0ea1bef3d71ca","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"AllowedLocations1":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","global","brazilsoutheast"]}},"description":"This - initiative audits whether any Linux VMs or VMSS use password-only authentication - for SSH. See https://aka.ms/gt/AzurePolicy for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-05-12T23:48:29.541787Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-17T15:34:05.0362645Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/1fc2c9de5f6971ca","type":"Microsoft.Authorization/policyAssignments","name":"1fc2c9de5f6971ca"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-batch-require-user-subscription-mode_1.0","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/74c98b59a6341488","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","uksouth2","centralus","eastus","westus2","francecentral","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","uknorth","eastus2","southcentralus","brazilsouth","westindia","francesouth","global","brazilus","indiasouth","indiawest","indiacentral","uaecentral","uaenorth","southafricanorth","southafricawest","switzerlandnorth","switzerlandwest","germanynorth","germanywestcentral","norwayeast","norwaywest","brazilsoutheast"]},"effect":{"value":"Audit"}},"description":"Batch - Accounts must use a Pool Allocation Mode of User subscription on the Advanced - tab to configure a VNet in the subscriptiong. This enables the use of NSGs - to secure the network traffic for the Batch Account. See https://aka.ms/netiso/vnetinjection - for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-04-01T22:23:59.9760562Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:35:40.3716797Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/6bff79d27acb9c88","type":"Microsoft.Authorization/policyAssignments","name":"6bff79d27acb9c88"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"sqlads-auditifnotexists-auditing - should be enabled on advanced data security settings on sql server_1.0","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/8fce770def99399","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast","global"]},"effect":{"value":"AuditIfNotExists"},"tagname":{"value":"SQLADSExcluded"},"setting":{"value":"enabled"}},"description":"Audits - SQL server level auditing coverage in the MS Corp tenant.","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-06-10T02:12:37.4717502Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-24T02:13:25.8570726Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/6c0b4582049bbf99","type":"Microsoft.Authorization/policyAssignments","name":"6c0b4582049bbf99"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"sqlads-auditifnotexists-vulnerability - assessment should be enabled on your sql servers_1.0","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/410c2966a1e1856e","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast","global"]},"effect":{"value":"AuditIfNotExists"},"tagname":{"value":"SQLADSExcluded"}},"description":"Audits - SQL Vulnerability Assessment coverage the MS Corp tenant.","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-06-10T02:12:37.5097966Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-24T02:13:30.2774737Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/80a3851a4561856e","type":"Microsoft.Authorization/policyAssignments","name":"80a3851a4561856e"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"sqlads-auditifnotexists-atp - types should be set to ''all'' in sql server advanced data security settings_1.0","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/ac3fc8ad361a9985","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast","global"]},"effect":{"value":"AuditIfNotExists"},"tagname":{"value":"SQLADSExcluded"}},"description":"Audits - active SQL ATP detection types across the MS Corp tenant.","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-06-10T02:12:41.0071959Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-24T02:13:28.8367577Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/8eb4c5f8edb95985","type":"Microsoft.Authorization/policyAssignments","name":"8eb4c5f8edb95985"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-subnet-require-nsg_1.0","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/b8f1faa61cb41f92","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","uksouth2","centralus","eastus","westus2","francecentral","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","uknorth","eastus2","southcentralus","brazilsouth","westindia","francesouth","global","brazilus","indiasouth","indiawest","indiacentral","uaecentral","uaenorth","southafricanorth","southafricawest","switzerlandnorth","switzerlandwest","germanynorth","germanywestcentral","norwayeast","norwaywest","brazilsoutheast"]},"effect":{"value":"Audit"}},"description":"All - C+AI Subscriptions must have a NSG on all VNets in the subscription. See - https://aka.ms/netiso/nsgs for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-04-01T22:24:01.682075Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:36:35.5430963Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/aca4d19ab4e30392","type":"Microsoft.Authorization/policyAssignments","name":"aca4d19ab4e30392"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-warning-non-c+ai-security-rules_1.0","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/e695de0794b757d","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","uksouth2","centralus","eastus","westus2","francecentral","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","uknorth","eastus2","southcentralus","brazilsouth","westindia","francesouth","global","brazilus","indiasouth","indiawest","indiacentral","uaecentral","uaenorth","southafricanorth","southafricawest","switzerlandnorth","switzerlandwest","germanynorth","germanywestcentral","norwayeast","norwaywest","brazilsoutheast"]},"effect":{"value":"Audit"},"priorities":{"value":["100","101","102","103","104","105","106","107","108","109","110","111","112","113","114","115","116","117","118","119"]}},"description":"All - C+AI Subscriptions must have a NSG on all VNets in the subscription. See - https://aka.ms/netiso/nsgs for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-04-01T22:23:59.5549343Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:37:08.0237953Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/b65cf29bbd4b57d","type":"Microsoft.Authorization/policyAssignments","name":"b65cf29bbd4b57d"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-kubernet-require-azure-networkplugin_1.0","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/26db8d27b6fa91aa","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","uksouth2","centralus","eastus","westus2","francecentral","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","uknorth","eastus2","southcentralus","brazilsouth","westindia","francesouth","global","brazilus","indiasouth","indiawest","indiacentral","uaecentral","uaenorth","southafricanorth","southafricawest","switzerlandnorth","switzerlandwest","germanynorth","germanywestcentral","norwayeast","norwaywest","brazilsoutheast"]},"effect":{"value":"Audit"}},"description":"Kubernets - must use the Advanced Networking option to configure the Kubernetes cluster - to use a Virtual Network that is on the subscription of the user. This enables - the use of NSGs to secure the network traffic for the Kubernetes container. See - https://aka.ms/netiso/vnetinjection for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-04-01T22:23:58.085345Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:36:42.6798866Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/bce5fcf8b40531aa","type":"Microsoft.Authorization/policyAssignments","name":"bce5fcf8b40531aa"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"sqlads-auditifnotexists-advanced - data security should be enabled on your sql servers_1.0","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/e3cff6e23ce4018a","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast","global"]},"effect":{"value":"AuditIfNotExists"},"tagname":{"value":"SQLADSExcluded"}},"description":"Audits - SQL ADS coverage the MS Corp tenant.","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-06-10T02:12:35.5090528Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-24T02:13:26.7963478Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/ef59abada7fba18a","type":"Microsoft.Authorization/policyAssignments","name":"ef59abada7fba18a"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-hdinsight-require-subnet_1.0","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/11094169db59074f","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","uksouth2","centralus","eastus","westus2","francecentral","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","uknorth","eastus2","southcentralus","brazilsouth","westindia","francesouth","global","brazilus","indiasouth","indiawest","indiacentral","uaecentral","uaenorth","southafricanorth","southafricawest","switzerlandnorth","switzerlandwest","germanynorth","germanywestcentral","norwayeast","norwaywest","brazilsoutheast"]},"effect":{"value":"Audit"}},"description":"HDInsight - Clusters must use the Custom configuration option to configure a VNet in the - subscriptiong. This enables the use of NSGs to secure the network traffic - for the HDInsight cluster. See https://aka.ms/netiso/vnetinjection for more - details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-04-01T22:24:01.3537501Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:35:47.7820687Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/fcbba78ebf3e874f","type":"Microsoft.Authorization/policyAssignments","name":"fcbba78ebf3e874f"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-batch-require-user-subscription-mode_2.1","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/5aac1290d24c772d","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"effect":{"value":"Audit"}},"description":"Batch - Pools must be configured to use a VNet in the users subscription. This enables - the use of NSGs to secure the network traffic for the Batch Account. See - https://aka.ms/netiso/vnetinjection for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T19:32:59.165052Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:35:33.0369273Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-BTCH-AUDT-VINJ-v021","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-BTCH-AUDT-VINJ-v021"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-hdinsight-require-subnet_1.2","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/1b0f9cd579f5f04a","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"effect":{"value":"Audit"}},"description":"HDInsight - Clusters must use the Custom configuration option to configure a VNet in the - subscriptiong. This enables the use of NSGs to secure the network traffic - for the HDInsight cluster. See https://aka.ms/netiso/vnetinjection for more - details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T19:32:58.0927784Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:36:11.7643493Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-HDIN-AUDT-VINJ-v012","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-HDIN-AUDT-VINJ-v012"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-kubernet-require-azure-networkplugin_1.2","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/cb9c916fd4b6c323","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"effect":{"value":"Audit"}},"description":"Kubernets - must use the Advanced Networking option to configure the Kubernetes cluster - to use a Virtual Network that is on the subscription of the user. This enables - the use of NSGs to secure the network traffic for the Kubernetes container. See - https://aka.ms/netiso/vnetinjection for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T19:33:02.4581818Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:37:41.1573353Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-KBNT-AUDT-VINJ-v012","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-KBNT-AUDT-VINJ-v012"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-nsg-rule-101_1.3","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/9d78e6174e6e69be","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"ruleNo":{"value":"101"},"info":{"value":"Created - by Azure Core Security managed policy, placeholder you can delete, please - see aka.ms/cainsgpolicy"},"destinationPortRanges":{"value":["443"]},"protocol":{"value":"Tcp"},"sourceType":{"value":"Service - Tag"},"sourceValue":{"value":"VirtualNetwork"},"actionValue":{"value":"Allow"},"direction":{"value":"Inbound"},"tagname":{"value":"SkipNRMSDatabricks"},"subscriptionExclusions":{"value":[]}},"description":"All - C+AI Subscriptions must have pre-defined C+AI NSG rules. See https://aka.ms/netiso/nsgs - for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:29:06.5946651Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:36:50.9652509Z"},"enforcementMode":"Default"},"identity":{"principalId":"b7a49237-f5b0-473f-a4ff-6830d23af17d","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","type":"SystemAssigned"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-NSG-DINE-SR101-v013","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-NSG-DINE-SR101-v013","location":"uaenorth"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-nsg-rule-102_1.3","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/7c066e9166289efb","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"ruleNo":{"value":"102"},"info":{"value":"Created - by Azure Core Security managed policy, rule can be deleted but do not change - source ips, please see aka.ms/cainsgpolicy"},"destinationPortRanges":{"value":["*"]},"protocol":{"value":"*"},"sourceType":{"value":"IP - Addresses"},"sourceValue":{"value":"194.69.126.224/27,194.69.126.128/27,194.69.127.0/27,194.69.127.96/27,194.69.127.144/29,194.69.104.0/25,20.184.57.184/32,52.139.245.61/32,52.139.245.172/32,52.137.88.174/32,20.42.25.133/32,104.44.112.128/25,104.44.111.128/26,52.191.237.247/32,52.191.220.88/32,52.188.221.200/32,52.151.243.229/32,52.148.118.116/32,52.224.187.226/32,40.91.115.44/32,40.91.114.244/32,40.91.95.146/32,40.91.93.196/32,40.91.94.53/32,40.91.77.216/32,40.119.207.69/32,66.119.150.192/26,191.234.97.0/26,131.107.132.16/28,131.107.132.32/28,131.107.174.0/24,131.107.160.0/24,131.107.159.0/24,131.107.147.0/24,167.220.237.128/27,167.220.226.0/23,167.220.232.0/23,167.220.238.64/27,167.220.238.192/27,167.220.238.128/27,167.220.238.0/27,167.220.248.32/27,167.220.248.96/27,167.220.253.128/29,167.220.255.0/25,167.220.196.0/23,167.220.148.0/23,167.220.128.0/23,167.220.242.64/27,167.220.242.192/27,167.220.242.128/27,167.220.242.0/27,167.220.64.0/19,167.220.70.64/26,167.220.76.192/26,167.220.80.192/26,167.220.77.64/26,167.220.81.128/26,167.220.65.0/27,167.220.81.192/26,167.220.64.0/32,167.220.2.0/24,167.220.0.0/23,167.220.26.0/24,167.220.24.0/24,157.58.31.128/25,157.58.30.128/25,157.58.220.0/22,157.58.218.0/23,157.58.217.0/24,157.58.216.128/25,157.58.216.0/26,157.58.208.0/21,157.58.214.128/26,157.58.213.64/26,157.58.214.192/26,157.58.213.192/26,157.58.212.64/26,157.58.212.128/26,157.58.215.128/25,157.58.192.0/20,157.58.196.64/27,157.58.198.15/32,65.55.188.128/25,65.55.188.132/32,65.55.188.131/32,65.55.188.129/32,65.54.12.64/26,94.245.87.0/24,207.46.217.128/25,207.46.216.128/25,207.46.216.226/32,207.46.216.225/32,70.42.230.0/23"},"actionValue":{"value":"Allow"},"direction":{"value":"Inbound"},"tagname":{"value":"SkipNRMSCorp"},"subscriptionExclusions":{"value":["e05dbbce-79c2-45a2-a7ef-f1058856feb3","4bb527f3-5718-477f-93ae-96a00a4944fe","cafc4bb9-6584-480c-b992-c6643801be41","ba4c5917-5ba3-495b-857c-af2642a5b115","e4b5cac5-c0f5-4618-aa98-3c01e18c5fde","e6fd4e44-694e-4e30-b72a-7da4ef662a29","6b82129a-13ef-4554-93a5-17cda6672746","5f14ad42-7fae-4258-b7bf-ab24eb46988d","548801a8-a653-452a-b883-db65b6d06fac","0afea355-fcdc-47a0-a82c-f5436b883790","184ca802-aa58-44e3-96a1-5905c23d9364","50dc548d-0c1f-41c5-bf52-cb6957d9d052","82be74c1-6520-4ab5-b10e-fc17162b8c86","b69ac3e7-4dd7-45e8-ad79-2bf1d780f221","d2da8762-d5bc-4197-94d0-8c298fc6e5ed","c1b0ff3b-5ef1-4cf6-b723-64c216558172","08ea33e0-01df-4486-88f0-e1f35de8ca0b","cabab48d-da29-4857-88f0-789518f35342","a3ea6660-0f26-4ca7-8772-09c454995588","406307ea-f1c6-4592-b338-fdf958e300e6","3b98cb2d-64df-4532-a36a-b835b0494744","076cf91a-5eb9-4ee2-9bbf-647e8d818ddb","3742010c-b092-4f45-9448-d0ba8d14c7b8","148e2723-a8b5-4bac-ba2a-02ee22afe3dc","c8cf041f-6c65-4e3a-b304-e0b7cfe5a7a8","4aafbb38-45c3-4510-a4fb-79ddee4609e1","9295f662-1576-4cd9-ae2c-e5b98e004013","caa10cde-996e-4f8d-adfb-d7e3d8046726","73992542-7eea-446a-a813-be9be977a1e9","800d0ed9-5ab9-43c2-b9bf-65bb3d740822","75cbd5cd-883c-4b21-a7f7-cd7f4862c796","4f15c6a9-03c7-4290-a534-d8125d5cf9c0","e1f7972d-096f-4309-8ff3-e95fc6e290be","b88ac08b-1838-4987-8510-5d098e4e029b","bbeb12ae-8826-49e2-b9c1-efb3c49c336e","7c2068ba-d812-424b-bb7f-59445cac4081","ce7feb1b-c0e1-4a8e-a841-3711b1bee26d","07fd3b0d-1350-46c2-91be-bf586c46e878","e76d4f0e-1cbc-4afb-85f9-eea31e83f8e0","3985e331-9778-4909-aa73-79e23575ccc5","7cf78357-6f6e-49bc-9d7c-2a53a51a7de2","45fae77e-3723-4cd9-a1c4-bb7f1dae5943"]}},"description":"All - C+AI Subscriptions must have pre-defined C+AI NSG rules. See https://aka.ms/netiso/nsgs - for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:28:34.1091048Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:37:36.4135634Z"},"enforcementMode":"Default"},"identity":{"principalId":"985bb80e-8113-4542-8d68-418589e6ff34","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","type":"SystemAssigned"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-NSG-DINE-SR102-v013","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-NSG-DINE-SR102-v013","location":"southafricanorth"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-nsg-rule-103_1.4","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/3c07197392ad62f","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"ruleNo":{"value":"103"},"info":{"value":"Created - by Azure Core Security managed policy, rule can be deleted but do not change - source ips, please see aka.ms/cainsgpolicy"},"destinationPortRanges":{"value":["*"]},"protocol":{"value":"*"},"sourceType":{"value":"Service - Tag"},"sourceValue":{"value":"CorpNetPublic"},"actionValue":{"value":"Allow"},"direction":{"value":"Inbound"},"tagname":{"value":"SkipNRMSCorp"},"subscriptionExclusions":{"value":["e05dbbce-79c2-45a2-a7ef-f1058856feb3","4bb527f3-5718-477f-93ae-96a00a4944fe","cafc4bb9-6584-480c-b992-c6643801be41","ba4c5917-5ba3-495b-857c-af2642a5b115","e4b5cac5-c0f5-4618-aa98-3c01e18c5fde","e6fd4e44-694e-4e30-b72a-7da4ef662a29","6b82129a-13ef-4554-93a5-17cda6672746","5f14ad42-7fae-4258-b7bf-ab24eb46988d","548801a8-a653-452a-b883-db65b6d06fac","0afea355-fcdc-47a0-a82c-f5436b883790","184ca802-aa58-44e3-96a1-5905c23d9364","50dc548d-0c1f-41c5-bf52-cb6957d9d052","82be74c1-6520-4ab5-b10e-fc17162b8c86","b69ac3e7-4dd7-45e8-ad79-2bf1d780f221","d2da8762-d5bc-4197-94d0-8c298fc6e5ed","c1b0ff3b-5ef1-4cf6-b723-64c216558172","08ea33e0-01df-4486-88f0-e1f35de8ca0b","cabab48d-da29-4857-88f0-789518f35342","a3ea6660-0f26-4ca7-8772-09c454995588","406307ea-f1c6-4592-b338-fdf958e300e6","3b98cb2d-64df-4532-a36a-b835b0494744","076cf91a-5eb9-4ee2-9bbf-647e8d818ddb","3742010c-b092-4f45-9448-d0ba8d14c7b8","148e2723-a8b5-4bac-ba2a-02ee22afe3dc","c8cf041f-6c65-4e3a-b304-e0b7cfe5a7a8","4aafbb38-45c3-4510-a4fb-79ddee4609e1","9295f662-1576-4cd9-ae2c-e5b98e004013","caa10cde-996e-4f8d-adfb-d7e3d8046726","73992542-7eea-446a-a813-be9be977a1e9","800d0ed9-5ab9-43c2-b9bf-65bb3d740822","75cbd5cd-883c-4b21-a7f7-cd7f4862c796","4f15c6a9-03c7-4290-a534-d8125d5cf9c0","e1f7972d-096f-4309-8ff3-e95fc6e290be","b88ac08b-1838-4987-8510-5d098e4e029b","bbeb12ae-8826-49e2-b9c1-efb3c49c336e","7c2068ba-d812-424b-bb7f-59445cac4081","ce7feb1b-c0e1-4a8e-a841-3711b1bee26d","07fd3b0d-1350-46c2-91be-bf586c46e878","e76d4f0e-1cbc-4afb-85f9-eea31e83f8e0","3985e331-9778-4909-aa73-79e23575ccc5","7cf78357-6f6e-49bc-9d7c-2a53a51a7de2","45fae77e-3723-4cd9-a1c4-bb7f1dae5943"]}},"description":"All - C+AI Subscriptions must have pre-defined C+AI NSG rules. See https://aka.ms/netiso/nsgs - for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:27:59.4953193Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:36:23.3383233Z"},"enforcementMode":"Default"},"identity":{"principalId":"2ac3f52f-f3ad-40a4-9b2d-aa24e4c7bbba","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","type":"SystemAssigned"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-NSG-DINE-SR103-v014","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-NSG-DINE-SR103-v014","location":"eastus2"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-nsg-rule-104_1.3","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/bac0fb65020410a4","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"ruleNo":{"value":"104"},"info":{"value":"Created - by Azure Core Security managed policy, rule can be deleted but do not change - source ips, please see aka.ms/cainsgpolicy"},"destinationPortRanges":{"value":["*"]},"protocol":{"value":"*"},"sourceType":{"value":"Service - Tag"},"sourceValue":{"value":"CorpNetSaw"},"actionValue":{"value":"Allow"},"direction":{"value":"Inbound"},"tagname":{"value":"SkipNRMSSAW"},"subscriptionExclusions":{"value":["e05dbbce-79c2-45a2-a7ef-f1058856feb3","4bb527f3-5718-477f-93ae-96a00a4944fe","cafc4bb9-6584-480c-b992-c6643801be41","ba4c5917-5ba3-495b-857c-af2642a5b115","e4b5cac5-c0f5-4618-aa98-3c01e18c5fde","e6fd4e44-694e-4e30-b72a-7da4ef662a29","6b82129a-13ef-4554-93a5-17cda6672746","5f14ad42-7fae-4258-b7bf-ab24eb46988d","548801a8-a653-452a-b883-db65b6d06fac","0afea355-fcdc-47a0-a82c-f5436b883790","184ca802-aa58-44e3-96a1-5905c23d9364","50dc548d-0c1f-41c5-bf52-cb6957d9d052","82be74c1-6520-4ab5-b10e-fc17162b8c86","b69ac3e7-4dd7-45e8-ad79-2bf1d780f221","d2da8762-d5bc-4197-94d0-8c298fc6e5ed","c1b0ff3b-5ef1-4cf6-b723-64c216558172","08ea33e0-01df-4486-88f0-e1f35de8ca0b","cabab48d-da29-4857-88f0-789518f35342","a3ea6660-0f26-4ca7-8772-09c454995588","406307ea-f1c6-4592-b338-fdf958e300e6","3b98cb2d-64df-4532-a36a-b835b0494744","076cf91a-5eb9-4ee2-9bbf-647e8d818ddb","3742010c-b092-4f45-9448-d0ba8d14c7b8","148e2723-a8b5-4bac-ba2a-02ee22afe3dc","c8cf041f-6c65-4e3a-b304-e0b7cfe5a7a8","4aafbb38-45c3-4510-a4fb-79ddee4609e1","9295f662-1576-4cd9-ae2c-e5b98e004013","caa10cde-996e-4f8d-adfb-d7e3d8046726","73992542-7eea-446a-a813-be9be977a1e9","800d0ed9-5ab9-43c2-b9bf-65bb3d740822","75cbd5cd-883c-4b21-a7f7-cd7f4862c796","4f15c6a9-03c7-4290-a534-d8125d5cf9c0","e1f7972d-096f-4309-8ff3-e95fc6e290be","b88ac08b-1838-4987-8510-5d098e4e029b","bbeb12ae-8826-49e2-b9c1-efb3c49c336e","7c2068ba-d812-424b-bb7f-59445cac4081","ce7feb1b-c0e1-4a8e-a841-3711b1bee26d","07fd3b0d-1350-46c2-91be-bf586c46e878","e76d4f0e-1cbc-4afb-85f9-eea31e83f8e0","3985e331-9778-4909-aa73-79e23575ccc5","7cf78357-6f6e-49bc-9d7c-2a53a51a7de2","45fae77e-3723-4cd9-a1c4-bb7f1dae5943"]}},"description":"All - C+AI Subscriptions must have pre-defined C+AI NSG rules. See https://aka.ms/netiso/nsgs - for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:28:25.1822092Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:37:55.9717659Z"},"enforcementMode":"Default"},"identity":{"principalId":"f2e939bc-742a-42f9-a27a-f0982c6e3f64","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","type":"SystemAssigned"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-NSG-DINE-SR104-v013","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-NSG-DINE-SR104-v013","location":"japanwest"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-nsg-rule-105_1.3","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/91f42c0ca66ff7dd","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"ruleNo":{"value":"105"},"info":{"value":"DO - NOT DELETE - Will result in ICM Sev 2 - Azure Core Security, see aka.ms/cainsgpolicy"},"destinationPortRanges":{"value":["1433","1434","3306","4333","5432","6379","7000","7001","7199","9042","9160","9300","16379","26379","27017"]},"protocol":{"value":"*"},"sourceType":{"value":"Service - Tag"},"sourceValue":{"value":"Internet"},"actionValue":{"value":"Deny"},"direction":{"value":"Inbound"},"tagname":{"value":"SkipNRMSDB"},"subscriptionExclusions":{"value":["61868ab8-16d4-44ec-a9ff-f35d05922847","41c39ac7-6cde-4be7-87c3-d57a168b7b92","235d341f-7fb9-435c-9bdc-034b7306c9b4","239b3f1a-daab-4125-918c-f028b0edb054","12f44720-8952-422c-bb7d-28831c2de639","c36fd9e7-e5b1-4d3e-bb85-2e538040258b","243b67d4-60ca-4dfd-a556-216ee06f77a1","24ae0a2f-2cb0-4a1a-9929-bed71bad0d59","b4582baf-35d9-47b9-b03d-1bd126876221","65f79f71-cb42-45b1-82b7-4635fd05fc26","9532a63e-f2eb-4649-bb23-5ed01077ce80","1533031f-9510-4d8d-8f83-af94df45d43c","73d25f92-e703-4c91-8aed-2fb23c8e151f","86d6f8d7-564b-4005-912c-b1a3a9a286ce","97a3d790-8d62-4f20-b579-39ee6b06cb45","179be307-0377-46c0-a8bb-17437582d266","6c516c14-f378-4780-bc52-dd1d098a9c0b","cc5e1d36-a80d-4878-add9-5204a7efda20","0bf83929-3a19-4a96-87da-b23c3aca7fd7","ad7af743-6a66-480e-98cd-e022f833d0ce","0cfe98e1-3cf6-41ca-9f54-435d1ddaf0de","ce6570fa-18fb-4503-80d9-4a225591a428","2f8446c7-7c1e-42f0-a6b7-d68df1255cc4","ff78024c-d5a1-48ae-88eb-d61f0f60f8ff","bdd789f3-d9d1-4bea-ac14-30a39ed66d33","6fe0c04c-acb9-4f74-8153-56a6cb666ca8","7fa88f8d-252c-4b22-a73e-cd77f85cca66","bafb24c9-f4bb-46a0-9891-4b3e12dab22e","aab411af-ed4d-4f02-bb87-5de8b00d880d","7e7b7a6f-0b34-4db9-958d-ece4c89b419f","964c10bb-8a6c-43bc-83d3-6b318c6c7305","7b29bb4e-8391-4d57-8045-b34a092e5108","3f706ca0-34d7-4ede-a432-3c1a37ddd5c6","7856cb6f-e1a8-48f2-b2a5-bfaa7f8c34a1","49e3ed89-bbdb-4545-844f-e3502d6ce44f","8cad7ef7-ae41-4adf-86b8-ffcb11fae200","8e9ec0f8-bfe6-43a5-acd2-b6c4666ef9f6","b8fc6ee8-6802-4605-b4a5-1d131084c62f","45493131-fef6-4cb1-80e9-f0dadaa0255a","9c8295ef-4bf7-49db-90aa-5f0837dc60b7","ed0b2672-8412-463f-a0c1-1867730d7e27","7f31cba8-b597-4129-b158-8f21a7395bd0","3b658bfc-dbb0-4f7a-9e6c-a7659ade3514","825d553e-1fdf-4961-8f6b-bab24c6b07a7","477d55b5-bef1-4c35-b8bd-42df6ef99d25","0cd887ff-5af0-405b-8d48-b2b0495af57b","4259a25b-fc62-41d0-a101-60bfaab38086","3ae1ab9b-5849-4409-b744-58ba98878274","8d8d3365-2fab-415f-862e-712d989871b2","1ef6f67e-7981-498c-8349-b67109d0fd0f","e9b95386-37fe-4820-9dc6-30a44fbeafba","f9e81224-18f1-4474-80b5-bd6b832f0b73","f0b97671-152e-45cc-a831-73fd5caa8740","d4c1893d-adf1-4111-aaa3-93d55a4059b9","2d3ea1e9-269c-4fd1-8878-21e84bf9d214","1267b3e1-8812-4435-82ff-9e57f390c194","38c49794-e385-48e6-b6ee-c42b9f2075be","2843db96-7d25-4cf5-8e67-71baed52dfb7","a531aaa4-20f4-40e6-ba1a-858a0359f602","b835f458-560c-49c2-8781-4b13d892ddd9","e4d287eb-a38c-4387-832a-e3c61ea576bd","af878dc5-7fe2-4698-b7fb-2ed4b2ffe4db","26d6d535-5164-443d-82f6-4c695caf7688","d862948f-6520-451f-af67-123309e4e4ce","ff96a11f-784d-4c26-94c7-34346d4d660e","38b241a5-8658-4b50-bfba-1800ee2d4d09","28f78ae5-97b2-487e-b097-270de10ce6b8","6c048bcd-2cc6-47fe-a558-ca54083d537e","62fc3d9a-b8ab-47e7-8df1-be09f78bb25a","48aae13c-e8a8-4057-a5d5-f77eaa56f1fd","b30d9dbd-c0f7-405f-902c-3eabd080eb00","aa858381-0720-4837-b0f8-60468c0b2763","7e6898e7-868d-490f-8f91-0cffa67c48a0","816e6e0f-a719-487e-a651-813f40cc95c5","aeaa528b-2620-42a7-bbe8-17b698d42530","9c870d54-05fd-46bb-9bb5-63a5756320a0","36e4aeae-caae-4cd6-8d6b-7015355c6229","d53f365b-64c6-45fa-9253-99fc92dfae5d","6b7b20bf-f54b-4a3d-9961-c85fbe894b67","875bd0a7-0adc-4391-8b42-85e866e87e5d","97454014-0118-4294-9648-938eb8f52327","de1883af-a411-450a-8c9f-55b07d48cd60","991af618-96d9-4bc0-879d-0e13ac6020c1","21eedfa4-4dc5-4056-bdba-dcfaf3b1a222","0e57ff86-19ec-4f88-8403-879bd0d64af8","31c8019a-6c01-4c1d-9a04-6bbd091e8ccd","52ce96d0-a12d-4e17-9644-50e0059a7730","f5f248fd-943d-477b-a9d2-de3db83d7712","c4ae973f-3a15-4409-a6cc-9cc91147f42e","ed10ec26-e9a9-40ba-85df-2d7e2dec7765","a083c30e-d4e5-4dc1-b310-02aaf36b316a","c1fd1678-d0fe-4253-a15f-a03eee323432","a013b98a-6c2a-4f92-a6a7-82266ac6f437","ef7a7954-0173-4574-86a1-486e015ab617","ded8fcaf-289f-40bd-b124-572d3d4f58ed","178b7546-3fed-4e8a-b001-9c71b1051ce9","f2b7f785-c33d-471f-bb13-57d62e83af62","a226aace-1c2d-4a53-96a3-de0ea8f3e4ad","b909342e-42c0-423e-8815-ea07509e27f9","9d124ad5-c7de-4c56-8ffe-0f3f6566d3b3","ddc736d4-2fe4-44ad-8b82-080913c64b79","ea406f31-bf7a-4139-a444-1f23847f1350","66affadd-ce7e-4ac3-a16c-d85dc2d07544","d0e65693-60a1-438c-be56-2225cf43d568","902dc4d6-9ae1-4141-ac1b-ca5b3071cd63","cac63bb3-1459-4b23-a864-f2ea6c6456e9","2fa553a5-a443-4f09-bd4c-dbc9ded93a1c","9d7c4ce2-5443-4499-a07a-695894000463","3814aaea-6bb6-4e31-b3c4-45e761c8d6d1","9d0fe465-cebe-41a0-afc4-e49fe70dee55","2edae715-e43e-471a-9b6d-a6bc52a395c0","c7d2e450-636b-443d-b737-5e2708629ea1","4bb073a1-ad47-4f14-bfa6-9ffd55ea8f81","0fbc3fc8-1bcd-433d-a6f0-b96ca76c60dc","f3d00ca5-7ce1-4562-8160-2a856dd6d1f3","1c91c686-b0d1-4f51-8784-9eee52c07b7e","c1089427-83d3-4286-9f35-5af546a6eb67","ec716296-0c8d-410a-8666-1eff05989831","c31ad117-e07c-4388-9148-387a2ba72135","c9802e4f-0860-43a1-b3ed-37d3ae8cdf92","708474aa-31a7-4dbd-a106-84de1043185d","f6470ed6-05de-421c-bae8-184d8d28be10","17cfecb9-1a5f-4b8b-a32f-119de8c44f5a","70d2f261-7253-4b1a-a52a-406e7a328c33","2fda68f7-567f-4c8f-b0b7-f4b6a5988e84","86b0b59c-8538-4aa6-90f6-ce8329258bb2","8ecadfc9-d1a3-4ea4-b844-0d9f87e4d7c8","433e1858-1953-42b2-a9dd-d7601c25d347","bb1216b4-4400-422b-8a67-8a80a9c88d5e","cf5e3b9b-595a-499d-8669-00b88b449213","e01c1ddb-8025-491a-986d-c249fa9a69a0","9d71e31b-7356-4d2d-a6e9-d588fc7692c2","c6e602bd-0d12-4265-bebc-cb208dd5030f","e929be23-7420-44f3-bd80-810a56d06e1e","46b59458-3f32-4f06-b6a2-bd27dda4305c","14cff334-91a5-4d9d-bf42-39c6d630d37c","80c8978c-c1c6-4f9e-94cd-874798b05935","f9da0435-3452-483a-a5f4-743988dc6b1d","0f1325ea-bcfe-4b02-a303-baaefb80a9f9","70407fa2-4234-4266-812c-d70754ed228c","41e806f1-99ee-4c48-9ce8-379068350924","7b6fdce7-2d25-4c7f-b8c1-004a375626cb","4a725092-b458-4dc2-9ae9-f8f0e7d415dc","178b2260-bd62-4372-ab30-7cf02b6a3108","d9964125-396a-4343-8d4e-b16c0281ae58","4df9862d-6ce3-486d-a4e1-8b246cb08f79","db205d1d-a8b1-49e1-8d5a-4f5b5ae39169","363499fe-248b-4624-ba5b-5f477bb924f4","9eefe291-18db-46f1-b308-4d7851fa270d","e4e0b3b0-1587-400f-95f9-1bb605a252c2","139c34d4-91bf-42c9-8dc5-b6c37f9ac517","8ab2ca47-1f5f-4936-8f37-c5780ff265d0","511013e8-8a72-4ddf-a9b4-1a9bb3a5fa6a","0a5044a6-a614-40e1-97e0-20af784237ea","a3fcf642-fa77-4d3c-886e-527258f00e72","4f6cdb57-2658-40b9-8adc-1b2ddf7dd7a2","df39322a-6ecd-418b-828d-09fd796dc10a","e1cb07f7-a3ac-4110-9d24-218d93bfa6f9","91280670-dbb5-4fcd-8dc3-dc9d53d94805","90b505b3-1abf-455b-af4d-f08d1135cf33","850d8476-e5fc-4059-9aed-9aeee349c384","ae2dd76f-0dd4-4484-b957-6700179f183f","9fb58da5-7347-4dbf-a892-7c933e5d7776","fc4ea3c9-1d30-4f18-b33b-7404e7da0123","693ffe34-785e-44cd-8fb7-81da25f4d3bd","3e272a96-8781-45f2-8378-6ffaa1596bcc","f2124ee6-885b-4aa6-885d-793c8626b87c","47ff8d6e-e419-464f-8940-dfa750f2115d","18f0638d-ad9b-460a-bd8b-61f12d998d0c","48021fc6-c9c8-4568-8c29-953aad4d1e0a","df41dfd5-a3a6-4c35-a58e-9b6ac732236e","1da3ace1-2326-4842-ba52-0e3a8dce989e","68f6be96-60c4-40f5-a14e-2a04dcacc1a6","5833e0eb-b53c-4156-b478-2eac8f04aec6","34530d5b-398d-496e-88d0-07a6e3de107e","4f698849-a196-4c80-be45-52d507ffb2d4","43350253-f84c-4fb3-a988-cc63366cc570","d466671a-79ad-4ca5-878f-599df8bcd17e","5ea9ae04-3601-468a-ba84-cb7e82ae1e48","31614129-0f24-4a4c-9731-53ceecc3017d","990d87fa-2d5a-48cc-bdff-0d3c6b9dd32d","5a2d898e-7f0b-43fd-8e0e-2b517b736499","16fc4a98-74ad-4970-9857-74d0f39a6c64","47380de2-eddf-42b2-b853-434cde2b5fa0","947d47b4-7883-4bb9-9d85-c5e8e2f572ce","8ca10d88-d6ce-458e-b707-a00f3b6183fd","76fb3144-bc19-4baf-ab79-432d526559b7","da07f543-88e8-4349-b9e1-2d135eb818c2","360cdc41-af67-426b-9249-b46077592db4","13973b32-e60a-4396-bf7a-85f0670d658d","b50578f7-df0d-4152-892d-ad77b284e233","0e584a02-5f47-4317-b102-9665aa08fc7d","83db2801-3fb7-4fda-9c88-227effca791f","ef378126-746c-42ef-87ea-83624095a7cc","6e793a99-19b9-4ac5-8f6a-709fd4da0b49","7bfee1d3-395f-414a-b76a-203385a535b8","100919d5-c4a2-4894-a3d7-83a8534dee66","00a794e2-f9ed-41f6-b2a3-444ec0b61131","3dfa5f20-e79c-437f-add7-0a2ade4379aa","359833f5-8592-40b6-8175-edc664e2196a","fddd10df-2a17-496f-8f2c-40845adac181","301ad868-469e-494a-948f-5212604443f0","9afb6667-24a4-456b-8720-48d5b530a003","05b724b7-9613-42c0-a5d1-45f2a0b40efd","5bb8c800-7777-43d0-a2ad-e8fae03ed3b7","b614deb1-8c61-4b74-9e54-f2c4ba8658af","6fd29849-b584-40ea-82c1-c908b83efd3f","921c46aa-ffa6-4d3b-9be2-b0affd7142d7","62ba464b-5e1c-468d-9a1f-9ddcd1053d68","5c0d4798-3eef-449f-9bfd-58d59fe6ff28","c90dc44b-a834-4a18-b728-b0631c14afa9","6a13868b-c532-4562-9131-5c866bddacf9","c33d86ef-305d-408c-87a2-b014fbcf2e16","7fe76de7-a6e6-491a-b482-449cec7c91fd","673fd28e-faab-4725-9bf4-a59b317f8f93","62f44dee-82b5-4a2f-896e-c2d132a4e415","8643025a-c059-4a48-85d0-d76f51d63a74","26fe00f8-9173-4872-9134-bb1d2e00343a","af599e54-878e-494d-8a8f-b8f8d8896f1a","c4c3550e-a965-4993-a50c-628fd38cd3e1","ab699598-7d66-4003-a0aa-86a0f827bbbf","6cedb63e-a5a2-4d1b-bf27-71f3688871ee","f3b504bb-826e-46c7-a1b7-674a5a0ae43a","9f9df1fb-cf10-42f4-b684-3913a492cc6d","be3bb907-a9fa-4b85-a21b-3154efeb0196","460397b3-c4d8-441c-9d4a-9374b15850d3","7b8aa759-d584-418d-b7e7-99e07cb45bc0","97f95e63-ac5d-4ad4-96ba-a5be9131f52b","86fe5e45-3696-4c0e-b88a-cf350e31ee68","bf0d72cc-0680-4042-bd37-2ff5d224c8d3","566c16c0-5a70-4062-80eb-42c00c823556","5bbcca67-469c-4af6-aa1f-f12014aa4747","e88da25c-3aa8-47a6-86d7-c9b2230171d8","4279e979-0fe8-4bba-8a79-e0012d33d2f7","7d3f20f0-ba46-4205-8bfa-508d47dec375","effdf562-0b65-48b3-bc44-bd406ceeb4c0","0af6e6ec-18c4-4cd6-97de-655d15eda26d","fc71d843-9b8c-4c31-a691-e34f2bf61a58","5d264b2d-d8de-4dce-8e0f-57a40c037732","facdd972-8587-42d9-94db-fea86c95f74b","04a198f4-df84-4ecf-8114-648150edc5f6","c707a0ae-7ee9-4d7a-9262-8cc87c7444ef","0944cf9e-9f5a-4cc8-a6bb-982a82145e32","0dea505e-f72c-4939-91fb-c5d318d31cbd","16018ead-6f73-447d-a422-e5895ea2f1e8","4110a755-2084-451d-a03f-2267f377e37a","c44b3809-aa60-4e78-ad0c-fc02ae6b0fb9","9f657a3d-7377-48a8-b6a3-b5a871d58953","02c0fdb9-19a4-4156-9d06-b8aa940e792a","fd78894d-5436-4f66-907a-9ef485a20d7f","11199e7d-90dd-47b0-9da2-1fc58ed7e9b7","51deb6a1-950b-4cd2-8c66-4a0b5a37291b","5eed6188-c6d6-4966-9543-28b3c88ee4e1","e51231c2-1e1d-4b36-9499-4761c759c21d","599ba755-215c-4d72-a152-5e902c03e753","9d21bfc7-b04f-4615-93d5-eb79e9e217e2","1fa05968-fc4e-4728-bf0e-c48de37a2ae1","73c521c0-1787-493e-845e-89b957b58b8b","c570afbe-46af-4d76-b23b-6e16d8d57df4","85d99e6d-f6d6-408f-a9f1-b7a97237d5c4","227e9423-1792-43b0-82e6-ac94397ed789","bc018f2c-f33c-4f25-bffb-34f3da74d2db","cfd6dc82-faa9-4f51-8534-964917ca7666","5ea8beca-77b8-44cb-8871-93620f04a6e7","7cbc7e85-a998-4d7c-bc89-78fbd0df6e8c","f35ee5d5-f4eb-42c4-a2bb-0f3c706afee7","5f94ce71-7492-4d10-ae80-3482646ca6cd","5299e6b7-b23b-46c8-8277-dc1147807117","c0f60687-8f09-4186-801b-9dd11d82d2e1","1400552c-6fe7-4bbd-a3ca-59ffea564316","ef686670-a2cc-4aec-89bf-8a67c4033507","ced133bc-30d4-48de-b239-78e9fe91c8c0","ba9770c6-6fb6-480b-9fcd-ee2ca1d7b0d6","3778be8b-3cde-493e-8ebc-a6c3f9be6129","5ce1ccad-10d3-4d04-a455-4ab42ee64a61","70d2b6ec-b846-43dc-b4f7-1a84ff24a176","0302f714-23e2-4c23-bd45-d1c97c1c1000","8c4b4f4e-6bf7-4da8-a51a-d341baf3ce44","eba5c6e7-188e-488f-a40d-0f14e1edf190","664a82c2-8810-4432-b9c4-bc5be3f7a0a6","1ef94f5a-a930-4996-9ddb-1dca7c74d040","12df5617-a0af-48ca-bf2c-4bcca863fd84","c80801f3-5848-4f8f-9c7a-dc0052a3655d","fb3429ab-83d0-4bed-95e9-1a8e9455252c","e05dbbce-79c2-45a2-a7ef-f1058856feb3","4bb527f3-5718-477f-93ae-96a00a4944fe","cafc4bb9-6584-480c-b992-c6643801be41","ba4c5917-5ba3-495b-857c-af2642a5b115","e4b5cac5-c0f5-4618-aa98-3c01e18c5fde","e6fd4e44-694e-4e30-b72a-7da4ef662a29","6b82129a-13ef-4554-93a5-17cda6672746","5f14ad42-7fae-4258-b7bf-ab24eb46988d","548801a8-a653-452a-b883-db65b6d06fac","0afea355-fcdc-47a0-a82c-f5436b883790","184ca802-aa58-44e3-96a1-5905c23d9364","50dc548d-0c1f-41c5-bf52-cb6957d9d052","82be74c1-6520-4ab5-b10e-fc17162b8c86","b69ac3e7-4dd7-45e8-ad79-2bf1d780f221","d2da8762-d5bc-4197-94d0-8c298fc6e5ed","c1b0ff3b-5ef1-4cf6-b723-64c216558172","08ea33e0-01df-4486-88f0-e1f35de8ca0b","cabab48d-da29-4857-88f0-789518f35342","a3ea6660-0f26-4ca7-8772-09c454995588","406307ea-f1c6-4592-b338-fdf958e300e6","3b98cb2d-64df-4532-a36a-b835b0494744","076cf91a-5eb9-4ee2-9bbf-647e8d818ddb","3742010c-b092-4f45-9448-d0ba8d14c7b8","148e2723-a8b5-4bac-ba2a-02ee22afe3dc","c8cf041f-6c65-4e3a-b304-e0b7cfe5a7a8","4aafbb38-45c3-4510-a4fb-79ddee4609e1","9295f662-1576-4cd9-ae2c-e5b98e004013","caa10cde-996e-4f8d-adfb-d7e3d8046726","73992542-7eea-446a-a813-be9be977a1e9","800d0ed9-5ab9-43c2-b9bf-65bb3d740822","75cbd5cd-883c-4b21-a7f7-cd7f4862c796","4f15c6a9-03c7-4290-a534-d8125d5cf9c0","e1f7972d-096f-4309-8ff3-e95fc6e290be","b88ac08b-1838-4987-8510-5d098e4e029b","bbeb12ae-8826-49e2-b9c1-efb3c49c336e","7c2068ba-d812-424b-bb7f-59445cac4081","ce7feb1b-c0e1-4a8e-a841-3711b1bee26d","07fd3b0d-1350-46c2-91be-bf586c46e878","e76d4f0e-1cbc-4afb-85f9-eea31e83f8e0","3985e331-9778-4909-aa73-79e23575ccc5","7cf78357-6f6e-49bc-9d7c-2a53a51a7de2","45fae77e-3723-4cd9-a1c4-bb7f1dae5943","6f5dcae0-a801-4d61-869d-7cf26ac8b3c3"]}},"description":"All - C+AI Subscriptions must have pre-defined C+AI NSG rules. See https://aka.ms/netiso/nsgs - for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:28:47.192623Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:38:02.2961864Z"},"enforcementMode":"Default"},"identity":{"principalId":"4a113caa-961f-4535-ac9b-79bfba8b9ed2","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","type":"SystemAssigned"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-NSG-DINE-SR105-v013","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-NSG-DINE-SR105-v013","location":"australiasoutheast"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-nsg-rule-106_1.3","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/9b8d76c443040b08","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"ruleNo":{"value":"106"},"info":{"value":"DO - NOT DELETE - Will result in ICM Sev 2 - Azure Core Security, see aka.ms/cainsgpolicy"},"destinationPortRanges":{"value":["22","3389"]},"protocol":{"value":"Tcp"},"sourceType":{"value":"Service - Tag"},"sourceValue":{"value":"Internet"},"actionValue":{"value":"Deny"},"direction":{"value":"Inbound"},"tagname":{"value":"SkipNRMSRDPSSH"},"subscriptionExclusions":{"value":["61868ab8-16d4-44ec-a9ff-f35d05922847","41c39ac7-6cde-4be7-87c3-d57a168b7b92","235d341f-7fb9-435c-9bdc-034b7306c9b4","239b3f1a-daab-4125-918c-f028b0edb054","12f44720-8952-422c-bb7d-28831c2de639","c36fd9e7-e5b1-4d3e-bb85-2e538040258b","243b67d4-60ca-4dfd-a556-216ee06f77a1","24ae0a2f-2cb0-4a1a-9929-bed71bad0d59","b4582baf-35d9-47b9-b03d-1bd126876221","65f79f71-cb42-45b1-82b7-4635fd05fc26","9532a63e-f2eb-4649-bb23-5ed01077ce80","1533031f-9510-4d8d-8f83-af94df45d43c","73d25f92-e703-4c91-8aed-2fb23c8e151f","86d6f8d7-564b-4005-912c-b1a3a9a286ce","97a3d790-8d62-4f20-b579-39ee6b06cb45","179be307-0377-46c0-a8bb-17437582d266","6c516c14-f378-4780-bc52-dd1d098a9c0b","cc5e1d36-a80d-4878-add9-5204a7efda20","0bf83929-3a19-4a96-87da-b23c3aca7fd7","ad7af743-6a66-480e-98cd-e022f833d0ce","0cfe98e1-3cf6-41ca-9f54-435d1ddaf0de","ce6570fa-18fb-4503-80d9-4a225591a428","2f8446c7-7c1e-42f0-a6b7-d68df1255cc4","ff78024c-d5a1-48ae-88eb-d61f0f60f8ff","bdd789f3-d9d1-4bea-ac14-30a39ed66d33","6fe0c04c-acb9-4f74-8153-56a6cb666ca8","7fa88f8d-252c-4b22-a73e-cd77f85cca66","bafb24c9-f4bb-46a0-9891-4b3e12dab22e","aab411af-ed4d-4f02-bb87-5de8b00d880d","7e7b7a6f-0b34-4db9-958d-ece4c89b419f","964c10bb-8a6c-43bc-83d3-6b318c6c7305","7b29bb4e-8391-4d57-8045-b34a092e5108","3f706ca0-34d7-4ede-a432-3c1a37ddd5c6","7856cb6f-e1a8-48f2-b2a5-bfaa7f8c34a1","49e3ed89-bbdb-4545-844f-e3502d6ce44f","8cad7ef7-ae41-4adf-86b8-ffcb11fae200","8e9ec0f8-bfe6-43a5-acd2-b6c4666ef9f6","b8fc6ee8-6802-4605-b4a5-1d131084c62f","45493131-fef6-4cb1-80e9-f0dadaa0255a","9c8295ef-4bf7-49db-90aa-5f0837dc60b7","ed0b2672-8412-463f-a0c1-1867730d7e27","7f31cba8-b597-4129-b158-8f21a7395bd0","3b658bfc-dbb0-4f7a-9e6c-a7659ade3514","825d553e-1fdf-4961-8f6b-bab24c6b07a7","477d55b5-bef1-4c35-b8bd-42df6ef99d25","0cd887ff-5af0-405b-8d48-b2b0495af57b","4259a25b-fc62-41d0-a101-60bfaab38086","3ae1ab9b-5849-4409-b744-58ba98878274","8d8d3365-2fab-415f-862e-712d989871b2","1ef6f67e-7981-498c-8349-b67109d0fd0f","e9b95386-37fe-4820-9dc6-30a44fbeafba","f9e81224-18f1-4474-80b5-bd6b832f0b73","f0b97671-152e-45cc-a831-73fd5caa8740","d4c1893d-adf1-4111-aaa3-93d55a4059b9","2d3ea1e9-269c-4fd1-8878-21e84bf9d214","1267b3e1-8812-4435-82ff-9e57f390c194","38c49794-e385-48e6-b6ee-c42b9f2075be","2843db96-7d25-4cf5-8e67-71baed52dfb7","a531aaa4-20f4-40e6-ba1a-858a0359f602","b835f458-560c-49c2-8781-4b13d892ddd9","e4d287eb-a38c-4387-832a-e3c61ea576bd","af878dc5-7fe2-4698-b7fb-2ed4b2ffe4db","26d6d535-5164-443d-82f6-4c695caf7688","d862948f-6520-451f-af67-123309e4e4ce","ff96a11f-784d-4c26-94c7-34346d4d660e","38b241a5-8658-4b50-bfba-1800ee2d4d09","28f78ae5-97b2-487e-b097-270de10ce6b8","6c048bcd-2cc6-47fe-a558-ca54083d537e","62fc3d9a-b8ab-47e7-8df1-be09f78bb25a","48aae13c-e8a8-4057-a5d5-f77eaa56f1fd","b30d9dbd-c0f7-405f-902c-3eabd080eb00","aa858381-0720-4837-b0f8-60468c0b2763","7e6898e7-868d-490f-8f91-0cffa67c48a0","816e6e0f-a719-487e-a651-813f40cc95c5","aeaa528b-2620-42a7-bbe8-17b698d42530","9c870d54-05fd-46bb-9bb5-63a5756320a0","36e4aeae-caae-4cd6-8d6b-7015355c6229","d53f365b-64c6-45fa-9253-99fc92dfae5d","6b7b20bf-f54b-4a3d-9961-c85fbe894b67","875bd0a7-0adc-4391-8b42-85e866e87e5d","97454014-0118-4294-9648-938eb8f52327","de1883af-a411-450a-8c9f-55b07d48cd60","991af618-96d9-4bc0-879d-0e13ac6020c1","21eedfa4-4dc5-4056-bdba-dcfaf3b1a222","0e57ff86-19ec-4f88-8403-879bd0d64af8","31c8019a-6c01-4c1d-9a04-6bbd091e8ccd","52ce96d0-a12d-4e17-9644-50e0059a7730","f5f248fd-943d-477b-a9d2-de3db83d7712","c4ae973f-3a15-4409-a6cc-9cc91147f42e","ed10ec26-e9a9-40ba-85df-2d7e2dec7765","a083c30e-d4e5-4dc1-b310-02aaf36b316a","c1fd1678-d0fe-4253-a15f-a03eee323432","a013b98a-6c2a-4f92-a6a7-82266ac6f437","ef7a7954-0173-4574-86a1-486e015ab617","ded8fcaf-289f-40bd-b124-572d3d4f58ed","178b7546-3fed-4e8a-b001-9c71b1051ce9","f2b7f785-c33d-471f-bb13-57d62e83af62","a226aace-1c2d-4a53-96a3-de0ea8f3e4ad","b909342e-42c0-423e-8815-ea07509e27f9","9d124ad5-c7de-4c56-8ffe-0f3f6566d3b3","ddc736d4-2fe4-44ad-8b82-080913c64b79","ea406f31-bf7a-4139-a444-1f23847f1350","66affadd-ce7e-4ac3-a16c-d85dc2d07544","d0e65693-60a1-438c-be56-2225cf43d568","902dc4d6-9ae1-4141-ac1b-ca5b3071cd63","cac63bb3-1459-4b23-a864-f2ea6c6456e9","2fa553a5-a443-4f09-bd4c-dbc9ded93a1c","9d7c4ce2-5443-4499-a07a-695894000463","3814aaea-6bb6-4e31-b3c4-45e761c8d6d1","9d0fe465-cebe-41a0-afc4-e49fe70dee55","2edae715-e43e-471a-9b6d-a6bc52a395c0","c7d2e450-636b-443d-b737-5e2708629ea1","4bb073a1-ad47-4f14-bfa6-9ffd55ea8f81","0fbc3fc8-1bcd-433d-a6f0-b96ca76c60dc","f3d00ca5-7ce1-4562-8160-2a856dd6d1f3","1c91c686-b0d1-4f51-8784-9eee52c07b7e","c1089427-83d3-4286-9f35-5af546a6eb67","ec716296-0c8d-410a-8666-1eff05989831","c31ad117-e07c-4388-9148-387a2ba72135","c9802e4f-0860-43a1-b3ed-37d3ae8cdf92","708474aa-31a7-4dbd-a106-84de1043185d","f6470ed6-05de-421c-bae8-184d8d28be10","17cfecb9-1a5f-4b8b-a32f-119de8c44f5a","70d2f261-7253-4b1a-a52a-406e7a328c33","2fda68f7-567f-4c8f-b0b7-f4b6a5988e84","86b0b59c-8538-4aa6-90f6-ce8329258bb2","8ecadfc9-d1a3-4ea4-b844-0d9f87e4d7c8","433e1858-1953-42b2-a9dd-d7601c25d347","bb1216b4-4400-422b-8a67-8a80a9c88d5e","cf5e3b9b-595a-499d-8669-00b88b449213","e01c1ddb-8025-491a-986d-c249fa9a69a0","9d71e31b-7356-4d2d-a6e9-d588fc7692c2","c6e602bd-0d12-4265-bebc-cb208dd5030f","e929be23-7420-44f3-bd80-810a56d06e1e","46b59458-3f32-4f06-b6a2-bd27dda4305c","14cff334-91a5-4d9d-bf42-39c6d630d37c","80c8978c-c1c6-4f9e-94cd-874798b05935","f9da0435-3452-483a-a5f4-743988dc6b1d","0f1325ea-bcfe-4b02-a303-baaefb80a9f9","70407fa2-4234-4266-812c-d70754ed228c","41e806f1-99ee-4c48-9ce8-379068350924","7b6fdce7-2d25-4c7f-b8c1-004a375626cb","4a725092-b458-4dc2-9ae9-f8f0e7d415dc","178b2260-bd62-4372-ab30-7cf02b6a3108","d9964125-396a-4343-8d4e-b16c0281ae58","4df9862d-6ce3-486d-a4e1-8b246cb08f79","db205d1d-a8b1-49e1-8d5a-4f5b5ae39169","363499fe-248b-4624-ba5b-5f477bb924f4","9eefe291-18db-46f1-b308-4d7851fa270d","e4e0b3b0-1587-400f-95f9-1bb605a252c2","139c34d4-91bf-42c9-8dc5-b6c37f9ac517","8ab2ca47-1f5f-4936-8f37-c5780ff265d0","511013e8-8a72-4ddf-a9b4-1a9bb3a5fa6a","0a5044a6-a614-40e1-97e0-20af784237ea","a3fcf642-fa77-4d3c-886e-527258f00e72","4f6cdb57-2658-40b9-8adc-1b2ddf7dd7a2","df39322a-6ecd-418b-828d-09fd796dc10a","e1cb07f7-a3ac-4110-9d24-218d93bfa6f9","91280670-dbb5-4fcd-8dc3-dc9d53d94805","90b505b3-1abf-455b-af4d-f08d1135cf33","850d8476-e5fc-4059-9aed-9aeee349c384","ae2dd76f-0dd4-4484-b957-6700179f183f","9fb58da5-7347-4dbf-a892-7c933e5d7776","fc4ea3c9-1d30-4f18-b33b-7404e7da0123","693ffe34-785e-44cd-8fb7-81da25f4d3bd","3e272a96-8781-45f2-8378-6ffaa1596bcc","f2124ee6-885b-4aa6-885d-793c8626b87c","47ff8d6e-e419-464f-8940-dfa750f2115d","18f0638d-ad9b-460a-bd8b-61f12d998d0c","48021fc6-c9c8-4568-8c29-953aad4d1e0a","df41dfd5-a3a6-4c35-a58e-9b6ac732236e","1da3ace1-2326-4842-ba52-0e3a8dce989e","68f6be96-60c4-40f5-a14e-2a04dcacc1a6","5833e0eb-b53c-4156-b478-2eac8f04aec6","34530d5b-398d-496e-88d0-07a6e3de107e","4f698849-a196-4c80-be45-52d507ffb2d4","43350253-f84c-4fb3-a988-cc63366cc570","d466671a-79ad-4ca5-878f-599df8bcd17e","5ea9ae04-3601-468a-ba84-cb7e82ae1e48","31614129-0f24-4a4c-9731-53ceecc3017d","990d87fa-2d5a-48cc-bdff-0d3c6b9dd32d","5a2d898e-7f0b-43fd-8e0e-2b517b736499","16fc4a98-74ad-4970-9857-74d0f39a6c64","47380de2-eddf-42b2-b853-434cde2b5fa0","947d47b4-7883-4bb9-9d85-c5e8e2f572ce","8ca10d88-d6ce-458e-b707-a00f3b6183fd","76fb3144-bc19-4baf-ab79-432d526559b7","da07f543-88e8-4349-b9e1-2d135eb818c2","360cdc41-af67-426b-9249-b46077592db4","13973b32-e60a-4396-bf7a-85f0670d658d","b50578f7-df0d-4152-892d-ad77b284e233","0e584a02-5f47-4317-b102-9665aa08fc7d","83db2801-3fb7-4fda-9c88-227effca791f","ef378126-746c-42ef-87ea-83624095a7cc","6e793a99-19b9-4ac5-8f6a-709fd4da0b49","7bfee1d3-395f-414a-b76a-203385a535b8","100919d5-c4a2-4894-a3d7-83a8534dee66","00a794e2-f9ed-41f6-b2a3-444ec0b61131","3dfa5f20-e79c-437f-add7-0a2ade4379aa","359833f5-8592-40b6-8175-edc664e2196a","fddd10df-2a17-496f-8f2c-40845adac181","301ad868-469e-494a-948f-5212604443f0","9afb6667-24a4-456b-8720-48d5b530a003","05b724b7-9613-42c0-a5d1-45f2a0b40efd","5bb8c800-7777-43d0-a2ad-e8fae03ed3b7","b614deb1-8c61-4b74-9e54-f2c4ba8658af","6fd29849-b584-40ea-82c1-c908b83efd3f","921c46aa-ffa6-4d3b-9be2-b0affd7142d7","62ba464b-5e1c-468d-9a1f-9ddcd1053d68","5c0d4798-3eef-449f-9bfd-58d59fe6ff28","c90dc44b-a834-4a18-b728-b0631c14afa9","6a13868b-c532-4562-9131-5c866bddacf9","c33d86ef-305d-408c-87a2-b014fbcf2e16","7fe76de7-a6e6-491a-b482-449cec7c91fd","673fd28e-faab-4725-9bf4-a59b317f8f93","62f44dee-82b5-4a2f-896e-c2d132a4e415","8643025a-c059-4a48-85d0-d76f51d63a74","26fe00f8-9173-4872-9134-bb1d2e00343a","af599e54-878e-494d-8a8f-b8f8d8896f1a","c4c3550e-a965-4993-a50c-628fd38cd3e1","ab699598-7d66-4003-a0aa-86a0f827bbbf","6cedb63e-a5a2-4d1b-bf27-71f3688871ee","f3b504bb-826e-46c7-a1b7-674a5a0ae43a","9f9df1fb-cf10-42f4-b684-3913a492cc6d","be3bb907-a9fa-4b85-a21b-3154efeb0196","460397b3-c4d8-441c-9d4a-9374b15850d3","7b8aa759-d584-418d-b7e7-99e07cb45bc0","97f95e63-ac5d-4ad4-96ba-a5be9131f52b","86fe5e45-3696-4c0e-b88a-cf350e31ee68","bf0d72cc-0680-4042-bd37-2ff5d224c8d3","566c16c0-5a70-4062-80eb-42c00c823556","5bbcca67-469c-4af6-aa1f-f12014aa4747","e88da25c-3aa8-47a6-86d7-c9b2230171d8","4279e979-0fe8-4bba-8a79-e0012d33d2f7","7d3f20f0-ba46-4205-8bfa-508d47dec375","effdf562-0b65-48b3-bc44-bd406ceeb4c0","0af6e6ec-18c4-4cd6-97de-655d15eda26d","fc71d843-9b8c-4c31-a691-e34f2bf61a58","5d264b2d-d8de-4dce-8e0f-57a40c037732","facdd972-8587-42d9-94db-fea86c95f74b","04a198f4-df84-4ecf-8114-648150edc5f6","c707a0ae-7ee9-4d7a-9262-8cc87c7444ef","0944cf9e-9f5a-4cc8-a6bb-982a82145e32","0dea505e-f72c-4939-91fb-c5d318d31cbd","16018ead-6f73-447d-a422-e5895ea2f1e8","4110a755-2084-451d-a03f-2267f377e37a","c44b3809-aa60-4e78-ad0c-fc02ae6b0fb9","9f657a3d-7377-48a8-b6a3-b5a871d58953","02c0fdb9-19a4-4156-9d06-b8aa940e792a","fd78894d-5436-4f66-907a-9ef485a20d7f","11199e7d-90dd-47b0-9da2-1fc58ed7e9b7","51deb6a1-950b-4cd2-8c66-4a0b5a37291b","5eed6188-c6d6-4966-9543-28b3c88ee4e1","e51231c2-1e1d-4b36-9499-4761c759c21d","599ba755-215c-4d72-a152-5e902c03e753","9d21bfc7-b04f-4615-93d5-eb79e9e217e2","1fa05968-fc4e-4728-bf0e-c48de37a2ae1","73c521c0-1787-493e-845e-89b957b58b8b","c570afbe-46af-4d76-b23b-6e16d8d57df4","85d99e6d-f6d6-408f-a9f1-b7a97237d5c4","227e9423-1792-43b0-82e6-ac94397ed789","bc018f2c-f33c-4f25-bffb-34f3da74d2db","cfd6dc82-faa9-4f51-8534-964917ca7666","5ea8beca-77b8-44cb-8871-93620f04a6e7","7cbc7e85-a998-4d7c-bc89-78fbd0df6e8c","f35ee5d5-f4eb-42c4-a2bb-0f3c706afee7","5f94ce71-7492-4d10-ae80-3482646ca6cd","5299e6b7-b23b-46c8-8277-dc1147807117","c0f60687-8f09-4186-801b-9dd11d82d2e1","1400552c-6fe7-4bbd-a3ca-59ffea564316","ef686670-a2cc-4aec-89bf-8a67c4033507","ced133bc-30d4-48de-b239-78e9fe91c8c0","ba9770c6-6fb6-480b-9fcd-ee2ca1d7b0d6","3778be8b-3cde-493e-8ebc-a6c3f9be6129","5ce1ccad-10d3-4d04-a455-4ab42ee64a61","70d2b6ec-b846-43dc-b4f7-1a84ff24a176","0302f714-23e2-4c23-bd45-d1c97c1c1000","8c4b4f4e-6bf7-4da8-a51a-d341baf3ce44","eba5c6e7-188e-488f-a40d-0f14e1edf190","664a82c2-8810-4432-b9c4-bc5be3f7a0a6","1ef94f5a-a930-4996-9ddb-1dca7c74d040","12df5617-a0af-48ca-bf2c-4bcca863fd84","c80801f3-5848-4f8f-9c7a-dc0052a3655d","fb3429ab-83d0-4bed-95e9-1a8e9455252c","e05dbbce-79c2-45a2-a7ef-f1058856feb3","4bb527f3-5718-477f-93ae-96a00a4944fe","cafc4bb9-6584-480c-b992-c6643801be41","ba4c5917-5ba3-495b-857c-af2642a5b115","e4b5cac5-c0f5-4618-aa98-3c01e18c5fde","e6fd4e44-694e-4e30-b72a-7da4ef662a29","6b82129a-13ef-4554-93a5-17cda6672746","5f14ad42-7fae-4258-b7bf-ab24eb46988d","548801a8-a653-452a-b883-db65b6d06fac","0afea355-fcdc-47a0-a82c-f5436b883790","184ca802-aa58-44e3-96a1-5905c23d9364","50dc548d-0c1f-41c5-bf52-cb6957d9d052","82be74c1-6520-4ab5-b10e-fc17162b8c86","b69ac3e7-4dd7-45e8-ad79-2bf1d780f221","d2da8762-d5bc-4197-94d0-8c298fc6e5ed","c1b0ff3b-5ef1-4cf6-b723-64c216558172","08ea33e0-01df-4486-88f0-e1f35de8ca0b","cabab48d-da29-4857-88f0-789518f35342","a3ea6660-0f26-4ca7-8772-09c454995588","406307ea-f1c6-4592-b338-fdf958e300e6","3b98cb2d-64df-4532-a36a-b835b0494744","076cf91a-5eb9-4ee2-9bbf-647e8d818ddb","3742010c-b092-4f45-9448-d0ba8d14c7b8","148e2723-a8b5-4bac-ba2a-02ee22afe3dc","c8cf041f-6c65-4e3a-b304-e0b7cfe5a7a8","4aafbb38-45c3-4510-a4fb-79ddee4609e1","9295f662-1576-4cd9-ae2c-e5b98e004013","caa10cde-996e-4f8d-adfb-d7e3d8046726","73992542-7eea-446a-a813-be9be977a1e9","800d0ed9-5ab9-43c2-b9bf-65bb3d740822","75cbd5cd-883c-4b21-a7f7-cd7f4862c796","4f15c6a9-03c7-4290-a534-d8125d5cf9c0","e1f7972d-096f-4309-8ff3-e95fc6e290be","b88ac08b-1838-4987-8510-5d098e4e029b","bbeb12ae-8826-49e2-b9c1-efb3c49c336e","7c2068ba-d812-424b-bb7f-59445cac4081","ce7feb1b-c0e1-4a8e-a841-3711b1bee26d","07fd3b0d-1350-46c2-91be-bf586c46e878","e76d4f0e-1cbc-4afb-85f9-eea31e83f8e0","3985e331-9778-4909-aa73-79e23575ccc5","7cf78357-6f6e-49bc-9d7c-2a53a51a7de2","45fae77e-3723-4cd9-a1c4-bb7f1dae5943"]}},"description":"All - C+AI Subscriptions must have pre-defined C+AI NSG rules. See https://aka.ms/netiso/nsgs - for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:28:53.5540872Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:35:24.5779103Z"},"enforcementMode":"Default"},"identity":{"principalId":"6179a082-c057-4fe3-8118-916b816a42e3","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","type":"SystemAssigned"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-NSG-DINE-SR106-v013","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-NSG-DINE-SR106-v013","location":"japanwest"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-nsg-rule-107_1.3","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/fb6de85c9e746cf1","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"ruleNo":{"value":"107"},"info":{"value":"DO - NOT DELETE - Will result in ICM Sev 2 - Azure Core Security, see aka.ms/cainsgpolicy"},"destinationPortRanges":{"value":["23","135","445","5985","5986"]},"protocol":{"value":"Tcp"},"sourceType":{"value":"Service - Tag"},"sourceValue":{"value":"Internet"},"actionValue":{"value":"Deny"},"direction":{"value":"Inbound"},"tagname":{"value":"SkipNRMSMgmt"},"subscriptionExclusions":{"value":["61868ab8-16d4-44ec-a9ff-f35d05922847","41c39ac7-6cde-4be7-87c3-d57a168b7b92","235d341f-7fb9-435c-9bdc-034b7306c9b4","239b3f1a-daab-4125-918c-f028b0edb054","12f44720-8952-422c-bb7d-28831c2de639","c36fd9e7-e5b1-4d3e-bb85-2e538040258b","243b67d4-60ca-4dfd-a556-216ee06f77a1","24ae0a2f-2cb0-4a1a-9929-bed71bad0d59","b4582baf-35d9-47b9-b03d-1bd126876221","65f79f71-cb42-45b1-82b7-4635fd05fc26","9532a63e-f2eb-4649-bb23-5ed01077ce80","1533031f-9510-4d8d-8f83-af94df45d43c","73d25f92-e703-4c91-8aed-2fb23c8e151f","86d6f8d7-564b-4005-912c-b1a3a9a286ce","97a3d790-8d62-4f20-b579-39ee6b06cb45","179be307-0377-46c0-a8bb-17437582d266","6c516c14-f378-4780-bc52-dd1d098a9c0b","cc5e1d36-a80d-4878-add9-5204a7efda20","0bf83929-3a19-4a96-87da-b23c3aca7fd7","ad7af743-6a66-480e-98cd-e022f833d0ce","0cfe98e1-3cf6-41ca-9f54-435d1ddaf0de","ce6570fa-18fb-4503-80d9-4a225591a428","2f8446c7-7c1e-42f0-a6b7-d68df1255cc4","ff78024c-d5a1-48ae-88eb-d61f0f60f8ff","bdd789f3-d9d1-4bea-ac14-30a39ed66d33","6fe0c04c-acb9-4f74-8153-56a6cb666ca8","7fa88f8d-252c-4b22-a73e-cd77f85cca66","bafb24c9-f4bb-46a0-9891-4b3e12dab22e","aab411af-ed4d-4f02-bb87-5de8b00d880d","7e7b7a6f-0b34-4db9-958d-ece4c89b419f","964c10bb-8a6c-43bc-83d3-6b318c6c7305","7b29bb4e-8391-4d57-8045-b34a092e5108","3f706ca0-34d7-4ede-a432-3c1a37ddd5c6","7856cb6f-e1a8-48f2-b2a5-bfaa7f8c34a1","49e3ed89-bbdb-4545-844f-e3502d6ce44f","8cad7ef7-ae41-4adf-86b8-ffcb11fae200","8e9ec0f8-bfe6-43a5-acd2-b6c4666ef9f6","b8fc6ee8-6802-4605-b4a5-1d131084c62f","45493131-fef6-4cb1-80e9-f0dadaa0255a","9c8295ef-4bf7-49db-90aa-5f0837dc60b7","ed0b2672-8412-463f-a0c1-1867730d7e27","7f31cba8-b597-4129-b158-8f21a7395bd0","3b658bfc-dbb0-4f7a-9e6c-a7659ade3514","825d553e-1fdf-4961-8f6b-bab24c6b07a7","477d55b5-bef1-4c35-b8bd-42df6ef99d25","0cd887ff-5af0-405b-8d48-b2b0495af57b","4259a25b-fc62-41d0-a101-60bfaab38086","3ae1ab9b-5849-4409-b744-58ba98878274","8d8d3365-2fab-415f-862e-712d989871b2","1ef6f67e-7981-498c-8349-b67109d0fd0f","e9b95386-37fe-4820-9dc6-30a44fbeafba","f9e81224-18f1-4474-80b5-bd6b832f0b73","f0b97671-152e-45cc-a831-73fd5caa8740","d4c1893d-adf1-4111-aaa3-93d55a4059b9","2d3ea1e9-269c-4fd1-8878-21e84bf9d214","1267b3e1-8812-4435-82ff-9e57f390c194","38c49794-e385-48e6-b6ee-c42b9f2075be","2843db96-7d25-4cf5-8e67-71baed52dfb7","a531aaa4-20f4-40e6-ba1a-858a0359f602","b835f458-560c-49c2-8781-4b13d892ddd9","e4d287eb-a38c-4387-832a-e3c61ea576bd","af878dc5-7fe2-4698-b7fb-2ed4b2ffe4db","26d6d535-5164-443d-82f6-4c695caf7688","d862948f-6520-451f-af67-123309e4e4ce","ff96a11f-784d-4c26-94c7-34346d4d660e","38b241a5-8658-4b50-bfba-1800ee2d4d09","28f78ae5-97b2-487e-b097-270de10ce6b8","6c048bcd-2cc6-47fe-a558-ca54083d537e","62fc3d9a-b8ab-47e7-8df1-be09f78bb25a","48aae13c-e8a8-4057-a5d5-f77eaa56f1fd","b30d9dbd-c0f7-405f-902c-3eabd080eb00","aa858381-0720-4837-b0f8-60468c0b2763","7e6898e7-868d-490f-8f91-0cffa67c48a0","816e6e0f-a719-487e-a651-813f40cc95c5","aeaa528b-2620-42a7-bbe8-17b698d42530","9c870d54-05fd-46bb-9bb5-63a5756320a0","36e4aeae-caae-4cd6-8d6b-7015355c6229","d53f365b-64c6-45fa-9253-99fc92dfae5d","6b7b20bf-f54b-4a3d-9961-c85fbe894b67","875bd0a7-0adc-4391-8b42-85e866e87e5d","97454014-0118-4294-9648-938eb8f52327","de1883af-a411-450a-8c9f-55b07d48cd60","991af618-96d9-4bc0-879d-0e13ac6020c1","21eedfa4-4dc5-4056-bdba-dcfaf3b1a222","0e57ff86-19ec-4f88-8403-879bd0d64af8","31c8019a-6c01-4c1d-9a04-6bbd091e8ccd","52ce96d0-a12d-4e17-9644-50e0059a7730","f5f248fd-943d-477b-a9d2-de3db83d7712","c4ae973f-3a15-4409-a6cc-9cc91147f42e","ed10ec26-e9a9-40ba-85df-2d7e2dec7765","a083c30e-d4e5-4dc1-b310-02aaf36b316a","c1fd1678-d0fe-4253-a15f-a03eee323432","a013b98a-6c2a-4f92-a6a7-82266ac6f437","ef7a7954-0173-4574-86a1-486e015ab617","ded8fcaf-289f-40bd-b124-572d3d4f58ed","178b7546-3fed-4e8a-b001-9c71b1051ce9","f2b7f785-c33d-471f-bb13-57d62e83af62","a226aace-1c2d-4a53-96a3-de0ea8f3e4ad","b909342e-42c0-423e-8815-ea07509e27f9","9d124ad5-c7de-4c56-8ffe-0f3f6566d3b3","ddc736d4-2fe4-44ad-8b82-080913c64b79","ea406f31-bf7a-4139-a444-1f23847f1350","66affadd-ce7e-4ac3-a16c-d85dc2d07544","d0e65693-60a1-438c-be56-2225cf43d568","902dc4d6-9ae1-4141-ac1b-ca5b3071cd63","cac63bb3-1459-4b23-a864-f2ea6c6456e9","2fa553a5-a443-4f09-bd4c-dbc9ded93a1c","9d7c4ce2-5443-4499-a07a-695894000463","3814aaea-6bb6-4e31-b3c4-45e761c8d6d1","9d0fe465-cebe-41a0-afc4-e49fe70dee55","2edae715-e43e-471a-9b6d-a6bc52a395c0","c7d2e450-636b-443d-b737-5e2708629ea1","4bb073a1-ad47-4f14-bfa6-9ffd55ea8f81","0fbc3fc8-1bcd-433d-a6f0-b96ca76c60dc","f3d00ca5-7ce1-4562-8160-2a856dd6d1f3","1c91c686-b0d1-4f51-8784-9eee52c07b7e","c1089427-83d3-4286-9f35-5af546a6eb67","ec716296-0c8d-410a-8666-1eff05989831","c31ad117-e07c-4388-9148-387a2ba72135","c9802e4f-0860-43a1-b3ed-37d3ae8cdf92","708474aa-31a7-4dbd-a106-84de1043185d","f6470ed6-05de-421c-bae8-184d8d28be10","17cfecb9-1a5f-4b8b-a32f-119de8c44f5a","70d2f261-7253-4b1a-a52a-406e7a328c33","2fda68f7-567f-4c8f-b0b7-f4b6a5988e84","86b0b59c-8538-4aa6-90f6-ce8329258bb2","8ecadfc9-d1a3-4ea4-b844-0d9f87e4d7c8","433e1858-1953-42b2-a9dd-d7601c25d347","bb1216b4-4400-422b-8a67-8a80a9c88d5e","cf5e3b9b-595a-499d-8669-00b88b449213","e01c1ddb-8025-491a-986d-c249fa9a69a0","9d71e31b-7356-4d2d-a6e9-d588fc7692c2","c6e602bd-0d12-4265-bebc-cb208dd5030f","e929be23-7420-44f3-bd80-810a56d06e1e","46b59458-3f32-4f06-b6a2-bd27dda4305c","14cff334-91a5-4d9d-bf42-39c6d630d37c","80c8978c-c1c6-4f9e-94cd-874798b05935","f9da0435-3452-483a-a5f4-743988dc6b1d","0f1325ea-bcfe-4b02-a303-baaefb80a9f9","70407fa2-4234-4266-812c-d70754ed228c","41e806f1-99ee-4c48-9ce8-379068350924","7b6fdce7-2d25-4c7f-b8c1-004a375626cb","4a725092-b458-4dc2-9ae9-f8f0e7d415dc","178b2260-bd62-4372-ab30-7cf02b6a3108","d9964125-396a-4343-8d4e-b16c0281ae58","4df9862d-6ce3-486d-a4e1-8b246cb08f79","db205d1d-a8b1-49e1-8d5a-4f5b5ae39169","363499fe-248b-4624-ba5b-5f477bb924f4","9eefe291-18db-46f1-b308-4d7851fa270d","e4e0b3b0-1587-400f-95f9-1bb605a252c2","139c34d4-91bf-42c9-8dc5-b6c37f9ac517","8ab2ca47-1f5f-4936-8f37-c5780ff265d0","511013e8-8a72-4ddf-a9b4-1a9bb3a5fa6a","0a5044a6-a614-40e1-97e0-20af784237ea","a3fcf642-fa77-4d3c-886e-527258f00e72","4f6cdb57-2658-40b9-8adc-1b2ddf7dd7a2","df39322a-6ecd-418b-828d-09fd796dc10a","e1cb07f7-a3ac-4110-9d24-218d93bfa6f9","91280670-dbb5-4fcd-8dc3-dc9d53d94805","90b505b3-1abf-455b-af4d-f08d1135cf33","850d8476-e5fc-4059-9aed-9aeee349c384","ae2dd76f-0dd4-4484-b957-6700179f183f","9fb58da5-7347-4dbf-a892-7c933e5d7776","fc4ea3c9-1d30-4f18-b33b-7404e7da0123","693ffe34-785e-44cd-8fb7-81da25f4d3bd","3e272a96-8781-45f2-8378-6ffaa1596bcc","f2124ee6-885b-4aa6-885d-793c8626b87c","47ff8d6e-e419-464f-8940-dfa750f2115d","18f0638d-ad9b-460a-bd8b-61f12d998d0c","48021fc6-c9c8-4568-8c29-953aad4d1e0a","df41dfd5-a3a6-4c35-a58e-9b6ac732236e","1da3ace1-2326-4842-ba52-0e3a8dce989e","68f6be96-60c4-40f5-a14e-2a04dcacc1a6","5833e0eb-b53c-4156-b478-2eac8f04aec6","34530d5b-398d-496e-88d0-07a6e3de107e","4f698849-a196-4c80-be45-52d507ffb2d4","43350253-f84c-4fb3-a988-cc63366cc570","d466671a-79ad-4ca5-878f-599df8bcd17e","5ea9ae04-3601-468a-ba84-cb7e82ae1e48","31614129-0f24-4a4c-9731-53ceecc3017d","990d87fa-2d5a-48cc-bdff-0d3c6b9dd32d","5a2d898e-7f0b-43fd-8e0e-2b517b736499","16fc4a98-74ad-4970-9857-74d0f39a6c64","47380de2-eddf-42b2-b853-434cde2b5fa0","947d47b4-7883-4bb9-9d85-c5e8e2f572ce","8ca10d88-d6ce-458e-b707-a00f3b6183fd","76fb3144-bc19-4baf-ab79-432d526559b7","da07f543-88e8-4349-b9e1-2d135eb818c2","360cdc41-af67-426b-9249-b46077592db4","13973b32-e60a-4396-bf7a-85f0670d658d","b50578f7-df0d-4152-892d-ad77b284e233","0e584a02-5f47-4317-b102-9665aa08fc7d","83db2801-3fb7-4fda-9c88-227effca791f","ef378126-746c-42ef-87ea-83624095a7cc","6e793a99-19b9-4ac5-8f6a-709fd4da0b49","7bfee1d3-395f-414a-b76a-203385a535b8","100919d5-c4a2-4894-a3d7-83a8534dee66","00a794e2-f9ed-41f6-b2a3-444ec0b61131","3dfa5f20-e79c-437f-add7-0a2ade4379aa","359833f5-8592-40b6-8175-edc664e2196a","fddd10df-2a17-496f-8f2c-40845adac181","301ad868-469e-494a-948f-5212604443f0","9afb6667-24a4-456b-8720-48d5b530a003","05b724b7-9613-42c0-a5d1-45f2a0b40efd","5bb8c800-7777-43d0-a2ad-e8fae03ed3b7","b614deb1-8c61-4b74-9e54-f2c4ba8658af","6fd29849-b584-40ea-82c1-c908b83efd3f","921c46aa-ffa6-4d3b-9be2-b0affd7142d7","62ba464b-5e1c-468d-9a1f-9ddcd1053d68","5c0d4798-3eef-449f-9bfd-58d59fe6ff28","c90dc44b-a834-4a18-b728-b0631c14afa9","6a13868b-c532-4562-9131-5c866bddacf9","c33d86ef-305d-408c-87a2-b014fbcf2e16","7fe76de7-a6e6-491a-b482-449cec7c91fd","673fd28e-faab-4725-9bf4-a59b317f8f93","62f44dee-82b5-4a2f-896e-c2d132a4e415","8643025a-c059-4a48-85d0-d76f51d63a74","26fe00f8-9173-4872-9134-bb1d2e00343a","af599e54-878e-494d-8a8f-b8f8d8896f1a","c4c3550e-a965-4993-a50c-628fd38cd3e1","ab699598-7d66-4003-a0aa-86a0f827bbbf","6cedb63e-a5a2-4d1b-bf27-71f3688871ee","f3b504bb-826e-46c7-a1b7-674a5a0ae43a","9f9df1fb-cf10-42f4-b684-3913a492cc6d","be3bb907-a9fa-4b85-a21b-3154efeb0196","460397b3-c4d8-441c-9d4a-9374b15850d3","7b8aa759-d584-418d-b7e7-99e07cb45bc0","97f95e63-ac5d-4ad4-96ba-a5be9131f52b","86fe5e45-3696-4c0e-b88a-cf350e31ee68","bf0d72cc-0680-4042-bd37-2ff5d224c8d3","566c16c0-5a70-4062-80eb-42c00c823556","5bbcca67-469c-4af6-aa1f-f12014aa4747","e88da25c-3aa8-47a6-86d7-c9b2230171d8","4279e979-0fe8-4bba-8a79-e0012d33d2f7","7d3f20f0-ba46-4205-8bfa-508d47dec375","effdf562-0b65-48b3-bc44-bd406ceeb4c0","0af6e6ec-18c4-4cd6-97de-655d15eda26d","fc71d843-9b8c-4c31-a691-e34f2bf61a58","5d264b2d-d8de-4dce-8e0f-57a40c037732","facdd972-8587-42d9-94db-fea86c95f74b","04a198f4-df84-4ecf-8114-648150edc5f6","c707a0ae-7ee9-4d7a-9262-8cc87c7444ef","0944cf9e-9f5a-4cc8-a6bb-982a82145e32","0dea505e-f72c-4939-91fb-c5d318d31cbd","16018ead-6f73-447d-a422-e5895ea2f1e8","4110a755-2084-451d-a03f-2267f377e37a","c44b3809-aa60-4e78-ad0c-fc02ae6b0fb9","9f657a3d-7377-48a8-b6a3-b5a871d58953","02c0fdb9-19a4-4156-9d06-b8aa940e792a","fd78894d-5436-4f66-907a-9ef485a20d7f","11199e7d-90dd-47b0-9da2-1fc58ed7e9b7","51deb6a1-950b-4cd2-8c66-4a0b5a37291b","5eed6188-c6d6-4966-9543-28b3c88ee4e1","e51231c2-1e1d-4b36-9499-4761c759c21d","599ba755-215c-4d72-a152-5e902c03e753","9d21bfc7-b04f-4615-93d5-eb79e9e217e2","1fa05968-fc4e-4728-bf0e-c48de37a2ae1","73c521c0-1787-493e-845e-89b957b58b8b","c570afbe-46af-4d76-b23b-6e16d8d57df4","85d99e6d-f6d6-408f-a9f1-b7a97237d5c4","227e9423-1792-43b0-82e6-ac94397ed789","bc018f2c-f33c-4f25-bffb-34f3da74d2db","cfd6dc82-faa9-4f51-8534-964917ca7666","5ea8beca-77b8-44cb-8871-93620f04a6e7","7cbc7e85-a998-4d7c-bc89-78fbd0df6e8c","f35ee5d5-f4eb-42c4-a2bb-0f3c706afee7","5f94ce71-7492-4d10-ae80-3482646ca6cd","5299e6b7-b23b-46c8-8277-dc1147807117","c0f60687-8f09-4186-801b-9dd11d82d2e1","1400552c-6fe7-4bbd-a3ca-59ffea564316","ef686670-a2cc-4aec-89bf-8a67c4033507","ced133bc-30d4-48de-b239-78e9fe91c8c0","ba9770c6-6fb6-480b-9fcd-ee2ca1d7b0d6","3778be8b-3cde-493e-8ebc-a6c3f9be6129","5ce1ccad-10d3-4d04-a455-4ab42ee64a61","70d2b6ec-b846-43dc-b4f7-1a84ff24a176","0302f714-23e2-4c23-bd45-d1c97c1c1000","8c4b4f4e-6bf7-4da8-a51a-d341baf3ce44","eba5c6e7-188e-488f-a40d-0f14e1edf190","664a82c2-8810-4432-b9c4-bc5be3f7a0a6","1ef94f5a-a930-4996-9ddb-1dca7c74d040","12df5617-a0af-48ca-bf2c-4bcca863fd84","c80801f3-5848-4f8f-9c7a-dc0052a3655d","fb3429ab-83d0-4bed-95e9-1a8e9455252c","e05dbbce-79c2-45a2-a7ef-f1058856feb3","4bb527f3-5718-477f-93ae-96a00a4944fe","cafc4bb9-6584-480c-b992-c6643801be41","ba4c5917-5ba3-495b-857c-af2642a5b115","e4b5cac5-c0f5-4618-aa98-3c01e18c5fde","e6fd4e44-694e-4e30-b72a-7da4ef662a29","6b82129a-13ef-4554-93a5-17cda6672746","5f14ad42-7fae-4258-b7bf-ab24eb46988d","548801a8-a653-452a-b883-db65b6d06fac","0afea355-fcdc-47a0-a82c-f5436b883790","184ca802-aa58-44e3-96a1-5905c23d9364","50dc548d-0c1f-41c5-bf52-cb6957d9d052","82be74c1-6520-4ab5-b10e-fc17162b8c86","b69ac3e7-4dd7-45e8-ad79-2bf1d780f221","d2da8762-d5bc-4197-94d0-8c298fc6e5ed","c1b0ff3b-5ef1-4cf6-b723-64c216558172","08ea33e0-01df-4486-88f0-e1f35de8ca0b","cabab48d-da29-4857-88f0-789518f35342","a3ea6660-0f26-4ca7-8772-09c454995588","406307ea-f1c6-4592-b338-fdf958e300e6","3b98cb2d-64df-4532-a36a-b835b0494744","076cf91a-5eb9-4ee2-9bbf-647e8d818ddb","3742010c-b092-4f45-9448-d0ba8d14c7b8","148e2723-a8b5-4bac-ba2a-02ee22afe3dc","c8cf041f-6c65-4e3a-b304-e0b7cfe5a7a8","4aafbb38-45c3-4510-a4fb-79ddee4609e1","9295f662-1576-4cd9-ae2c-e5b98e004013","caa10cde-996e-4f8d-adfb-d7e3d8046726","73992542-7eea-446a-a813-be9be977a1e9","800d0ed9-5ab9-43c2-b9bf-65bb3d740822","75cbd5cd-883c-4b21-a7f7-cd7f4862c796","4f15c6a9-03c7-4290-a534-d8125d5cf9c0","e1f7972d-096f-4309-8ff3-e95fc6e290be","b88ac08b-1838-4987-8510-5d098e4e029b","bbeb12ae-8826-49e2-b9c1-efb3c49c336e","7c2068ba-d812-424b-bb7f-59445cac4081","ce7feb1b-c0e1-4a8e-a841-3711b1bee26d","07fd3b0d-1350-46c2-91be-bf586c46e878","e76d4f0e-1cbc-4afb-85f9-eea31e83f8e0","3985e331-9778-4909-aa73-79e23575ccc5","7cf78357-6f6e-49bc-9d7c-2a53a51a7de2","45fae77e-3723-4cd9-a1c4-bb7f1dae5943"]}},"description":"All - C+AI Subscriptions must have pre-defined C+AI NSG rules. See https://aka.ms/netiso/nsgs - for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:29:11.2279015Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:37:22.5704574Z"},"enforcementMode":"Default"},"identity":{"principalId":"7c2d0d59-528c-434a-8c6c-03330539cad2","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","type":"SystemAssigned"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-NSG-DINE-SR107-v013","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-NSG-DINE-SR107-v013","location":"uksouth"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-nsg-rule-108_1.3","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/532396f35af78946","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"ruleNo":{"value":"108"},"info":{"value":"DO - NOT DELETE - Will result in ICM Sev 2 - Azure Core Security, see aka.ms/cainsgpolicy"},"destinationPortRanges":{"value":["13","17","19","53","69","111","123","512","514","593","873","1900","5353","11211"]},"protocol":{"value":"*"},"sourceType":{"value":"Service - Tag"},"sourceValue":{"value":"Internet"},"actionValue":{"value":"Deny"},"direction":{"value":"Inbound"},"tagname":{"value":"SkipNRMSHigh"},"subscriptionExclusions":{"value":["61868ab8-16d4-44ec-a9ff-f35d05922847","41c39ac7-6cde-4be7-87c3-d57a168b7b92","235d341f-7fb9-435c-9bdc-034b7306c9b4","239b3f1a-daab-4125-918c-f028b0edb054","12f44720-8952-422c-bb7d-28831c2de639","c36fd9e7-e5b1-4d3e-bb85-2e538040258b","243b67d4-60ca-4dfd-a556-216ee06f77a1","24ae0a2f-2cb0-4a1a-9929-bed71bad0d59","b4582baf-35d9-47b9-b03d-1bd126876221","65f79f71-cb42-45b1-82b7-4635fd05fc26","9532a63e-f2eb-4649-bb23-5ed01077ce80","1533031f-9510-4d8d-8f83-af94df45d43c","73d25f92-e703-4c91-8aed-2fb23c8e151f","86d6f8d7-564b-4005-912c-b1a3a9a286ce","97a3d790-8d62-4f20-b579-39ee6b06cb45","179be307-0377-46c0-a8bb-17437582d266","6c516c14-f378-4780-bc52-dd1d098a9c0b","cc5e1d36-a80d-4878-add9-5204a7efda20","0bf83929-3a19-4a96-87da-b23c3aca7fd7","ad7af743-6a66-480e-98cd-e022f833d0ce","0cfe98e1-3cf6-41ca-9f54-435d1ddaf0de","ce6570fa-18fb-4503-80d9-4a225591a428","2f8446c7-7c1e-42f0-a6b7-d68df1255cc4","ff78024c-d5a1-48ae-88eb-d61f0f60f8ff","bdd789f3-d9d1-4bea-ac14-30a39ed66d33","6fe0c04c-acb9-4f74-8153-56a6cb666ca8","7fa88f8d-252c-4b22-a73e-cd77f85cca66","bafb24c9-f4bb-46a0-9891-4b3e12dab22e","aab411af-ed4d-4f02-bb87-5de8b00d880d","7e7b7a6f-0b34-4db9-958d-ece4c89b419f","964c10bb-8a6c-43bc-83d3-6b318c6c7305","7b29bb4e-8391-4d57-8045-b34a092e5108","3f706ca0-34d7-4ede-a432-3c1a37ddd5c6","7856cb6f-e1a8-48f2-b2a5-bfaa7f8c34a1","49e3ed89-bbdb-4545-844f-e3502d6ce44f","8cad7ef7-ae41-4adf-86b8-ffcb11fae200","8e9ec0f8-bfe6-43a5-acd2-b6c4666ef9f6","b8fc6ee8-6802-4605-b4a5-1d131084c62f","45493131-fef6-4cb1-80e9-f0dadaa0255a","9c8295ef-4bf7-49db-90aa-5f0837dc60b7","ed0b2672-8412-463f-a0c1-1867730d7e27","7f31cba8-b597-4129-b158-8f21a7395bd0","3b658bfc-dbb0-4f7a-9e6c-a7659ade3514","825d553e-1fdf-4961-8f6b-bab24c6b07a7","477d55b5-bef1-4c35-b8bd-42df6ef99d25","0cd887ff-5af0-405b-8d48-b2b0495af57b","4259a25b-fc62-41d0-a101-60bfaab38086","3ae1ab9b-5849-4409-b744-58ba98878274","8d8d3365-2fab-415f-862e-712d989871b2","1ef6f67e-7981-498c-8349-b67109d0fd0f","e9b95386-37fe-4820-9dc6-30a44fbeafba","f9e81224-18f1-4474-80b5-bd6b832f0b73","f0b97671-152e-45cc-a831-73fd5caa8740","d4c1893d-adf1-4111-aaa3-93d55a4059b9","2d3ea1e9-269c-4fd1-8878-21e84bf9d214","1267b3e1-8812-4435-82ff-9e57f390c194","38c49794-e385-48e6-b6ee-c42b9f2075be","2843db96-7d25-4cf5-8e67-71baed52dfb7","a531aaa4-20f4-40e6-ba1a-858a0359f602","b835f458-560c-49c2-8781-4b13d892ddd9","e4d287eb-a38c-4387-832a-e3c61ea576bd","af878dc5-7fe2-4698-b7fb-2ed4b2ffe4db","26d6d535-5164-443d-82f6-4c695caf7688","d862948f-6520-451f-af67-123309e4e4ce","ff96a11f-784d-4c26-94c7-34346d4d660e","38b241a5-8658-4b50-bfba-1800ee2d4d09","28f78ae5-97b2-487e-b097-270de10ce6b8","6c048bcd-2cc6-47fe-a558-ca54083d537e","62fc3d9a-b8ab-47e7-8df1-be09f78bb25a","48aae13c-e8a8-4057-a5d5-f77eaa56f1fd","b30d9dbd-c0f7-405f-902c-3eabd080eb00","aa858381-0720-4837-b0f8-60468c0b2763","7e6898e7-868d-490f-8f91-0cffa67c48a0","816e6e0f-a719-487e-a651-813f40cc95c5","aeaa528b-2620-42a7-bbe8-17b698d42530","9c870d54-05fd-46bb-9bb5-63a5756320a0","36e4aeae-caae-4cd6-8d6b-7015355c6229","d53f365b-64c6-45fa-9253-99fc92dfae5d","6b7b20bf-f54b-4a3d-9961-c85fbe894b67","875bd0a7-0adc-4391-8b42-85e866e87e5d","97454014-0118-4294-9648-938eb8f52327","de1883af-a411-450a-8c9f-55b07d48cd60","991af618-96d9-4bc0-879d-0e13ac6020c1","21eedfa4-4dc5-4056-bdba-dcfaf3b1a222","0e57ff86-19ec-4f88-8403-879bd0d64af8","31c8019a-6c01-4c1d-9a04-6bbd091e8ccd","52ce96d0-a12d-4e17-9644-50e0059a7730","f5f248fd-943d-477b-a9d2-de3db83d7712","c4ae973f-3a15-4409-a6cc-9cc91147f42e","ed10ec26-e9a9-40ba-85df-2d7e2dec7765","a083c30e-d4e5-4dc1-b310-02aaf36b316a","c1fd1678-d0fe-4253-a15f-a03eee323432","a013b98a-6c2a-4f92-a6a7-82266ac6f437","ef7a7954-0173-4574-86a1-486e015ab617","ded8fcaf-289f-40bd-b124-572d3d4f58ed","178b7546-3fed-4e8a-b001-9c71b1051ce9","f2b7f785-c33d-471f-bb13-57d62e83af62","a226aace-1c2d-4a53-96a3-de0ea8f3e4ad","b909342e-42c0-423e-8815-ea07509e27f9","9d124ad5-c7de-4c56-8ffe-0f3f6566d3b3","ddc736d4-2fe4-44ad-8b82-080913c64b79","ea406f31-bf7a-4139-a444-1f23847f1350","66affadd-ce7e-4ac3-a16c-d85dc2d07544","d0e65693-60a1-438c-be56-2225cf43d568","902dc4d6-9ae1-4141-ac1b-ca5b3071cd63","cac63bb3-1459-4b23-a864-f2ea6c6456e9","2fa553a5-a443-4f09-bd4c-dbc9ded93a1c","9d7c4ce2-5443-4499-a07a-695894000463","3814aaea-6bb6-4e31-b3c4-45e761c8d6d1","9d0fe465-cebe-41a0-afc4-e49fe70dee55","2edae715-e43e-471a-9b6d-a6bc52a395c0","c7d2e450-636b-443d-b737-5e2708629ea1","4bb073a1-ad47-4f14-bfa6-9ffd55ea8f81","0fbc3fc8-1bcd-433d-a6f0-b96ca76c60dc","f3d00ca5-7ce1-4562-8160-2a856dd6d1f3","1c91c686-b0d1-4f51-8784-9eee52c07b7e","c1089427-83d3-4286-9f35-5af546a6eb67","ec716296-0c8d-410a-8666-1eff05989831","c31ad117-e07c-4388-9148-387a2ba72135","c9802e4f-0860-43a1-b3ed-37d3ae8cdf92","708474aa-31a7-4dbd-a106-84de1043185d","f6470ed6-05de-421c-bae8-184d8d28be10","17cfecb9-1a5f-4b8b-a32f-119de8c44f5a","70d2f261-7253-4b1a-a52a-406e7a328c33","2fda68f7-567f-4c8f-b0b7-f4b6a5988e84","86b0b59c-8538-4aa6-90f6-ce8329258bb2","8ecadfc9-d1a3-4ea4-b844-0d9f87e4d7c8","433e1858-1953-42b2-a9dd-d7601c25d347","bb1216b4-4400-422b-8a67-8a80a9c88d5e","cf5e3b9b-595a-499d-8669-00b88b449213","e01c1ddb-8025-491a-986d-c249fa9a69a0","9d71e31b-7356-4d2d-a6e9-d588fc7692c2","c6e602bd-0d12-4265-bebc-cb208dd5030f","e929be23-7420-44f3-bd80-810a56d06e1e","46b59458-3f32-4f06-b6a2-bd27dda4305c","14cff334-91a5-4d9d-bf42-39c6d630d37c","80c8978c-c1c6-4f9e-94cd-874798b05935","f9da0435-3452-483a-a5f4-743988dc6b1d","0f1325ea-bcfe-4b02-a303-baaefb80a9f9","70407fa2-4234-4266-812c-d70754ed228c","41e806f1-99ee-4c48-9ce8-379068350924","7b6fdce7-2d25-4c7f-b8c1-004a375626cb","4a725092-b458-4dc2-9ae9-f8f0e7d415dc","178b2260-bd62-4372-ab30-7cf02b6a3108","d9964125-396a-4343-8d4e-b16c0281ae58","4df9862d-6ce3-486d-a4e1-8b246cb08f79","db205d1d-a8b1-49e1-8d5a-4f5b5ae39169","363499fe-248b-4624-ba5b-5f477bb924f4","9eefe291-18db-46f1-b308-4d7851fa270d","e4e0b3b0-1587-400f-95f9-1bb605a252c2","139c34d4-91bf-42c9-8dc5-b6c37f9ac517","8ab2ca47-1f5f-4936-8f37-c5780ff265d0","511013e8-8a72-4ddf-a9b4-1a9bb3a5fa6a","0a5044a6-a614-40e1-97e0-20af784237ea","a3fcf642-fa77-4d3c-886e-527258f00e72","4f6cdb57-2658-40b9-8adc-1b2ddf7dd7a2","df39322a-6ecd-418b-828d-09fd796dc10a","e1cb07f7-a3ac-4110-9d24-218d93bfa6f9","91280670-dbb5-4fcd-8dc3-dc9d53d94805","90b505b3-1abf-455b-af4d-f08d1135cf33","850d8476-e5fc-4059-9aed-9aeee349c384","ae2dd76f-0dd4-4484-b957-6700179f183f","9fb58da5-7347-4dbf-a892-7c933e5d7776","fc4ea3c9-1d30-4f18-b33b-7404e7da0123","693ffe34-785e-44cd-8fb7-81da25f4d3bd","3e272a96-8781-45f2-8378-6ffaa1596bcc","f2124ee6-885b-4aa6-885d-793c8626b87c","47ff8d6e-e419-464f-8940-dfa750f2115d","18f0638d-ad9b-460a-bd8b-61f12d998d0c","48021fc6-c9c8-4568-8c29-953aad4d1e0a","df41dfd5-a3a6-4c35-a58e-9b6ac732236e","1da3ace1-2326-4842-ba52-0e3a8dce989e","68f6be96-60c4-40f5-a14e-2a04dcacc1a6","5833e0eb-b53c-4156-b478-2eac8f04aec6","34530d5b-398d-496e-88d0-07a6e3de107e","4f698849-a196-4c80-be45-52d507ffb2d4","43350253-f84c-4fb3-a988-cc63366cc570","d466671a-79ad-4ca5-878f-599df8bcd17e","5ea9ae04-3601-468a-ba84-cb7e82ae1e48","31614129-0f24-4a4c-9731-53ceecc3017d","990d87fa-2d5a-48cc-bdff-0d3c6b9dd32d","5a2d898e-7f0b-43fd-8e0e-2b517b736499","16fc4a98-74ad-4970-9857-74d0f39a6c64","47380de2-eddf-42b2-b853-434cde2b5fa0","947d47b4-7883-4bb9-9d85-c5e8e2f572ce","8ca10d88-d6ce-458e-b707-a00f3b6183fd","76fb3144-bc19-4baf-ab79-432d526559b7","da07f543-88e8-4349-b9e1-2d135eb818c2","360cdc41-af67-426b-9249-b46077592db4","13973b32-e60a-4396-bf7a-85f0670d658d","b50578f7-df0d-4152-892d-ad77b284e233","0e584a02-5f47-4317-b102-9665aa08fc7d","83db2801-3fb7-4fda-9c88-227effca791f","ef378126-746c-42ef-87ea-83624095a7cc","6e793a99-19b9-4ac5-8f6a-709fd4da0b49","7bfee1d3-395f-414a-b76a-203385a535b8","100919d5-c4a2-4894-a3d7-83a8534dee66","00a794e2-f9ed-41f6-b2a3-444ec0b61131","3dfa5f20-e79c-437f-add7-0a2ade4379aa","359833f5-8592-40b6-8175-edc664e2196a","fddd10df-2a17-496f-8f2c-40845adac181","301ad868-469e-494a-948f-5212604443f0","9afb6667-24a4-456b-8720-48d5b530a003","05b724b7-9613-42c0-a5d1-45f2a0b40efd","5bb8c800-7777-43d0-a2ad-e8fae03ed3b7","b614deb1-8c61-4b74-9e54-f2c4ba8658af","6fd29849-b584-40ea-82c1-c908b83efd3f","921c46aa-ffa6-4d3b-9be2-b0affd7142d7","62ba464b-5e1c-468d-9a1f-9ddcd1053d68","5c0d4798-3eef-449f-9bfd-58d59fe6ff28","c90dc44b-a834-4a18-b728-b0631c14afa9","6a13868b-c532-4562-9131-5c866bddacf9","c33d86ef-305d-408c-87a2-b014fbcf2e16","7fe76de7-a6e6-491a-b482-449cec7c91fd","673fd28e-faab-4725-9bf4-a59b317f8f93","62f44dee-82b5-4a2f-896e-c2d132a4e415","8643025a-c059-4a48-85d0-d76f51d63a74","26fe00f8-9173-4872-9134-bb1d2e00343a","af599e54-878e-494d-8a8f-b8f8d8896f1a","c4c3550e-a965-4993-a50c-628fd38cd3e1","ab699598-7d66-4003-a0aa-86a0f827bbbf","6cedb63e-a5a2-4d1b-bf27-71f3688871ee","f3b504bb-826e-46c7-a1b7-674a5a0ae43a","9f9df1fb-cf10-42f4-b684-3913a492cc6d","be3bb907-a9fa-4b85-a21b-3154efeb0196","460397b3-c4d8-441c-9d4a-9374b15850d3","7b8aa759-d584-418d-b7e7-99e07cb45bc0","97f95e63-ac5d-4ad4-96ba-a5be9131f52b","86fe5e45-3696-4c0e-b88a-cf350e31ee68","bf0d72cc-0680-4042-bd37-2ff5d224c8d3","566c16c0-5a70-4062-80eb-42c00c823556","5bbcca67-469c-4af6-aa1f-f12014aa4747","e88da25c-3aa8-47a6-86d7-c9b2230171d8","4279e979-0fe8-4bba-8a79-e0012d33d2f7","7d3f20f0-ba46-4205-8bfa-508d47dec375","effdf562-0b65-48b3-bc44-bd406ceeb4c0","0af6e6ec-18c4-4cd6-97de-655d15eda26d","fc71d843-9b8c-4c31-a691-e34f2bf61a58","5d264b2d-d8de-4dce-8e0f-57a40c037732","facdd972-8587-42d9-94db-fea86c95f74b","04a198f4-df84-4ecf-8114-648150edc5f6","c707a0ae-7ee9-4d7a-9262-8cc87c7444ef","0944cf9e-9f5a-4cc8-a6bb-982a82145e32","0dea505e-f72c-4939-91fb-c5d318d31cbd","16018ead-6f73-447d-a422-e5895ea2f1e8","4110a755-2084-451d-a03f-2267f377e37a","c44b3809-aa60-4e78-ad0c-fc02ae6b0fb9","9f657a3d-7377-48a8-b6a3-b5a871d58953","02c0fdb9-19a4-4156-9d06-b8aa940e792a","fd78894d-5436-4f66-907a-9ef485a20d7f","11199e7d-90dd-47b0-9da2-1fc58ed7e9b7","51deb6a1-950b-4cd2-8c66-4a0b5a37291b","5eed6188-c6d6-4966-9543-28b3c88ee4e1","e51231c2-1e1d-4b36-9499-4761c759c21d","599ba755-215c-4d72-a152-5e902c03e753","9d21bfc7-b04f-4615-93d5-eb79e9e217e2","1fa05968-fc4e-4728-bf0e-c48de37a2ae1","73c521c0-1787-493e-845e-89b957b58b8b","c570afbe-46af-4d76-b23b-6e16d8d57df4","85d99e6d-f6d6-408f-a9f1-b7a97237d5c4","227e9423-1792-43b0-82e6-ac94397ed789","bc018f2c-f33c-4f25-bffb-34f3da74d2db","cfd6dc82-faa9-4f51-8534-964917ca7666","5ea8beca-77b8-44cb-8871-93620f04a6e7","7cbc7e85-a998-4d7c-bc89-78fbd0df6e8c","f35ee5d5-f4eb-42c4-a2bb-0f3c706afee7","5f94ce71-7492-4d10-ae80-3482646ca6cd","5299e6b7-b23b-46c8-8277-dc1147807117","c0f60687-8f09-4186-801b-9dd11d82d2e1","1400552c-6fe7-4bbd-a3ca-59ffea564316","ef686670-a2cc-4aec-89bf-8a67c4033507","ced133bc-30d4-48de-b239-78e9fe91c8c0","ba9770c6-6fb6-480b-9fcd-ee2ca1d7b0d6","3778be8b-3cde-493e-8ebc-a6c3f9be6129","5ce1ccad-10d3-4d04-a455-4ab42ee64a61","70d2b6ec-b846-43dc-b4f7-1a84ff24a176","0302f714-23e2-4c23-bd45-d1c97c1c1000","8c4b4f4e-6bf7-4da8-a51a-d341baf3ce44","eba5c6e7-188e-488f-a40d-0f14e1edf190","664a82c2-8810-4432-b9c4-bc5be3f7a0a6","1ef94f5a-a930-4996-9ddb-1dca7c74d040","12df5617-a0af-48ca-bf2c-4bcca863fd84","c80801f3-5848-4f8f-9c7a-dc0052a3655d","fb3429ab-83d0-4bed-95e9-1a8e9455252c","e05dbbce-79c2-45a2-a7ef-f1058856feb3","4bb527f3-5718-477f-93ae-96a00a4944fe","cafc4bb9-6584-480c-b992-c6643801be41","ba4c5917-5ba3-495b-857c-af2642a5b115","e4b5cac5-c0f5-4618-aa98-3c01e18c5fde","e6fd4e44-694e-4e30-b72a-7da4ef662a29","6b82129a-13ef-4554-93a5-17cda6672746","5f14ad42-7fae-4258-b7bf-ab24eb46988d","548801a8-a653-452a-b883-db65b6d06fac","0afea355-fcdc-47a0-a82c-f5436b883790","184ca802-aa58-44e3-96a1-5905c23d9364","50dc548d-0c1f-41c5-bf52-cb6957d9d052","82be74c1-6520-4ab5-b10e-fc17162b8c86","b69ac3e7-4dd7-45e8-ad79-2bf1d780f221","d2da8762-d5bc-4197-94d0-8c298fc6e5ed","c1b0ff3b-5ef1-4cf6-b723-64c216558172","08ea33e0-01df-4486-88f0-e1f35de8ca0b","cabab48d-da29-4857-88f0-789518f35342","a3ea6660-0f26-4ca7-8772-09c454995588","406307ea-f1c6-4592-b338-fdf958e300e6","3b98cb2d-64df-4532-a36a-b835b0494744","076cf91a-5eb9-4ee2-9bbf-647e8d818ddb","3742010c-b092-4f45-9448-d0ba8d14c7b8","148e2723-a8b5-4bac-ba2a-02ee22afe3dc","c8cf041f-6c65-4e3a-b304-e0b7cfe5a7a8","4aafbb38-45c3-4510-a4fb-79ddee4609e1","9295f662-1576-4cd9-ae2c-e5b98e004013","caa10cde-996e-4f8d-adfb-d7e3d8046726","73992542-7eea-446a-a813-be9be977a1e9","800d0ed9-5ab9-43c2-b9bf-65bb3d740822","75cbd5cd-883c-4b21-a7f7-cd7f4862c796","4f15c6a9-03c7-4290-a534-d8125d5cf9c0","e1f7972d-096f-4309-8ff3-e95fc6e290be","b88ac08b-1838-4987-8510-5d098e4e029b","bbeb12ae-8826-49e2-b9c1-efb3c49c336e","7c2068ba-d812-424b-bb7f-59445cac4081","ce7feb1b-c0e1-4a8e-a841-3711b1bee26d","07fd3b0d-1350-46c2-91be-bf586c46e878","e76d4f0e-1cbc-4afb-85f9-eea31e83f8e0","3985e331-9778-4909-aa73-79e23575ccc5","7cf78357-6f6e-49bc-9d7c-2a53a51a7de2","45fae77e-3723-4cd9-a1c4-bb7f1dae5943"]}},"description":"All - C+AI Subscriptions must have pre-defined C+AI NSG rules. See https://aka.ms/netiso/nsgs - for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:29:02.4628867Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:36:01.428405Z"},"enforcementMode":"Default"},"identity":{"principalId":"7d7aed0a-228e-420b-a6a2-82a49dacb8cb","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","type":"SystemAssigned"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-NSG-DINE-SR108-v013","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-NSG-DINE-SR108-v013","location":"germanywestcentral"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-nsg-rule-109_1.3","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/e0bc08af3bd773ff","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"ruleNo":{"value":"109"},"info":{"value":"DO - NOT DELETE - Will result in ICM Sev 2 - Azure Core Security, see aka.ms/cainsgpolicy"},"destinationPortRanges":{"value":["119","137","138","139","161","162","389","636","2049","2301","2381","3268","5800","5900"]},"protocol":{"value":"*"},"sourceType":{"value":"Service - Tag"},"sourceValue":{"value":"Internet"},"actionValue":{"value":"Deny"},"direction":{"value":"Inbound"},"tagname":{"value":"SkipNRMSMedium"},"subscriptionExclusions":{"value":["61868ab8-16d4-44ec-a9ff-f35d05922847","41c39ac7-6cde-4be7-87c3-d57a168b7b92","235d341f-7fb9-435c-9bdc-034b7306c9b4","239b3f1a-daab-4125-918c-f028b0edb054","12f44720-8952-422c-bb7d-28831c2de639","c36fd9e7-e5b1-4d3e-bb85-2e538040258b","243b67d4-60ca-4dfd-a556-216ee06f77a1","24ae0a2f-2cb0-4a1a-9929-bed71bad0d59","b4582baf-35d9-47b9-b03d-1bd126876221","65f79f71-cb42-45b1-82b7-4635fd05fc26","9532a63e-f2eb-4649-bb23-5ed01077ce80","1533031f-9510-4d8d-8f83-af94df45d43c","73d25f92-e703-4c91-8aed-2fb23c8e151f","86d6f8d7-564b-4005-912c-b1a3a9a286ce","97a3d790-8d62-4f20-b579-39ee6b06cb45","179be307-0377-46c0-a8bb-17437582d266","6c516c14-f378-4780-bc52-dd1d098a9c0b","cc5e1d36-a80d-4878-add9-5204a7efda20","0bf83929-3a19-4a96-87da-b23c3aca7fd7","ad7af743-6a66-480e-98cd-e022f833d0ce","0cfe98e1-3cf6-41ca-9f54-435d1ddaf0de","ce6570fa-18fb-4503-80d9-4a225591a428","2f8446c7-7c1e-42f0-a6b7-d68df1255cc4","ff78024c-d5a1-48ae-88eb-d61f0f60f8ff","bdd789f3-d9d1-4bea-ac14-30a39ed66d33","6fe0c04c-acb9-4f74-8153-56a6cb666ca8","7fa88f8d-252c-4b22-a73e-cd77f85cca66","bafb24c9-f4bb-46a0-9891-4b3e12dab22e","aab411af-ed4d-4f02-bb87-5de8b00d880d","7e7b7a6f-0b34-4db9-958d-ece4c89b419f","964c10bb-8a6c-43bc-83d3-6b318c6c7305","7b29bb4e-8391-4d57-8045-b34a092e5108","3f706ca0-34d7-4ede-a432-3c1a37ddd5c6","7856cb6f-e1a8-48f2-b2a5-bfaa7f8c34a1","49e3ed89-bbdb-4545-844f-e3502d6ce44f","8cad7ef7-ae41-4adf-86b8-ffcb11fae200","8e9ec0f8-bfe6-43a5-acd2-b6c4666ef9f6","b8fc6ee8-6802-4605-b4a5-1d131084c62f","45493131-fef6-4cb1-80e9-f0dadaa0255a","9c8295ef-4bf7-49db-90aa-5f0837dc60b7","ed0b2672-8412-463f-a0c1-1867730d7e27","7f31cba8-b597-4129-b158-8f21a7395bd0","3b658bfc-dbb0-4f7a-9e6c-a7659ade3514","825d553e-1fdf-4961-8f6b-bab24c6b07a7","477d55b5-bef1-4c35-b8bd-42df6ef99d25","0cd887ff-5af0-405b-8d48-b2b0495af57b","4259a25b-fc62-41d0-a101-60bfaab38086","3ae1ab9b-5849-4409-b744-58ba98878274","8d8d3365-2fab-415f-862e-712d989871b2","1ef6f67e-7981-498c-8349-b67109d0fd0f","e9b95386-37fe-4820-9dc6-30a44fbeafba","f9e81224-18f1-4474-80b5-bd6b832f0b73","f0b97671-152e-45cc-a831-73fd5caa8740","d4c1893d-adf1-4111-aaa3-93d55a4059b9","2d3ea1e9-269c-4fd1-8878-21e84bf9d214","1267b3e1-8812-4435-82ff-9e57f390c194","38c49794-e385-48e6-b6ee-c42b9f2075be","2843db96-7d25-4cf5-8e67-71baed52dfb7","a531aaa4-20f4-40e6-ba1a-858a0359f602","b835f458-560c-49c2-8781-4b13d892ddd9","e4d287eb-a38c-4387-832a-e3c61ea576bd","af878dc5-7fe2-4698-b7fb-2ed4b2ffe4db","26d6d535-5164-443d-82f6-4c695caf7688","d862948f-6520-451f-af67-123309e4e4ce","ff96a11f-784d-4c26-94c7-34346d4d660e","38b241a5-8658-4b50-bfba-1800ee2d4d09","28f78ae5-97b2-487e-b097-270de10ce6b8","6c048bcd-2cc6-47fe-a558-ca54083d537e","62fc3d9a-b8ab-47e7-8df1-be09f78bb25a","48aae13c-e8a8-4057-a5d5-f77eaa56f1fd","b30d9dbd-c0f7-405f-902c-3eabd080eb00","aa858381-0720-4837-b0f8-60468c0b2763","7e6898e7-868d-490f-8f91-0cffa67c48a0","816e6e0f-a719-487e-a651-813f40cc95c5","aeaa528b-2620-42a7-bbe8-17b698d42530","9c870d54-05fd-46bb-9bb5-63a5756320a0","36e4aeae-caae-4cd6-8d6b-7015355c6229","d53f365b-64c6-45fa-9253-99fc92dfae5d","6b7b20bf-f54b-4a3d-9961-c85fbe894b67","875bd0a7-0adc-4391-8b42-85e866e87e5d","97454014-0118-4294-9648-938eb8f52327","de1883af-a411-450a-8c9f-55b07d48cd60","991af618-96d9-4bc0-879d-0e13ac6020c1","21eedfa4-4dc5-4056-bdba-dcfaf3b1a222","0e57ff86-19ec-4f88-8403-879bd0d64af8","31c8019a-6c01-4c1d-9a04-6bbd091e8ccd","52ce96d0-a12d-4e17-9644-50e0059a7730","f5f248fd-943d-477b-a9d2-de3db83d7712","c4ae973f-3a15-4409-a6cc-9cc91147f42e","ed10ec26-e9a9-40ba-85df-2d7e2dec7765","a083c30e-d4e5-4dc1-b310-02aaf36b316a","c1fd1678-d0fe-4253-a15f-a03eee323432","a013b98a-6c2a-4f92-a6a7-82266ac6f437","ef7a7954-0173-4574-86a1-486e015ab617","ded8fcaf-289f-40bd-b124-572d3d4f58ed","178b7546-3fed-4e8a-b001-9c71b1051ce9","f2b7f785-c33d-471f-bb13-57d62e83af62","a226aace-1c2d-4a53-96a3-de0ea8f3e4ad","b909342e-42c0-423e-8815-ea07509e27f9","9d124ad5-c7de-4c56-8ffe-0f3f6566d3b3","ddc736d4-2fe4-44ad-8b82-080913c64b79","ea406f31-bf7a-4139-a444-1f23847f1350","66affadd-ce7e-4ac3-a16c-d85dc2d07544","d0e65693-60a1-438c-be56-2225cf43d568","902dc4d6-9ae1-4141-ac1b-ca5b3071cd63","cac63bb3-1459-4b23-a864-f2ea6c6456e9","2fa553a5-a443-4f09-bd4c-dbc9ded93a1c","9d7c4ce2-5443-4499-a07a-695894000463","3814aaea-6bb6-4e31-b3c4-45e761c8d6d1","9d0fe465-cebe-41a0-afc4-e49fe70dee55","2edae715-e43e-471a-9b6d-a6bc52a395c0","c7d2e450-636b-443d-b737-5e2708629ea1","4bb073a1-ad47-4f14-bfa6-9ffd55ea8f81","0fbc3fc8-1bcd-433d-a6f0-b96ca76c60dc","f3d00ca5-7ce1-4562-8160-2a856dd6d1f3","1c91c686-b0d1-4f51-8784-9eee52c07b7e","c1089427-83d3-4286-9f35-5af546a6eb67","ec716296-0c8d-410a-8666-1eff05989831","c31ad117-e07c-4388-9148-387a2ba72135","c9802e4f-0860-43a1-b3ed-37d3ae8cdf92","708474aa-31a7-4dbd-a106-84de1043185d","f6470ed6-05de-421c-bae8-184d8d28be10","17cfecb9-1a5f-4b8b-a32f-119de8c44f5a","70d2f261-7253-4b1a-a52a-406e7a328c33","2fda68f7-567f-4c8f-b0b7-f4b6a5988e84","86b0b59c-8538-4aa6-90f6-ce8329258bb2","8ecadfc9-d1a3-4ea4-b844-0d9f87e4d7c8","433e1858-1953-42b2-a9dd-d7601c25d347","bb1216b4-4400-422b-8a67-8a80a9c88d5e","cf5e3b9b-595a-499d-8669-00b88b449213","e01c1ddb-8025-491a-986d-c249fa9a69a0","9d71e31b-7356-4d2d-a6e9-d588fc7692c2","c6e602bd-0d12-4265-bebc-cb208dd5030f","e929be23-7420-44f3-bd80-810a56d06e1e","46b59458-3f32-4f06-b6a2-bd27dda4305c","14cff334-91a5-4d9d-bf42-39c6d630d37c","80c8978c-c1c6-4f9e-94cd-874798b05935","f9da0435-3452-483a-a5f4-743988dc6b1d","0f1325ea-bcfe-4b02-a303-baaefb80a9f9","70407fa2-4234-4266-812c-d70754ed228c","41e806f1-99ee-4c48-9ce8-379068350924","7b6fdce7-2d25-4c7f-b8c1-004a375626cb","4a725092-b458-4dc2-9ae9-f8f0e7d415dc","178b2260-bd62-4372-ab30-7cf02b6a3108","d9964125-396a-4343-8d4e-b16c0281ae58","4df9862d-6ce3-486d-a4e1-8b246cb08f79","db205d1d-a8b1-49e1-8d5a-4f5b5ae39169","363499fe-248b-4624-ba5b-5f477bb924f4","9eefe291-18db-46f1-b308-4d7851fa270d","e4e0b3b0-1587-400f-95f9-1bb605a252c2","139c34d4-91bf-42c9-8dc5-b6c37f9ac517","8ab2ca47-1f5f-4936-8f37-c5780ff265d0","511013e8-8a72-4ddf-a9b4-1a9bb3a5fa6a","0a5044a6-a614-40e1-97e0-20af784237ea","a3fcf642-fa77-4d3c-886e-527258f00e72","4f6cdb57-2658-40b9-8adc-1b2ddf7dd7a2","df39322a-6ecd-418b-828d-09fd796dc10a","e1cb07f7-a3ac-4110-9d24-218d93bfa6f9","91280670-dbb5-4fcd-8dc3-dc9d53d94805","90b505b3-1abf-455b-af4d-f08d1135cf33","850d8476-e5fc-4059-9aed-9aeee349c384","ae2dd76f-0dd4-4484-b957-6700179f183f","9fb58da5-7347-4dbf-a892-7c933e5d7776","fc4ea3c9-1d30-4f18-b33b-7404e7da0123","693ffe34-785e-44cd-8fb7-81da25f4d3bd","3e272a96-8781-45f2-8378-6ffaa1596bcc","f2124ee6-885b-4aa6-885d-793c8626b87c","47ff8d6e-e419-464f-8940-dfa750f2115d","18f0638d-ad9b-460a-bd8b-61f12d998d0c","48021fc6-c9c8-4568-8c29-953aad4d1e0a","df41dfd5-a3a6-4c35-a58e-9b6ac732236e","1da3ace1-2326-4842-ba52-0e3a8dce989e","68f6be96-60c4-40f5-a14e-2a04dcacc1a6","5833e0eb-b53c-4156-b478-2eac8f04aec6","34530d5b-398d-496e-88d0-07a6e3de107e","4f698849-a196-4c80-be45-52d507ffb2d4","43350253-f84c-4fb3-a988-cc63366cc570","d466671a-79ad-4ca5-878f-599df8bcd17e","5ea9ae04-3601-468a-ba84-cb7e82ae1e48","31614129-0f24-4a4c-9731-53ceecc3017d","990d87fa-2d5a-48cc-bdff-0d3c6b9dd32d","5a2d898e-7f0b-43fd-8e0e-2b517b736499","16fc4a98-74ad-4970-9857-74d0f39a6c64","47380de2-eddf-42b2-b853-434cde2b5fa0","947d47b4-7883-4bb9-9d85-c5e8e2f572ce","8ca10d88-d6ce-458e-b707-a00f3b6183fd","76fb3144-bc19-4baf-ab79-432d526559b7","da07f543-88e8-4349-b9e1-2d135eb818c2","360cdc41-af67-426b-9249-b46077592db4","13973b32-e60a-4396-bf7a-85f0670d658d","b50578f7-df0d-4152-892d-ad77b284e233","0e584a02-5f47-4317-b102-9665aa08fc7d","83db2801-3fb7-4fda-9c88-227effca791f","ef378126-746c-42ef-87ea-83624095a7cc","6e793a99-19b9-4ac5-8f6a-709fd4da0b49","7bfee1d3-395f-414a-b76a-203385a535b8","100919d5-c4a2-4894-a3d7-83a8534dee66","00a794e2-f9ed-41f6-b2a3-444ec0b61131","3dfa5f20-e79c-437f-add7-0a2ade4379aa","359833f5-8592-40b6-8175-edc664e2196a","fddd10df-2a17-496f-8f2c-40845adac181","301ad868-469e-494a-948f-5212604443f0","9afb6667-24a4-456b-8720-48d5b530a003","05b724b7-9613-42c0-a5d1-45f2a0b40efd","5bb8c800-7777-43d0-a2ad-e8fae03ed3b7","b614deb1-8c61-4b74-9e54-f2c4ba8658af","6fd29849-b584-40ea-82c1-c908b83efd3f","921c46aa-ffa6-4d3b-9be2-b0affd7142d7","62ba464b-5e1c-468d-9a1f-9ddcd1053d68","5c0d4798-3eef-449f-9bfd-58d59fe6ff28","c90dc44b-a834-4a18-b728-b0631c14afa9","6a13868b-c532-4562-9131-5c866bddacf9","c33d86ef-305d-408c-87a2-b014fbcf2e16","7fe76de7-a6e6-491a-b482-449cec7c91fd","673fd28e-faab-4725-9bf4-a59b317f8f93","62f44dee-82b5-4a2f-896e-c2d132a4e415","8643025a-c059-4a48-85d0-d76f51d63a74","26fe00f8-9173-4872-9134-bb1d2e00343a","af599e54-878e-494d-8a8f-b8f8d8896f1a","c4c3550e-a965-4993-a50c-628fd38cd3e1","ab699598-7d66-4003-a0aa-86a0f827bbbf","6cedb63e-a5a2-4d1b-bf27-71f3688871ee","f3b504bb-826e-46c7-a1b7-674a5a0ae43a","9f9df1fb-cf10-42f4-b684-3913a492cc6d","be3bb907-a9fa-4b85-a21b-3154efeb0196","460397b3-c4d8-441c-9d4a-9374b15850d3","7b8aa759-d584-418d-b7e7-99e07cb45bc0","97f95e63-ac5d-4ad4-96ba-a5be9131f52b","86fe5e45-3696-4c0e-b88a-cf350e31ee68","bf0d72cc-0680-4042-bd37-2ff5d224c8d3","566c16c0-5a70-4062-80eb-42c00c823556","5bbcca67-469c-4af6-aa1f-f12014aa4747","e88da25c-3aa8-47a6-86d7-c9b2230171d8","4279e979-0fe8-4bba-8a79-e0012d33d2f7","7d3f20f0-ba46-4205-8bfa-508d47dec375","effdf562-0b65-48b3-bc44-bd406ceeb4c0","0af6e6ec-18c4-4cd6-97de-655d15eda26d","fc71d843-9b8c-4c31-a691-e34f2bf61a58","5d264b2d-d8de-4dce-8e0f-57a40c037732","facdd972-8587-42d9-94db-fea86c95f74b","04a198f4-df84-4ecf-8114-648150edc5f6","c707a0ae-7ee9-4d7a-9262-8cc87c7444ef","0944cf9e-9f5a-4cc8-a6bb-982a82145e32","0dea505e-f72c-4939-91fb-c5d318d31cbd","16018ead-6f73-447d-a422-e5895ea2f1e8","4110a755-2084-451d-a03f-2267f377e37a","c44b3809-aa60-4e78-ad0c-fc02ae6b0fb9","9f657a3d-7377-48a8-b6a3-b5a871d58953","02c0fdb9-19a4-4156-9d06-b8aa940e792a","fd78894d-5436-4f66-907a-9ef485a20d7f","11199e7d-90dd-47b0-9da2-1fc58ed7e9b7","51deb6a1-950b-4cd2-8c66-4a0b5a37291b","5eed6188-c6d6-4966-9543-28b3c88ee4e1","e51231c2-1e1d-4b36-9499-4761c759c21d","599ba755-215c-4d72-a152-5e902c03e753","9d21bfc7-b04f-4615-93d5-eb79e9e217e2","1fa05968-fc4e-4728-bf0e-c48de37a2ae1","73c521c0-1787-493e-845e-89b957b58b8b","c570afbe-46af-4d76-b23b-6e16d8d57df4","85d99e6d-f6d6-408f-a9f1-b7a97237d5c4","227e9423-1792-43b0-82e6-ac94397ed789","bc018f2c-f33c-4f25-bffb-34f3da74d2db","cfd6dc82-faa9-4f51-8534-964917ca7666","5ea8beca-77b8-44cb-8871-93620f04a6e7","7cbc7e85-a998-4d7c-bc89-78fbd0df6e8c","f35ee5d5-f4eb-42c4-a2bb-0f3c706afee7","5f94ce71-7492-4d10-ae80-3482646ca6cd","5299e6b7-b23b-46c8-8277-dc1147807117","c0f60687-8f09-4186-801b-9dd11d82d2e1","1400552c-6fe7-4bbd-a3ca-59ffea564316","ef686670-a2cc-4aec-89bf-8a67c4033507","ced133bc-30d4-48de-b239-78e9fe91c8c0","ba9770c6-6fb6-480b-9fcd-ee2ca1d7b0d6","3778be8b-3cde-493e-8ebc-a6c3f9be6129","5ce1ccad-10d3-4d04-a455-4ab42ee64a61","70d2b6ec-b846-43dc-b4f7-1a84ff24a176","0302f714-23e2-4c23-bd45-d1c97c1c1000","8c4b4f4e-6bf7-4da8-a51a-d341baf3ce44","eba5c6e7-188e-488f-a40d-0f14e1edf190","664a82c2-8810-4432-b9c4-bc5be3f7a0a6","1ef94f5a-a930-4996-9ddb-1dca7c74d040","12df5617-a0af-48ca-bf2c-4bcca863fd84","c80801f3-5848-4f8f-9c7a-dc0052a3655d","fb3429ab-83d0-4bed-95e9-1a8e9455252c","e05dbbce-79c2-45a2-a7ef-f1058856feb3","4bb527f3-5718-477f-93ae-96a00a4944fe","cafc4bb9-6584-480c-b992-c6643801be41","ba4c5917-5ba3-495b-857c-af2642a5b115","e4b5cac5-c0f5-4618-aa98-3c01e18c5fde","e6fd4e44-694e-4e30-b72a-7da4ef662a29","6b82129a-13ef-4554-93a5-17cda6672746","5f14ad42-7fae-4258-b7bf-ab24eb46988d","548801a8-a653-452a-b883-db65b6d06fac","0afea355-fcdc-47a0-a82c-f5436b883790","184ca802-aa58-44e3-96a1-5905c23d9364","50dc548d-0c1f-41c5-bf52-cb6957d9d052","82be74c1-6520-4ab5-b10e-fc17162b8c86","b69ac3e7-4dd7-45e8-ad79-2bf1d780f221","d2da8762-d5bc-4197-94d0-8c298fc6e5ed","c1b0ff3b-5ef1-4cf6-b723-64c216558172","08ea33e0-01df-4486-88f0-e1f35de8ca0b","cabab48d-da29-4857-88f0-789518f35342","a3ea6660-0f26-4ca7-8772-09c454995588","406307ea-f1c6-4592-b338-fdf958e300e6","3b98cb2d-64df-4532-a36a-b835b0494744","076cf91a-5eb9-4ee2-9bbf-647e8d818ddb","3742010c-b092-4f45-9448-d0ba8d14c7b8","148e2723-a8b5-4bac-ba2a-02ee22afe3dc","c8cf041f-6c65-4e3a-b304-e0b7cfe5a7a8","4aafbb38-45c3-4510-a4fb-79ddee4609e1","9295f662-1576-4cd9-ae2c-e5b98e004013","caa10cde-996e-4f8d-adfb-d7e3d8046726","73992542-7eea-446a-a813-be9be977a1e9","800d0ed9-5ab9-43c2-b9bf-65bb3d740822","75cbd5cd-883c-4b21-a7f7-cd7f4862c796","4f15c6a9-03c7-4290-a534-d8125d5cf9c0","e1f7972d-096f-4309-8ff3-e95fc6e290be","b88ac08b-1838-4987-8510-5d098e4e029b","bbeb12ae-8826-49e2-b9c1-efb3c49c336e","7c2068ba-d812-424b-bb7f-59445cac4081","ce7feb1b-c0e1-4a8e-a841-3711b1bee26d","07fd3b0d-1350-46c2-91be-bf586c46e878","e76d4f0e-1cbc-4afb-85f9-eea31e83f8e0","3985e331-9778-4909-aa73-79e23575ccc5","7cf78357-6f6e-49bc-9d7c-2a53a51a7de2","45fae77e-3723-4cd9-a1c4-bb7f1dae5943"]}},"description":"All - C+AI Subscriptions must have pre-defined C+AI NSG rules. See https://aka.ms/netiso/nsgs - for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:28:57.9727253Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:37:50.054199Z"},"enforcementMode":"Default"},"identity":{"principalId":"56d08bc2-cc29-4d23-9d23-fd396b807b02","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","type":"SystemAssigned"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-NSG-DINE-SR109-v013","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-NSG-DINE-SR109-v013","location":"southeastasia"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-warning-non-c+ai-security-rules_1.3","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/686f7311dc548f32","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"effect":{"value":"Audit"},"priorities":{"value":["100","101","102","103","104","105","106","107","108","109","110","111","112","113","114","115","116","117","118","119"]}},"description":"All - C+AI Subscriptions must have a NSG on all VNets in the subscription. See - https://aka.ms/netiso/nsgs for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T19:33:59.4565556Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:36:28.1981569Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-NSGS-AUDT-RULS-v013","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-NSGS-AUDT-RULS-v013"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-subnet-require-nsg_1.3","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/789cfec91f9e1858","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"effect":{"value":"Audit"}},"description":"All - C+AI Subscriptions must have a NSG on all VNets in the subscription. See - https://aka.ms/netiso/nsgs for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T19:34:02.1062104Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:37:27.2901901Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-SBNT-AUDT-NSG-v013","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-SBNT-AUDT-NSG-v013"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-nsg-subnet_1.2","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/852aeb0ee2c0a3a5","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"subscriptionExclusions":{"value":["61868ab8-16d4-44ec-a9ff-f35d05922847","41c39ac7-6cde-4be7-87c3-d57a168b7b92","235d341f-7fb9-435c-9bdc-034b7306c9b4","239b3f1a-daab-4125-918c-f028b0edb054","12f44720-8952-422c-bb7d-28831c2de639","c36fd9e7-e5b1-4d3e-bb85-2e538040258b","243b67d4-60ca-4dfd-a556-216ee06f77a1","24ae0a2f-2cb0-4a1a-9929-bed71bad0d59","b4582baf-35d9-47b9-b03d-1bd126876221","65f79f71-cb42-45b1-82b7-4635fd05fc26","9532a63e-f2eb-4649-bb23-5ed01077ce80","1533031f-9510-4d8d-8f83-af94df45d43c","73d25f92-e703-4c91-8aed-2fb23c8e151f","86d6f8d7-564b-4005-912c-b1a3a9a286ce","97a3d790-8d62-4f20-b579-39ee6b06cb45","179be307-0377-46c0-a8bb-17437582d266","6c516c14-f378-4780-bc52-dd1d098a9c0b","cc5e1d36-a80d-4878-add9-5204a7efda20","0bf83929-3a19-4a96-87da-b23c3aca7fd7","ad7af743-6a66-480e-98cd-e022f833d0ce","0cfe98e1-3cf6-41ca-9f54-435d1ddaf0de","ce6570fa-18fb-4503-80d9-4a225591a428","2f8446c7-7c1e-42f0-a6b7-d68df1255cc4","ff78024c-d5a1-48ae-88eb-d61f0f60f8ff","bdd789f3-d9d1-4bea-ac14-30a39ed66d33","6fe0c04c-acb9-4f74-8153-56a6cb666ca8","7fa88f8d-252c-4b22-a73e-cd77f85cca66","bafb24c9-f4bb-46a0-9891-4b3e12dab22e","aab411af-ed4d-4f02-bb87-5de8b00d880d","7e7b7a6f-0b34-4db9-958d-ece4c89b419f","964c10bb-8a6c-43bc-83d3-6b318c6c7305","7b29bb4e-8391-4d57-8045-b34a092e5108","3f706ca0-34d7-4ede-a432-3c1a37ddd5c6","7856cb6f-e1a8-48f2-b2a5-bfaa7f8c34a1","49e3ed89-bbdb-4545-844f-e3502d6ce44f","8cad7ef7-ae41-4adf-86b8-ffcb11fae200","8e9ec0f8-bfe6-43a5-acd2-b6c4666ef9f6","b8fc6ee8-6802-4605-b4a5-1d131084c62f","45493131-fef6-4cb1-80e9-f0dadaa0255a","9c8295ef-4bf7-49db-90aa-5f0837dc60b7","ed0b2672-8412-463f-a0c1-1867730d7e27","7f31cba8-b597-4129-b158-8f21a7395bd0","3b658bfc-dbb0-4f7a-9e6c-a7659ade3514","825d553e-1fdf-4961-8f6b-bab24c6b07a7","477d55b5-bef1-4c35-b8bd-42df6ef99d25","0cd887ff-5af0-405b-8d48-b2b0495af57b","4259a25b-fc62-41d0-a101-60bfaab38086","3ae1ab9b-5849-4409-b744-58ba98878274","8d8d3365-2fab-415f-862e-712d989871b2","1ef6f67e-7981-498c-8349-b67109d0fd0f","e9b95386-37fe-4820-9dc6-30a44fbeafba","f9e81224-18f1-4474-80b5-bd6b832f0b73","f0b97671-152e-45cc-a831-73fd5caa8740","d4c1893d-adf1-4111-aaa3-93d55a4059b9","2d3ea1e9-269c-4fd1-8878-21e84bf9d214","1267b3e1-8812-4435-82ff-9e57f390c194","38c49794-e385-48e6-b6ee-c42b9f2075be","2843db96-7d25-4cf5-8e67-71baed52dfb7","a531aaa4-20f4-40e6-ba1a-858a0359f602","b835f458-560c-49c2-8781-4b13d892ddd9","e4d287eb-a38c-4387-832a-e3c61ea576bd","af878dc5-7fe2-4698-b7fb-2ed4b2ffe4db","26d6d535-5164-443d-82f6-4c695caf7688","d862948f-6520-451f-af67-123309e4e4ce","ff96a11f-784d-4c26-94c7-34346d4d660e","38b241a5-8658-4b50-bfba-1800ee2d4d09","28f78ae5-97b2-487e-b097-270de10ce6b8","6c048bcd-2cc6-47fe-a558-ca54083d537e","62fc3d9a-b8ab-47e7-8df1-be09f78bb25a","48aae13c-e8a8-4057-a5d5-f77eaa56f1fd","b30d9dbd-c0f7-405f-902c-3eabd080eb00","aa858381-0720-4837-b0f8-60468c0b2763","7e6898e7-868d-490f-8f91-0cffa67c48a0","816e6e0f-a719-487e-a651-813f40cc95c5","aeaa528b-2620-42a7-bbe8-17b698d42530","9c870d54-05fd-46bb-9bb5-63a5756320a0","36e4aeae-caae-4cd6-8d6b-7015355c6229","d53f365b-64c6-45fa-9253-99fc92dfae5d","6b7b20bf-f54b-4a3d-9961-c85fbe894b67","875bd0a7-0adc-4391-8b42-85e866e87e5d","97454014-0118-4294-9648-938eb8f52327","de1883af-a411-450a-8c9f-55b07d48cd60","991af618-96d9-4bc0-879d-0e13ac6020c1","21eedfa4-4dc5-4056-bdba-dcfaf3b1a222","0e57ff86-19ec-4f88-8403-879bd0d64af8","31c8019a-6c01-4c1d-9a04-6bbd091e8ccd","52ce96d0-a12d-4e17-9644-50e0059a7730","f5f248fd-943d-477b-a9d2-de3db83d7712","c4ae973f-3a15-4409-a6cc-9cc91147f42e","ed10ec26-e9a9-40ba-85df-2d7e2dec7765","a083c30e-d4e5-4dc1-b310-02aaf36b316a","c1fd1678-d0fe-4253-a15f-a03eee323432","a013b98a-6c2a-4f92-a6a7-82266ac6f437","ef7a7954-0173-4574-86a1-486e015ab617","ded8fcaf-289f-40bd-b124-572d3d4f58ed","178b7546-3fed-4e8a-b001-9c71b1051ce9","f2b7f785-c33d-471f-bb13-57d62e83af62","a226aace-1c2d-4a53-96a3-de0ea8f3e4ad","b909342e-42c0-423e-8815-ea07509e27f9","9d124ad5-c7de-4c56-8ffe-0f3f6566d3b3","ddc736d4-2fe4-44ad-8b82-080913c64b79","ea406f31-bf7a-4139-a444-1f23847f1350","66affadd-ce7e-4ac3-a16c-d85dc2d07544","d0e65693-60a1-438c-be56-2225cf43d568","902dc4d6-9ae1-4141-ac1b-ca5b3071cd63","cac63bb3-1459-4b23-a864-f2ea6c6456e9","2fa553a5-a443-4f09-bd4c-dbc9ded93a1c","9d7c4ce2-5443-4499-a07a-695894000463","3814aaea-6bb6-4e31-b3c4-45e761c8d6d1","9d0fe465-cebe-41a0-afc4-e49fe70dee55","2edae715-e43e-471a-9b6d-a6bc52a395c0","c7d2e450-636b-443d-b737-5e2708629ea1","4bb073a1-ad47-4f14-bfa6-9ffd55ea8f81","0fbc3fc8-1bcd-433d-a6f0-b96ca76c60dc","f3d00ca5-7ce1-4562-8160-2a856dd6d1f3","1c91c686-b0d1-4f51-8784-9eee52c07b7e","c1089427-83d3-4286-9f35-5af546a6eb67","ec716296-0c8d-410a-8666-1eff05989831","c31ad117-e07c-4388-9148-387a2ba72135","c9802e4f-0860-43a1-b3ed-37d3ae8cdf92","708474aa-31a7-4dbd-a106-84de1043185d","f6470ed6-05de-421c-bae8-184d8d28be10","17cfecb9-1a5f-4b8b-a32f-119de8c44f5a","70d2f261-7253-4b1a-a52a-406e7a328c33","2fda68f7-567f-4c8f-b0b7-f4b6a5988e84","86b0b59c-8538-4aa6-90f6-ce8329258bb2","8ecadfc9-d1a3-4ea4-b844-0d9f87e4d7c8","433e1858-1953-42b2-a9dd-d7601c25d347","bb1216b4-4400-422b-8a67-8a80a9c88d5e","cf5e3b9b-595a-499d-8669-00b88b449213","e01c1ddb-8025-491a-986d-c249fa9a69a0","9d71e31b-7356-4d2d-a6e9-d588fc7692c2","c6e602bd-0d12-4265-bebc-cb208dd5030f","e929be23-7420-44f3-bd80-810a56d06e1e","46b59458-3f32-4f06-b6a2-bd27dda4305c","14cff334-91a5-4d9d-bf42-39c6d630d37c","80c8978c-c1c6-4f9e-94cd-874798b05935","f9da0435-3452-483a-a5f4-743988dc6b1d","0f1325ea-bcfe-4b02-a303-baaefb80a9f9","70407fa2-4234-4266-812c-d70754ed228c","41e806f1-99ee-4c48-9ce8-379068350924","7b6fdce7-2d25-4c7f-b8c1-004a375626cb","4a725092-b458-4dc2-9ae9-f8f0e7d415dc","178b2260-bd62-4372-ab30-7cf02b6a3108","d9964125-396a-4343-8d4e-b16c0281ae58","4df9862d-6ce3-486d-a4e1-8b246cb08f79","db205d1d-a8b1-49e1-8d5a-4f5b5ae39169","363499fe-248b-4624-ba5b-5f477bb924f4","9eefe291-18db-46f1-b308-4d7851fa270d","e4e0b3b0-1587-400f-95f9-1bb605a252c2","139c34d4-91bf-42c9-8dc5-b6c37f9ac517","8ab2ca47-1f5f-4936-8f37-c5780ff265d0","511013e8-8a72-4ddf-a9b4-1a9bb3a5fa6a","0a5044a6-a614-40e1-97e0-20af784237ea","a3fcf642-fa77-4d3c-886e-527258f00e72","4f6cdb57-2658-40b9-8adc-1b2ddf7dd7a2","df39322a-6ecd-418b-828d-09fd796dc10a","e1cb07f7-a3ac-4110-9d24-218d93bfa6f9","91280670-dbb5-4fcd-8dc3-dc9d53d94805","90b505b3-1abf-455b-af4d-f08d1135cf33","850d8476-e5fc-4059-9aed-9aeee349c384","ae2dd76f-0dd4-4484-b957-6700179f183f","9fb58da5-7347-4dbf-a892-7c933e5d7776","fc4ea3c9-1d30-4f18-b33b-7404e7da0123","693ffe34-785e-44cd-8fb7-81da25f4d3bd","3e272a96-8781-45f2-8378-6ffaa1596bcc","f2124ee6-885b-4aa6-885d-793c8626b87c","47ff8d6e-e419-464f-8940-dfa750f2115d","18f0638d-ad9b-460a-bd8b-61f12d998d0c","48021fc6-c9c8-4568-8c29-953aad4d1e0a","df41dfd5-a3a6-4c35-a58e-9b6ac732236e","1da3ace1-2326-4842-ba52-0e3a8dce989e","68f6be96-60c4-40f5-a14e-2a04dcacc1a6","5833e0eb-b53c-4156-b478-2eac8f04aec6","34530d5b-398d-496e-88d0-07a6e3de107e","4f698849-a196-4c80-be45-52d507ffb2d4","43350253-f84c-4fb3-a988-cc63366cc570","d466671a-79ad-4ca5-878f-599df8bcd17e","5ea9ae04-3601-468a-ba84-cb7e82ae1e48","31614129-0f24-4a4c-9731-53ceecc3017d","990d87fa-2d5a-48cc-bdff-0d3c6b9dd32d","5a2d898e-7f0b-43fd-8e0e-2b517b736499","16fc4a98-74ad-4970-9857-74d0f39a6c64","47380de2-eddf-42b2-b853-434cde2b5fa0","947d47b4-7883-4bb9-9d85-c5e8e2f572ce","8ca10d88-d6ce-458e-b707-a00f3b6183fd","76fb3144-bc19-4baf-ab79-432d526559b7","da07f543-88e8-4349-b9e1-2d135eb818c2","360cdc41-af67-426b-9249-b46077592db4","13973b32-e60a-4396-bf7a-85f0670d658d","b50578f7-df0d-4152-892d-ad77b284e233","0e584a02-5f47-4317-b102-9665aa08fc7d","83db2801-3fb7-4fda-9c88-227effca791f","ef378126-746c-42ef-87ea-83624095a7cc","6e793a99-19b9-4ac5-8f6a-709fd4da0b49","7bfee1d3-395f-414a-b76a-203385a535b8","100919d5-c4a2-4894-a3d7-83a8534dee66","00a794e2-f9ed-41f6-b2a3-444ec0b61131","3dfa5f20-e79c-437f-add7-0a2ade4379aa","359833f5-8592-40b6-8175-edc664e2196a","fddd10df-2a17-496f-8f2c-40845adac181","301ad868-469e-494a-948f-5212604443f0","9afb6667-24a4-456b-8720-48d5b530a003","05b724b7-9613-42c0-a5d1-45f2a0b40efd","5bb8c800-7777-43d0-a2ad-e8fae03ed3b7","b614deb1-8c61-4b74-9e54-f2c4ba8658af","6fd29849-b584-40ea-82c1-c908b83efd3f","921c46aa-ffa6-4d3b-9be2-b0affd7142d7","62ba464b-5e1c-468d-9a1f-9ddcd1053d68","5c0d4798-3eef-449f-9bfd-58d59fe6ff28","c90dc44b-a834-4a18-b728-b0631c14afa9","6a13868b-c532-4562-9131-5c866bddacf9","c33d86ef-305d-408c-87a2-b014fbcf2e16","7fe76de7-a6e6-491a-b482-449cec7c91fd","673fd28e-faab-4725-9bf4-a59b317f8f93","62f44dee-82b5-4a2f-896e-c2d132a4e415","8643025a-c059-4a48-85d0-d76f51d63a74","26fe00f8-9173-4872-9134-bb1d2e00343a","af599e54-878e-494d-8a8f-b8f8d8896f1a","c4c3550e-a965-4993-a50c-628fd38cd3e1","ab699598-7d66-4003-a0aa-86a0f827bbbf","6cedb63e-a5a2-4d1b-bf27-71f3688871ee","f3b504bb-826e-46c7-a1b7-674a5a0ae43a","9f9df1fb-cf10-42f4-b684-3913a492cc6d","be3bb907-a9fa-4b85-a21b-3154efeb0196","460397b3-c4d8-441c-9d4a-9374b15850d3","7b8aa759-d584-418d-b7e7-99e07cb45bc0","97f95e63-ac5d-4ad4-96ba-a5be9131f52b","86fe5e45-3696-4c0e-b88a-cf350e31ee68","bf0d72cc-0680-4042-bd37-2ff5d224c8d3","566c16c0-5a70-4062-80eb-42c00c823556","5bbcca67-469c-4af6-aa1f-f12014aa4747","e88da25c-3aa8-47a6-86d7-c9b2230171d8","4279e979-0fe8-4bba-8a79-e0012d33d2f7","7d3f20f0-ba46-4205-8bfa-508d47dec375","effdf562-0b65-48b3-bc44-bd406ceeb4c0","0af6e6ec-18c4-4cd6-97de-655d15eda26d","fc71d843-9b8c-4c31-a691-e34f2bf61a58","5d264b2d-d8de-4dce-8e0f-57a40c037732","facdd972-8587-42d9-94db-fea86c95f74b","04a198f4-df84-4ecf-8114-648150edc5f6","c707a0ae-7ee9-4d7a-9262-8cc87c7444ef","0944cf9e-9f5a-4cc8-a6bb-982a82145e32","0dea505e-f72c-4939-91fb-c5d318d31cbd","16018ead-6f73-447d-a422-e5895ea2f1e8","4110a755-2084-451d-a03f-2267f377e37a","c44b3809-aa60-4e78-ad0c-fc02ae6b0fb9","9f657a3d-7377-48a8-b6a3-b5a871d58953","02c0fdb9-19a4-4156-9d06-b8aa940e792a","fd78894d-5436-4f66-907a-9ef485a20d7f","11199e7d-90dd-47b0-9da2-1fc58ed7e9b7","51deb6a1-950b-4cd2-8c66-4a0b5a37291b","5eed6188-c6d6-4966-9543-28b3c88ee4e1","e51231c2-1e1d-4b36-9499-4761c759c21d","599ba755-215c-4d72-a152-5e902c03e753","9d21bfc7-b04f-4615-93d5-eb79e9e217e2","1fa05968-fc4e-4728-bf0e-c48de37a2ae1","73c521c0-1787-493e-845e-89b957b58b8b","c570afbe-46af-4d76-b23b-6e16d8d57df4","85d99e6d-f6d6-408f-a9f1-b7a97237d5c4","227e9423-1792-43b0-82e6-ac94397ed789","bc018f2c-f33c-4f25-bffb-34f3da74d2db","cfd6dc82-faa9-4f51-8534-964917ca7666","5ea8beca-77b8-44cb-8871-93620f04a6e7","7cbc7e85-a998-4d7c-bc89-78fbd0df6e8c","f35ee5d5-f4eb-42c4-a2bb-0f3c706afee7","5f94ce71-7492-4d10-ae80-3482646ca6cd","5299e6b7-b23b-46c8-8277-dc1147807117","c0f60687-8f09-4186-801b-9dd11d82d2e1","1400552c-6fe7-4bbd-a3ca-59ffea564316","ef686670-a2cc-4aec-89bf-8a67c4033507","ced133bc-30d4-48de-b239-78e9fe91c8c0","ba9770c6-6fb6-480b-9fcd-ee2ca1d7b0d6","3778be8b-3cde-493e-8ebc-a6c3f9be6129","5ce1ccad-10d3-4d04-a455-4ab42ee64a61","70d2b6ec-b846-43dc-b4f7-1a84ff24a176","0302f714-23e2-4c23-bd45-d1c97c1c1000","8c4b4f4e-6bf7-4da8-a51a-d341baf3ce44","eba5c6e7-188e-488f-a40d-0f14e1edf190","664a82c2-8810-4432-b9c4-bc5be3f7a0a6","1ef94f5a-a930-4996-9ddb-1dca7c74d040","12df5617-a0af-48ca-bf2c-4bcca863fd84","c80801f3-5848-4f8f-9c7a-dc0052a3655d","fb3429ab-83d0-4bed-95e9-1a8e9455252c","e05dbbce-79c2-45a2-a7ef-f1058856feb3","4bb527f3-5718-477f-93ae-96a00a4944fe","cafc4bb9-6584-480c-b992-c6643801be41","ba4c5917-5ba3-495b-857c-af2642a5b115","e4b5cac5-c0f5-4618-aa98-3c01e18c5fde","e6fd4e44-694e-4e30-b72a-7da4ef662a29","6b82129a-13ef-4554-93a5-17cda6672746","5f14ad42-7fae-4258-b7bf-ab24eb46988d","548801a8-a653-452a-b883-db65b6d06fac","0afea355-fcdc-47a0-a82c-f5436b883790","184ca802-aa58-44e3-96a1-5905c23d9364","50dc548d-0c1f-41c5-bf52-cb6957d9d052","82be74c1-6520-4ab5-b10e-fc17162b8c86","b69ac3e7-4dd7-45e8-ad79-2bf1d780f221","d2da8762-d5bc-4197-94d0-8c298fc6e5ed","c1b0ff3b-5ef1-4cf6-b723-64c216558172","08ea33e0-01df-4486-88f0-e1f35de8ca0b","cabab48d-da29-4857-88f0-789518f35342","a3ea6660-0f26-4ca7-8772-09c454995588","406307ea-f1c6-4592-b338-fdf958e300e6","3b98cb2d-64df-4532-a36a-b835b0494744","076cf91a-5eb9-4ee2-9bbf-647e8d818ddb","3742010c-b092-4f45-9448-d0ba8d14c7b8","148e2723-a8b5-4bac-ba2a-02ee22afe3dc","c8cf041f-6c65-4e3a-b304-e0b7cfe5a7a8","4aafbb38-45c3-4510-a4fb-79ddee4609e1","9295f662-1576-4cd9-ae2c-e5b98e004013","caa10cde-996e-4f8d-adfb-d7e3d8046726","73992542-7eea-446a-a813-be9be977a1e9","800d0ed9-5ab9-43c2-b9bf-65bb3d740822","75cbd5cd-883c-4b21-a7f7-cd7f4862c796","4f15c6a9-03c7-4290-a534-d8125d5cf9c0","e1f7972d-096f-4309-8ff3-e95fc6e290be","b88ac08b-1838-4987-8510-5d098e4e029b","bbeb12ae-8826-49e2-b9c1-efb3c49c336e","7c2068ba-d812-424b-bb7f-59445cac4081","ce7feb1b-c0e1-4a8e-a841-3711b1bee26d","07fd3b0d-1350-46c2-91be-bf586c46e878","e76d4f0e-1cbc-4afb-85f9-eea31e83f8e0","3985e331-9778-4909-aa73-79e23575ccc5","7cf78357-6f6e-49bc-9d7c-2a53a51a7de2","45fae77e-3723-4cd9-a1c4-bb7f1dae5943"]}},"description":"All - C+AI Subscriptions must have pre-defined C+AI NSG rules. See https://aka.ms/netiso/nsgs - for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:32:33.7856438Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:37:17.0959962Z"},"enforcementMode":"Default"},"identity":{"principalId":"6fe923a8-2e4d-4c1f-b7d6-a7c5984f0129","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","type":"SystemAssigned"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-SBNT-DINE-NSG-v012","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-SBNT-DINE-NSG-v012","location":"southindia"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"azuresecuritypackautoupdate_3.1","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policySetDefinitions/c02faf167895f1d1","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"AllowedLocations1":{"value":["global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]}},"description":"Combinations - of multiple policies to enable auto update of security pack and geneva agent","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-09-06T16:43:37.3818749Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-30T19:35:54.2826023Z"},"enforcementMode":"Default"},"identity":{"principalId":"8845dee4-c749-46a4-b8e8-35512cf066cd","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","type":"SystemAssigned"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/SEC-AzSecPack-v031","type":"Microsoft.Authorization/policyAssignments","name":"SEC-AzSecPack-v031","location":"centralindia"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"azuresecuritypackautoupdate_3.2","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policySetDefinitions/9c46cf6e83dedb18","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"AllowedLocations1":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest"]}},"description":"Combinations - of multiple policies to enable auto update of security pack and geneva agent","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-06-23T19:35:15.9907469Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-30T19:35:55.9455466Z"},"enforcementMode":"Default"},"identity":{"principalId":"b7b8bd19-f827-425f-9be1-fd8a86b21904","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","type":"SystemAssigned"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/SEC-AzSecPack-v032","type":"Microsoft.Authorization/policyAssignments","name":"SEC-AzSecPack-v032","location":"australiacentral"}]}' + Center","createdBy":null,"createdOn":null,"updatedBy":"2f8a138f-0955-44e1-9124-c386dfaecad4","updatedOn":"2020-09-21T16:12:54.2700629Z"},"enforcementMode":"DoNotEnforce"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/SecurityCenterBuiltIn","type":"Microsoft.Authorization/policyAssignments","name":"SecurityCenterBuiltIn"},{"sku":{"name":"A0","tier":"Free"},"properties":{"policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0","metadata":{"createdBy":"78977f10-9b8e-42f0-a820-b66e67fe9f1a","createdOn":"2020-10-29T05:38:30.0504412Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0/providers/Microsoft.Authorization/policyAssignments/pypolicyassignmentea4a13f0","type":"Microsoft.Authorization/policyAssignments","name":"pypolicyassignmentea4a13f0"}]}' headers: cache-control: - no-cache content-length: - - '140038' + - '34581' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:58:14 GMT + - Thu, 29 Oct 2020 05:38:30 GMT expires: - '-1' pragma: @@ -8791,113 +31853,65 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0/providers/Microsoft.Authorization/policyAssignments?api-version=2019-09-01 response: body: - string: '{"value":[{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"ASC - Default (subscription: 00000000-0000-0000-0000-000000000000)","policyDefinitionId":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{"diagnosticsLogsInServiceFabricMonitoringEffect":{"value":"AuditIfNotExists"},"systemUpdatesMonitoringEffect":{"value":"AuditIfNotExists"},"systemConfigurationsMonitoringEffect":{"value":"AuditIfNotExists"},"endpointProtectionMonitoringEffect":{"value":"AuditIfNotExists"},"diskEncryptionMonitoringEffect":{"value":"AuditIfNotExists"},"networkSecurityGroupsMonitoringEffect":{"value":"AuditIfNotExists"},"webApplicationFirewallMonitoringEffect":{"value":"AuditIfNotExists"},"sqlAuditingMonitoringEffect":{"value":"AuditIfNotExists"},"sqlEncryptionMonitoringEffect":{"value":"AuditIfNotExists"},"nextGenerationFirewallMonitoringEffect":{"value":"AuditIfNotExists"},"vulnerabilityAssesmentMonitoringEffect":{"value":"AuditIfNotExists"},"storageEncryptionMonitoringEffect":{"value":"Audit"},"jitNetworkAccessMonitoringEffect":{"value":"AuditIfNotExists"},"adaptiveApplicationControlsMonitoringEffect":{"value":"AuditIfNotExists"},"identityDesignateLessThanOwnersMonitoringEffect":{"value":"AuditIfNotExists"},"identityDesignateMoreThanOneOwnerMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForWritePermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForReadPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveDeprecatedAccountMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithWritePermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithReadPermissionsMonitoringEffect":{"value":"AuditIfNotExists"}},"description":"This + string: '{"value":[{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"8032a9ae-37af-4156-b5bf-b065ee7ef558","createdOn":"2020-10-23T06:56:30.0849505Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/0186f7371ad4827b01eb736b8b527eea46246480fcd8f5db3755a5437fd20519","type":"Microsoft.Authorization/policyAssignments","name":"0186f7371ad4827b01eb736b8b527eea46246480fcd8f5db3755a5437fd20519"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"2c4ad291-088a-4833-9d12-65562168e61f","createdOn":"2020-03-11T15:04:17.0333963Z","updatedBy":"1b585ce5-cb70-4610-a52c-8434e58389be","updatedOn":"2020-10-23T05:59:48.2744773Z"},"enforcementMode":"DoNotEnforce"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/0aa1605f5affd03d6155fcdc5fa7781afe03220801d799bb8cbb9e1dc6ec9c07","type":"Microsoft.Authorization/policyAssignments","name":"0aa1605f5affd03d6155fcdc5fa7781afe03220801d799bb8cbb9e1dc6ec9c07"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"8032a9ae-37af-4156-b5bf-b065ee7ef558","createdOn":"2020-10-23T06:56:34.1054769Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/11bbafbb3fb6da38aca6f1f5dc8a8e3f3f8cf57e7aa457f8b7604ba02985fd2b","type":"Microsoft.Authorization/policyAssignments","name":"11bbafbb3fb6da38aca6f1f5dc8a8e3f3f8cf57e7aa457f8b7604ba02985fd2b"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"f7fc6747-4a76-40d0-bb82-7ea0b8bb1da7","createdOn":"2020-10-23T08:47:43.3824654Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/16a2338575dff5a278080bb4f25dc2513adc998d67193d769b0d2e8ca3a97aa4","type":"Microsoft.Authorization/policyAssignments","name":"16a2338575dff5a278080bb4f25dc2513adc998d67193d769b0d2e8ca3a97aa4"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"f7fc6747-4a76-40d0-bb82-7ea0b8bb1da7","createdOn":"2020-10-23T08:47:41.0080207Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/1da5cba8ba7ea30d23d012dda633b3ba9bf63d86d393362e90750d0ce1f4c647","type":"Microsoft.Authorization/policyAssignments","name":"1da5cba8ba7ea30d23d012dda633b3ba9bf63d86d393362e90750d0ce1f4c647"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"73ceaec2-29b6-4d6d-ba64-40c27b311914","createdOn":"2020-10-23T13:09:39.7273136Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/334b975d5d128fcb4dda85974474d16a44c28ea111f6ffaa3c29539411daadb4","type":"Microsoft.Authorization/policyAssignments","name":"334b975d5d128fcb4dda85974474d16a44c28ea111f6ffaa3c29539411daadb4"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"2894667e-8bb8-4ca4-9808-b15b62955393","createdOn":"2020-10-23T08:38:45.3497758Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/3475bc79749c2a265e2937ae397f6e61dfde662f090b3965b0639fa1386de27b","type":"Microsoft.Authorization/policyAssignments","name":"3475bc79749c2a265e2937ae397f6e61dfde662f090b3965b0639fa1386de27b"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"9a139daf-05d7-45d5-ae95-7c9a6bbaaf4f","createdOn":"2020-10-23T06:10:15.7000252Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/3540263c5c20ac261e16d49e46ec5f50746e24bdc8d2f69ac420abf32baf5282","type":"Microsoft.Authorization/policyAssignments","name":"3540263c5c20ac261e16d49e46ec5f50746e24bdc8d2f69ac420abf32baf5282"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"deny-nsg-rule-internet-inbound","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-rule-internet-inbound","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{},"description":"The + policy block deployment of domain service, I deleted the policy in my resource + group, and found that will apply to the whole subscription. Assign the policy + again.","metadata":{"assignedBy":"jiasli@microsoft.com","parameterScopes":{},"createdBy":"97233d81-8d2d-4e63-8bd2-ae5707805489","createdOn":"2020-03-04T10:07:29.1757898Z","updatedBy":"f0f844e0-d2fe-4aa3-8e2c-2e429618f305","updatedOn":"2020-09-11T07:45:35.593868Z"},"enforcementMode":"DoNotEnforce"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/36e07b214d59455886a2b76b","type":"Microsoft.Authorization/policyAssignments","name":"36e07b214d59455886a2b76b"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"deny-nsg-internet-inbound","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-internet-inbound","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{},"description":"The + policy block deployment of domain service, I deleted it from my resource group + and found that it applied to the the whole subscription.\nRe assign the policy.","metadata":{"assignedBy":"jiasli@microsoft.com","parameterScopes":{},"createdBy":"97233d81-8d2d-4e63-8bd2-ae5707805489","createdOn":"2020-03-04T10:06:22.2583329Z","updatedBy":"f0f844e0-d2fe-4aa3-8e2c-2e429618f305","updatedOn":"2020-09-11T07:45:42.2359171Z"},"enforcementMode":"DoNotEnforce"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/5b5ec388a1b6480391640d13","type":"Microsoft.Authorization/policyAssignments","name":"5b5ec388a1b6480391640d13"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"deny_load_balancer_rules_and_inbound_nat_rules","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bfedda4d-ba65-4ba3-9df1-9eb8a13a0f09","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":["/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_azure-sample-node06b5c4550e194ae5ac_nodejs-sample06b5c4550e194ae5acdev_eastus","/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xichengroup"],"parameters":{},"description":"","metadata":{"assignedBy":"xiaojxu@microsoft.com + ","parameterScopes":{},"createdBy":"b5ed59e8-f00d-4396-af62-8297e36d8b52","createdOn":"2020-04-16T10:28:45.5317863Z","updatedBy":"f0f844e0-d2fe-4aa3-8e2c-2e429618f305","updatedOn":"2020-09-11T07:45:55.4578065Z"},"enforcementMode":"DoNotEnforce"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/5d00856604b74b80927cca6e","type":"Microsoft.Authorization/policyAssignments","name":"5d00856604b74b80927cca6e"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"9bba6f61-f9c5-4d80-9a10-f94d4aeca5d2","createdOn":"2020-10-23T06:34:59.6081673Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/5d58c0cb3d24b2c1ef92721d92d462fd11decf381165f9230d6187188a59247e","type":"Microsoft.Authorization/policyAssignments","name":"5d58c0cb3d24b2c1ef92721d92d462fd11decf381165f9230d6187188a59247e"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"880858bf-1fda-4b21-b130-305839837c36","createdOn":"2020-10-23T09:46:05.7486818Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/66848e2c5b51ee7b62e931a38227fd1b5c573c8b9b93f74e030aa5072f1899f0","type":"Microsoft.Authorization/policyAssignments","name":"66848e2c5b51ee7b62e931a38227fd1b5c573c8b9b93f74e030aa5072f1899f0"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"5e573efd-6557-457b-bf2a-abe5f14a58f8","createdOn":"2020-10-23T06:38:35.9982813Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/72af59925ba14135150ee79a01584df3c4546902215634793152fc899bc577a5","type":"Microsoft.Authorization/policyAssignments","name":"72af59925ba14135150ee79a01584df3c4546902215634793152fc899bc577a5"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"2894667e-8bb8-4ca4-9808-b15b62955393","createdOn":"2020-10-23T08:38:47.0879755Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/748fd77e9b5a8ac6439b6149b0ff3a6aedd50caac9cf34f49feebe5dc291b055","type":"Microsoft.Authorization/policyAssignments","name":"748fd77e9b5a8ac6439b6149b0ff3a6aedd50caac9cf34f49feebe5dc291b055"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"5e573efd-6557-457b-bf2a-abe5f14a58f8","createdOn":"2020-10-23T06:38:39.3822931Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/7e45599229a6204e11e3ddcd45572e2a0e61ce43a4a0674f48d3e991841fa2e2","type":"Microsoft.Authorization/policyAssignments","name":"7e45599229a6204e11e3ddcd45572e2a0e61ce43a4a0674f48d3e991841fa2e2"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"deny-nic-no-nsg","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nic-no-nsg","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":["/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/wls-admin"],"parameters":{},"description":"The + policy block deployment of domain service, I deleted the policy in my resource + group, and found that will apply to the whole subscription. \nAssign the policy + again.","metadata":{"assignedBy":"jiasli@microsoft.com ","parameterScopes":{},"createdBy":"97233d81-8d2d-4e63-8bd2-ae5707805489","createdOn":"2020-03-04T10:04:31.0026973Z","updatedBy":"f0f844e0-d2fe-4aa3-8e2c-2e429618f305","updatedOn":"2020-09-11T07:46:03.3893374Z"},"enforcementMode":"DoNotEnforce"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/8805e4466db647d1beda40e2","type":"Microsoft.Authorization/policyAssignments","name":"8805e4466db647d1beda40e2"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"cad24367-0649-42e5-9556-7f3fc784dae1","createdOn":"2020-10-23T10:25:03.0659513Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/8a093699e75384ba0552d0456ff6c68068f8d86aa021a49af7a598469233268e","type":"Microsoft.Authorization/policyAssignments","name":"8a093699e75384ba0552d0456ff6c68068f8d86aa021a49af7a598469233268e"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"146086a1-579c-41a5-a611-bd9e770f1a5c","createdOn":"2020-03-11T14:03:42.970365Z","updatedBy":"1b585ce5-cb70-4610-a52c-8434e58389be","updatedOn":"2020-10-23T05:59:46.1650545Z"},"enforcementMode":"DoNotEnforce"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/8c6ee8d403e4302ff7775f7abd0ff27b978ba9973618abfe47f611de4d0bad95","type":"Microsoft.Authorization/policyAssignments","name":"8c6ee8d403e4302ff7775f7abd0ff27b978ba9973618abfe47f611de4d0bad95"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"11719005-54ab-41cb-93c2-f687d6bcac49","createdOn":"2020-10-23T12:41:15.1262538Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/8e769f8d968f3e4288c00a40d29b1b0bc26aedfc2eba80ac41df44471e883225","type":"Microsoft.Authorization/policyAssignments","name":"8e769f8d968f3e4288c00a40d29b1b0bc26aedfc2eba80ac41df44471e883225"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"5ebda3aa-0c06-40c3-a219-834a2b848a5b","createdOn":"2020-10-23T13:36:23.2035513Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/945c7c2b8490ac1d5bb263baddccf9bc31b5716ab50aeb11506485d3335ca9ad","type":"Microsoft.Authorization/policyAssignments","name":"945c7c2b8490ac1d5bb263baddccf9bc31b5716ab50aeb11506485d3335ca9ad"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"880858bf-1fda-4b21-b130-305839837c36","createdOn":"2020-10-23T09:46:08.783453Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/a3b545566179ddb73c01e7895b0de6aa99f7be35da3f87b9b2738b3adce7f747","type":"Microsoft.Authorization/policyAssignments","name":"a3b545566179ddb73c01e7895b0de6aa99f7be35da3f87b9b2738b3adce7f747"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"9a139daf-05d7-45d5-ae95-7c9a6bbaaf4f","createdOn":"2020-10-23T06:10:11.7784727Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/ae512fda507ccfc6aca2d0737040afc93e55433dcf5f77bfa1fe5d81f4b00e68","type":"Microsoft.Authorization/policyAssignments","name":"ae512fda507ccfc6aca2d0737040afc93e55433dcf5f77bfa1fe5d81f4b00e68"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"013e5286-7aa5-45d4-96c9-ad93cea42d44","createdOn":"2020-10-23T08:36:04.045105Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/b656670cb63d76c35bc724f0e95ed3b9e3edc62f21617ba4a9b097c75869b2a8","type":"Microsoft.Authorization/policyAssignments","name":"b656670cb63d76c35bc724f0e95ed3b9e3edc62f21617ba4a9b097c75869b2a8"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"73ceaec2-29b6-4d6d-ba64-40c27b311914","createdOn":"2020-10-23T13:09:37.7507592Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/be8d0e1c45271ddaedb22b3a447cbb3134ff25eeb1cf45d33cc9b51f1d07e6d8","type":"Microsoft.Authorization/policyAssignments","name":"be8d0e1c45271ddaedb22b3a447cbb3134ff25eeb1cf45d33cc9b51f1d07e6d8"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"5ebda3aa-0c06-40c3-a219-834a2b848a5b","createdOn":"2020-10-23T13:36:25.2051109Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/d4740b2a748c971b67013843adda2147a5b18fc1f2418a3dc37c5bd68f1252e2","type":"Microsoft.Authorization/policyAssignments","name":"d4740b2a748c971b67013843adda2147a5b18fc1f2418a3dc37c5bd68f1252e2"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"ASC + DataProtection (subscription: 00000000-0000-0000-0000-000000000000)","policyDefinitionId":"/providers/Microsoft.Authorization/policySetDefinitions/9cb3cc7a-b39b-4b82-bc89-e5a5d9ff7b97","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{},"description":"This policy assignment was automatically created by Azure Security Center","metadata":{"assignedBy":"Security - Center"},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/SecurityCenterBuiltIn","type":"Microsoft.Authorization/policyAssignments","name":"SecurityCenterBuiltIn"},{"sku":{"name":"A0","tier":"Free"},"properties":{"policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0","metadata":{"createdBy":"123743cc-88ef-49ee-920e-13958fe5697d","createdOn":"2020-07-01T00:58:14.945943Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0/providers/Microsoft.Authorization/policyAssignments/pypolicyassignmentea4a13f0","type":"Microsoft.Authorization/policyAssignments","name":"pypolicyassignmentea4a13f0"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"audit - ssh auth_1.4","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policySetDefinitions/3be0ea1bef3d71ca","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"AllowedLocations1":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","global","brazilsoutheast"]}},"description":"This - initiative audits whether any Linux VMs or VMSS use password-only authentication - for SSH. See https://aka.ms/gt/AzurePolicy for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-05-12T23:48:29.541787Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-17T15:34:05.0362645Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/1fc2c9de5f6971ca","type":"Microsoft.Authorization/policyAssignments","name":"1fc2c9de5f6971ca"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-batch-require-user-subscription-mode_1.0","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/74c98b59a6341488","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","uksouth2","centralus","eastus","westus2","francecentral","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","uknorth","eastus2","southcentralus","brazilsouth","westindia","francesouth","global","brazilus","indiasouth","indiawest","indiacentral","uaecentral","uaenorth","southafricanorth","southafricawest","switzerlandnorth","switzerlandwest","germanynorth","germanywestcentral","norwayeast","norwaywest","brazilsoutheast"]},"effect":{"value":"Audit"}},"description":"Batch - Accounts must use a Pool Allocation Mode of User subscription on the Advanced - tab to configure a VNet in the subscriptiong. This enables the use of NSGs - to secure the network traffic for the Batch Account. See https://aka.ms/netiso/vnetinjection - for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-04-01T22:23:59.9760562Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:35:40.3716797Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/6bff79d27acb9c88","type":"Microsoft.Authorization/policyAssignments","name":"6bff79d27acb9c88"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"sqlads-auditifnotexists-auditing - should be enabled on advanced data security settings on sql server_1.0","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/8fce770def99399","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast","global"]},"effect":{"value":"AuditIfNotExists"},"tagname":{"value":"SQLADSExcluded"},"setting":{"value":"enabled"}},"description":"Audits - SQL server level auditing coverage in the MS Corp tenant.","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-06-10T02:12:37.4717502Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-24T02:13:25.8570726Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/6c0b4582049bbf99","type":"Microsoft.Authorization/policyAssignments","name":"6c0b4582049bbf99"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"sqlads-auditifnotexists-vulnerability - assessment should be enabled on your sql servers_1.0","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/410c2966a1e1856e","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast","global"]},"effect":{"value":"AuditIfNotExists"},"tagname":{"value":"SQLADSExcluded"}},"description":"Audits - SQL Vulnerability Assessment coverage the MS Corp tenant.","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-06-10T02:12:37.5097966Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-24T02:13:30.2774737Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/80a3851a4561856e","type":"Microsoft.Authorization/policyAssignments","name":"80a3851a4561856e"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"sqlads-auditifnotexists-atp - types should be set to ''all'' in sql server advanced data security settings_1.0","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/ac3fc8ad361a9985","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast","global"]},"effect":{"value":"AuditIfNotExists"},"tagname":{"value":"SQLADSExcluded"}},"description":"Audits - active SQL ATP detection types across the MS Corp tenant.","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-06-10T02:12:41.0071959Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-24T02:13:28.8367577Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/8eb4c5f8edb95985","type":"Microsoft.Authorization/policyAssignments","name":"8eb4c5f8edb95985"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-subnet-require-nsg_1.0","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/b8f1faa61cb41f92","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","uksouth2","centralus","eastus","westus2","francecentral","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","uknorth","eastus2","southcentralus","brazilsouth","westindia","francesouth","global","brazilus","indiasouth","indiawest","indiacentral","uaecentral","uaenorth","southafricanorth","southafricawest","switzerlandnorth","switzerlandwest","germanynorth","germanywestcentral","norwayeast","norwaywest","brazilsoutheast"]},"effect":{"value":"Audit"}},"description":"All - C+AI Subscriptions must have a NSG on all VNets in the subscription. See - https://aka.ms/netiso/nsgs for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-04-01T22:24:01.682075Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:36:35.5430963Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/aca4d19ab4e30392","type":"Microsoft.Authorization/policyAssignments","name":"aca4d19ab4e30392"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-warning-non-c+ai-security-rules_1.0","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/e695de0794b757d","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","uksouth2","centralus","eastus","westus2","francecentral","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","uknorth","eastus2","southcentralus","brazilsouth","westindia","francesouth","global","brazilus","indiasouth","indiawest","indiacentral","uaecentral","uaenorth","southafricanorth","southafricawest","switzerlandnorth","switzerlandwest","germanynorth","germanywestcentral","norwayeast","norwaywest","brazilsoutheast"]},"effect":{"value":"Audit"},"priorities":{"value":["100","101","102","103","104","105","106","107","108","109","110","111","112","113","114","115","116","117","118","119"]}},"description":"All - C+AI Subscriptions must have a NSG on all VNets in the subscription. See - https://aka.ms/netiso/nsgs for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-04-01T22:23:59.5549343Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:37:08.0237953Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/b65cf29bbd4b57d","type":"Microsoft.Authorization/policyAssignments","name":"b65cf29bbd4b57d"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-kubernet-require-azure-networkplugin_1.0","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/26db8d27b6fa91aa","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","uksouth2","centralus","eastus","westus2","francecentral","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","uknorth","eastus2","southcentralus","brazilsouth","westindia","francesouth","global","brazilus","indiasouth","indiawest","indiacentral","uaecentral","uaenorth","southafricanorth","southafricawest","switzerlandnorth","switzerlandwest","germanynorth","germanywestcentral","norwayeast","norwaywest","brazilsoutheast"]},"effect":{"value":"Audit"}},"description":"Kubernets - must use the Advanced Networking option to configure the Kubernetes cluster - to use a Virtual Network that is on the subscription of the user. This enables - the use of NSGs to secure the network traffic for the Kubernetes container. See - https://aka.ms/netiso/vnetinjection for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-04-01T22:23:58.085345Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:36:42.6798866Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/bce5fcf8b40531aa","type":"Microsoft.Authorization/policyAssignments","name":"bce5fcf8b40531aa"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"sqlads-auditifnotexists-advanced - data security should be enabled on your sql servers_1.0","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/e3cff6e23ce4018a","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast","global"]},"effect":{"value":"AuditIfNotExists"},"tagname":{"value":"SQLADSExcluded"}},"description":"Audits - SQL ADS coverage the MS Corp tenant.","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-06-10T02:12:35.5090528Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-24T02:13:26.7963478Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/ef59abada7fba18a","type":"Microsoft.Authorization/policyAssignments","name":"ef59abada7fba18a"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-hdinsight-require-subnet_1.0","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/11094169db59074f","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","uksouth2","centralus","eastus","westus2","francecentral","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","uknorth","eastus2","southcentralus","brazilsouth","westindia","francesouth","global","brazilus","indiasouth","indiawest","indiacentral","uaecentral","uaenorth","southafricanorth","southafricawest","switzerlandnorth","switzerlandwest","germanynorth","germanywestcentral","norwayeast","norwaywest","brazilsoutheast"]},"effect":{"value":"Audit"}},"description":"HDInsight - Clusters must use the Custom configuration option to configure a VNet in the - subscriptiong. This enables the use of NSGs to secure the network traffic - for the HDInsight cluster. See https://aka.ms/netiso/vnetinjection for more - details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-04-01T22:24:01.3537501Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:35:47.7820687Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/fcbba78ebf3e874f","type":"Microsoft.Authorization/policyAssignments","name":"fcbba78ebf3e874f"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-batch-require-user-subscription-mode_2.1","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/5aac1290d24c772d","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"effect":{"value":"Audit"}},"description":"Batch - Pools must be configured to use a VNet in the users subscription. This enables - the use of NSGs to secure the network traffic for the Batch Account. See - https://aka.ms/netiso/vnetinjection for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T19:32:59.165052Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:35:33.0369273Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-BTCH-AUDT-VINJ-v021","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-BTCH-AUDT-VINJ-v021"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-hdinsight-require-subnet_1.2","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/1b0f9cd579f5f04a","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"effect":{"value":"Audit"}},"description":"HDInsight - Clusters must use the Custom configuration option to configure a VNet in the - subscriptiong. This enables the use of NSGs to secure the network traffic - for the HDInsight cluster. See https://aka.ms/netiso/vnetinjection for more - details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T19:32:58.0927784Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:36:11.7643493Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-HDIN-AUDT-VINJ-v012","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-HDIN-AUDT-VINJ-v012"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-kubernet-require-azure-networkplugin_1.2","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/cb9c916fd4b6c323","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"effect":{"value":"Audit"}},"description":"Kubernets - must use the Advanced Networking option to configure the Kubernetes cluster - to use a Virtual Network that is on the subscription of the user. This enables - the use of NSGs to secure the network traffic for the Kubernetes container. See - https://aka.ms/netiso/vnetinjection for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T19:33:02.4581818Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:37:41.1573353Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-KBNT-AUDT-VINJ-v012","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-KBNT-AUDT-VINJ-v012"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-nsg-rule-101_1.3","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/9d78e6174e6e69be","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"ruleNo":{"value":"101"},"info":{"value":"Created - by Azure Core Security managed policy, placeholder you can delete, please - see aka.ms/cainsgpolicy"},"destinationPortRanges":{"value":["443"]},"protocol":{"value":"Tcp"},"sourceType":{"value":"Service - Tag"},"sourceValue":{"value":"VirtualNetwork"},"actionValue":{"value":"Allow"},"direction":{"value":"Inbound"},"tagname":{"value":"SkipNRMSDatabricks"},"subscriptionExclusions":{"value":[]}},"description":"All - C+AI Subscriptions must have pre-defined C+AI NSG rules. See https://aka.ms/netiso/nsgs - for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:29:06.5946651Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:36:50.9652509Z"},"enforcementMode":"Default"},"identity":{"principalId":"b7a49237-f5b0-473f-a4ff-6830d23af17d","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","type":"SystemAssigned"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-NSG-DINE-SR101-v013","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-NSG-DINE-SR101-v013","location":"uaenorth"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-nsg-rule-102_1.3","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/7c066e9166289efb","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"ruleNo":{"value":"102"},"info":{"value":"Created - by Azure Core Security managed policy, rule can be deleted but do not change - source ips, please see aka.ms/cainsgpolicy"},"destinationPortRanges":{"value":["*"]},"protocol":{"value":"*"},"sourceType":{"value":"IP - Addresses"},"sourceValue":{"value":"194.69.126.224/27,194.69.126.128/27,194.69.127.0/27,194.69.127.96/27,194.69.127.144/29,194.69.104.0/25,20.184.57.184/32,52.139.245.61/32,52.139.245.172/32,52.137.88.174/32,20.42.25.133/32,104.44.112.128/25,104.44.111.128/26,52.191.237.247/32,52.191.220.88/32,52.188.221.200/32,52.151.243.229/32,52.148.118.116/32,52.224.187.226/32,40.91.115.44/32,40.91.114.244/32,40.91.95.146/32,40.91.93.196/32,40.91.94.53/32,40.91.77.216/32,40.119.207.69/32,66.119.150.192/26,191.234.97.0/26,131.107.132.16/28,131.107.132.32/28,131.107.174.0/24,131.107.160.0/24,131.107.159.0/24,131.107.147.0/24,167.220.237.128/27,167.220.226.0/23,167.220.232.0/23,167.220.238.64/27,167.220.238.192/27,167.220.238.128/27,167.220.238.0/27,167.220.248.32/27,167.220.248.96/27,167.220.253.128/29,167.220.255.0/25,167.220.196.0/23,167.220.148.0/23,167.220.128.0/23,167.220.242.64/27,167.220.242.192/27,167.220.242.128/27,167.220.242.0/27,167.220.64.0/19,167.220.70.64/26,167.220.76.192/26,167.220.80.192/26,167.220.77.64/26,167.220.81.128/26,167.220.65.0/27,167.220.81.192/26,167.220.64.0/32,167.220.2.0/24,167.220.0.0/23,167.220.26.0/24,167.220.24.0/24,157.58.31.128/25,157.58.30.128/25,157.58.220.0/22,157.58.218.0/23,157.58.217.0/24,157.58.216.128/25,157.58.216.0/26,157.58.208.0/21,157.58.214.128/26,157.58.213.64/26,157.58.214.192/26,157.58.213.192/26,157.58.212.64/26,157.58.212.128/26,157.58.215.128/25,157.58.192.0/20,157.58.196.64/27,157.58.198.15/32,65.55.188.128/25,65.55.188.132/32,65.55.188.131/32,65.55.188.129/32,65.54.12.64/26,94.245.87.0/24,207.46.217.128/25,207.46.216.128/25,207.46.216.226/32,207.46.216.225/32,70.42.230.0/23"},"actionValue":{"value":"Allow"},"direction":{"value":"Inbound"},"tagname":{"value":"SkipNRMSCorp"},"subscriptionExclusions":{"value":["e05dbbce-79c2-45a2-a7ef-f1058856feb3","4bb527f3-5718-477f-93ae-96a00a4944fe","cafc4bb9-6584-480c-b992-c6643801be41","ba4c5917-5ba3-495b-857c-af2642a5b115","e4b5cac5-c0f5-4618-aa98-3c01e18c5fde","e6fd4e44-694e-4e30-b72a-7da4ef662a29","6b82129a-13ef-4554-93a5-17cda6672746","5f14ad42-7fae-4258-b7bf-ab24eb46988d","548801a8-a653-452a-b883-db65b6d06fac","0afea355-fcdc-47a0-a82c-f5436b883790","184ca802-aa58-44e3-96a1-5905c23d9364","50dc548d-0c1f-41c5-bf52-cb6957d9d052","82be74c1-6520-4ab5-b10e-fc17162b8c86","b69ac3e7-4dd7-45e8-ad79-2bf1d780f221","d2da8762-d5bc-4197-94d0-8c298fc6e5ed","c1b0ff3b-5ef1-4cf6-b723-64c216558172","08ea33e0-01df-4486-88f0-e1f35de8ca0b","cabab48d-da29-4857-88f0-789518f35342","a3ea6660-0f26-4ca7-8772-09c454995588","406307ea-f1c6-4592-b338-fdf958e300e6","3b98cb2d-64df-4532-a36a-b835b0494744","076cf91a-5eb9-4ee2-9bbf-647e8d818ddb","3742010c-b092-4f45-9448-d0ba8d14c7b8","148e2723-a8b5-4bac-ba2a-02ee22afe3dc","c8cf041f-6c65-4e3a-b304-e0b7cfe5a7a8","4aafbb38-45c3-4510-a4fb-79ddee4609e1","9295f662-1576-4cd9-ae2c-e5b98e004013","caa10cde-996e-4f8d-adfb-d7e3d8046726","73992542-7eea-446a-a813-be9be977a1e9","800d0ed9-5ab9-43c2-b9bf-65bb3d740822","75cbd5cd-883c-4b21-a7f7-cd7f4862c796","4f15c6a9-03c7-4290-a534-d8125d5cf9c0","e1f7972d-096f-4309-8ff3-e95fc6e290be","b88ac08b-1838-4987-8510-5d098e4e029b","bbeb12ae-8826-49e2-b9c1-efb3c49c336e","7c2068ba-d812-424b-bb7f-59445cac4081","ce7feb1b-c0e1-4a8e-a841-3711b1bee26d","07fd3b0d-1350-46c2-91be-bf586c46e878","e76d4f0e-1cbc-4afb-85f9-eea31e83f8e0","3985e331-9778-4909-aa73-79e23575ccc5","7cf78357-6f6e-49bc-9d7c-2a53a51a7de2","45fae77e-3723-4cd9-a1c4-bb7f1dae5943"]}},"description":"All - C+AI Subscriptions must have pre-defined C+AI NSG rules. See https://aka.ms/netiso/nsgs - for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:28:34.1091048Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:37:36.4135634Z"},"enforcementMode":"Default"},"identity":{"principalId":"985bb80e-8113-4542-8d68-418589e6ff34","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","type":"SystemAssigned"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-NSG-DINE-SR102-v013","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-NSG-DINE-SR102-v013","location":"southafricanorth"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-nsg-rule-103_1.4","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/3c07197392ad62f","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"ruleNo":{"value":"103"},"info":{"value":"Created - by Azure Core Security managed policy, rule can be deleted but do not change - source ips, please see aka.ms/cainsgpolicy"},"destinationPortRanges":{"value":["*"]},"protocol":{"value":"*"},"sourceType":{"value":"Service - Tag"},"sourceValue":{"value":"CorpNetPublic"},"actionValue":{"value":"Allow"},"direction":{"value":"Inbound"},"tagname":{"value":"SkipNRMSCorp"},"subscriptionExclusions":{"value":["e05dbbce-79c2-45a2-a7ef-f1058856feb3","4bb527f3-5718-477f-93ae-96a00a4944fe","cafc4bb9-6584-480c-b992-c6643801be41","ba4c5917-5ba3-495b-857c-af2642a5b115","e4b5cac5-c0f5-4618-aa98-3c01e18c5fde","e6fd4e44-694e-4e30-b72a-7da4ef662a29","6b82129a-13ef-4554-93a5-17cda6672746","5f14ad42-7fae-4258-b7bf-ab24eb46988d","548801a8-a653-452a-b883-db65b6d06fac","0afea355-fcdc-47a0-a82c-f5436b883790","184ca802-aa58-44e3-96a1-5905c23d9364","50dc548d-0c1f-41c5-bf52-cb6957d9d052","82be74c1-6520-4ab5-b10e-fc17162b8c86","b69ac3e7-4dd7-45e8-ad79-2bf1d780f221","d2da8762-d5bc-4197-94d0-8c298fc6e5ed","c1b0ff3b-5ef1-4cf6-b723-64c216558172","08ea33e0-01df-4486-88f0-e1f35de8ca0b","cabab48d-da29-4857-88f0-789518f35342","a3ea6660-0f26-4ca7-8772-09c454995588","406307ea-f1c6-4592-b338-fdf958e300e6","3b98cb2d-64df-4532-a36a-b835b0494744","076cf91a-5eb9-4ee2-9bbf-647e8d818ddb","3742010c-b092-4f45-9448-d0ba8d14c7b8","148e2723-a8b5-4bac-ba2a-02ee22afe3dc","c8cf041f-6c65-4e3a-b304-e0b7cfe5a7a8","4aafbb38-45c3-4510-a4fb-79ddee4609e1","9295f662-1576-4cd9-ae2c-e5b98e004013","caa10cde-996e-4f8d-adfb-d7e3d8046726","73992542-7eea-446a-a813-be9be977a1e9","800d0ed9-5ab9-43c2-b9bf-65bb3d740822","75cbd5cd-883c-4b21-a7f7-cd7f4862c796","4f15c6a9-03c7-4290-a534-d8125d5cf9c0","e1f7972d-096f-4309-8ff3-e95fc6e290be","b88ac08b-1838-4987-8510-5d098e4e029b","bbeb12ae-8826-49e2-b9c1-efb3c49c336e","7c2068ba-d812-424b-bb7f-59445cac4081","ce7feb1b-c0e1-4a8e-a841-3711b1bee26d","07fd3b0d-1350-46c2-91be-bf586c46e878","e76d4f0e-1cbc-4afb-85f9-eea31e83f8e0","3985e331-9778-4909-aa73-79e23575ccc5","7cf78357-6f6e-49bc-9d7c-2a53a51a7de2","45fae77e-3723-4cd9-a1c4-bb7f1dae5943"]}},"description":"All - C+AI Subscriptions must have pre-defined C+AI NSG rules. See https://aka.ms/netiso/nsgs - for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:27:59.4953193Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:36:23.3383233Z"},"enforcementMode":"Default"},"identity":{"principalId":"2ac3f52f-f3ad-40a4-9b2d-aa24e4c7bbba","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","type":"SystemAssigned"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-NSG-DINE-SR103-v014","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-NSG-DINE-SR103-v014","location":"eastus2"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-nsg-rule-104_1.3","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/bac0fb65020410a4","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"ruleNo":{"value":"104"},"info":{"value":"Created - by Azure Core Security managed policy, rule can be deleted but do not change - source ips, please see aka.ms/cainsgpolicy"},"destinationPortRanges":{"value":["*"]},"protocol":{"value":"*"},"sourceType":{"value":"Service - Tag"},"sourceValue":{"value":"CorpNetSaw"},"actionValue":{"value":"Allow"},"direction":{"value":"Inbound"},"tagname":{"value":"SkipNRMSSAW"},"subscriptionExclusions":{"value":["e05dbbce-79c2-45a2-a7ef-f1058856feb3","4bb527f3-5718-477f-93ae-96a00a4944fe","cafc4bb9-6584-480c-b992-c6643801be41","ba4c5917-5ba3-495b-857c-af2642a5b115","e4b5cac5-c0f5-4618-aa98-3c01e18c5fde","e6fd4e44-694e-4e30-b72a-7da4ef662a29","6b82129a-13ef-4554-93a5-17cda6672746","5f14ad42-7fae-4258-b7bf-ab24eb46988d","548801a8-a653-452a-b883-db65b6d06fac","0afea355-fcdc-47a0-a82c-f5436b883790","184ca802-aa58-44e3-96a1-5905c23d9364","50dc548d-0c1f-41c5-bf52-cb6957d9d052","82be74c1-6520-4ab5-b10e-fc17162b8c86","b69ac3e7-4dd7-45e8-ad79-2bf1d780f221","d2da8762-d5bc-4197-94d0-8c298fc6e5ed","c1b0ff3b-5ef1-4cf6-b723-64c216558172","08ea33e0-01df-4486-88f0-e1f35de8ca0b","cabab48d-da29-4857-88f0-789518f35342","a3ea6660-0f26-4ca7-8772-09c454995588","406307ea-f1c6-4592-b338-fdf958e300e6","3b98cb2d-64df-4532-a36a-b835b0494744","076cf91a-5eb9-4ee2-9bbf-647e8d818ddb","3742010c-b092-4f45-9448-d0ba8d14c7b8","148e2723-a8b5-4bac-ba2a-02ee22afe3dc","c8cf041f-6c65-4e3a-b304-e0b7cfe5a7a8","4aafbb38-45c3-4510-a4fb-79ddee4609e1","9295f662-1576-4cd9-ae2c-e5b98e004013","caa10cde-996e-4f8d-adfb-d7e3d8046726","73992542-7eea-446a-a813-be9be977a1e9","800d0ed9-5ab9-43c2-b9bf-65bb3d740822","75cbd5cd-883c-4b21-a7f7-cd7f4862c796","4f15c6a9-03c7-4290-a534-d8125d5cf9c0","e1f7972d-096f-4309-8ff3-e95fc6e290be","b88ac08b-1838-4987-8510-5d098e4e029b","bbeb12ae-8826-49e2-b9c1-efb3c49c336e","7c2068ba-d812-424b-bb7f-59445cac4081","ce7feb1b-c0e1-4a8e-a841-3711b1bee26d","07fd3b0d-1350-46c2-91be-bf586c46e878","e76d4f0e-1cbc-4afb-85f9-eea31e83f8e0","3985e331-9778-4909-aa73-79e23575ccc5","7cf78357-6f6e-49bc-9d7c-2a53a51a7de2","45fae77e-3723-4cd9-a1c4-bb7f1dae5943"]}},"description":"All - C+AI Subscriptions must have pre-defined C+AI NSG rules. See https://aka.ms/netiso/nsgs - for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:28:25.1822092Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:37:55.9717659Z"},"enforcementMode":"Default"},"identity":{"principalId":"f2e939bc-742a-42f9-a27a-f0982c6e3f64","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","type":"SystemAssigned"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-NSG-DINE-SR104-v013","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-NSG-DINE-SR104-v013","location":"japanwest"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-nsg-rule-105_1.3","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/91f42c0ca66ff7dd","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"ruleNo":{"value":"105"},"info":{"value":"DO - NOT DELETE - Will result in ICM Sev 2 - Azure Core Security, see aka.ms/cainsgpolicy"},"destinationPortRanges":{"value":["1433","1434","3306","4333","5432","6379","7000","7001","7199","9042","9160","9300","16379","26379","27017"]},"protocol":{"value":"*"},"sourceType":{"value":"Service - Tag"},"sourceValue":{"value":"Internet"},"actionValue":{"value":"Deny"},"direction":{"value":"Inbound"},"tagname":{"value":"SkipNRMSDB"},"subscriptionExclusions":{"value":["61868ab8-16d4-44ec-a9ff-f35d05922847","41c39ac7-6cde-4be7-87c3-d57a168b7b92","235d341f-7fb9-435c-9bdc-034b7306c9b4","239b3f1a-daab-4125-918c-f028b0edb054","12f44720-8952-422c-bb7d-28831c2de639","c36fd9e7-e5b1-4d3e-bb85-2e538040258b","243b67d4-60ca-4dfd-a556-216ee06f77a1","24ae0a2f-2cb0-4a1a-9929-bed71bad0d59","b4582baf-35d9-47b9-b03d-1bd126876221","65f79f71-cb42-45b1-82b7-4635fd05fc26","9532a63e-f2eb-4649-bb23-5ed01077ce80","1533031f-9510-4d8d-8f83-af94df45d43c","73d25f92-e703-4c91-8aed-2fb23c8e151f","86d6f8d7-564b-4005-912c-b1a3a9a286ce","97a3d790-8d62-4f20-b579-39ee6b06cb45","179be307-0377-46c0-a8bb-17437582d266","6c516c14-f378-4780-bc52-dd1d098a9c0b","cc5e1d36-a80d-4878-add9-5204a7efda20","0bf83929-3a19-4a96-87da-b23c3aca7fd7","ad7af743-6a66-480e-98cd-e022f833d0ce","0cfe98e1-3cf6-41ca-9f54-435d1ddaf0de","ce6570fa-18fb-4503-80d9-4a225591a428","2f8446c7-7c1e-42f0-a6b7-d68df1255cc4","ff78024c-d5a1-48ae-88eb-d61f0f60f8ff","bdd789f3-d9d1-4bea-ac14-30a39ed66d33","6fe0c04c-acb9-4f74-8153-56a6cb666ca8","7fa88f8d-252c-4b22-a73e-cd77f85cca66","bafb24c9-f4bb-46a0-9891-4b3e12dab22e","aab411af-ed4d-4f02-bb87-5de8b00d880d","7e7b7a6f-0b34-4db9-958d-ece4c89b419f","964c10bb-8a6c-43bc-83d3-6b318c6c7305","7b29bb4e-8391-4d57-8045-b34a092e5108","3f706ca0-34d7-4ede-a432-3c1a37ddd5c6","7856cb6f-e1a8-48f2-b2a5-bfaa7f8c34a1","49e3ed89-bbdb-4545-844f-e3502d6ce44f","8cad7ef7-ae41-4adf-86b8-ffcb11fae200","8e9ec0f8-bfe6-43a5-acd2-b6c4666ef9f6","b8fc6ee8-6802-4605-b4a5-1d131084c62f","45493131-fef6-4cb1-80e9-f0dadaa0255a","9c8295ef-4bf7-49db-90aa-5f0837dc60b7","ed0b2672-8412-463f-a0c1-1867730d7e27","7f31cba8-b597-4129-b158-8f21a7395bd0","3b658bfc-dbb0-4f7a-9e6c-a7659ade3514","825d553e-1fdf-4961-8f6b-bab24c6b07a7","477d55b5-bef1-4c35-b8bd-42df6ef99d25","0cd887ff-5af0-405b-8d48-b2b0495af57b","4259a25b-fc62-41d0-a101-60bfaab38086","3ae1ab9b-5849-4409-b744-58ba98878274","8d8d3365-2fab-415f-862e-712d989871b2","1ef6f67e-7981-498c-8349-b67109d0fd0f","e9b95386-37fe-4820-9dc6-30a44fbeafba","f9e81224-18f1-4474-80b5-bd6b832f0b73","f0b97671-152e-45cc-a831-73fd5caa8740","d4c1893d-adf1-4111-aaa3-93d55a4059b9","2d3ea1e9-269c-4fd1-8878-21e84bf9d214","1267b3e1-8812-4435-82ff-9e57f390c194","38c49794-e385-48e6-b6ee-c42b9f2075be","2843db96-7d25-4cf5-8e67-71baed52dfb7","a531aaa4-20f4-40e6-ba1a-858a0359f602","b835f458-560c-49c2-8781-4b13d892ddd9","e4d287eb-a38c-4387-832a-e3c61ea576bd","af878dc5-7fe2-4698-b7fb-2ed4b2ffe4db","26d6d535-5164-443d-82f6-4c695caf7688","d862948f-6520-451f-af67-123309e4e4ce","ff96a11f-784d-4c26-94c7-34346d4d660e","38b241a5-8658-4b50-bfba-1800ee2d4d09","28f78ae5-97b2-487e-b097-270de10ce6b8","6c048bcd-2cc6-47fe-a558-ca54083d537e","62fc3d9a-b8ab-47e7-8df1-be09f78bb25a","48aae13c-e8a8-4057-a5d5-f77eaa56f1fd","b30d9dbd-c0f7-405f-902c-3eabd080eb00","aa858381-0720-4837-b0f8-60468c0b2763","7e6898e7-868d-490f-8f91-0cffa67c48a0","816e6e0f-a719-487e-a651-813f40cc95c5","aeaa528b-2620-42a7-bbe8-17b698d42530","9c870d54-05fd-46bb-9bb5-63a5756320a0","36e4aeae-caae-4cd6-8d6b-7015355c6229","d53f365b-64c6-45fa-9253-99fc92dfae5d","6b7b20bf-f54b-4a3d-9961-c85fbe894b67","875bd0a7-0adc-4391-8b42-85e866e87e5d","97454014-0118-4294-9648-938eb8f52327","de1883af-a411-450a-8c9f-55b07d48cd60","991af618-96d9-4bc0-879d-0e13ac6020c1","21eedfa4-4dc5-4056-bdba-dcfaf3b1a222","0e57ff86-19ec-4f88-8403-879bd0d64af8","31c8019a-6c01-4c1d-9a04-6bbd091e8ccd","52ce96d0-a12d-4e17-9644-50e0059a7730","f5f248fd-943d-477b-a9d2-de3db83d7712","c4ae973f-3a15-4409-a6cc-9cc91147f42e","ed10ec26-e9a9-40ba-85df-2d7e2dec7765","a083c30e-d4e5-4dc1-b310-02aaf36b316a","c1fd1678-d0fe-4253-a15f-a03eee323432","a013b98a-6c2a-4f92-a6a7-82266ac6f437","ef7a7954-0173-4574-86a1-486e015ab617","ded8fcaf-289f-40bd-b124-572d3d4f58ed","178b7546-3fed-4e8a-b001-9c71b1051ce9","f2b7f785-c33d-471f-bb13-57d62e83af62","a226aace-1c2d-4a53-96a3-de0ea8f3e4ad","b909342e-42c0-423e-8815-ea07509e27f9","9d124ad5-c7de-4c56-8ffe-0f3f6566d3b3","ddc736d4-2fe4-44ad-8b82-080913c64b79","ea406f31-bf7a-4139-a444-1f23847f1350","66affadd-ce7e-4ac3-a16c-d85dc2d07544","d0e65693-60a1-438c-be56-2225cf43d568","902dc4d6-9ae1-4141-ac1b-ca5b3071cd63","cac63bb3-1459-4b23-a864-f2ea6c6456e9","2fa553a5-a443-4f09-bd4c-dbc9ded93a1c","9d7c4ce2-5443-4499-a07a-695894000463","3814aaea-6bb6-4e31-b3c4-45e761c8d6d1","9d0fe465-cebe-41a0-afc4-e49fe70dee55","2edae715-e43e-471a-9b6d-a6bc52a395c0","c7d2e450-636b-443d-b737-5e2708629ea1","4bb073a1-ad47-4f14-bfa6-9ffd55ea8f81","0fbc3fc8-1bcd-433d-a6f0-b96ca76c60dc","f3d00ca5-7ce1-4562-8160-2a856dd6d1f3","1c91c686-b0d1-4f51-8784-9eee52c07b7e","c1089427-83d3-4286-9f35-5af546a6eb67","ec716296-0c8d-410a-8666-1eff05989831","c31ad117-e07c-4388-9148-387a2ba72135","c9802e4f-0860-43a1-b3ed-37d3ae8cdf92","708474aa-31a7-4dbd-a106-84de1043185d","f6470ed6-05de-421c-bae8-184d8d28be10","17cfecb9-1a5f-4b8b-a32f-119de8c44f5a","70d2f261-7253-4b1a-a52a-406e7a328c33","2fda68f7-567f-4c8f-b0b7-f4b6a5988e84","86b0b59c-8538-4aa6-90f6-ce8329258bb2","8ecadfc9-d1a3-4ea4-b844-0d9f87e4d7c8","433e1858-1953-42b2-a9dd-d7601c25d347","bb1216b4-4400-422b-8a67-8a80a9c88d5e","cf5e3b9b-595a-499d-8669-00b88b449213","e01c1ddb-8025-491a-986d-c249fa9a69a0","9d71e31b-7356-4d2d-a6e9-d588fc7692c2","c6e602bd-0d12-4265-bebc-cb208dd5030f","e929be23-7420-44f3-bd80-810a56d06e1e","46b59458-3f32-4f06-b6a2-bd27dda4305c","14cff334-91a5-4d9d-bf42-39c6d630d37c","80c8978c-c1c6-4f9e-94cd-874798b05935","f9da0435-3452-483a-a5f4-743988dc6b1d","0f1325ea-bcfe-4b02-a303-baaefb80a9f9","70407fa2-4234-4266-812c-d70754ed228c","41e806f1-99ee-4c48-9ce8-379068350924","7b6fdce7-2d25-4c7f-b8c1-004a375626cb","4a725092-b458-4dc2-9ae9-f8f0e7d415dc","178b2260-bd62-4372-ab30-7cf02b6a3108","d9964125-396a-4343-8d4e-b16c0281ae58","4df9862d-6ce3-486d-a4e1-8b246cb08f79","db205d1d-a8b1-49e1-8d5a-4f5b5ae39169","363499fe-248b-4624-ba5b-5f477bb924f4","9eefe291-18db-46f1-b308-4d7851fa270d","e4e0b3b0-1587-400f-95f9-1bb605a252c2","139c34d4-91bf-42c9-8dc5-b6c37f9ac517","8ab2ca47-1f5f-4936-8f37-c5780ff265d0","511013e8-8a72-4ddf-a9b4-1a9bb3a5fa6a","0a5044a6-a614-40e1-97e0-20af784237ea","a3fcf642-fa77-4d3c-886e-527258f00e72","4f6cdb57-2658-40b9-8adc-1b2ddf7dd7a2","df39322a-6ecd-418b-828d-09fd796dc10a","e1cb07f7-a3ac-4110-9d24-218d93bfa6f9","91280670-dbb5-4fcd-8dc3-dc9d53d94805","90b505b3-1abf-455b-af4d-f08d1135cf33","850d8476-e5fc-4059-9aed-9aeee349c384","ae2dd76f-0dd4-4484-b957-6700179f183f","9fb58da5-7347-4dbf-a892-7c933e5d7776","fc4ea3c9-1d30-4f18-b33b-7404e7da0123","693ffe34-785e-44cd-8fb7-81da25f4d3bd","3e272a96-8781-45f2-8378-6ffaa1596bcc","f2124ee6-885b-4aa6-885d-793c8626b87c","47ff8d6e-e419-464f-8940-dfa750f2115d","18f0638d-ad9b-460a-bd8b-61f12d998d0c","48021fc6-c9c8-4568-8c29-953aad4d1e0a","df41dfd5-a3a6-4c35-a58e-9b6ac732236e","1da3ace1-2326-4842-ba52-0e3a8dce989e","68f6be96-60c4-40f5-a14e-2a04dcacc1a6","5833e0eb-b53c-4156-b478-2eac8f04aec6","34530d5b-398d-496e-88d0-07a6e3de107e","4f698849-a196-4c80-be45-52d507ffb2d4","43350253-f84c-4fb3-a988-cc63366cc570","d466671a-79ad-4ca5-878f-599df8bcd17e","5ea9ae04-3601-468a-ba84-cb7e82ae1e48","31614129-0f24-4a4c-9731-53ceecc3017d","990d87fa-2d5a-48cc-bdff-0d3c6b9dd32d","5a2d898e-7f0b-43fd-8e0e-2b517b736499","16fc4a98-74ad-4970-9857-74d0f39a6c64","47380de2-eddf-42b2-b853-434cde2b5fa0","947d47b4-7883-4bb9-9d85-c5e8e2f572ce","8ca10d88-d6ce-458e-b707-a00f3b6183fd","76fb3144-bc19-4baf-ab79-432d526559b7","da07f543-88e8-4349-b9e1-2d135eb818c2","360cdc41-af67-426b-9249-b46077592db4","13973b32-e60a-4396-bf7a-85f0670d658d","b50578f7-df0d-4152-892d-ad77b284e233","0e584a02-5f47-4317-b102-9665aa08fc7d","83db2801-3fb7-4fda-9c88-227effca791f","ef378126-746c-42ef-87ea-83624095a7cc","6e793a99-19b9-4ac5-8f6a-709fd4da0b49","7bfee1d3-395f-414a-b76a-203385a535b8","100919d5-c4a2-4894-a3d7-83a8534dee66","00a794e2-f9ed-41f6-b2a3-444ec0b61131","3dfa5f20-e79c-437f-add7-0a2ade4379aa","359833f5-8592-40b6-8175-edc664e2196a","fddd10df-2a17-496f-8f2c-40845adac181","301ad868-469e-494a-948f-5212604443f0","9afb6667-24a4-456b-8720-48d5b530a003","05b724b7-9613-42c0-a5d1-45f2a0b40efd","5bb8c800-7777-43d0-a2ad-e8fae03ed3b7","b614deb1-8c61-4b74-9e54-f2c4ba8658af","6fd29849-b584-40ea-82c1-c908b83efd3f","921c46aa-ffa6-4d3b-9be2-b0affd7142d7","62ba464b-5e1c-468d-9a1f-9ddcd1053d68","5c0d4798-3eef-449f-9bfd-58d59fe6ff28","c90dc44b-a834-4a18-b728-b0631c14afa9","6a13868b-c532-4562-9131-5c866bddacf9","c33d86ef-305d-408c-87a2-b014fbcf2e16","7fe76de7-a6e6-491a-b482-449cec7c91fd","673fd28e-faab-4725-9bf4-a59b317f8f93","62f44dee-82b5-4a2f-896e-c2d132a4e415","8643025a-c059-4a48-85d0-d76f51d63a74","26fe00f8-9173-4872-9134-bb1d2e00343a","af599e54-878e-494d-8a8f-b8f8d8896f1a","c4c3550e-a965-4993-a50c-628fd38cd3e1","ab699598-7d66-4003-a0aa-86a0f827bbbf","6cedb63e-a5a2-4d1b-bf27-71f3688871ee","f3b504bb-826e-46c7-a1b7-674a5a0ae43a","9f9df1fb-cf10-42f4-b684-3913a492cc6d","be3bb907-a9fa-4b85-a21b-3154efeb0196","460397b3-c4d8-441c-9d4a-9374b15850d3","7b8aa759-d584-418d-b7e7-99e07cb45bc0","97f95e63-ac5d-4ad4-96ba-a5be9131f52b","86fe5e45-3696-4c0e-b88a-cf350e31ee68","bf0d72cc-0680-4042-bd37-2ff5d224c8d3","566c16c0-5a70-4062-80eb-42c00c823556","5bbcca67-469c-4af6-aa1f-f12014aa4747","e88da25c-3aa8-47a6-86d7-c9b2230171d8","4279e979-0fe8-4bba-8a79-e0012d33d2f7","7d3f20f0-ba46-4205-8bfa-508d47dec375","effdf562-0b65-48b3-bc44-bd406ceeb4c0","0af6e6ec-18c4-4cd6-97de-655d15eda26d","fc71d843-9b8c-4c31-a691-e34f2bf61a58","5d264b2d-d8de-4dce-8e0f-57a40c037732","facdd972-8587-42d9-94db-fea86c95f74b","04a198f4-df84-4ecf-8114-648150edc5f6","c707a0ae-7ee9-4d7a-9262-8cc87c7444ef","0944cf9e-9f5a-4cc8-a6bb-982a82145e32","0dea505e-f72c-4939-91fb-c5d318d31cbd","16018ead-6f73-447d-a422-e5895ea2f1e8","4110a755-2084-451d-a03f-2267f377e37a","c44b3809-aa60-4e78-ad0c-fc02ae6b0fb9","9f657a3d-7377-48a8-b6a3-b5a871d58953","02c0fdb9-19a4-4156-9d06-b8aa940e792a","fd78894d-5436-4f66-907a-9ef485a20d7f","11199e7d-90dd-47b0-9da2-1fc58ed7e9b7","51deb6a1-950b-4cd2-8c66-4a0b5a37291b","5eed6188-c6d6-4966-9543-28b3c88ee4e1","e51231c2-1e1d-4b36-9499-4761c759c21d","599ba755-215c-4d72-a152-5e902c03e753","9d21bfc7-b04f-4615-93d5-eb79e9e217e2","1fa05968-fc4e-4728-bf0e-c48de37a2ae1","73c521c0-1787-493e-845e-89b957b58b8b","c570afbe-46af-4d76-b23b-6e16d8d57df4","85d99e6d-f6d6-408f-a9f1-b7a97237d5c4","227e9423-1792-43b0-82e6-ac94397ed789","bc018f2c-f33c-4f25-bffb-34f3da74d2db","cfd6dc82-faa9-4f51-8534-964917ca7666","5ea8beca-77b8-44cb-8871-93620f04a6e7","7cbc7e85-a998-4d7c-bc89-78fbd0df6e8c","f35ee5d5-f4eb-42c4-a2bb-0f3c706afee7","5f94ce71-7492-4d10-ae80-3482646ca6cd","5299e6b7-b23b-46c8-8277-dc1147807117","c0f60687-8f09-4186-801b-9dd11d82d2e1","1400552c-6fe7-4bbd-a3ca-59ffea564316","ef686670-a2cc-4aec-89bf-8a67c4033507","ced133bc-30d4-48de-b239-78e9fe91c8c0","ba9770c6-6fb6-480b-9fcd-ee2ca1d7b0d6","3778be8b-3cde-493e-8ebc-a6c3f9be6129","5ce1ccad-10d3-4d04-a455-4ab42ee64a61","70d2b6ec-b846-43dc-b4f7-1a84ff24a176","0302f714-23e2-4c23-bd45-d1c97c1c1000","8c4b4f4e-6bf7-4da8-a51a-d341baf3ce44","eba5c6e7-188e-488f-a40d-0f14e1edf190","664a82c2-8810-4432-b9c4-bc5be3f7a0a6","1ef94f5a-a930-4996-9ddb-1dca7c74d040","12df5617-a0af-48ca-bf2c-4bcca863fd84","c80801f3-5848-4f8f-9c7a-dc0052a3655d","fb3429ab-83d0-4bed-95e9-1a8e9455252c","e05dbbce-79c2-45a2-a7ef-f1058856feb3","4bb527f3-5718-477f-93ae-96a00a4944fe","cafc4bb9-6584-480c-b992-c6643801be41","ba4c5917-5ba3-495b-857c-af2642a5b115","e4b5cac5-c0f5-4618-aa98-3c01e18c5fde","e6fd4e44-694e-4e30-b72a-7da4ef662a29","6b82129a-13ef-4554-93a5-17cda6672746","5f14ad42-7fae-4258-b7bf-ab24eb46988d","548801a8-a653-452a-b883-db65b6d06fac","0afea355-fcdc-47a0-a82c-f5436b883790","184ca802-aa58-44e3-96a1-5905c23d9364","50dc548d-0c1f-41c5-bf52-cb6957d9d052","82be74c1-6520-4ab5-b10e-fc17162b8c86","b69ac3e7-4dd7-45e8-ad79-2bf1d780f221","d2da8762-d5bc-4197-94d0-8c298fc6e5ed","c1b0ff3b-5ef1-4cf6-b723-64c216558172","08ea33e0-01df-4486-88f0-e1f35de8ca0b","cabab48d-da29-4857-88f0-789518f35342","a3ea6660-0f26-4ca7-8772-09c454995588","406307ea-f1c6-4592-b338-fdf958e300e6","3b98cb2d-64df-4532-a36a-b835b0494744","076cf91a-5eb9-4ee2-9bbf-647e8d818ddb","3742010c-b092-4f45-9448-d0ba8d14c7b8","148e2723-a8b5-4bac-ba2a-02ee22afe3dc","c8cf041f-6c65-4e3a-b304-e0b7cfe5a7a8","4aafbb38-45c3-4510-a4fb-79ddee4609e1","9295f662-1576-4cd9-ae2c-e5b98e004013","caa10cde-996e-4f8d-adfb-d7e3d8046726","73992542-7eea-446a-a813-be9be977a1e9","800d0ed9-5ab9-43c2-b9bf-65bb3d740822","75cbd5cd-883c-4b21-a7f7-cd7f4862c796","4f15c6a9-03c7-4290-a534-d8125d5cf9c0","e1f7972d-096f-4309-8ff3-e95fc6e290be","b88ac08b-1838-4987-8510-5d098e4e029b","bbeb12ae-8826-49e2-b9c1-efb3c49c336e","7c2068ba-d812-424b-bb7f-59445cac4081","ce7feb1b-c0e1-4a8e-a841-3711b1bee26d","07fd3b0d-1350-46c2-91be-bf586c46e878","e76d4f0e-1cbc-4afb-85f9-eea31e83f8e0","3985e331-9778-4909-aa73-79e23575ccc5","7cf78357-6f6e-49bc-9d7c-2a53a51a7de2","45fae77e-3723-4cd9-a1c4-bb7f1dae5943","6f5dcae0-a801-4d61-869d-7cf26ac8b3c3"]}},"description":"All - C+AI Subscriptions must have pre-defined C+AI NSG rules. See https://aka.ms/netiso/nsgs - for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:28:47.192623Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:38:02.2961864Z"},"enforcementMode":"Default"},"identity":{"principalId":"4a113caa-961f-4535-ac9b-79bfba8b9ed2","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","type":"SystemAssigned"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-NSG-DINE-SR105-v013","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-NSG-DINE-SR105-v013","location":"australiasoutheast"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-nsg-rule-106_1.3","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/9b8d76c443040b08","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"ruleNo":{"value":"106"},"info":{"value":"DO - NOT DELETE - Will result in ICM Sev 2 - Azure Core Security, see aka.ms/cainsgpolicy"},"destinationPortRanges":{"value":["22","3389"]},"protocol":{"value":"Tcp"},"sourceType":{"value":"Service - Tag"},"sourceValue":{"value":"Internet"},"actionValue":{"value":"Deny"},"direction":{"value":"Inbound"},"tagname":{"value":"SkipNRMSRDPSSH"},"subscriptionExclusions":{"value":["61868ab8-16d4-44ec-a9ff-f35d05922847","41c39ac7-6cde-4be7-87c3-d57a168b7b92","235d341f-7fb9-435c-9bdc-034b7306c9b4","239b3f1a-daab-4125-918c-f028b0edb054","12f44720-8952-422c-bb7d-28831c2de639","c36fd9e7-e5b1-4d3e-bb85-2e538040258b","243b67d4-60ca-4dfd-a556-216ee06f77a1","24ae0a2f-2cb0-4a1a-9929-bed71bad0d59","b4582baf-35d9-47b9-b03d-1bd126876221","65f79f71-cb42-45b1-82b7-4635fd05fc26","9532a63e-f2eb-4649-bb23-5ed01077ce80","1533031f-9510-4d8d-8f83-af94df45d43c","73d25f92-e703-4c91-8aed-2fb23c8e151f","86d6f8d7-564b-4005-912c-b1a3a9a286ce","97a3d790-8d62-4f20-b579-39ee6b06cb45","179be307-0377-46c0-a8bb-17437582d266","6c516c14-f378-4780-bc52-dd1d098a9c0b","cc5e1d36-a80d-4878-add9-5204a7efda20","0bf83929-3a19-4a96-87da-b23c3aca7fd7","ad7af743-6a66-480e-98cd-e022f833d0ce","0cfe98e1-3cf6-41ca-9f54-435d1ddaf0de","ce6570fa-18fb-4503-80d9-4a225591a428","2f8446c7-7c1e-42f0-a6b7-d68df1255cc4","ff78024c-d5a1-48ae-88eb-d61f0f60f8ff","bdd789f3-d9d1-4bea-ac14-30a39ed66d33","6fe0c04c-acb9-4f74-8153-56a6cb666ca8","7fa88f8d-252c-4b22-a73e-cd77f85cca66","bafb24c9-f4bb-46a0-9891-4b3e12dab22e","aab411af-ed4d-4f02-bb87-5de8b00d880d","7e7b7a6f-0b34-4db9-958d-ece4c89b419f","964c10bb-8a6c-43bc-83d3-6b318c6c7305","7b29bb4e-8391-4d57-8045-b34a092e5108","3f706ca0-34d7-4ede-a432-3c1a37ddd5c6","7856cb6f-e1a8-48f2-b2a5-bfaa7f8c34a1","49e3ed89-bbdb-4545-844f-e3502d6ce44f","8cad7ef7-ae41-4adf-86b8-ffcb11fae200","8e9ec0f8-bfe6-43a5-acd2-b6c4666ef9f6","b8fc6ee8-6802-4605-b4a5-1d131084c62f","45493131-fef6-4cb1-80e9-f0dadaa0255a","9c8295ef-4bf7-49db-90aa-5f0837dc60b7","ed0b2672-8412-463f-a0c1-1867730d7e27","7f31cba8-b597-4129-b158-8f21a7395bd0","3b658bfc-dbb0-4f7a-9e6c-a7659ade3514","825d553e-1fdf-4961-8f6b-bab24c6b07a7","477d55b5-bef1-4c35-b8bd-42df6ef99d25","0cd887ff-5af0-405b-8d48-b2b0495af57b","4259a25b-fc62-41d0-a101-60bfaab38086","3ae1ab9b-5849-4409-b744-58ba98878274","8d8d3365-2fab-415f-862e-712d989871b2","1ef6f67e-7981-498c-8349-b67109d0fd0f","e9b95386-37fe-4820-9dc6-30a44fbeafba","f9e81224-18f1-4474-80b5-bd6b832f0b73","f0b97671-152e-45cc-a831-73fd5caa8740","d4c1893d-adf1-4111-aaa3-93d55a4059b9","2d3ea1e9-269c-4fd1-8878-21e84bf9d214","1267b3e1-8812-4435-82ff-9e57f390c194","38c49794-e385-48e6-b6ee-c42b9f2075be","2843db96-7d25-4cf5-8e67-71baed52dfb7","a531aaa4-20f4-40e6-ba1a-858a0359f602","b835f458-560c-49c2-8781-4b13d892ddd9","e4d287eb-a38c-4387-832a-e3c61ea576bd","af878dc5-7fe2-4698-b7fb-2ed4b2ffe4db","26d6d535-5164-443d-82f6-4c695caf7688","d862948f-6520-451f-af67-123309e4e4ce","ff96a11f-784d-4c26-94c7-34346d4d660e","38b241a5-8658-4b50-bfba-1800ee2d4d09","28f78ae5-97b2-487e-b097-270de10ce6b8","6c048bcd-2cc6-47fe-a558-ca54083d537e","62fc3d9a-b8ab-47e7-8df1-be09f78bb25a","48aae13c-e8a8-4057-a5d5-f77eaa56f1fd","b30d9dbd-c0f7-405f-902c-3eabd080eb00","aa858381-0720-4837-b0f8-60468c0b2763","7e6898e7-868d-490f-8f91-0cffa67c48a0","816e6e0f-a719-487e-a651-813f40cc95c5","aeaa528b-2620-42a7-bbe8-17b698d42530","9c870d54-05fd-46bb-9bb5-63a5756320a0","36e4aeae-caae-4cd6-8d6b-7015355c6229","d53f365b-64c6-45fa-9253-99fc92dfae5d","6b7b20bf-f54b-4a3d-9961-c85fbe894b67","875bd0a7-0adc-4391-8b42-85e866e87e5d","97454014-0118-4294-9648-938eb8f52327","de1883af-a411-450a-8c9f-55b07d48cd60","991af618-96d9-4bc0-879d-0e13ac6020c1","21eedfa4-4dc5-4056-bdba-dcfaf3b1a222","0e57ff86-19ec-4f88-8403-879bd0d64af8","31c8019a-6c01-4c1d-9a04-6bbd091e8ccd","52ce96d0-a12d-4e17-9644-50e0059a7730","f5f248fd-943d-477b-a9d2-de3db83d7712","c4ae973f-3a15-4409-a6cc-9cc91147f42e","ed10ec26-e9a9-40ba-85df-2d7e2dec7765","a083c30e-d4e5-4dc1-b310-02aaf36b316a","c1fd1678-d0fe-4253-a15f-a03eee323432","a013b98a-6c2a-4f92-a6a7-82266ac6f437","ef7a7954-0173-4574-86a1-486e015ab617","ded8fcaf-289f-40bd-b124-572d3d4f58ed","178b7546-3fed-4e8a-b001-9c71b1051ce9","f2b7f785-c33d-471f-bb13-57d62e83af62","a226aace-1c2d-4a53-96a3-de0ea8f3e4ad","b909342e-42c0-423e-8815-ea07509e27f9","9d124ad5-c7de-4c56-8ffe-0f3f6566d3b3","ddc736d4-2fe4-44ad-8b82-080913c64b79","ea406f31-bf7a-4139-a444-1f23847f1350","66affadd-ce7e-4ac3-a16c-d85dc2d07544","d0e65693-60a1-438c-be56-2225cf43d568","902dc4d6-9ae1-4141-ac1b-ca5b3071cd63","cac63bb3-1459-4b23-a864-f2ea6c6456e9","2fa553a5-a443-4f09-bd4c-dbc9ded93a1c","9d7c4ce2-5443-4499-a07a-695894000463","3814aaea-6bb6-4e31-b3c4-45e761c8d6d1","9d0fe465-cebe-41a0-afc4-e49fe70dee55","2edae715-e43e-471a-9b6d-a6bc52a395c0","c7d2e450-636b-443d-b737-5e2708629ea1","4bb073a1-ad47-4f14-bfa6-9ffd55ea8f81","0fbc3fc8-1bcd-433d-a6f0-b96ca76c60dc","f3d00ca5-7ce1-4562-8160-2a856dd6d1f3","1c91c686-b0d1-4f51-8784-9eee52c07b7e","c1089427-83d3-4286-9f35-5af546a6eb67","ec716296-0c8d-410a-8666-1eff05989831","c31ad117-e07c-4388-9148-387a2ba72135","c9802e4f-0860-43a1-b3ed-37d3ae8cdf92","708474aa-31a7-4dbd-a106-84de1043185d","f6470ed6-05de-421c-bae8-184d8d28be10","17cfecb9-1a5f-4b8b-a32f-119de8c44f5a","70d2f261-7253-4b1a-a52a-406e7a328c33","2fda68f7-567f-4c8f-b0b7-f4b6a5988e84","86b0b59c-8538-4aa6-90f6-ce8329258bb2","8ecadfc9-d1a3-4ea4-b844-0d9f87e4d7c8","433e1858-1953-42b2-a9dd-d7601c25d347","bb1216b4-4400-422b-8a67-8a80a9c88d5e","cf5e3b9b-595a-499d-8669-00b88b449213","e01c1ddb-8025-491a-986d-c249fa9a69a0","9d71e31b-7356-4d2d-a6e9-d588fc7692c2","c6e602bd-0d12-4265-bebc-cb208dd5030f","e929be23-7420-44f3-bd80-810a56d06e1e","46b59458-3f32-4f06-b6a2-bd27dda4305c","14cff334-91a5-4d9d-bf42-39c6d630d37c","80c8978c-c1c6-4f9e-94cd-874798b05935","f9da0435-3452-483a-a5f4-743988dc6b1d","0f1325ea-bcfe-4b02-a303-baaefb80a9f9","70407fa2-4234-4266-812c-d70754ed228c","41e806f1-99ee-4c48-9ce8-379068350924","7b6fdce7-2d25-4c7f-b8c1-004a375626cb","4a725092-b458-4dc2-9ae9-f8f0e7d415dc","178b2260-bd62-4372-ab30-7cf02b6a3108","d9964125-396a-4343-8d4e-b16c0281ae58","4df9862d-6ce3-486d-a4e1-8b246cb08f79","db205d1d-a8b1-49e1-8d5a-4f5b5ae39169","363499fe-248b-4624-ba5b-5f477bb924f4","9eefe291-18db-46f1-b308-4d7851fa270d","e4e0b3b0-1587-400f-95f9-1bb605a252c2","139c34d4-91bf-42c9-8dc5-b6c37f9ac517","8ab2ca47-1f5f-4936-8f37-c5780ff265d0","511013e8-8a72-4ddf-a9b4-1a9bb3a5fa6a","0a5044a6-a614-40e1-97e0-20af784237ea","a3fcf642-fa77-4d3c-886e-527258f00e72","4f6cdb57-2658-40b9-8adc-1b2ddf7dd7a2","df39322a-6ecd-418b-828d-09fd796dc10a","e1cb07f7-a3ac-4110-9d24-218d93bfa6f9","91280670-dbb5-4fcd-8dc3-dc9d53d94805","90b505b3-1abf-455b-af4d-f08d1135cf33","850d8476-e5fc-4059-9aed-9aeee349c384","ae2dd76f-0dd4-4484-b957-6700179f183f","9fb58da5-7347-4dbf-a892-7c933e5d7776","fc4ea3c9-1d30-4f18-b33b-7404e7da0123","693ffe34-785e-44cd-8fb7-81da25f4d3bd","3e272a96-8781-45f2-8378-6ffaa1596bcc","f2124ee6-885b-4aa6-885d-793c8626b87c","47ff8d6e-e419-464f-8940-dfa750f2115d","18f0638d-ad9b-460a-bd8b-61f12d998d0c","48021fc6-c9c8-4568-8c29-953aad4d1e0a","df41dfd5-a3a6-4c35-a58e-9b6ac732236e","1da3ace1-2326-4842-ba52-0e3a8dce989e","68f6be96-60c4-40f5-a14e-2a04dcacc1a6","5833e0eb-b53c-4156-b478-2eac8f04aec6","34530d5b-398d-496e-88d0-07a6e3de107e","4f698849-a196-4c80-be45-52d507ffb2d4","43350253-f84c-4fb3-a988-cc63366cc570","d466671a-79ad-4ca5-878f-599df8bcd17e","5ea9ae04-3601-468a-ba84-cb7e82ae1e48","31614129-0f24-4a4c-9731-53ceecc3017d","990d87fa-2d5a-48cc-bdff-0d3c6b9dd32d","5a2d898e-7f0b-43fd-8e0e-2b517b736499","16fc4a98-74ad-4970-9857-74d0f39a6c64","47380de2-eddf-42b2-b853-434cde2b5fa0","947d47b4-7883-4bb9-9d85-c5e8e2f572ce","8ca10d88-d6ce-458e-b707-a00f3b6183fd","76fb3144-bc19-4baf-ab79-432d526559b7","da07f543-88e8-4349-b9e1-2d135eb818c2","360cdc41-af67-426b-9249-b46077592db4","13973b32-e60a-4396-bf7a-85f0670d658d","b50578f7-df0d-4152-892d-ad77b284e233","0e584a02-5f47-4317-b102-9665aa08fc7d","83db2801-3fb7-4fda-9c88-227effca791f","ef378126-746c-42ef-87ea-83624095a7cc","6e793a99-19b9-4ac5-8f6a-709fd4da0b49","7bfee1d3-395f-414a-b76a-203385a535b8","100919d5-c4a2-4894-a3d7-83a8534dee66","00a794e2-f9ed-41f6-b2a3-444ec0b61131","3dfa5f20-e79c-437f-add7-0a2ade4379aa","359833f5-8592-40b6-8175-edc664e2196a","fddd10df-2a17-496f-8f2c-40845adac181","301ad868-469e-494a-948f-5212604443f0","9afb6667-24a4-456b-8720-48d5b530a003","05b724b7-9613-42c0-a5d1-45f2a0b40efd","5bb8c800-7777-43d0-a2ad-e8fae03ed3b7","b614deb1-8c61-4b74-9e54-f2c4ba8658af","6fd29849-b584-40ea-82c1-c908b83efd3f","921c46aa-ffa6-4d3b-9be2-b0affd7142d7","62ba464b-5e1c-468d-9a1f-9ddcd1053d68","5c0d4798-3eef-449f-9bfd-58d59fe6ff28","c90dc44b-a834-4a18-b728-b0631c14afa9","6a13868b-c532-4562-9131-5c866bddacf9","c33d86ef-305d-408c-87a2-b014fbcf2e16","7fe76de7-a6e6-491a-b482-449cec7c91fd","673fd28e-faab-4725-9bf4-a59b317f8f93","62f44dee-82b5-4a2f-896e-c2d132a4e415","8643025a-c059-4a48-85d0-d76f51d63a74","26fe00f8-9173-4872-9134-bb1d2e00343a","af599e54-878e-494d-8a8f-b8f8d8896f1a","c4c3550e-a965-4993-a50c-628fd38cd3e1","ab699598-7d66-4003-a0aa-86a0f827bbbf","6cedb63e-a5a2-4d1b-bf27-71f3688871ee","f3b504bb-826e-46c7-a1b7-674a5a0ae43a","9f9df1fb-cf10-42f4-b684-3913a492cc6d","be3bb907-a9fa-4b85-a21b-3154efeb0196","460397b3-c4d8-441c-9d4a-9374b15850d3","7b8aa759-d584-418d-b7e7-99e07cb45bc0","97f95e63-ac5d-4ad4-96ba-a5be9131f52b","86fe5e45-3696-4c0e-b88a-cf350e31ee68","bf0d72cc-0680-4042-bd37-2ff5d224c8d3","566c16c0-5a70-4062-80eb-42c00c823556","5bbcca67-469c-4af6-aa1f-f12014aa4747","e88da25c-3aa8-47a6-86d7-c9b2230171d8","4279e979-0fe8-4bba-8a79-e0012d33d2f7","7d3f20f0-ba46-4205-8bfa-508d47dec375","effdf562-0b65-48b3-bc44-bd406ceeb4c0","0af6e6ec-18c4-4cd6-97de-655d15eda26d","fc71d843-9b8c-4c31-a691-e34f2bf61a58","5d264b2d-d8de-4dce-8e0f-57a40c037732","facdd972-8587-42d9-94db-fea86c95f74b","04a198f4-df84-4ecf-8114-648150edc5f6","c707a0ae-7ee9-4d7a-9262-8cc87c7444ef","0944cf9e-9f5a-4cc8-a6bb-982a82145e32","0dea505e-f72c-4939-91fb-c5d318d31cbd","16018ead-6f73-447d-a422-e5895ea2f1e8","4110a755-2084-451d-a03f-2267f377e37a","c44b3809-aa60-4e78-ad0c-fc02ae6b0fb9","9f657a3d-7377-48a8-b6a3-b5a871d58953","02c0fdb9-19a4-4156-9d06-b8aa940e792a","fd78894d-5436-4f66-907a-9ef485a20d7f","11199e7d-90dd-47b0-9da2-1fc58ed7e9b7","51deb6a1-950b-4cd2-8c66-4a0b5a37291b","5eed6188-c6d6-4966-9543-28b3c88ee4e1","e51231c2-1e1d-4b36-9499-4761c759c21d","599ba755-215c-4d72-a152-5e902c03e753","9d21bfc7-b04f-4615-93d5-eb79e9e217e2","1fa05968-fc4e-4728-bf0e-c48de37a2ae1","73c521c0-1787-493e-845e-89b957b58b8b","c570afbe-46af-4d76-b23b-6e16d8d57df4","85d99e6d-f6d6-408f-a9f1-b7a97237d5c4","227e9423-1792-43b0-82e6-ac94397ed789","bc018f2c-f33c-4f25-bffb-34f3da74d2db","cfd6dc82-faa9-4f51-8534-964917ca7666","5ea8beca-77b8-44cb-8871-93620f04a6e7","7cbc7e85-a998-4d7c-bc89-78fbd0df6e8c","f35ee5d5-f4eb-42c4-a2bb-0f3c706afee7","5f94ce71-7492-4d10-ae80-3482646ca6cd","5299e6b7-b23b-46c8-8277-dc1147807117","c0f60687-8f09-4186-801b-9dd11d82d2e1","1400552c-6fe7-4bbd-a3ca-59ffea564316","ef686670-a2cc-4aec-89bf-8a67c4033507","ced133bc-30d4-48de-b239-78e9fe91c8c0","ba9770c6-6fb6-480b-9fcd-ee2ca1d7b0d6","3778be8b-3cde-493e-8ebc-a6c3f9be6129","5ce1ccad-10d3-4d04-a455-4ab42ee64a61","70d2b6ec-b846-43dc-b4f7-1a84ff24a176","0302f714-23e2-4c23-bd45-d1c97c1c1000","8c4b4f4e-6bf7-4da8-a51a-d341baf3ce44","eba5c6e7-188e-488f-a40d-0f14e1edf190","664a82c2-8810-4432-b9c4-bc5be3f7a0a6","1ef94f5a-a930-4996-9ddb-1dca7c74d040","12df5617-a0af-48ca-bf2c-4bcca863fd84","c80801f3-5848-4f8f-9c7a-dc0052a3655d","fb3429ab-83d0-4bed-95e9-1a8e9455252c","e05dbbce-79c2-45a2-a7ef-f1058856feb3","4bb527f3-5718-477f-93ae-96a00a4944fe","cafc4bb9-6584-480c-b992-c6643801be41","ba4c5917-5ba3-495b-857c-af2642a5b115","e4b5cac5-c0f5-4618-aa98-3c01e18c5fde","e6fd4e44-694e-4e30-b72a-7da4ef662a29","6b82129a-13ef-4554-93a5-17cda6672746","5f14ad42-7fae-4258-b7bf-ab24eb46988d","548801a8-a653-452a-b883-db65b6d06fac","0afea355-fcdc-47a0-a82c-f5436b883790","184ca802-aa58-44e3-96a1-5905c23d9364","50dc548d-0c1f-41c5-bf52-cb6957d9d052","82be74c1-6520-4ab5-b10e-fc17162b8c86","b69ac3e7-4dd7-45e8-ad79-2bf1d780f221","d2da8762-d5bc-4197-94d0-8c298fc6e5ed","c1b0ff3b-5ef1-4cf6-b723-64c216558172","08ea33e0-01df-4486-88f0-e1f35de8ca0b","cabab48d-da29-4857-88f0-789518f35342","a3ea6660-0f26-4ca7-8772-09c454995588","406307ea-f1c6-4592-b338-fdf958e300e6","3b98cb2d-64df-4532-a36a-b835b0494744","076cf91a-5eb9-4ee2-9bbf-647e8d818ddb","3742010c-b092-4f45-9448-d0ba8d14c7b8","148e2723-a8b5-4bac-ba2a-02ee22afe3dc","c8cf041f-6c65-4e3a-b304-e0b7cfe5a7a8","4aafbb38-45c3-4510-a4fb-79ddee4609e1","9295f662-1576-4cd9-ae2c-e5b98e004013","caa10cde-996e-4f8d-adfb-d7e3d8046726","73992542-7eea-446a-a813-be9be977a1e9","800d0ed9-5ab9-43c2-b9bf-65bb3d740822","75cbd5cd-883c-4b21-a7f7-cd7f4862c796","4f15c6a9-03c7-4290-a534-d8125d5cf9c0","e1f7972d-096f-4309-8ff3-e95fc6e290be","b88ac08b-1838-4987-8510-5d098e4e029b","bbeb12ae-8826-49e2-b9c1-efb3c49c336e","7c2068ba-d812-424b-bb7f-59445cac4081","ce7feb1b-c0e1-4a8e-a841-3711b1bee26d","07fd3b0d-1350-46c2-91be-bf586c46e878","e76d4f0e-1cbc-4afb-85f9-eea31e83f8e0","3985e331-9778-4909-aa73-79e23575ccc5","7cf78357-6f6e-49bc-9d7c-2a53a51a7de2","45fae77e-3723-4cd9-a1c4-bb7f1dae5943"]}},"description":"All - C+AI Subscriptions must have pre-defined C+AI NSG rules. See https://aka.ms/netiso/nsgs - for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:28:53.5540872Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:35:24.5779103Z"},"enforcementMode":"Default"},"identity":{"principalId":"6179a082-c057-4fe3-8118-916b816a42e3","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","type":"SystemAssigned"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-NSG-DINE-SR106-v013","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-NSG-DINE-SR106-v013","location":"japanwest"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-nsg-rule-107_1.3","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/fb6de85c9e746cf1","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"ruleNo":{"value":"107"},"info":{"value":"DO - NOT DELETE - Will result in ICM Sev 2 - Azure Core Security, see aka.ms/cainsgpolicy"},"destinationPortRanges":{"value":["23","135","445","5985","5986"]},"protocol":{"value":"Tcp"},"sourceType":{"value":"Service - Tag"},"sourceValue":{"value":"Internet"},"actionValue":{"value":"Deny"},"direction":{"value":"Inbound"},"tagname":{"value":"SkipNRMSMgmt"},"subscriptionExclusions":{"value":["61868ab8-16d4-44ec-a9ff-f35d05922847","41c39ac7-6cde-4be7-87c3-d57a168b7b92","235d341f-7fb9-435c-9bdc-034b7306c9b4","239b3f1a-daab-4125-918c-f028b0edb054","12f44720-8952-422c-bb7d-28831c2de639","c36fd9e7-e5b1-4d3e-bb85-2e538040258b","243b67d4-60ca-4dfd-a556-216ee06f77a1","24ae0a2f-2cb0-4a1a-9929-bed71bad0d59","b4582baf-35d9-47b9-b03d-1bd126876221","65f79f71-cb42-45b1-82b7-4635fd05fc26","9532a63e-f2eb-4649-bb23-5ed01077ce80","1533031f-9510-4d8d-8f83-af94df45d43c","73d25f92-e703-4c91-8aed-2fb23c8e151f","86d6f8d7-564b-4005-912c-b1a3a9a286ce","97a3d790-8d62-4f20-b579-39ee6b06cb45","179be307-0377-46c0-a8bb-17437582d266","6c516c14-f378-4780-bc52-dd1d098a9c0b","cc5e1d36-a80d-4878-add9-5204a7efda20","0bf83929-3a19-4a96-87da-b23c3aca7fd7","ad7af743-6a66-480e-98cd-e022f833d0ce","0cfe98e1-3cf6-41ca-9f54-435d1ddaf0de","ce6570fa-18fb-4503-80d9-4a225591a428","2f8446c7-7c1e-42f0-a6b7-d68df1255cc4","ff78024c-d5a1-48ae-88eb-d61f0f60f8ff","bdd789f3-d9d1-4bea-ac14-30a39ed66d33","6fe0c04c-acb9-4f74-8153-56a6cb666ca8","7fa88f8d-252c-4b22-a73e-cd77f85cca66","bafb24c9-f4bb-46a0-9891-4b3e12dab22e","aab411af-ed4d-4f02-bb87-5de8b00d880d","7e7b7a6f-0b34-4db9-958d-ece4c89b419f","964c10bb-8a6c-43bc-83d3-6b318c6c7305","7b29bb4e-8391-4d57-8045-b34a092e5108","3f706ca0-34d7-4ede-a432-3c1a37ddd5c6","7856cb6f-e1a8-48f2-b2a5-bfaa7f8c34a1","49e3ed89-bbdb-4545-844f-e3502d6ce44f","8cad7ef7-ae41-4adf-86b8-ffcb11fae200","8e9ec0f8-bfe6-43a5-acd2-b6c4666ef9f6","b8fc6ee8-6802-4605-b4a5-1d131084c62f","45493131-fef6-4cb1-80e9-f0dadaa0255a","9c8295ef-4bf7-49db-90aa-5f0837dc60b7","ed0b2672-8412-463f-a0c1-1867730d7e27","7f31cba8-b597-4129-b158-8f21a7395bd0","3b658bfc-dbb0-4f7a-9e6c-a7659ade3514","825d553e-1fdf-4961-8f6b-bab24c6b07a7","477d55b5-bef1-4c35-b8bd-42df6ef99d25","0cd887ff-5af0-405b-8d48-b2b0495af57b","4259a25b-fc62-41d0-a101-60bfaab38086","3ae1ab9b-5849-4409-b744-58ba98878274","8d8d3365-2fab-415f-862e-712d989871b2","1ef6f67e-7981-498c-8349-b67109d0fd0f","e9b95386-37fe-4820-9dc6-30a44fbeafba","f9e81224-18f1-4474-80b5-bd6b832f0b73","f0b97671-152e-45cc-a831-73fd5caa8740","d4c1893d-adf1-4111-aaa3-93d55a4059b9","2d3ea1e9-269c-4fd1-8878-21e84bf9d214","1267b3e1-8812-4435-82ff-9e57f390c194","38c49794-e385-48e6-b6ee-c42b9f2075be","2843db96-7d25-4cf5-8e67-71baed52dfb7","a531aaa4-20f4-40e6-ba1a-858a0359f602","b835f458-560c-49c2-8781-4b13d892ddd9","e4d287eb-a38c-4387-832a-e3c61ea576bd","af878dc5-7fe2-4698-b7fb-2ed4b2ffe4db","26d6d535-5164-443d-82f6-4c695caf7688","d862948f-6520-451f-af67-123309e4e4ce","ff96a11f-784d-4c26-94c7-34346d4d660e","38b241a5-8658-4b50-bfba-1800ee2d4d09","28f78ae5-97b2-487e-b097-270de10ce6b8","6c048bcd-2cc6-47fe-a558-ca54083d537e","62fc3d9a-b8ab-47e7-8df1-be09f78bb25a","48aae13c-e8a8-4057-a5d5-f77eaa56f1fd","b30d9dbd-c0f7-405f-902c-3eabd080eb00","aa858381-0720-4837-b0f8-60468c0b2763","7e6898e7-868d-490f-8f91-0cffa67c48a0","816e6e0f-a719-487e-a651-813f40cc95c5","aeaa528b-2620-42a7-bbe8-17b698d42530","9c870d54-05fd-46bb-9bb5-63a5756320a0","36e4aeae-caae-4cd6-8d6b-7015355c6229","d53f365b-64c6-45fa-9253-99fc92dfae5d","6b7b20bf-f54b-4a3d-9961-c85fbe894b67","875bd0a7-0adc-4391-8b42-85e866e87e5d","97454014-0118-4294-9648-938eb8f52327","de1883af-a411-450a-8c9f-55b07d48cd60","991af618-96d9-4bc0-879d-0e13ac6020c1","21eedfa4-4dc5-4056-bdba-dcfaf3b1a222","0e57ff86-19ec-4f88-8403-879bd0d64af8","31c8019a-6c01-4c1d-9a04-6bbd091e8ccd","52ce96d0-a12d-4e17-9644-50e0059a7730","f5f248fd-943d-477b-a9d2-de3db83d7712","c4ae973f-3a15-4409-a6cc-9cc91147f42e","ed10ec26-e9a9-40ba-85df-2d7e2dec7765","a083c30e-d4e5-4dc1-b310-02aaf36b316a","c1fd1678-d0fe-4253-a15f-a03eee323432","a013b98a-6c2a-4f92-a6a7-82266ac6f437","ef7a7954-0173-4574-86a1-486e015ab617","ded8fcaf-289f-40bd-b124-572d3d4f58ed","178b7546-3fed-4e8a-b001-9c71b1051ce9","f2b7f785-c33d-471f-bb13-57d62e83af62","a226aace-1c2d-4a53-96a3-de0ea8f3e4ad","b909342e-42c0-423e-8815-ea07509e27f9","9d124ad5-c7de-4c56-8ffe-0f3f6566d3b3","ddc736d4-2fe4-44ad-8b82-080913c64b79","ea406f31-bf7a-4139-a444-1f23847f1350","66affadd-ce7e-4ac3-a16c-d85dc2d07544","d0e65693-60a1-438c-be56-2225cf43d568","902dc4d6-9ae1-4141-ac1b-ca5b3071cd63","cac63bb3-1459-4b23-a864-f2ea6c6456e9","2fa553a5-a443-4f09-bd4c-dbc9ded93a1c","9d7c4ce2-5443-4499-a07a-695894000463","3814aaea-6bb6-4e31-b3c4-45e761c8d6d1","9d0fe465-cebe-41a0-afc4-e49fe70dee55","2edae715-e43e-471a-9b6d-a6bc52a395c0","c7d2e450-636b-443d-b737-5e2708629ea1","4bb073a1-ad47-4f14-bfa6-9ffd55ea8f81","0fbc3fc8-1bcd-433d-a6f0-b96ca76c60dc","f3d00ca5-7ce1-4562-8160-2a856dd6d1f3","1c91c686-b0d1-4f51-8784-9eee52c07b7e","c1089427-83d3-4286-9f35-5af546a6eb67","ec716296-0c8d-410a-8666-1eff05989831","c31ad117-e07c-4388-9148-387a2ba72135","c9802e4f-0860-43a1-b3ed-37d3ae8cdf92","708474aa-31a7-4dbd-a106-84de1043185d","f6470ed6-05de-421c-bae8-184d8d28be10","17cfecb9-1a5f-4b8b-a32f-119de8c44f5a","70d2f261-7253-4b1a-a52a-406e7a328c33","2fda68f7-567f-4c8f-b0b7-f4b6a5988e84","86b0b59c-8538-4aa6-90f6-ce8329258bb2","8ecadfc9-d1a3-4ea4-b844-0d9f87e4d7c8","433e1858-1953-42b2-a9dd-d7601c25d347","bb1216b4-4400-422b-8a67-8a80a9c88d5e","cf5e3b9b-595a-499d-8669-00b88b449213","e01c1ddb-8025-491a-986d-c249fa9a69a0","9d71e31b-7356-4d2d-a6e9-d588fc7692c2","c6e602bd-0d12-4265-bebc-cb208dd5030f","e929be23-7420-44f3-bd80-810a56d06e1e","46b59458-3f32-4f06-b6a2-bd27dda4305c","14cff334-91a5-4d9d-bf42-39c6d630d37c","80c8978c-c1c6-4f9e-94cd-874798b05935","f9da0435-3452-483a-a5f4-743988dc6b1d","0f1325ea-bcfe-4b02-a303-baaefb80a9f9","70407fa2-4234-4266-812c-d70754ed228c","41e806f1-99ee-4c48-9ce8-379068350924","7b6fdce7-2d25-4c7f-b8c1-004a375626cb","4a725092-b458-4dc2-9ae9-f8f0e7d415dc","178b2260-bd62-4372-ab30-7cf02b6a3108","d9964125-396a-4343-8d4e-b16c0281ae58","4df9862d-6ce3-486d-a4e1-8b246cb08f79","db205d1d-a8b1-49e1-8d5a-4f5b5ae39169","363499fe-248b-4624-ba5b-5f477bb924f4","9eefe291-18db-46f1-b308-4d7851fa270d","e4e0b3b0-1587-400f-95f9-1bb605a252c2","139c34d4-91bf-42c9-8dc5-b6c37f9ac517","8ab2ca47-1f5f-4936-8f37-c5780ff265d0","511013e8-8a72-4ddf-a9b4-1a9bb3a5fa6a","0a5044a6-a614-40e1-97e0-20af784237ea","a3fcf642-fa77-4d3c-886e-527258f00e72","4f6cdb57-2658-40b9-8adc-1b2ddf7dd7a2","df39322a-6ecd-418b-828d-09fd796dc10a","e1cb07f7-a3ac-4110-9d24-218d93bfa6f9","91280670-dbb5-4fcd-8dc3-dc9d53d94805","90b505b3-1abf-455b-af4d-f08d1135cf33","850d8476-e5fc-4059-9aed-9aeee349c384","ae2dd76f-0dd4-4484-b957-6700179f183f","9fb58da5-7347-4dbf-a892-7c933e5d7776","fc4ea3c9-1d30-4f18-b33b-7404e7da0123","693ffe34-785e-44cd-8fb7-81da25f4d3bd","3e272a96-8781-45f2-8378-6ffaa1596bcc","f2124ee6-885b-4aa6-885d-793c8626b87c","47ff8d6e-e419-464f-8940-dfa750f2115d","18f0638d-ad9b-460a-bd8b-61f12d998d0c","48021fc6-c9c8-4568-8c29-953aad4d1e0a","df41dfd5-a3a6-4c35-a58e-9b6ac732236e","1da3ace1-2326-4842-ba52-0e3a8dce989e","68f6be96-60c4-40f5-a14e-2a04dcacc1a6","5833e0eb-b53c-4156-b478-2eac8f04aec6","34530d5b-398d-496e-88d0-07a6e3de107e","4f698849-a196-4c80-be45-52d507ffb2d4","43350253-f84c-4fb3-a988-cc63366cc570","d466671a-79ad-4ca5-878f-599df8bcd17e","5ea9ae04-3601-468a-ba84-cb7e82ae1e48","31614129-0f24-4a4c-9731-53ceecc3017d","990d87fa-2d5a-48cc-bdff-0d3c6b9dd32d","5a2d898e-7f0b-43fd-8e0e-2b517b736499","16fc4a98-74ad-4970-9857-74d0f39a6c64","47380de2-eddf-42b2-b853-434cde2b5fa0","947d47b4-7883-4bb9-9d85-c5e8e2f572ce","8ca10d88-d6ce-458e-b707-a00f3b6183fd","76fb3144-bc19-4baf-ab79-432d526559b7","da07f543-88e8-4349-b9e1-2d135eb818c2","360cdc41-af67-426b-9249-b46077592db4","13973b32-e60a-4396-bf7a-85f0670d658d","b50578f7-df0d-4152-892d-ad77b284e233","0e584a02-5f47-4317-b102-9665aa08fc7d","83db2801-3fb7-4fda-9c88-227effca791f","ef378126-746c-42ef-87ea-83624095a7cc","6e793a99-19b9-4ac5-8f6a-709fd4da0b49","7bfee1d3-395f-414a-b76a-203385a535b8","100919d5-c4a2-4894-a3d7-83a8534dee66","00a794e2-f9ed-41f6-b2a3-444ec0b61131","3dfa5f20-e79c-437f-add7-0a2ade4379aa","359833f5-8592-40b6-8175-edc664e2196a","fddd10df-2a17-496f-8f2c-40845adac181","301ad868-469e-494a-948f-5212604443f0","9afb6667-24a4-456b-8720-48d5b530a003","05b724b7-9613-42c0-a5d1-45f2a0b40efd","5bb8c800-7777-43d0-a2ad-e8fae03ed3b7","b614deb1-8c61-4b74-9e54-f2c4ba8658af","6fd29849-b584-40ea-82c1-c908b83efd3f","921c46aa-ffa6-4d3b-9be2-b0affd7142d7","62ba464b-5e1c-468d-9a1f-9ddcd1053d68","5c0d4798-3eef-449f-9bfd-58d59fe6ff28","c90dc44b-a834-4a18-b728-b0631c14afa9","6a13868b-c532-4562-9131-5c866bddacf9","c33d86ef-305d-408c-87a2-b014fbcf2e16","7fe76de7-a6e6-491a-b482-449cec7c91fd","673fd28e-faab-4725-9bf4-a59b317f8f93","62f44dee-82b5-4a2f-896e-c2d132a4e415","8643025a-c059-4a48-85d0-d76f51d63a74","26fe00f8-9173-4872-9134-bb1d2e00343a","af599e54-878e-494d-8a8f-b8f8d8896f1a","c4c3550e-a965-4993-a50c-628fd38cd3e1","ab699598-7d66-4003-a0aa-86a0f827bbbf","6cedb63e-a5a2-4d1b-bf27-71f3688871ee","f3b504bb-826e-46c7-a1b7-674a5a0ae43a","9f9df1fb-cf10-42f4-b684-3913a492cc6d","be3bb907-a9fa-4b85-a21b-3154efeb0196","460397b3-c4d8-441c-9d4a-9374b15850d3","7b8aa759-d584-418d-b7e7-99e07cb45bc0","97f95e63-ac5d-4ad4-96ba-a5be9131f52b","86fe5e45-3696-4c0e-b88a-cf350e31ee68","bf0d72cc-0680-4042-bd37-2ff5d224c8d3","566c16c0-5a70-4062-80eb-42c00c823556","5bbcca67-469c-4af6-aa1f-f12014aa4747","e88da25c-3aa8-47a6-86d7-c9b2230171d8","4279e979-0fe8-4bba-8a79-e0012d33d2f7","7d3f20f0-ba46-4205-8bfa-508d47dec375","effdf562-0b65-48b3-bc44-bd406ceeb4c0","0af6e6ec-18c4-4cd6-97de-655d15eda26d","fc71d843-9b8c-4c31-a691-e34f2bf61a58","5d264b2d-d8de-4dce-8e0f-57a40c037732","facdd972-8587-42d9-94db-fea86c95f74b","04a198f4-df84-4ecf-8114-648150edc5f6","c707a0ae-7ee9-4d7a-9262-8cc87c7444ef","0944cf9e-9f5a-4cc8-a6bb-982a82145e32","0dea505e-f72c-4939-91fb-c5d318d31cbd","16018ead-6f73-447d-a422-e5895ea2f1e8","4110a755-2084-451d-a03f-2267f377e37a","c44b3809-aa60-4e78-ad0c-fc02ae6b0fb9","9f657a3d-7377-48a8-b6a3-b5a871d58953","02c0fdb9-19a4-4156-9d06-b8aa940e792a","fd78894d-5436-4f66-907a-9ef485a20d7f","11199e7d-90dd-47b0-9da2-1fc58ed7e9b7","51deb6a1-950b-4cd2-8c66-4a0b5a37291b","5eed6188-c6d6-4966-9543-28b3c88ee4e1","e51231c2-1e1d-4b36-9499-4761c759c21d","599ba755-215c-4d72-a152-5e902c03e753","9d21bfc7-b04f-4615-93d5-eb79e9e217e2","1fa05968-fc4e-4728-bf0e-c48de37a2ae1","73c521c0-1787-493e-845e-89b957b58b8b","c570afbe-46af-4d76-b23b-6e16d8d57df4","85d99e6d-f6d6-408f-a9f1-b7a97237d5c4","227e9423-1792-43b0-82e6-ac94397ed789","bc018f2c-f33c-4f25-bffb-34f3da74d2db","cfd6dc82-faa9-4f51-8534-964917ca7666","5ea8beca-77b8-44cb-8871-93620f04a6e7","7cbc7e85-a998-4d7c-bc89-78fbd0df6e8c","f35ee5d5-f4eb-42c4-a2bb-0f3c706afee7","5f94ce71-7492-4d10-ae80-3482646ca6cd","5299e6b7-b23b-46c8-8277-dc1147807117","c0f60687-8f09-4186-801b-9dd11d82d2e1","1400552c-6fe7-4bbd-a3ca-59ffea564316","ef686670-a2cc-4aec-89bf-8a67c4033507","ced133bc-30d4-48de-b239-78e9fe91c8c0","ba9770c6-6fb6-480b-9fcd-ee2ca1d7b0d6","3778be8b-3cde-493e-8ebc-a6c3f9be6129","5ce1ccad-10d3-4d04-a455-4ab42ee64a61","70d2b6ec-b846-43dc-b4f7-1a84ff24a176","0302f714-23e2-4c23-bd45-d1c97c1c1000","8c4b4f4e-6bf7-4da8-a51a-d341baf3ce44","eba5c6e7-188e-488f-a40d-0f14e1edf190","664a82c2-8810-4432-b9c4-bc5be3f7a0a6","1ef94f5a-a930-4996-9ddb-1dca7c74d040","12df5617-a0af-48ca-bf2c-4bcca863fd84","c80801f3-5848-4f8f-9c7a-dc0052a3655d","fb3429ab-83d0-4bed-95e9-1a8e9455252c","e05dbbce-79c2-45a2-a7ef-f1058856feb3","4bb527f3-5718-477f-93ae-96a00a4944fe","cafc4bb9-6584-480c-b992-c6643801be41","ba4c5917-5ba3-495b-857c-af2642a5b115","e4b5cac5-c0f5-4618-aa98-3c01e18c5fde","e6fd4e44-694e-4e30-b72a-7da4ef662a29","6b82129a-13ef-4554-93a5-17cda6672746","5f14ad42-7fae-4258-b7bf-ab24eb46988d","548801a8-a653-452a-b883-db65b6d06fac","0afea355-fcdc-47a0-a82c-f5436b883790","184ca802-aa58-44e3-96a1-5905c23d9364","50dc548d-0c1f-41c5-bf52-cb6957d9d052","82be74c1-6520-4ab5-b10e-fc17162b8c86","b69ac3e7-4dd7-45e8-ad79-2bf1d780f221","d2da8762-d5bc-4197-94d0-8c298fc6e5ed","c1b0ff3b-5ef1-4cf6-b723-64c216558172","08ea33e0-01df-4486-88f0-e1f35de8ca0b","cabab48d-da29-4857-88f0-789518f35342","a3ea6660-0f26-4ca7-8772-09c454995588","406307ea-f1c6-4592-b338-fdf958e300e6","3b98cb2d-64df-4532-a36a-b835b0494744","076cf91a-5eb9-4ee2-9bbf-647e8d818ddb","3742010c-b092-4f45-9448-d0ba8d14c7b8","148e2723-a8b5-4bac-ba2a-02ee22afe3dc","c8cf041f-6c65-4e3a-b304-e0b7cfe5a7a8","4aafbb38-45c3-4510-a4fb-79ddee4609e1","9295f662-1576-4cd9-ae2c-e5b98e004013","caa10cde-996e-4f8d-adfb-d7e3d8046726","73992542-7eea-446a-a813-be9be977a1e9","800d0ed9-5ab9-43c2-b9bf-65bb3d740822","75cbd5cd-883c-4b21-a7f7-cd7f4862c796","4f15c6a9-03c7-4290-a534-d8125d5cf9c0","e1f7972d-096f-4309-8ff3-e95fc6e290be","b88ac08b-1838-4987-8510-5d098e4e029b","bbeb12ae-8826-49e2-b9c1-efb3c49c336e","7c2068ba-d812-424b-bb7f-59445cac4081","ce7feb1b-c0e1-4a8e-a841-3711b1bee26d","07fd3b0d-1350-46c2-91be-bf586c46e878","e76d4f0e-1cbc-4afb-85f9-eea31e83f8e0","3985e331-9778-4909-aa73-79e23575ccc5","7cf78357-6f6e-49bc-9d7c-2a53a51a7de2","45fae77e-3723-4cd9-a1c4-bb7f1dae5943"]}},"description":"All - C+AI Subscriptions must have pre-defined C+AI NSG rules. See https://aka.ms/netiso/nsgs - for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:29:11.2279015Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:37:22.5704574Z"},"enforcementMode":"Default"},"identity":{"principalId":"7c2d0d59-528c-434a-8c6c-03330539cad2","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","type":"SystemAssigned"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-NSG-DINE-SR107-v013","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-NSG-DINE-SR107-v013","location":"uksouth"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-nsg-rule-108_1.3","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/532396f35af78946","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"ruleNo":{"value":"108"},"info":{"value":"DO - NOT DELETE - Will result in ICM Sev 2 - Azure Core Security, see aka.ms/cainsgpolicy"},"destinationPortRanges":{"value":["13","17","19","53","69","111","123","512","514","593","873","1900","5353","11211"]},"protocol":{"value":"*"},"sourceType":{"value":"Service - Tag"},"sourceValue":{"value":"Internet"},"actionValue":{"value":"Deny"},"direction":{"value":"Inbound"},"tagname":{"value":"SkipNRMSHigh"},"subscriptionExclusions":{"value":["61868ab8-16d4-44ec-a9ff-f35d05922847","41c39ac7-6cde-4be7-87c3-d57a168b7b92","235d341f-7fb9-435c-9bdc-034b7306c9b4","239b3f1a-daab-4125-918c-f028b0edb054","12f44720-8952-422c-bb7d-28831c2de639","c36fd9e7-e5b1-4d3e-bb85-2e538040258b","243b67d4-60ca-4dfd-a556-216ee06f77a1","24ae0a2f-2cb0-4a1a-9929-bed71bad0d59","b4582baf-35d9-47b9-b03d-1bd126876221","65f79f71-cb42-45b1-82b7-4635fd05fc26","9532a63e-f2eb-4649-bb23-5ed01077ce80","1533031f-9510-4d8d-8f83-af94df45d43c","73d25f92-e703-4c91-8aed-2fb23c8e151f","86d6f8d7-564b-4005-912c-b1a3a9a286ce","97a3d790-8d62-4f20-b579-39ee6b06cb45","179be307-0377-46c0-a8bb-17437582d266","6c516c14-f378-4780-bc52-dd1d098a9c0b","cc5e1d36-a80d-4878-add9-5204a7efda20","0bf83929-3a19-4a96-87da-b23c3aca7fd7","ad7af743-6a66-480e-98cd-e022f833d0ce","0cfe98e1-3cf6-41ca-9f54-435d1ddaf0de","ce6570fa-18fb-4503-80d9-4a225591a428","2f8446c7-7c1e-42f0-a6b7-d68df1255cc4","ff78024c-d5a1-48ae-88eb-d61f0f60f8ff","bdd789f3-d9d1-4bea-ac14-30a39ed66d33","6fe0c04c-acb9-4f74-8153-56a6cb666ca8","7fa88f8d-252c-4b22-a73e-cd77f85cca66","bafb24c9-f4bb-46a0-9891-4b3e12dab22e","aab411af-ed4d-4f02-bb87-5de8b00d880d","7e7b7a6f-0b34-4db9-958d-ece4c89b419f","964c10bb-8a6c-43bc-83d3-6b318c6c7305","7b29bb4e-8391-4d57-8045-b34a092e5108","3f706ca0-34d7-4ede-a432-3c1a37ddd5c6","7856cb6f-e1a8-48f2-b2a5-bfaa7f8c34a1","49e3ed89-bbdb-4545-844f-e3502d6ce44f","8cad7ef7-ae41-4adf-86b8-ffcb11fae200","8e9ec0f8-bfe6-43a5-acd2-b6c4666ef9f6","b8fc6ee8-6802-4605-b4a5-1d131084c62f","45493131-fef6-4cb1-80e9-f0dadaa0255a","9c8295ef-4bf7-49db-90aa-5f0837dc60b7","ed0b2672-8412-463f-a0c1-1867730d7e27","7f31cba8-b597-4129-b158-8f21a7395bd0","3b658bfc-dbb0-4f7a-9e6c-a7659ade3514","825d553e-1fdf-4961-8f6b-bab24c6b07a7","477d55b5-bef1-4c35-b8bd-42df6ef99d25","0cd887ff-5af0-405b-8d48-b2b0495af57b","4259a25b-fc62-41d0-a101-60bfaab38086","3ae1ab9b-5849-4409-b744-58ba98878274","8d8d3365-2fab-415f-862e-712d989871b2","1ef6f67e-7981-498c-8349-b67109d0fd0f","e9b95386-37fe-4820-9dc6-30a44fbeafba","f9e81224-18f1-4474-80b5-bd6b832f0b73","f0b97671-152e-45cc-a831-73fd5caa8740","d4c1893d-adf1-4111-aaa3-93d55a4059b9","2d3ea1e9-269c-4fd1-8878-21e84bf9d214","1267b3e1-8812-4435-82ff-9e57f390c194","38c49794-e385-48e6-b6ee-c42b9f2075be","2843db96-7d25-4cf5-8e67-71baed52dfb7","a531aaa4-20f4-40e6-ba1a-858a0359f602","b835f458-560c-49c2-8781-4b13d892ddd9","e4d287eb-a38c-4387-832a-e3c61ea576bd","af878dc5-7fe2-4698-b7fb-2ed4b2ffe4db","26d6d535-5164-443d-82f6-4c695caf7688","d862948f-6520-451f-af67-123309e4e4ce","ff96a11f-784d-4c26-94c7-34346d4d660e","38b241a5-8658-4b50-bfba-1800ee2d4d09","28f78ae5-97b2-487e-b097-270de10ce6b8","6c048bcd-2cc6-47fe-a558-ca54083d537e","62fc3d9a-b8ab-47e7-8df1-be09f78bb25a","48aae13c-e8a8-4057-a5d5-f77eaa56f1fd","b30d9dbd-c0f7-405f-902c-3eabd080eb00","aa858381-0720-4837-b0f8-60468c0b2763","7e6898e7-868d-490f-8f91-0cffa67c48a0","816e6e0f-a719-487e-a651-813f40cc95c5","aeaa528b-2620-42a7-bbe8-17b698d42530","9c870d54-05fd-46bb-9bb5-63a5756320a0","36e4aeae-caae-4cd6-8d6b-7015355c6229","d53f365b-64c6-45fa-9253-99fc92dfae5d","6b7b20bf-f54b-4a3d-9961-c85fbe894b67","875bd0a7-0adc-4391-8b42-85e866e87e5d","97454014-0118-4294-9648-938eb8f52327","de1883af-a411-450a-8c9f-55b07d48cd60","991af618-96d9-4bc0-879d-0e13ac6020c1","21eedfa4-4dc5-4056-bdba-dcfaf3b1a222","0e57ff86-19ec-4f88-8403-879bd0d64af8","31c8019a-6c01-4c1d-9a04-6bbd091e8ccd","52ce96d0-a12d-4e17-9644-50e0059a7730","f5f248fd-943d-477b-a9d2-de3db83d7712","c4ae973f-3a15-4409-a6cc-9cc91147f42e","ed10ec26-e9a9-40ba-85df-2d7e2dec7765","a083c30e-d4e5-4dc1-b310-02aaf36b316a","c1fd1678-d0fe-4253-a15f-a03eee323432","a013b98a-6c2a-4f92-a6a7-82266ac6f437","ef7a7954-0173-4574-86a1-486e015ab617","ded8fcaf-289f-40bd-b124-572d3d4f58ed","178b7546-3fed-4e8a-b001-9c71b1051ce9","f2b7f785-c33d-471f-bb13-57d62e83af62","a226aace-1c2d-4a53-96a3-de0ea8f3e4ad","b909342e-42c0-423e-8815-ea07509e27f9","9d124ad5-c7de-4c56-8ffe-0f3f6566d3b3","ddc736d4-2fe4-44ad-8b82-080913c64b79","ea406f31-bf7a-4139-a444-1f23847f1350","66affadd-ce7e-4ac3-a16c-d85dc2d07544","d0e65693-60a1-438c-be56-2225cf43d568","902dc4d6-9ae1-4141-ac1b-ca5b3071cd63","cac63bb3-1459-4b23-a864-f2ea6c6456e9","2fa553a5-a443-4f09-bd4c-dbc9ded93a1c","9d7c4ce2-5443-4499-a07a-695894000463","3814aaea-6bb6-4e31-b3c4-45e761c8d6d1","9d0fe465-cebe-41a0-afc4-e49fe70dee55","2edae715-e43e-471a-9b6d-a6bc52a395c0","c7d2e450-636b-443d-b737-5e2708629ea1","4bb073a1-ad47-4f14-bfa6-9ffd55ea8f81","0fbc3fc8-1bcd-433d-a6f0-b96ca76c60dc","f3d00ca5-7ce1-4562-8160-2a856dd6d1f3","1c91c686-b0d1-4f51-8784-9eee52c07b7e","c1089427-83d3-4286-9f35-5af546a6eb67","ec716296-0c8d-410a-8666-1eff05989831","c31ad117-e07c-4388-9148-387a2ba72135","c9802e4f-0860-43a1-b3ed-37d3ae8cdf92","708474aa-31a7-4dbd-a106-84de1043185d","f6470ed6-05de-421c-bae8-184d8d28be10","17cfecb9-1a5f-4b8b-a32f-119de8c44f5a","70d2f261-7253-4b1a-a52a-406e7a328c33","2fda68f7-567f-4c8f-b0b7-f4b6a5988e84","86b0b59c-8538-4aa6-90f6-ce8329258bb2","8ecadfc9-d1a3-4ea4-b844-0d9f87e4d7c8","433e1858-1953-42b2-a9dd-d7601c25d347","bb1216b4-4400-422b-8a67-8a80a9c88d5e","cf5e3b9b-595a-499d-8669-00b88b449213","e01c1ddb-8025-491a-986d-c249fa9a69a0","9d71e31b-7356-4d2d-a6e9-d588fc7692c2","c6e602bd-0d12-4265-bebc-cb208dd5030f","e929be23-7420-44f3-bd80-810a56d06e1e","46b59458-3f32-4f06-b6a2-bd27dda4305c","14cff334-91a5-4d9d-bf42-39c6d630d37c","80c8978c-c1c6-4f9e-94cd-874798b05935","f9da0435-3452-483a-a5f4-743988dc6b1d","0f1325ea-bcfe-4b02-a303-baaefb80a9f9","70407fa2-4234-4266-812c-d70754ed228c","41e806f1-99ee-4c48-9ce8-379068350924","7b6fdce7-2d25-4c7f-b8c1-004a375626cb","4a725092-b458-4dc2-9ae9-f8f0e7d415dc","178b2260-bd62-4372-ab30-7cf02b6a3108","d9964125-396a-4343-8d4e-b16c0281ae58","4df9862d-6ce3-486d-a4e1-8b246cb08f79","db205d1d-a8b1-49e1-8d5a-4f5b5ae39169","363499fe-248b-4624-ba5b-5f477bb924f4","9eefe291-18db-46f1-b308-4d7851fa270d","e4e0b3b0-1587-400f-95f9-1bb605a252c2","139c34d4-91bf-42c9-8dc5-b6c37f9ac517","8ab2ca47-1f5f-4936-8f37-c5780ff265d0","511013e8-8a72-4ddf-a9b4-1a9bb3a5fa6a","0a5044a6-a614-40e1-97e0-20af784237ea","a3fcf642-fa77-4d3c-886e-527258f00e72","4f6cdb57-2658-40b9-8adc-1b2ddf7dd7a2","df39322a-6ecd-418b-828d-09fd796dc10a","e1cb07f7-a3ac-4110-9d24-218d93bfa6f9","91280670-dbb5-4fcd-8dc3-dc9d53d94805","90b505b3-1abf-455b-af4d-f08d1135cf33","850d8476-e5fc-4059-9aed-9aeee349c384","ae2dd76f-0dd4-4484-b957-6700179f183f","9fb58da5-7347-4dbf-a892-7c933e5d7776","fc4ea3c9-1d30-4f18-b33b-7404e7da0123","693ffe34-785e-44cd-8fb7-81da25f4d3bd","3e272a96-8781-45f2-8378-6ffaa1596bcc","f2124ee6-885b-4aa6-885d-793c8626b87c","47ff8d6e-e419-464f-8940-dfa750f2115d","18f0638d-ad9b-460a-bd8b-61f12d998d0c","48021fc6-c9c8-4568-8c29-953aad4d1e0a","df41dfd5-a3a6-4c35-a58e-9b6ac732236e","1da3ace1-2326-4842-ba52-0e3a8dce989e","68f6be96-60c4-40f5-a14e-2a04dcacc1a6","5833e0eb-b53c-4156-b478-2eac8f04aec6","34530d5b-398d-496e-88d0-07a6e3de107e","4f698849-a196-4c80-be45-52d507ffb2d4","43350253-f84c-4fb3-a988-cc63366cc570","d466671a-79ad-4ca5-878f-599df8bcd17e","5ea9ae04-3601-468a-ba84-cb7e82ae1e48","31614129-0f24-4a4c-9731-53ceecc3017d","990d87fa-2d5a-48cc-bdff-0d3c6b9dd32d","5a2d898e-7f0b-43fd-8e0e-2b517b736499","16fc4a98-74ad-4970-9857-74d0f39a6c64","47380de2-eddf-42b2-b853-434cde2b5fa0","947d47b4-7883-4bb9-9d85-c5e8e2f572ce","8ca10d88-d6ce-458e-b707-a00f3b6183fd","76fb3144-bc19-4baf-ab79-432d526559b7","da07f543-88e8-4349-b9e1-2d135eb818c2","360cdc41-af67-426b-9249-b46077592db4","13973b32-e60a-4396-bf7a-85f0670d658d","b50578f7-df0d-4152-892d-ad77b284e233","0e584a02-5f47-4317-b102-9665aa08fc7d","83db2801-3fb7-4fda-9c88-227effca791f","ef378126-746c-42ef-87ea-83624095a7cc","6e793a99-19b9-4ac5-8f6a-709fd4da0b49","7bfee1d3-395f-414a-b76a-203385a535b8","100919d5-c4a2-4894-a3d7-83a8534dee66","00a794e2-f9ed-41f6-b2a3-444ec0b61131","3dfa5f20-e79c-437f-add7-0a2ade4379aa","359833f5-8592-40b6-8175-edc664e2196a","fddd10df-2a17-496f-8f2c-40845adac181","301ad868-469e-494a-948f-5212604443f0","9afb6667-24a4-456b-8720-48d5b530a003","05b724b7-9613-42c0-a5d1-45f2a0b40efd","5bb8c800-7777-43d0-a2ad-e8fae03ed3b7","b614deb1-8c61-4b74-9e54-f2c4ba8658af","6fd29849-b584-40ea-82c1-c908b83efd3f","921c46aa-ffa6-4d3b-9be2-b0affd7142d7","62ba464b-5e1c-468d-9a1f-9ddcd1053d68","5c0d4798-3eef-449f-9bfd-58d59fe6ff28","c90dc44b-a834-4a18-b728-b0631c14afa9","6a13868b-c532-4562-9131-5c866bddacf9","c33d86ef-305d-408c-87a2-b014fbcf2e16","7fe76de7-a6e6-491a-b482-449cec7c91fd","673fd28e-faab-4725-9bf4-a59b317f8f93","62f44dee-82b5-4a2f-896e-c2d132a4e415","8643025a-c059-4a48-85d0-d76f51d63a74","26fe00f8-9173-4872-9134-bb1d2e00343a","af599e54-878e-494d-8a8f-b8f8d8896f1a","c4c3550e-a965-4993-a50c-628fd38cd3e1","ab699598-7d66-4003-a0aa-86a0f827bbbf","6cedb63e-a5a2-4d1b-bf27-71f3688871ee","f3b504bb-826e-46c7-a1b7-674a5a0ae43a","9f9df1fb-cf10-42f4-b684-3913a492cc6d","be3bb907-a9fa-4b85-a21b-3154efeb0196","460397b3-c4d8-441c-9d4a-9374b15850d3","7b8aa759-d584-418d-b7e7-99e07cb45bc0","97f95e63-ac5d-4ad4-96ba-a5be9131f52b","86fe5e45-3696-4c0e-b88a-cf350e31ee68","bf0d72cc-0680-4042-bd37-2ff5d224c8d3","566c16c0-5a70-4062-80eb-42c00c823556","5bbcca67-469c-4af6-aa1f-f12014aa4747","e88da25c-3aa8-47a6-86d7-c9b2230171d8","4279e979-0fe8-4bba-8a79-e0012d33d2f7","7d3f20f0-ba46-4205-8bfa-508d47dec375","effdf562-0b65-48b3-bc44-bd406ceeb4c0","0af6e6ec-18c4-4cd6-97de-655d15eda26d","fc71d843-9b8c-4c31-a691-e34f2bf61a58","5d264b2d-d8de-4dce-8e0f-57a40c037732","facdd972-8587-42d9-94db-fea86c95f74b","04a198f4-df84-4ecf-8114-648150edc5f6","c707a0ae-7ee9-4d7a-9262-8cc87c7444ef","0944cf9e-9f5a-4cc8-a6bb-982a82145e32","0dea505e-f72c-4939-91fb-c5d318d31cbd","16018ead-6f73-447d-a422-e5895ea2f1e8","4110a755-2084-451d-a03f-2267f377e37a","c44b3809-aa60-4e78-ad0c-fc02ae6b0fb9","9f657a3d-7377-48a8-b6a3-b5a871d58953","02c0fdb9-19a4-4156-9d06-b8aa940e792a","fd78894d-5436-4f66-907a-9ef485a20d7f","11199e7d-90dd-47b0-9da2-1fc58ed7e9b7","51deb6a1-950b-4cd2-8c66-4a0b5a37291b","5eed6188-c6d6-4966-9543-28b3c88ee4e1","e51231c2-1e1d-4b36-9499-4761c759c21d","599ba755-215c-4d72-a152-5e902c03e753","9d21bfc7-b04f-4615-93d5-eb79e9e217e2","1fa05968-fc4e-4728-bf0e-c48de37a2ae1","73c521c0-1787-493e-845e-89b957b58b8b","c570afbe-46af-4d76-b23b-6e16d8d57df4","85d99e6d-f6d6-408f-a9f1-b7a97237d5c4","227e9423-1792-43b0-82e6-ac94397ed789","bc018f2c-f33c-4f25-bffb-34f3da74d2db","cfd6dc82-faa9-4f51-8534-964917ca7666","5ea8beca-77b8-44cb-8871-93620f04a6e7","7cbc7e85-a998-4d7c-bc89-78fbd0df6e8c","f35ee5d5-f4eb-42c4-a2bb-0f3c706afee7","5f94ce71-7492-4d10-ae80-3482646ca6cd","5299e6b7-b23b-46c8-8277-dc1147807117","c0f60687-8f09-4186-801b-9dd11d82d2e1","1400552c-6fe7-4bbd-a3ca-59ffea564316","ef686670-a2cc-4aec-89bf-8a67c4033507","ced133bc-30d4-48de-b239-78e9fe91c8c0","ba9770c6-6fb6-480b-9fcd-ee2ca1d7b0d6","3778be8b-3cde-493e-8ebc-a6c3f9be6129","5ce1ccad-10d3-4d04-a455-4ab42ee64a61","70d2b6ec-b846-43dc-b4f7-1a84ff24a176","0302f714-23e2-4c23-bd45-d1c97c1c1000","8c4b4f4e-6bf7-4da8-a51a-d341baf3ce44","eba5c6e7-188e-488f-a40d-0f14e1edf190","664a82c2-8810-4432-b9c4-bc5be3f7a0a6","1ef94f5a-a930-4996-9ddb-1dca7c74d040","12df5617-a0af-48ca-bf2c-4bcca863fd84","c80801f3-5848-4f8f-9c7a-dc0052a3655d","fb3429ab-83d0-4bed-95e9-1a8e9455252c","e05dbbce-79c2-45a2-a7ef-f1058856feb3","4bb527f3-5718-477f-93ae-96a00a4944fe","cafc4bb9-6584-480c-b992-c6643801be41","ba4c5917-5ba3-495b-857c-af2642a5b115","e4b5cac5-c0f5-4618-aa98-3c01e18c5fde","e6fd4e44-694e-4e30-b72a-7da4ef662a29","6b82129a-13ef-4554-93a5-17cda6672746","5f14ad42-7fae-4258-b7bf-ab24eb46988d","548801a8-a653-452a-b883-db65b6d06fac","0afea355-fcdc-47a0-a82c-f5436b883790","184ca802-aa58-44e3-96a1-5905c23d9364","50dc548d-0c1f-41c5-bf52-cb6957d9d052","82be74c1-6520-4ab5-b10e-fc17162b8c86","b69ac3e7-4dd7-45e8-ad79-2bf1d780f221","d2da8762-d5bc-4197-94d0-8c298fc6e5ed","c1b0ff3b-5ef1-4cf6-b723-64c216558172","08ea33e0-01df-4486-88f0-e1f35de8ca0b","cabab48d-da29-4857-88f0-789518f35342","a3ea6660-0f26-4ca7-8772-09c454995588","406307ea-f1c6-4592-b338-fdf958e300e6","3b98cb2d-64df-4532-a36a-b835b0494744","076cf91a-5eb9-4ee2-9bbf-647e8d818ddb","3742010c-b092-4f45-9448-d0ba8d14c7b8","148e2723-a8b5-4bac-ba2a-02ee22afe3dc","c8cf041f-6c65-4e3a-b304-e0b7cfe5a7a8","4aafbb38-45c3-4510-a4fb-79ddee4609e1","9295f662-1576-4cd9-ae2c-e5b98e004013","caa10cde-996e-4f8d-adfb-d7e3d8046726","73992542-7eea-446a-a813-be9be977a1e9","800d0ed9-5ab9-43c2-b9bf-65bb3d740822","75cbd5cd-883c-4b21-a7f7-cd7f4862c796","4f15c6a9-03c7-4290-a534-d8125d5cf9c0","e1f7972d-096f-4309-8ff3-e95fc6e290be","b88ac08b-1838-4987-8510-5d098e4e029b","bbeb12ae-8826-49e2-b9c1-efb3c49c336e","7c2068ba-d812-424b-bb7f-59445cac4081","ce7feb1b-c0e1-4a8e-a841-3711b1bee26d","07fd3b0d-1350-46c2-91be-bf586c46e878","e76d4f0e-1cbc-4afb-85f9-eea31e83f8e0","3985e331-9778-4909-aa73-79e23575ccc5","7cf78357-6f6e-49bc-9d7c-2a53a51a7de2","45fae77e-3723-4cd9-a1c4-bb7f1dae5943"]}},"description":"All - C+AI Subscriptions must have pre-defined C+AI NSG rules. See https://aka.ms/netiso/nsgs - for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:29:02.4628867Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:36:01.428405Z"},"enforcementMode":"Default"},"identity":{"principalId":"7d7aed0a-228e-420b-a6a2-82a49dacb8cb","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","type":"SystemAssigned"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-NSG-DINE-SR108-v013","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-NSG-DINE-SR108-v013","location":"germanywestcentral"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-nsg-rule-109_1.3","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/e0bc08af3bd773ff","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"ruleNo":{"value":"109"},"info":{"value":"DO - NOT DELETE - Will result in ICM Sev 2 - Azure Core Security, see aka.ms/cainsgpolicy"},"destinationPortRanges":{"value":["119","137","138","139","161","162","389","636","2049","2301","2381","3268","5800","5900"]},"protocol":{"value":"*"},"sourceType":{"value":"Service - Tag"},"sourceValue":{"value":"Internet"},"actionValue":{"value":"Deny"},"direction":{"value":"Inbound"},"tagname":{"value":"SkipNRMSMedium"},"subscriptionExclusions":{"value":["61868ab8-16d4-44ec-a9ff-f35d05922847","41c39ac7-6cde-4be7-87c3-d57a168b7b92","235d341f-7fb9-435c-9bdc-034b7306c9b4","239b3f1a-daab-4125-918c-f028b0edb054","12f44720-8952-422c-bb7d-28831c2de639","c36fd9e7-e5b1-4d3e-bb85-2e538040258b","243b67d4-60ca-4dfd-a556-216ee06f77a1","24ae0a2f-2cb0-4a1a-9929-bed71bad0d59","b4582baf-35d9-47b9-b03d-1bd126876221","65f79f71-cb42-45b1-82b7-4635fd05fc26","9532a63e-f2eb-4649-bb23-5ed01077ce80","1533031f-9510-4d8d-8f83-af94df45d43c","73d25f92-e703-4c91-8aed-2fb23c8e151f","86d6f8d7-564b-4005-912c-b1a3a9a286ce","97a3d790-8d62-4f20-b579-39ee6b06cb45","179be307-0377-46c0-a8bb-17437582d266","6c516c14-f378-4780-bc52-dd1d098a9c0b","cc5e1d36-a80d-4878-add9-5204a7efda20","0bf83929-3a19-4a96-87da-b23c3aca7fd7","ad7af743-6a66-480e-98cd-e022f833d0ce","0cfe98e1-3cf6-41ca-9f54-435d1ddaf0de","ce6570fa-18fb-4503-80d9-4a225591a428","2f8446c7-7c1e-42f0-a6b7-d68df1255cc4","ff78024c-d5a1-48ae-88eb-d61f0f60f8ff","bdd789f3-d9d1-4bea-ac14-30a39ed66d33","6fe0c04c-acb9-4f74-8153-56a6cb666ca8","7fa88f8d-252c-4b22-a73e-cd77f85cca66","bafb24c9-f4bb-46a0-9891-4b3e12dab22e","aab411af-ed4d-4f02-bb87-5de8b00d880d","7e7b7a6f-0b34-4db9-958d-ece4c89b419f","964c10bb-8a6c-43bc-83d3-6b318c6c7305","7b29bb4e-8391-4d57-8045-b34a092e5108","3f706ca0-34d7-4ede-a432-3c1a37ddd5c6","7856cb6f-e1a8-48f2-b2a5-bfaa7f8c34a1","49e3ed89-bbdb-4545-844f-e3502d6ce44f","8cad7ef7-ae41-4adf-86b8-ffcb11fae200","8e9ec0f8-bfe6-43a5-acd2-b6c4666ef9f6","b8fc6ee8-6802-4605-b4a5-1d131084c62f","45493131-fef6-4cb1-80e9-f0dadaa0255a","9c8295ef-4bf7-49db-90aa-5f0837dc60b7","ed0b2672-8412-463f-a0c1-1867730d7e27","7f31cba8-b597-4129-b158-8f21a7395bd0","3b658bfc-dbb0-4f7a-9e6c-a7659ade3514","825d553e-1fdf-4961-8f6b-bab24c6b07a7","477d55b5-bef1-4c35-b8bd-42df6ef99d25","0cd887ff-5af0-405b-8d48-b2b0495af57b","4259a25b-fc62-41d0-a101-60bfaab38086","3ae1ab9b-5849-4409-b744-58ba98878274","8d8d3365-2fab-415f-862e-712d989871b2","1ef6f67e-7981-498c-8349-b67109d0fd0f","e9b95386-37fe-4820-9dc6-30a44fbeafba","f9e81224-18f1-4474-80b5-bd6b832f0b73","f0b97671-152e-45cc-a831-73fd5caa8740","d4c1893d-adf1-4111-aaa3-93d55a4059b9","2d3ea1e9-269c-4fd1-8878-21e84bf9d214","1267b3e1-8812-4435-82ff-9e57f390c194","38c49794-e385-48e6-b6ee-c42b9f2075be","2843db96-7d25-4cf5-8e67-71baed52dfb7","a531aaa4-20f4-40e6-ba1a-858a0359f602","b835f458-560c-49c2-8781-4b13d892ddd9","e4d287eb-a38c-4387-832a-e3c61ea576bd","af878dc5-7fe2-4698-b7fb-2ed4b2ffe4db","26d6d535-5164-443d-82f6-4c695caf7688","d862948f-6520-451f-af67-123309e4e4ce","ff96a11f-784d-4c26-94c7-34346d4d660e","38b241a5-8658-4b50-bfba-1800ee2d4d09","28f78ae5-97b2-487e-b097-270de10ce6b8","6c048bcd-2cc6-47fe-a558-ca54083d537e","62fc3d9a-b8ab-47e7-8df1-be09f78bb25a","48aae13c-e8a8-4057-a5d5-f77eaa56f1fd","b30d9dbd-c0f7-405f-902c-3eabd080eb00","aa858381-0720-4837-b0f8-60468c0b2763","7e6898e7-868d-490f-8f91-0cffa67c48a0","816e6e0f-a719-487e-a651-813f40cc95c5","aeaa528b-2620-42a7-bbe8-17b698d42530","9c870d54-05fd-46bb-9bb5-63a5756320a0","36e4aeae-caae-4cd6-8d6b-7015355c6229","d53f365b-64c6-45fa-9253-99fc92dfae5d","6b7b20bf-f54b-4a3d-9961-c85fbe894b67","875bd0a7-0adc-4391-8b42-85e866e87e5d","97454014-0118-4294-9648-938eb8f52327","de1883af-a411-450a-8c9f-55b07d48cd60","991af618-96d9-4bc0-879d-0e13ac6020c1","21eedfa4-4dc5-4056-bdba-dcfaf3b1a222","0e57ff86-19ec-4f88-8403-879bd0d64af8","31c8019a-6c01-4c1d-9a04-6bbd091e8ccd","52ce96d0-a12d-4e17-9644-50e0059a7730","f5f248fd-943d-477b-a9d2-de3db83d7712","c4ae973f-3a15-4409-a6cc-9cc91147f42e","ed10ec26-e9a9-40ba-85df-2d7e2dec7765","a083c30e-d4e5-4dc1-b310-02aaf36b316a","c1fd1678-d0fe-4253-a15f-a03eee323432","a013b98a-6c2a-4f92-a6a7-82266ac6f437","ef7a7954-0173-4574-86a1-486e015ab617","ded8fcaf-289f-40bd-b124-572d3d4f58ed","178b7546-3fed-4e8a-b001-9c71b1051ce9","f2b7f785-c33d-471f-bb13-57d62e83af62","a226aace-1c2d-4a53-96a3-de0ea8f3e4ad","b909342e-42c0-423e-8815-ea07509e27f9","9d124ad5-c7de-4c56-8ffe-0f3f6566d3b3","ddc736d4-2fe4-44ad-8b82-080913c64b79","ea406f31-bf7a-4139-a444-1f23847f1350","66affadd-ce7e-4ac3-a16c-d85dc2d07544","d0e65693-60a1-438c-be56-2225cf43d568","902dc4d6-9ae1-4141-ac1b-ca5b3071cd63","cac63bb3-1459-4b23-a864-f2ea6c6456e9","2fa553a5-a443-4f09-bd4c-dbc9ded93a1c","9d7c4ce2-5443-4499-a07a-695894000463","3814aaea-6bb6-4e31-b3c4-45e761c8d6d1","9d0fe465-cebe-41a0-afc4-e49fe70dee55","2edae715-e43e-471a-9b6d-a6bc52a395c0","c7d2e450-636b-443d-b737-5e2708629ea1","4bb073a1-ad47-4f14-bfa6-9ffd55ea8f81","0fbc3fc8-1bcd-433d-a6f0-b96ca76c60dc","f3d00ca5-7ce1-4562-8160-2a856dd6d1f3","1c91c686-b0d1-4f51-8784-9eee52c07b7e","c1089427-83d3-4286-9f35-5af546a6eb67","ec716296-0c8d-410a-8666-1eff05989831","c31ad117-e07c-4388-9148-387a2ba72135","c9802e4f-0860-43a1-b3ed-37d3ae8cdf92","708474aa-31a7-4dbd-a106-84de1043185d","f6470ed6-05de-421c-bae8-184d8d28be10","17cfecb9-1a5f-4b8b-a32f-119de8c44f5a","70d2f261-7253-4b1a-a52a-406e7a328c33","2fda68f7-567f-4c8f-b0b7-f4b6a5988e84","86b0b59c-8538-4aa6-90f6-ce8329258bb2","8ecadfc9-d1a3-4ea4-b844-0d9f87e4d7c8","433e1858-1953-42b2-a9dd-d7601c25d347","bb1216b4-4400-422b-8a67-8a80a9c88d5e","cf5e3b9b-595a-499d-8669-00b88b449213","e01c1ddb-8025-491a-986d-c249fa9a69a0","9d71e31b-7356-4d2d-a6e9-d588fc7692c2","c6e602bd-0d12-4265-bebc-cb208dd5030f","e929be23-7420-44f3-bd80-810a56d06e1e","46b59458-3f32-4f06-b6a2-bd27dda4305c","14cff334-91a5-4d9d-bf42-39c6d630d37c","80c8978c-c1c6-4f9e-94cd-874798b05935","f9da0435-3452-483a-a5f4-743988dc6b1d","0f1325ea-bcfe-4b02-a303-baaefb80a9f9","70407fa2-4234-4266-812c-d70754ed228c","41e806f1-99ee-4c48-9ce8-379068350924","7b6fdce7-2d25-4c7f-b8c1-004a375626cb","4a725092-b458-4dc2-9ae9-f8f0e7d415dc","178b2260-bd62-4372-ab30-7cf02b6a3108","d9964125-396a-4343-8d4e-b16c0281ae58","4df9862d-6ce3-486d-a4e1-8b246cb08f79","db205d1d-a8b1-49e1-8d5a-4f5b5ae39169","363499fe-248b-4624-ba5b-5f477bb924f4","9eefe291-18db-46f1-b308-4d7851fa270d","e4e0b3b0-1587-400f-95f9-1bb605a252c2","139c34d4-91bf-42c9-8dc5-b6c37f9ac517","8ab2ca47-1f5f-4936-8f37-c5780ff265d0","511013e8-8a72-4ddf-a9b4-1a9bb3a5fa6a","0a5044a6-a614-40e1-97e0-20af784237ea","a3fcf642-fa77-4d3c-886e-527258f00e72","4f6cdb57-2658-40b9-8adc-1b2ddf7dd7a2","df39322a-6ecd-418b-828d-09fd796dc10a","e1cb07f7-a3ac-4110-9d24-218d93bfa6f9","91280670-dbb5-4fcd-8dc3-dc9d53d94805","90b505b3-1abf-455b-af4d-f08d1135cf33","850d8476-e5fc-4059-9aed-9aeee349c384","ae2dd76f-0dd4-4484-b957-6700179f183f","9fb58da5-7347-4dbf-a892-7c933e5d7776","fc4ea3c9-1d30-4f18-b33b-7404e7da0123","693ffe34-785e-44cd-8fb7-81da25f4d3bd","3e272a96-8781-45f2-8378-6ffaa1596bcc","f2124ee6-885b-4aa6-885d-793c8626b87c","47ff8d6e-e419-464f-8940-dfa750f2115d","18f0638d-ad9b-460a-bd8b-61f12d998d0c","48021fc6-c9c8-4568-8c29-953aad4d1e0a","df41dfd5-a3a6-4c35-a58e-9b6ac732236e","1da3ace1-2326-4842-ba52-0e3a8dce989e","68f6be96-60c4-40f5-a14e-2a04dcacc1a6","5833e0eb-b53c-4156-b478-2eac8f04aec6","34530d5b-398d-496e-88d0-07a6e3de107e","4f698849-a196-4c80-be45-52d507ffb2d4","43350253-f84c-4fb3-a988-cc63366cc570","d466671a-79ad-4ca5-878f-599df8bcd17e","5ea9ae04-3601-468a-ba84-cb7e82ae1e48","31614129-0f24-4a4c-9731-53ceecc3017d","990d87fa-2d5a-48cc-bdff-0d3c6b9dd32d","5a2d898e-7f0b-43fd-8e0e-2b517b736499","16fc4a98-74ad-4970-9857-74d0f39a6c64","47380de2-eddf-42b2-b853-434cde2b5fa0","947d47b4-7883-4bb9-9d85-c5e8e2f572ce","8ca10d88-d6ce-458e-b707-a00f3b6183fd","76fb3144-bc19-4baf-ab79-432d526559b7","da07f543-88e8-4349-b9e1-2d135eb818c2","360cdc41-af67-426b-9249-b46077592db4","13973b32-e60a-4396-bf7a-85f0670d658d","b50578f7-df0d-4152-892d-ad77b284e233","0e584a02-5f47-4317-b102-9665aa08fc7d","83db2801-3fb7-4fda-9c88-227effca791f","ef378126-746c-42ef-87ea-83624095a7cc","6e793a99-19b9-4ac5-8f6a-709fd4da0b49","7bfee1d3-395f-414a-b76a-203385a535b8","100919d5-c4a2-4894-a3d7-83a8534dee66","00a794e2-f9ed-41f6-b2a3-444ec0b61131","3dfa5f20-e79c-437f-add7-0a2ade4379aa","359833f5-8592-40b6-8175-edc664e2196a","fddd10df-2a17-496f-8f2c-40845adac181","301ad868-469e-494a-948f-5212604443f0","9afb6667-24a4-456b-8720-48d5b530a003","05b724b7-9613-42c0-a5d1-45f2a0b40efd","5bb8c800-7777-43d0-a2ad-e8fae03ed3b7","b614deb1-8c61-4b74-9e54-f2c4ba8658af","6fd29849-b584-40ea-82c1-c908b83efd3f","921c46aa-ffa6-4d3b-9be2-b0affd7142d7","62ba464b-5e1c-468d-9a1f-9ddcd1053d68","5c0d4798-3eef-449f-9bfd-58d59fe6ff28","c90dc44b-a834-4a18-b728-b0631c14afa9","6a13868b-c532-4562-9131-5c866bddacf9","c33d86ef-305d-408c-87a2-b014fbcf2e16","7fe76de7-a6e6-491a-b482-449cec7c91fd","673fd28e-faab-4725-9bf4-a59b317f8f93","62f44dee-82b5-4a2f-896e-c2d132a4e415","8643025a-c059-4a48-85d0-d76f51d63a74","26fe00f8-9173-4872-9134-bb1d2e00343a","af599e54-878e-494d-8a8f-b8f8d8896f1a","c4c3550e-a965-4993-a50c-628fd38cd3e1","ab699598-7d66-4003-a0aa-86a0f827bbbf","6cedb63e-a5a2-4d1b-bf27-71f3688871ee","f3b504bb-826e-46c7-a1b7-674a5a0ae43a","9f9df1fb-cf10-42f4-b684-3913a492cc6d","be3bb907-a9fa-4b85-a21b-3154efeb0196","460397b3-c4d8-441c-9d4a-9374b15850d3","7b8aa759-d584-418d-b7e7-99e07cb45bc0","97f95e63-ac5d-4ad4-96ba-a5be9131f52b","86fe5e45-3696-4c0e-b88a-cf350e31ee68","bf0d72cc-0680-4042-bd37-2ff5d224c8d3","566c16c0-5a70-4062-80eb-42c00c823556","5bbcca67-469c-4af6-aa1f-f12014aa4747","e88da25c-3aa8-47a6-86d7-c9b2230171d8","4279e979-0fe8-4bba-8a79-e0012d33d2f7","7d3f20f0-ba46-4205-8bfa-508d47dec375","effdf562-0b65-48b3-bc44-bd406ceeb4c0","0af6e6ec-18c4-4cd6-97de-655d15eda26d","fc71d843-9b8c-4c31-a691-e34f2bf61a58","5d264b2d-d8de-4dce-8e0f-57a40c037732","facdd972-8587-42d9-94db-fea86c95f74b","04a198f4-df84-4ecf-8114-648150edc5f6","c707a0ae-7ee9-4d7a-9262-8cc87c7444ef","0944cf9e-9f5a-4cc8-a6bb-982a82145e32","0dea505e-f72c-4939-91fb-c5d318d31cbd","16018ead-6f73-447d-a422-e5895ea2f1e8","4110a755-2084-451d-a03f-2267f377e37a","c44b3809-aa60-4e78-ad0c-fc02ae6b0fb9","9f657a3d-7377-48a8-b6a3-b5a871d58953","02c0fdb9-19a4-4156-9d06-b8aa940e792a","fd78894d-5436-4f66-907a-9ef485a20d7f","11199e7d-90dd-47b0-9da2-1fc58ed7e9b7","51deb6a1-950b-4cd2-8c66-4a0b5a37291b","5eed6188-c6d6-4966-9543-28b3c88ee4e1","e51231c2-1e1d-4b36-9499-4761c759c21d","599ba755-215c-4d72-a152-5e902c03e753","9d21bfc7-b04f-4615-93d5-eb79e9e217e2","1fa05968-fc4e-4728-bf0e-c48de37a2ae1","73c521c0-1787-493e-845e-89b957b58b8b","c570afbe-46af-4d76-b23b-6e16d8d57df4","85d99e6d-f6d6-408f-a9f1-b7a97237d5c4","227e9423-1792-43b0-82e6-ac94397ed789","bc018f2c-f33c-4f25-bffb-34f3da74d2db","cfd6dc82-faa9-4f51-8534-964917ca7666","5ea8beca-77b8-44cb-8871-93620f04a6e7","7cbc7e85-a998-4d7c-bc89-78fbd0df6e8c","f35ee5d5-f4eb-42c4-a2bb-0f3c706afee7","5f94ce71-7492-4d10-ae80-3482646ca6cd","5299e6b7-b23b-46c8-8277-dc1147807117","c0f60687-8f09-4186-801b-9dd11d82d2e1","1400552c-6fe7-4bbd-a3ca-59ffea564316","ef686670-a2cc-4aec-89bf-8a67c4033507","ced133bc-30d4-48de-b239-78e9fe91c8c0","ba9770c6-6fb6-480b-9fcd-ee2ca1d7b0d6","3778be8b-3cde-493e-8ebc-a6c3f9be6129","5ce1ccad-10d3-4d04-a455-4ab42ee64a61","70d2b6ec-b846-43dc-b4f7-1a84ff24a176","0302f714-23e2-4c23-bd45-d1c97c1c1000","8c4b4f4e-6bf7-4da8-a51a-d341baf3ce44","eba5c6e7-188e-488f-a40d-0f14e1edf190","664a82c2-8810-4432-b9c4-bc5be3f7a0a6","1ef94f5a-a930-4996-9ddb-1dca7c74d040","12df5617-a0af-48ca-bf2c-4bcca863fd84","c80801f3-5848-4f8f-9c7a-dc0052a3655d","fb3429ab-83d0-4bed-95e9-1a8e9455252c","e05dbbce-79c2-45a2-a7ef-f1058856feb3","4bb527f3-5718-477f-93ae-96a00a4944fe","cafc4bb9-6584-480c-b992-c6643801be41","ba4c5917-5ba3-495b-857c-af2642a5b115","e4b5cac5-c0f5-4618-aa98-3c01e18c5fde","e6fd4e44-694e-4e30-b72a-7da4ef662a29","6b82129a-13ef-4554-93a5-17cda6672746","5f14ad42-7fae-4258-b7bf-ab24eb46988d","548801a8-a653-452a-b883-db65b6d06fac","0afea355-fcdc-47a0-a82c-f5436b883790","184ca802-aa58-44e3-96a1-5905c23d9364","50dc548d-0c1f-41c5-bf52-cb6957d9d052","82be74c1-6520-4ab5-b10e-fc17162b8c86","b69ac3e7-4dd7-45e8-ad79-2bf1d780f221","d2da8762-d5bc-4197-94d0-8c298fc6e5ed","c1b0ff3b-5ef1-4cf6-b723-64c216558172","08ea33e0-01df-4486-88f0-e1f35de8ca0b","cabab48d-da29-4857-88f0-789518f35342","a3ea6660-0f26-4ca7-8772-09c454995588","406307ea-f1c6-4592-b338-fdf958e300e6","3b98cb2d-64df-4532-a36a-b835b0494744","076cf91a-5eb9-4ee2-9bbf-647e8d818ddb","3742010c-b092-4f45-9448-d0ba8d14c7b8","148e2723-a8b5-4bac-ba2a-02ee22afe3dc","c8cf041f-6c65-4e3a-b304-e0b7cfe5a7a8","4aafbb38-45c3-4510-a4fb-79ddee4609e1","9295f662-1576-4cd9-ae2c-e5b98e004013","caa10cde-996e-4f8d-adfb-d7e3d8046726","73992542-7eea-446a-a813-be9be977a1e9","800d0ed9-5ab9-43c2-b9bf-65bb3d740822","75cbd5cd-883c-4b21-a7f7-cd7f4862c796","4f15c6a9-03c7-4290-a534-d8125d5cf9c0","e1f7972d-096f-4309-8ff3-e95fc6e290be","b88ac08b-1838-4987-8510-5d098e4e029b","bbeb12ae-8826-49e2-b9c1-efb3c49c336e","7c2068ba-d812-424b-bb7f-59445cac4081","ce7feb1b-c0e1-4a8e-a841-3711b1bee26d","07fd3b0d-1350-46c2-91be-bf586c46e878","e76d4f0e-1cbc-4afb-85f9-eea31e83f8e0","3985e331-9778-4909-aa73-79e23575ccc5","7cf78357-6f6e-49bc-9d7c-2a53a51a7de2","45fae77e-3723-4cd9-a1c4-bb7f1dae5943"]}},"description":"All - C+AI Subscriptions must have pre-defined C+AI NSG rules. See https://aka.ms/netiso/nsgs - for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:28:57.9727253Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:37:50.054199Z"},"enforcementMode":"Default"},"identity":{"principalId":"56d08bc2-cc29-4d23-9d23-fd396b807b02","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","type":"SystemAssigned"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-NSG-DINE-SR109-v013","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-NSG-DINE-SR109-v013","location":"southeastasia"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-warning-non-c+ai-security-rules_1.3","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/686f7311dc548f32","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"effect":{"value":"Audit"},"priorities":{"value":["100","101","102","103","104","105","106","107","108","109","110","111","112","113","114","115","116","117","118","119"]}},"description":"All - C+AI Subscriptions must have a NSG on all VNets in the subscription. See - https://aka.ms/netiso/nsgs for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T19:33:59.4565556Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:36:28.1981569Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-NSGS-AUDT-RULS-v013","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-NSGS-AUDT-RULS-v013"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-subnet-require-nsg_1.3","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/789cfec91f9e1858","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"effect":{"value":"Audit"}},"description":"All - C+AI Subscriptions must have a NSG on all VNets in the subscription. See - https://aka.ms/netiso/nsgs for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T19:34:02.1062104Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:37:27.2901901Z"},"enforcementMode":"Default"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-SBNT-AUDT-NSG-v013","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-SBNT-AUDT-NSG-v013"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"nrms-nsg-subnet_1.2","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyDefinitions/852aeb0ee2c0a3a5","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"allowedLocations":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest","global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]},"subscriptionExclusions":{"value":["61868ab8-16d4-44ec-a9ff-f35d05922847","41c39ac7-6cde-4be7-87c3-d57a168b7b92","235d341f-7fb9-435c-9bdc-034b7306c9b4","239b3f1a-daab-4125-918c-f028b0edb054","12f44720-8952-422c-bb7d-28831c2de639","c36fd9e7-e5b1-4d3e-bb85-2e538040258b","243b67d4-60ca-4dfd-a556-216ee06f77a1","24ae0a2f-2cb0-4a1a-9929-bed71bad0d59","b4582baf-35d9-47b9-b03d-1bd126876221","65f79f71-cb42-45b1-82b7-4635fd05fc26","9532a63e-f2eb-4649-bb23-5ed01077ce80","1533031f-9510-4d8d-8f83-af94df45d43c","73d25f92-e703-4c91-8aed-2fb23c8e151f","86d6f8d7-564b-4005-912c-b1a3a9a286ce","97a3d790-8d62-4f20-b579-39ee6b06cb45","179be307-0377-46c0-a8bb-17437582d266","6c516c14-f378-4780-bc52-dd1d098a9c0b","cc5e1d36-a80d-4878-add9-5204a7efda20","0bf83929-3a19-4a96-87da-b23c3aca7fd7","ad7af743-6a66-480e-98cd-e022f833d0ce","0cfe98e1-3cf6-41ca-9f54-435d1ddaf0de","ce6570fa-18fb-4503-80d9-4a225591a428","2f8446c7-7c1e-42f0-a6b7-d68df1255cc4","ff78024c-d5a1-48ae-88eb-d61f0f60f8ff","bdd789f3-d9d1-4bea-ac14-30a39ed66d33","6fe0c04c-acb9-4f74-8153-56a6cb666ca8","7fa88f8d-252c-4b22-a73e-cd77f85cca66","bafb24c9-f4bb-46a0-9891-4b3e12dab22e","aab411af-ed4d-4f02-bb87-5de8b00d880d","7e7b7a6f-0b34-4db9-958d-ece4c89b419f","964c10bb-8a6c-43bc-83d3-6b318c6c7305","7b29bb4e-8391-4d57-8045-b34a092e5108","3f706ca0-34d7-4ede-a432-3c1a37ddd5c6","7856cb6f-e1a8-48f2-b2a5-bfaa7f8c34a1","49e3ed89-bbdb-4545-844f-e3502d6ce44f","8cad7ef7-ae41-4adf-86b8-ffcb11fae200","8e9ec0f8-bfe6-43a5-acd2-b6c4666ef9f6","b8fc6ee8-6802-4605-b4a5-1d131084c62f","45493131-fef6-4cb1-80e9-f0dadaa0255a","9c8295ef-4bf7-49db-90aa-5f0837dc60b7","ed0b2672-8412-463f-a0c1-1867730d7e27","7f31cba8-b597-4129-b158-8f21a7395bd0","3b658bfc-dbb0-4f7a-9e6c-a7659ade3514","825d553e-1fdf-4961-8f6b-bab24c6b07a7","477d55b5-bef1-4c35-b8bd-42df6ef99d25","0cd887ff-5af0-405b-8d48-b2b0495af57b","4259a25b-fc62-41d0-a101-60bfaab38086","3ae1ab9b-5849-4409-b744-58ba98878274","8d8d3365-2fab-415f-862e-712d989871b2","1ef6f67e-7981-498c-8349-b67109d0fd0f","e9b95386-37fe-4820-9dc6-30a44fbeafba","f9e81224-18f1-4474-80b5-bd6b832f0b73","f0b97671-152e-45cc-a831-73fd5caa8740","d4c1893d-adf1-4111-aaa3-93d55a4059b9","2d3ea1e9-269c-4fd1-8878-21e84bf9d214","1267b3e1-8812-4435-82ff-9e57f390c194","38c49794-e385-48e6-b6ee-c42b9f2075be","2843db96-7d25-4cf5-8e67-71baed52dfb7","a531aaa4-20f4-40e6-ba1a-858a0359f602","b835f458-560c-49c2-8781-4b13d892ddd9","e4d287eb-a38c-4387-832a-e3c61ea576bd","af878dc5-7fe2-4698-b7fb-2ed4b2ffe4db","26d6d535-5164-443d-82f6-4c695caf7688","d862948f-6520-451f-af67-123309e4e4ce","ff96a11f-784d-4c26-94c7-34346d4d660e","38b241a5-8658-4b50-bfba-1800ee2d4d09","28f78ae5-97b2-487e-b097-270de10ce6b8","6c048bcd-2cc6-47fe-a558-ca54083d537e","62fc3d9a-b8ab-47e7-8df1-be09f78bb25a","48aae13c-e8a8-4057-a5d5-f77eaa56f1fd","b30d9dbd-c0f7-405f-902c-3eabd080eb00","aa858381-0720-4837-b0f8-60468c0b2763","7e6898e7-868d-490f-8f91-0cffa67c48a0","816e6e0f-a719-487e-a651-813f40cc95c5","aeaa528b-2620-42a7-bbe8-17b698d42530","9c870d54-05fd-46bb-9bb5-63a5756320a0","36e4aeae-caae-4cd6-8d6b-7015355c6229","d53f365b-64c6-45fa-9253-99fc92dfae5d","6b7b20bf-f54b-4a3d-9961-c85fbe894b67","875bd0a7-0adc-4391-8b42-85e866e87e5d","97454014-0118-4294-9648-938eb8f52327","de1883af-a411-450a-8c9f-55b07d48cd60","991af618-96d9-4bc0-879d-0e13ac6020c1","21eedfa4-4dc5-4056-bdba-dcfaf3b1a222","0e57ff86-19ec-4f88-8403-879bd0d64af8","31c8019a-6c01-4c1d-9a04-6bbd091e8ccd","52ce96d0-a12d-4e17-9644-50e0059a7730","f5f248fd-943d-477b-a9d2-de3db83d7712","c4ae973f-3a15-4409-a6cc-9cc91147f42e","ed10ec26-e9a9-40ba-85df-2d7e2dec7765","a083c30e-d4e5-4dc1-b310-02aaf36b316a","c1fd1678-d0fe-4253-a15f-a03eee323432","a013b98a-6c2a-4f92-a6a7-82266ac6f437","ef7a7954-0173-4574-86a1-486e015ab617","ded8fcaf-289f-40bd-b124-572d3d4f58ed","178b7546-3fed-4e8a-b001-9c71b1051ce9","f2b7f785-c33d-471f-bb13-57d62e83af62","a226aace-1c2d-4a53-96a3-de0ea8f3e4ad","b909342e-42c0-423e-8815-ea07509e27f9","9d124ad5-c7de-4c56-8ffe-0f3f6566d3b3","ddc736d4-2fe4-44ad-8b82-080913c64b79","ea406f31-bf7a-4139-a444-1f23847f1350","66affadd-ce7e-4ac3-a16c-d85dc2d07544","d0e65693-60a1-438c-be56-2225cf43d568","902dc4d6-9ae1-4141-ac1b-ca5b3071cd63","cac63bb3-1459-4b23-a864-f2ea6c6456e9","2fa553a5-a443-4f09-bd4c-dbc9ded93a1c","9d7c4ce2-5443-4499-a07a-695894000463","3814aaea-6bb6-4e31-b3c4-45e761c8d6d1","9d0fe465-cebe-41a0-afc4-e49fe70dee55","2edae715-e43e-471a-9b6d-a6bc52a395c0","c7d2e450-636b-443d-b737-5e2708629ea1","4bb073a1-ad47-4f14-bfa6-9ffd55ea8f81","0fbc3fc8-1bcd-433d-a6f0-b96ca76c60dc","f3d00ca5-7ce1-4562-8160-2a856dd6d1f3","1c91c686-b0d1-4f51-8784-9eee52c07b7e","c1089427-83d3-4286-9f35-5af546a6eb67","ec716296-0c8d-410a-8666-1eff05989831","c31ad117-e07c-4388-9148-387a2ba72135","c9802e4f-0860-43a1-b3ed-37d3ae8cdf92","708474aa-31a7-4dbd-a106-84de1043185d","f6470ed6-05de-421c-bae8-184d8d28be10","17cfecb9-1a5f-4b8b-a32f-119de8c44f5a","70d2f261-7253-4b1a-a52a-406e7a328c33","2fda68f7-567f-4c8f-b0b7-f4b6a5988e84","86b0b59c-8538-4aa6-90f6-ce8329258bb2","8ecadfc9-d1a3-4ea4-b844-0d9f87e4d7c8","433e1858-1953-42b2-a9dd-d7601c25d347","bb1216b4-4400-422b-8a67-8a80a9c88d5e","cf5e3b9b-595a-499d-8669-00b88b449213","e01c1ddb-8025-491a-986d-c249fa9a69a0","9d71e31b-7356-4d2d-a6e9-d588fc7692c2","c6e602bd-0d12-4265-bebc-cb208dd5030f","e929be23-7420-44f3-bd80-810a56d06e1e","46b59458-3f32-4f06-b6a2-bd27dda4305c","14cff334-91a5-4d9d-bf42-39c6d630d37c","80c8978c-c1c6-4f9e-94cd-874798b05935","f9da0435-3452-483a-a5f4-743988dc6b1d","0f1325ea-bcfe-4b02-a303-baaefb80a9f9","70407fa2-4234-4266-812c-d70754ed228c","41e806f1-99ee-4c48-9ce8-379068350924","7b6fdce7-2d25-4c7f-b8c1-004a375626cb","4a725092-b458-4dc2-9ae9-f8f0e7d415dc","178b2260-bd62-4372-ab30-7cf02b6a3108","d9964125-396a-4343-8d4e-b16c0281ae58","4df9862d-6ce3-486d-a4e1-8b246cb08f79","db205d1d-a8b1-49e1-8d5a-4f5b5ae39169","363499fe-248b-4624-ba5b-5f477bb924f4","9eefe291-18db-46f1-b308-4d7851fa270d","e4e0b3b0-1587-400f-95f9-1bb605a252c2","139c34d4-91bf-42c9-8dc5-b6c37f9ac517","8ab2ca47-1f5f-4936-8f37-c5780ff265d0","511013e8-8a72-4ddf-a9b4-1a9bb3a5fa6a","0a5044a6-a614-40e1-97e0-20af784237ea","a3fcf642-fa77-4d3c-886e-527258f00e72","4f6cdb57-2658-40b9-8adc-1b2ddf7dd7a2","df39322a-6ecd-418b-828d-09fd796dc10a","e1cb07f7-a3ac-4110-9d24-218d93bfa6f9","91280670-dbb5-4fcd-8dc3-dc9d53d94805","90b505b3-1abf-455b-af4d-f08d1135cf33","850d8476-e5fc-4059-9aed-9aeee349c384","ae2dd76f-0dd4-4484-b957-6700179f183f","9fb58da5-7347-4dbf-a892-7c933e5d7776","fc4ea3c9-1d30-4f18-b33b-7404e7da0123","693ffe34-785e-44cd-8fb7-81da25f4d3bd","3e272a96-8781-45f2-8378-6ffaa1596bcc","f2124ee6-885b-4aa6-885d-793c8626b87c","47ff8d6e-e419-464f-8940-dfa750f2115d","18f0638d-ad9b-460a-bd8b-61f12d998d0c","48021fc6-c9c8-4568-8c29-953aad4d1e0a","df41dfd5-a3a6-4c35-a58e-9b6ac732236e","1da3ace1-2326-4842-ba52-0e3a8dce989e","68f6be96-60c4-40f5-a14e-2a04dcacc1a6","5833e0eb-b53c-4156-b478-2eac8f04aec6","34530d5b-398d-496e-88d0-07a6e3de107e","4f698849-a196-4c80-be45-52d507ffb2d4","43350253-f84c-4fb3-a988-cc63366cc570","d466671a-79ad-4ca5-878f-599df8bcd17e","5ea9ae04-3601-468a-ba84-cb7e82ae1e48","31614129-0f24-4a4c-9731-53ceecc3017d","990d87fa-2d5a-48cc-bdff-0d3c6b9dd32d","5a2d898e-7f0b-43fd-8e0e-2b517b736499","16fc4a98-74ad-4970-9857-74d0f39a6c64","47380de2-eddf-42b2-b853-434cde2b5fa0","947d47b4-7883-4bb9-9d85-c5e8e2f572ce","8ca10d88-d6ce-458e-b707-a00f3b6183fd","76fb3144-bc19-4baf-ab79-432d526559b7","da07f543-88e8-4349-b9e1-2d135eb818c2","360cdc41-af67-426b-9249-b46077592db4","13973b32-e60a-4396-bf7a-85f0670d658d","b50578f7-df0d-4152-892d-ad77b284e233","0e584a02-5f47-4317-b102-9665aa08fc7d","83db2801-3fb7-4fda-9c88-227effca791f","ef378126-746c-42ef-87ea-83624095a7cc","6e793a99-19b9-4ac5-8f6a-709fd4da0b49","7bfee1d3-395f-414a-b76a-203385a535b8","100919d5-c4a2-4894-a3d7-83a8534dee66","00a794e2-f9ed-41f6-b2a3-444ec0b61131","3dfa5f20-e79c-437f-add7-0a2ade4379aa","359833f5-8592-40b6-8175-edc664e2196a","fddd10df-2a17-496f-8f2c-40845adac181","301ad868-469e-494a-948f-5212604443f0","9afb6667-24a4-456b-8720-48d5b530a003","05b724b7-9613-42c0-a5d1-45f2a0b40efd","5bb8c800-7777-43d0-a2ad-e8fae03ed3b7","b614deb1-8c61-4b74-9e54-f2c4ba8658af","6fd29849-b584-40ea-82c1-c908b83efd3f","921c46aa-ffa6-4d3b-9be2-b0affd7142d7","62ba464b-5e1c-468d-9a1f-9ddcd1053d68","5c0d4798-3eef-449f-9bfd-58d59fe6ff28","c90dc44b-a834-4a18-b728-b0631c14afa9","6a13868b-c532-4562-9131-5c866bddacf9","c33d86ef-305d-408c-87a2-b014fbcf2e16","7fe76de7-a6e6-491a-b482-449cec7c91fd","673fd28e-faab-4725-9bf4-a59b317f8f93","62f44dee-82b5-4a2f-896e-c2d132a4e415","8643025a-c059-4a48-85d0-d76f51d63a74","26fe00f8-9173-4872-9134-bb1d2e00343a","af599e54-878e-494d-8a8f-b8f8d8896f1a","c4c3550e-a965-4993-a50c-628fd38cd3e1","ab699598-7d66-4003-a0aa-86a0f827bbbf","6cedb63e-a5a2-4d1b-bf27-71f3688871ee","f3b504bb-826e-46c7-a1b7-674a5a0ae43a","9f9df1fb-cf10-42f4-b684-3913a492cc6d","be3bb907-a9fa-4b85-a21b-3154efeb0196","460397b3-c4d8-441c-9d4a-9374b15850d3","7b8aa759-d584-418d-b7e7-99e07cb45bc0","97f95e63-ac5d-4ad4-96ba-a5be9131f52b","86fe5e45-3696-4c0e-b88a-cf350e31ee68","bf0d72cc-0680-4042-bd37-2ff5d224c8d3","566c16c0-5a70-4062-80eb-42c00c823556","5bbcca67-469c-4af6-aa1f-f12014aa4747","e88da25c-3aa8-47a6-86d7-c9b2230171d8","4279e979-0fe8-4bba-8a79-e0012d33d2f7","7d3f20f0-ba46-4205-8bfa-508d47dec375","effdf562-0b65-48b3-bc44-bd406ceeb4c0","0af6e6ec-18c4-4cd6-97de-655d15eda26d","fc71d843-9b8c-4c31-a691-e34f2bf61a58","5d264b2d-d8de-4dce-8e0f-57a40c037732","facdd972-8587-42d9-94db-fea86c95f74b","04a198f4-df84-4ecf-8114-648150edc5f6","c707a0ae-7ee9-4d7a-9262-8cc87c7444ef","0944cf9e-9f5a-4cc8-a6bb-982a82145e32","0dea505e-f72c-4939-91fb-c5d318d31cbd","16018ead-6f73-447d-a422-e5895ea2f1e8","4110a755-2084-451d-a03f-2267f377e37a","c44b3809-aa60-4e78-ad0c-fc02ae6b0fb9","9f657a3d-7377-48a8-b6a3-b5a871d58953","02c0fdb9-19a4-4156-9d06-b8aa940e792a","fd78894d-5436-4f66-907a-9ef485a20d7f","11199e7d-90dd-47b0-9da2-1fc58ed7e9b7","51deb6a1-950b-4cd2-8c66-4a0b5a37291b","5eed6188-c6d6-4966-9543-28b3c88ee4e1","e51231c2-1e1d-4b36-9499-4761c759c21d","599ba755-215c-4d72-a152-5e902c03e753","9d21bfc7-b04f-4615-93d5-eb79e9e217e2","1fa05968-fc4e-4728-bf0e-c48de37a2ae1","73c521c0-1787-493e-845e-89b957b58b8b","c570afbe-46af-4d76-b23b-6e16d8d57df4","85d99e6d-f6d6-408f-a9f1-b7a97237d5c4","227e9423-1792-43b0-82e6-ac94397ed789","bc018f2c-f33c-4f25-bffb-34f3da74d2db","cfd6dc82-faa9-4f51-8534-964917ca7666","5ea8beca-77b8-44cb-8871-93620f04a6e7","7cbc7e85-a998-4d7c-bc89-78fbd0df6e8c","f35ee5d5-f4eb-42c4-a2bb-0f3c706afee7","5f94ce71-7492-4d10-ae80-3482646ca6cd","5299e6b7-b23b-46c8-8277-dc1147807117","c0f60687-8f09-4186-801b-9dd11d82d2e1","1400552c-6fe7-4bbd-a3ca-59ffea564316","ef686670-a2cc-4aec-89bf-8a67c4033507","ced133bc-30d4-48de-b239-78e9fe91c8c0","ba9770c6-6fb6-480b-9fcd-ee2ca1d7b0d6","3778be8b-3cde-493e-8ebc-a6c3f9be6129","5ce1ccad-10d3-4d04-a455-4ab42ee64a61","70d2b6ec-b846-43dc-b4f7-1a84ff24a176","0302f714-23e2-4c23-bd45-d1c97c1c1000","8c4b4f4e-6bf7-4da8-a51a-d341baf3ce44","eba5c6e7-188e-488f-a40d-0f14e1edf190","664a82c2-8810-4432-b9c4-bc5be3f7a0a6","1ef94f5a-a930-4996-9ddb-1dca7c74d040","12df5617-a0af-48ca-bf2c-4bcca863fd84","c80801f3-5848-4f8f-9c7a-dc0052a3655d","fb3429ab-83d0-4bed-95e9-1a8e9455252c","e05dbbce-79c2-45a2-a7ef-f1058856feb3","4bb527f3-5718-477f-93ae-96a00a4944fe","cafc4bb9-6584-480c-b992-c6643801be41","ba4c5917-5ba3-495b-857c-af2642a5b115","e4b5cac5-c0f5-4618-aa98-3c01e18c5fde","e6fd4e44-694e-4e30-b72a-7da4ef662a29","6b82129a-13ef-4554-93a5-17cda6672746","5f14ad42-7fae-4258-b7bf-ab24eb46988d","548801a8-a653-452a-b883-db65b6d06fac","0afea355-fcdc-47a0-a82c-f5436b883790","184ca802-aa58-44e3-96a1-5905c23d9364","50dc548d-0c1f-41c5-bf52-cb6957d9d052","82be74c1-6520-4ab5-b10e-fc17162b8c86","b69ac3e7-4dd7-45e8-ad79-2bf1d780f221","d2da8762-d5bc-4197-94d0-8c298fc6e5ed","c1b0ff3b-5ef1-4cf6-b723-64c216558172","08ea33e0-01df-4486-88f0-e1f35de8ca0b","cabab48d-da29-4857-88f0-789518f35342","a3ea6660-0f26-4ca7-8772-09c454995588","406307ea-f1c6-4592-b338-fdf958e300e6","3b98cb2d-64df-4532-a36a-b835b0494744","076cf91a-5eb9-4ee2-9bbf-647e8d818ddb","3742010c-b092-4f45-9448-d0ba8d14c7b8","148e2723-a8b5-4bac-ba2a-02ee22afe3dc","c8cf041f-6c65-4e3a-b304-e0b7cfe5a7a8","4aafbb38-45c3-4510-a4fb-79ddee4609e1","9295f662-1576-4cd9-ae2c-e5b98e004013","caa10cde-996e-4f8d-adfb-d7e3d8046726","73992542-7eea-446a-a813-be9be977a1e9","800d0ed9-5ab9-43c2-b9bf-65bb3d740822","75cbd5cd-883c-4b21-a7f7-cd7f4862c796","4f15c6a9-03c7-4290-a534-d8125d5cf9c0","e1f7972d-096f-4309-8ff3-e95fc6e290be","b88ac08b-1838-4987-8510-5d098e4e029b","bbeb12ae-8826-49e2-b9c1-efb3c49c336e","7c2068ba-d812-424b-bb7f-59445cac4081","ce7feb1b-c0e1-4a8e-a841-3711b1bee26d","07fd3b0d-1350-46c2-91be-bf586c46e878","e76d4f0e-1cbc-4afb-85f9-eea31e83f8e0","3985e331-9778-4909-aa73-79e23575ccc5","7cf78357-6f6e-49bc-9d7c-2a53a51a7de2","45fae77e-3723-4cd9-a1c4-bb7f1dae5943"]}},"description":"All - C+AI Subscriptions must have pre-defined C+AI NSG rules. See https://aka.ms/netiso/nsgs - for more details","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-02-24T21:32:33.7856438Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-09T16:37:17.0959962Z"},"enforcementMode":"Default"},"identity":{"principalId":"6fe923a8-2e4d-4c1f-b7d6-a7c5984f0129","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","type":"SystemAssigned"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/NRMS-SBNT-DINE-NSG-v012","type":"Microsoft.Authorization/policyAssignments","name":"NRMS-SBNT-DINE-NSG-v012","location":"southindia"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"azuresecuritypackautoupdate_3.1","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policySetDefinitions/c02faf167895f1d1","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"AllowedLocations1":{"value":["global","brazilus","indiasouth","indiawest","indiacentral","uknorth","uksouth2","brazilsoutheast"]}},"description":"Combinations - of multiple policies to enable auto update of security pack and geneva agent","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2019-09-06T16:43:37.3818749Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-30T19:35:54.2826023Z"},"enforcementMode":"Default"},"identity":{"principalId":"8845dee4-c749-46a4-b8e8-35512cf066cd","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","type":"SystemAssigned"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/SEC-AzSecPack-v031","type":"Microsoft.Authorization/policyAssignments","name":"SEC-AzSecPack-v031","location":"centralindia"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"azuresecuritypackautoupdate_3.2","policyDefinitionId":"/providers/Microsoft.Management/managementgroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policySetDefinitions/9c46cf6e83dedb18","scope":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792","parameters":{"AllowedLocations1":{"value":["centraluseuap","eastus2euap","westcentralus","northcentralus","westus","eastasia","australiacentral","australiaeast","canadacentral","northeurope","centralindia","japaneast","koreacentral","uksouth","centralus","eastus","westus2","francecentral","southafricanorth","germanynorth","norwayeast","switzerlandnorth","uaenorth","southeastasia","australiacentral2","australiasoutheast","canadaeast","westeurope","southindia","japanwest","koreasouth","ukwest","eastus2","southcentralus","brazilsouth","westindia","francesouth","southafricawest","germanywestcentral","norwaywest","uaecentral","switzerlandwest"]}},"description":"Combinations - of multiple policies to enable auto update of security pack and geneva agent","metadata":{"createdBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","createdOn":"2020-06-23T19:35:15.9907469Z","updatedBy":"1f75b9dd-4f1d-4e80-9521-321a8b1f5764","updatedOn":"2020-06-30T19:35:55.9455466Z"},"enforcementMode":"Default"},"identity":{"principalId":"b7b8bd19-f827-425f-9be1-fd8a86b21904","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","type":"SystemAssigned"},"id":"/providers/Microsoft.Management/managementGroups/48fed3a1-0814-4847-88ce-b766155f2792/providers/Microsoft.Authorization/policyAssignments/SEC-AzSecPack-v032","type":"Microsoft.Authorization/policyAssignments","name":"SEC-AzSecPack-v032","location":"australiacentral"}]}' + Center","createdBy":"2f8a138f-0955-44e1-9124-c386dfaecad4","createdOn":"2019-11-25T02:19:57.9086573Z","updatedBy":"f0f844e0-d2fe-4aa3-8e2c-2e429618f305","updatedOn":"2020-09-11T07:46:19.7881156Z","parameterScopes":{}},"enforcementMode":"DoNotEnforce"},"identity":{"principalId":"30601973-dcd6-4c4e-85e8-dc6e057238fa","tenantId":"00000000-0000-0000-0000-000000000000","type":"SystemAssigned"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/DataProtectionSecurityCenter","type":"Microsoft.Authorization/policyAssignments","name":"DataProtectionSecurityCenter","location":"eastus"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"11719005-54ab-41cb-93c2-f687d6bcac49","createdOn":"2020-10-23T12:41:16.4563257Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/dc368c429e27873d4168207359ca5ff7923671ec03a1a915f5259dfeb550fb02","type":"Microsoft.Authorization/policyAssignments","name":"dc368c429e27873d4168207359ca5ff7923671ec03a1a915f5259dfeb550fb02"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + storage tag to resource group","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"StorageType"},"tagValue":{"value":"Standard_LRS"}},"description":"","metadata":{"createdBy":"013e5286-7aa5-45d4-96c9-ad93cea42d44","createdOn":"2020-10-23T08:36:01.5512696Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/dd29296d5e0ee0e45aac6eb5b8c1324db32d1ff5c235b538c8878dcc9e00ce73","type":"Microsoft.Authorization/policyAssignments","name":"dd29296d5e0ee0e45aac6eb5b8c1324db32d1ff5c235b538c8878dcc9e00ce73"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"cad24367-0649-42e5-9556-7f3fc784dae1","createdOn":"2020-10-23T10:25:07.3694898Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/f2a5ba41dfaac3f7fcd64ba635a5a23c1aaae817697277b2f4742dd760f39370","type":"Microsoft.Authorization/policyAssignments","name":"f2a5ba41dfaac3f7fcd64ba635a5a23c1aaae817697277b2f4742dd760f39370"},{"sku":{"name":"A1","tier":"Standard"},"properties":{"displayName":"Apply + tag and its default value to resource groups","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"tagName":{"value":"type"},"tagValue":{"value":"test"}},"description":"","metadata":{"createdBy":"9bba6f61-f9c5-4d80-9a10-f94d4aeca5d2","createdOn":"2020-10-23T06:35:00.7964993Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/f414be1067a15c7425cdc97daecfa093adf18779efe54c142c2c82abd36a3b85","type":"Microsoft.Authorization/policyAssignments","name":"f414be1067a15c7425cdc97daecfa093adf18779efe54c142c2c82abd36a3b85"},{"sku":{"name":"A0","tier":"Free"},"properties":{"policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policy2","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","metadata":{"createdBy":"9ac534f1-d577-4034-a32d-48de400dacbf","createdOn":"2020-10-27T09:43:19.7706753Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/location-lock","type":"Microsoft.Authorization/policyAssignments","name":"location-lock"},{"sku":{"name":"A0","tier":"Free"},"properties":{"displayName":"ASC + Default (subscription: 00000000-0000-0000-0000-000000000000)","policyDefinitionId":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","notScopes":[],"parameters":{"systemUpdatesMonitoringEffect":{"value":"AuditIfNotExists"},"systemConfigurationsMonitoringEffect":{"value":"AuditIfNotExists"},"endpointProtectionMonitoringEffect":{"value":"AuditIfNotExists"},"diskEncryptionMonitoringEffect":{"value":"AuditIfNotExists"},"networkSecurityGroupsMonitoringEffect":{"value":"AuditIfNotExists"},"webApplicationFirewallMonitoringEffect":{"value":"AuditIfNotExists"},"nextGenerationFirewallMonitoringEffect":{"value":"AuditIfNotExists"},"vulnerabilityAssesmentMonitoringEffect":{"value":"AuditIfNotExists"},"storageEncryptionMonitoringEffect":{"value":"Audit"},"jitNetworkAccessMonitoringEffect":{"value":"AuditIfNotExists"},"adaptiveApplicationControlsMonitoringEffect":{"value":"AuditIfNotExists"},"sqlAuditingMonitoringEffect":{"value":"AuditIfNotExists"},"sqlEncryptionMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInBatchAccountMonitoringEffect":{"value":"AuditIfNotExists"},"metricAlertsInBatchAccountMonitoringEffect":{"value":"AuditIfNotExists"},"classicComputeVMsMonitoringEffect":{"value":"Audit"},"classicStorageAccountsMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInDataLakeAnalyticsMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInDataLakeStoreMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInEventHubMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInKeyVaultMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInLogicAppsMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInRedisCacheMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInSearchServiceMonitoringEffect":{"value":"AuditIfNotExists"},"aadAuthenticationInServiceFabricMonitoringEffect":{"value":"Audit"},"clusterProtectionLevelInServiceFabricMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInServiceBusMonitoringEffect":{"value":"AuditIfNotExists"},"namespaceAuthorizationRulesInServiceBusMonitoringEffect":{"value":"Audit"},"aadAuthenticationInSqlServerMonitoringEffect":{"value":"AuditIfNotExists"},"secureTransferToStorageAccountMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInStreamAnalyticsMonitoringEffect":{"value":"AuditIfNotExists"},"disableUnrestrictedNetworkToStorageAccountMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInServiceFabricMonitoringEffect":{"value":"AuditIfNotExists"},"sqlDbVulnerabilityAssesmentMonitoringEffect":{"value":"AuditIfNotExists"},"identityDesignateLessThanOwnersMonitoringEffect":{"value":"AuditIfNotExists"},"identityDesignateMoreThanOneOwnerMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForWritePermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForReadPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveDeprecatedAccountMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithWritePermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithReadPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"azurePolicyAddonStatusEffect":{"value":"Audit"},"allowedContainerImagesInKubernetesClusterEffect":{"value":"audit"},"privilegedContainersShouldBeAvoidedEffect":{"value":"audit"},"allowedContainerPortsInKubernetesClusterEffect":{"value":"audit"},"allowedServicePortsInKubernetesClusterEffect":{"value":"audit"},"noPrivilegeEscalationInKubernetesClusterEffect":{"value":"audit"},"noSharingSensitiveHostNamespacesInKubernetesEffect":{"value":"audit"},"readOnlyRootFileSystemInKubernetesClusterEffect":{"value":"audit"},"allowedCapabilitiesInKubernetesClusterEffect":{"value":"audit"},"allowedAppArmorProfilesInKubernetesClusterEffect":{"value":"audit"},"allowedHostNetworkingAndPortsInKubernetesClusterEffect":{"value":"audit"},"allowedHostPathVolumesInKubernetesClusterEffect":{"value":"audit"},"memoryAndCPULimitsInKubernetesClusterEffect":{"value":"audit"},"mustRunAsNonRootNamespaceEffect":{"value":"audit"}},"description":"This + policy assignment was automatically created by Azure Security Center","metadata":{"assignedBy":"Security + Center","createdBy":null,"createdOn":null,"updatedBy":"2f8a138f-0955-44e1-9124-c386dfaecad4","updatedOn":"2020-09-21T16:12:54.2700629Z"},"enforcementMode":"DoNotEnforce"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/SecurityCenterBuiltIn","type":"Microsoft.Authorization/policyAssignments","name":"SecurityCenterBuiltIn"},{"sku":{"name":"A0","tier":"Free"},"properties":{"policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0","metadata":{"createdBy":"78977f10-9b8e-42f0-a820-b66e67fe9f1a","createdOn":"2020-10-29T05:38:30.0504412Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0/providers/Microsoft.Authorization/policyAssignments/pypolicyassignmentea4a13f0","type":"Microsoft.Authorization/policyAssignments","name":"pypolicyassignmentea4a13f0"}]}' headers: cache-control: - no-cache content-length: - - '140038' + - '34581' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:58:17 GMT + - Thu, 29 Oct 2020 05:38:30 GMT expires: - '-1' pragma: @@ -8925,24 +31939,24 @@ interactions: Content-Length: - '0' User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: DELETE uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0/providers/Microsoft.Authorization/policyAssignments/pypolicyassignmentea4a13f0?api-version=2019-09-01 response: body: - string: '{"sku":{"name":"A0","tier":"Free"},"properties":{"policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0","metadata":{"createdBy":"123743cc-88ef-49ee-920e-13958fe5697d","createdOn":"2020-07-01T00:58:14.945943Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0/providers/Microsoft.Authorization/policyAssignments/pypolicyassignmentea4a13f0","type":"Microsoft.Authorization/policyAssignments","name":"pypolicyassignmentea4a13f0"}' + string: '{"sku":{"name":"A0","tier":"Free"},"properties":{"policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0","metadata":{"createdBy":"78977f10-9b8e-42f0-a820-b66e67fe9f1a","createdOn":"2020-10-29T05:38:30.0504412Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0/providers/Microsoft.Authorization/policyAssignments/pypolicyassignmentea4a13f0","type":"Microsoft.Authorization/policyAssignments","name":"pypolicyassignmentea4a13f0"}' headers: cache-control: - no-cache content-length: - - '793' + - '794' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:58:18 GMT + - Thu, 29 Oct 2020 05:38:30 GMT expires: - '-1' pragma: @@ -8961,7 +31975,7 @@ interactions: code: 200 message: OK - request: - body: 'b''b\''{"properties": {"policyDefinitionId": "/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0"}}\''''' + body: 'b''{"properties": {"policyDefinitionId": "/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0"}}''' headers: Accept: - application/json @@ -8974,15 +31988,15 @@ interactions: Content-Type: - application/json; charset=utf-8 User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: PUT uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0/providers/Microsoft.Authorization/policyAssignments/pypolicyassignmentea4a13f0?api-version=2019-09-01 response: body: - string: '{"sku":{"name":"A0","tier":"Free"},"properties":{"policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0","metadata":{"createdBy":"123743cc-88ef-49ee-920e-13958fe5697d","createdOn":"2020-07-01T00:58:19.1601666Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0/providers/Microsoft.Authorization/policyAssignments/pypolicyassignmentea4a13f0","type":"Microsoft.Authorization/policyAssignments","name":"pypolicyassignmentea4a13f0"}' + string: '{"sku":{"name":"A0","tier":"Free"},"properties":{"policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0","metadata":{"createdBy":"78977f10-9b8e-42f0-a820-b66e67fe9f1a","createdOn":"2020-10-29T05:38:30.7379443Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0/providers/Microsoft.Authorization/policyAssignments/pypolicyassignmentea4a13f0","type":"Microsoft.Authorization/policyAssignments","name":"pypolicyassignmentea4a13f0"}' headers: cache-control: - no-cache @@ -8991,7 +32005,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:58:18 GMT + - Thu, 29 Oct 2020 05:38:30 GMT expires: - '-1' pragma: @@ -9015,15 +32029,15 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0/providers/Microsoft.Authorization/policyAssignments/pypolicyassignmentea4a13f0?api-version=2019-09-01 response: body: - string: '{"sku":{"name":"A0","tier":"Free"},"properties":{"policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0","metadata":{"createdBy":"123743cc-88ef-49ee-920e-13958fe5697d","createdOn":"2020-07-01T00:58:19.1601666Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0/providers/Microsoft.Authorization/policyAssignments/pypolicyassignmentea4a13f0","type":"Microsoft.Authorization/policyAssignments","name":"pypolicyassignmentea4a13f0"}' + string: '{"sku":{"name":"A0","tier":"Free"},"properties":{"policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0","metadata":{"createdBy":"78977f10-9b8e-42f0-a820-b66e67fe9f1a","createdOn":"2020-10-29T05:38:30.7379443Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0/providers/Microsoft.Authorization/policyAssignments/pypolicyassignmentea4a13f0","type":"Microsoft.Authorization/policyAssignments","name":"pypolicyassignmentea4a13f0"}' headers: cache-control: - no-cache @@ -9032,7 +32046,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:58:18 GMT + - Thu, 29 Oct 2020 05:38:30 GMT expires: - '-1' pragma: @@ -9060,15 +32074,15 @@ interactions: Content-Length: - '0' User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: DELETE uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0/providers/Microsoft.Authorization/policyAssignments/pypolicyassignmentea4a13f0?api-version=2019-09-01 response: body: - string: '{"sku":{"name":"A0","tier":"Free"},"properties":{"policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0","metadata":{"createdBy":"123743cc-88ef-49ee-920e-13958fe5697d","createdOn":"2020-07-01T00:58:19.1601666Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0/providers/Microsoft.Authorization/policyAssignments/pypolicyassignmentea4a13f0","type":"Microsoft.Authorization/policyAssignments","name":"pypolicyassignmentea4a13f0"}' + string: '{"sku":{"name":"A0","tier":"Free"},"properties":{"policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0","metadata":{"createdBy":"78977f10-9b8e-42f0-a820-b66e67fe9f1a","createdOn":"2020-10-29T05:38:30.7379443Z","updatedBy":null,"updatedOn":null},"enforcementMode":"Default"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_mgmt_resource_policy_test_policy_definitionea4a13f0/providers/Microsoft.Authorization/policyAssignments/pypolicyassignmentea4a13f0","type":"Microsoft.Authorization/policyAssignments","name":"pypolicyassignmentea4a13f0"}' headers: cache-control: - no-cache @@ -9077,7 +32091,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:58:18 GMT + - Thu, 29 Oct 2020 05:38:30 GMT expires: - '-1' pragma: @@ -9107,8 +32121,8 @@ interactions: Content-Length: - '0' User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: DELETE @@ -9116,7 +32130,7 @@ interactions: response: body: string: '{"properties":{"policyType":"Custom","mode":"Indexed","description":"Don''t - create a VM anywhere","metadata":{"createdBy":"123743cc-88ef-49ee-920e-13958fe5697d","createdOn":"2020-07-01T00:57:59.6846659Z","updatedBy":null,"updatedOn":null},"policyRule":{"if":{"allOf":[{"source":"action","equals":"Microsoft.Compute/virtualMachines/write"},{"field":"location","in":["eastus","eastus2","centralus"]}]},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0","type":"Microsoft.Authorization/policyDefinitions","name":"pypolicyea4a13f0"}' + create a VM anywhere","metadata":{"createdBy":"78977f10-9b8e-42f0-a820-b66e67fe9f1a","createdOn":"2020-10-29T05:38:28.2771569Z","updatedBy":null,"updatedOn":null},"policyRule":{"if":{"allOf":[{"source":"action","equals":"Microsoft.Compute/virtualMachines/write"},{"field":"location","in":["eastus","eastus2","centralus"]}]},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pypolicyea4a13f0","type":"Microsoft.Authorization/policyDefinitions","name":"pypolicyea4a13f0"}' headers: cache-control: - no-cache @@ -9125,7 +32139,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:58:19 GMT + - Thu, 29 Oct 2020 05:38:31 GMT expires: - '-1' pragma: diff --git a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource_subscriptions.test_subscriptions.yaml b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource_subscriptions.test_subscriptions.yaml index d600839653b3..dd714bcbad96 100644 --- a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource_subscriptions.test_subscriptions.yaml +++ b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource_subscriptions.test_subscriptions.yaml @@ -9,25 +9,24 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET uri: https://management.azure.com/subscriptions?api-version=2019-11-01 response: body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000","authorizationSource":"RoleBased","managedByTenants":[{"tenantId":"2f4a9838-26b7-47ee-be60-ccc1fdec5953"}],"tags":{"myTag":"test"},"subscriptionId":"00000000-0000-0000-0000-000000000000","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","displayName":"Python - NodeJS Test with TTL = 7 days","state":"Enabled","subscriptionPolicies":{"locationPlacementId":"Internal_2014-09-01","quotaId":"Internal_2014-09-01","spendingLimit":"Off"}}],"count":{"type":"Total","value":1}}' + string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000","authorizationSource":"RoleBased","managedByTenants":[{"tenantId":"2f4a9838-26b7-47ee-be60-ccc1fdec5953"}],"tags":{},"subscriptionId":"00000000-0000-0000-0000-000000000000","tenantId":"00000000-0000-0000-0000-000000000000","displayName":"AzureSDKTest","state":"Enabled","subscriptionPolicies":{"locationPlacementId":"Internal_2014-09-01","quotaId":"Internal_2014-09-01","spendingLimit":"Off"}}],"count":{"type":"Total","value":1}}' headers: cache-control: - no-cache content-length: - - '538' + - '500' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:58:26 GMT + - Thu, 29 Oct 2020 05:38:39 GMT expires: - '-1' pragma: @@ -51,8 +50,8 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET @@ -96,15 +95,19 @@ interactions: South","regionalDisplayName":"(South America) Brazil South","metadata":{"regionType":"Physical","regionCategory":"Recommended","geographyGroup":"South America","longitude":"-46.633","latitude":"-23.55","physicalLocation":"Sao Paulo State","pairedRegion":[{"name":"southcentralus","id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/southcentralus"}]}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/centralusstage","name":"centralusstage","displayName":"Central - US (Stage)","regionalDisplayName":"(US) Central US (Stage)","metadata":{"regionType":"Logical","regionCategory":"Other","geographyGroup":"US"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/eastus2stage","name":"eastus2stage","displayName":"East + US (Stage)","regionalDisplayName":"(US) Central US (Stage)","metadata":{"regionType":"Logical","regionCategory":"Other","geographyGroup":"US"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/eastusstage","name":"eastusstage","displayName":"East + US (Stage)","regionalDisplayName":"(US) East US (Stage)","metadata":{"regionType":"Logical","regionCategory":"Other","geographyGroup":"US"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/eastus2stage","name":"eastus2stage","displayName":"East US 2 (Stage)","regionalDisplayName":"(US) East US 2 (Stage)","metadata":{"regionType":"Logical","regionCategory":"Other","geographyGroup":"US"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/northcentralusstage","name":"northcentralusstage","displayName":"North Central US (Stage)","regionalDisplayName":"(US) North Central US (Stage)","metadata":{"regionType":"Logical","regionCategory":"Other","geographyGroup":"US"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/southcentralusstage","name":"southcentralusstage","displayName":"South Central US (Stage)","regionalDisplayName":"(US) South Central US (Stage)","metadata":{"regionType":"Logical","regionCategory":"Other","geographyGroup":"US"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/westusstage","name":"westusstage","displayName":"West US (Stage)","regionalDisplayName":"(US) West US (Stage)","metadata":{"regionType":"Logical","regionCategory":"Other","geographyGroup":"US"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/westus2stage","name":"westus2stage","displayName":"West - US 2 (Stage)","regionalDisplayName":"(US) West US 2 (Stage)","metadata":{"regionType":"Logical","regionCategory":"Other","geographyGroup":"US"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/asiapacific","name":"asiapacific","displayName":"Asia - Pacific","regionalDisplayName":"Asia Pacific","metadata":{"regionType":"Logical","regionCategory":"Other"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/australia","name":"australia","displayName":"Australia","regionalDisplayName":"Australia","metadata":{"regionType":"Logical","regionCategory":"Other"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/europe","name":"europe","displayName":"Europe","regionalDisplayName":"Europe","metadata":{"regionType":"Logical","regionCategory":"Other"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/global","name":"global","displayName":"Global","regionalDisplayName":"Global","metadata":{"regionType":"Logical","regionCategory":"Other"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/japan","name":"japan","displayName":"Japan","regionalDisplayName":"Japan","metadata":{"regionType":"Logical","regionCategory":"Other"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/uk","name":"uk","displayName":"UK","regionalDisplayName":"UK","metadata":{"regionType":"Logical","regionCategory":"Other"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/unitedstates","name":"unitedstates","displayName":"United + US 2 (Stage)","regionalDisplayName":"(US) West US 2 (Stage)","metadata":{"regionType":"Logical","regionCategory":"Other","geographyGroup":"US"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/asia","name":"asia","displayName":"Asia","regionalDisplayName":"Asia","metadata":{"regionType":"Logical","regionCategory":"Other"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/asiapacific","name":"asiapacific","displayName":"Asia + Pacific","regionalDisplayName":"Asia Pacific","metadata":{"regionType":"Logical","regionCategory":"Other"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/australia","name":"australia","displayName":"Australia","regionalDisplayName":"Australia","metadata":{"regionType":"Logical","regionCategory":"Other"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/brazil","name":"brazil","displayName":"Brazil","regionalDisplayName":"Brazil","metadata":{"regionType":"Logical","regionCategory":"Other"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/canada","name":"canada","displayName":"Canada","regionalDisplayName":"Canada","metadata":{"regionType":"Logical","regionCategory":"Other"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/europe","name":"europe","displayName":"Europe","regionalDisplayName":"Europe","metadata":{"regionType":"Logical","regionCategory":"Other"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/global","name":"global","displayName":"Global","regionalDisplayName":"Global","metadata":{"regionType":"Logical","regionCategory":"Other"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/india","name":"india","displayName":"India","regionalDisplayName":"India","metadata":{"regionType":"Logical","regionCategory":"Other"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/japan","name":"japan","displayName":"Japan","regionalDisplayName":"Japan","metadata":{"regionType":"Logical","regionCategory":"Other"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/uk","name":"uk","displayName":"United + Kingdom","regionalDisplayName":"United Kingdom","metadata":{"regionType":"Logical","regionCategory":"Other"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/unitedstates","name":"unitedstates","displayName":"United States","regionalDisplayName":"United States","metadata":{"regionType":"Logical","regionCategory":"Other"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/eastasiastage","name":"eastasiastage","displayName":"East Asia (Stage)","regionalDisplayName":"(Asia Pacific) East Asia (Stage)","metadata":{"regionType":"Logical","regionCategory":"Other","geographyGroup":"Asia + Pacific"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/southeastasiastage","name":"southeastasiastage","displayName":"Southeast + Asia (Stage)","regionalDisplayName":"(Asia Pacific) Southeast Asia (Stage)","metadata":{"regionType":"Logical","regionCategory":"Other","geographyGroup":"Asia Pacific"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/centraluseuap","name":"centraluseuap","displayName":"Central US EUAP","regionalDisplayName":"(US) Central US EUAP","metadata":{"regionType":"Physical","regionCategory":"Other","geographyGroup":"US","longitude":"-93.6208","latitude":"41.5908","pairedRegion":[{"name":"eastus2euap","id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/eastus2euap"}]}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/eastus2euap","name":"eastus2euap","displayName":"East US 2 EUAP","regionalDisplayName":"(US) East US 2 EUAP","metadata":{"regionType":"Physical","regionCategory":"Other","geographyGroup":"US","longitude":"-78.3889","latitude":"36.6681","pairedRegion":[{"name":"centraluseuap","id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/centraluseuap"}]}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/westcentralus","name":"westcentralus","displayName":"West @@ -133,16 +136,18 @@ interactions: West","regionalDisplayName":"(Europe) UK West","metadata":{"regionType":"Physical","regionCategory":"Other","geographyGroup":"Europe","longitude":"-3.084","latitude":"53.427","physicalLocation":"Cardiff","pairedRegion":[{"name":"uksouth","id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/uksouth"}]}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/uaecentral","name":"uaecentral","displayName":"UAE Central","regionalDisplayName":"(Middle East) UAE Central","metadata":{"regionType":"Physical","regionCategory":"Other","geographyGroup":"Middle East","longitude":"54.366669","latitude":"24.466667","physicalLocation":"Abu - Dhabi","pairedRegion":[{"name":"uaenorth","id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/uaenorth"}]}}]}' + Dhabi","pairedRegion":[{"name":"uaenorth","id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/uaenorth"}]}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/brazilsoutheast","name":"brazilsoutheast","displayName":"Brazil + Southeast","regionalDisplayName":"(South America) Brazil Southeast","metadata":{"regionType":"Physical","regionCategory":"Other","geographyGroup":"South + America","longitude":"-43.2075","latitude":"-22.90278","physicalLocation":"Rio","pairedRegion":[{"name":"brazilsouth","id":"/subscriptions/00000000-0000-0000-0000-000000000000/locations/brazilsouth"}]}}]}' headers: cache-control: - no-cache content-length: - - '23185' + - '25098' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:58:27 GMT + - Thu, 29 Oct 2020 05:38:40 GMT expires: - '-1' pragma: @@ -166,25 +171,24 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000?api-version=2019-11-01 response: body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000","authorizationSource":"RoleBased","managedByTenants":[{"tenantId":"2f4a9838-26b7-47ee-be60-ccc1fdec5953"}],"tags":{"myTag":"test"},"subscriptionId":"00000000-0000-0000-0000-000000000000","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","displayName":"Python - NodeJS Test with TTL = 7 days","state":"Enabled","subscriptionPolicies":{"locationPlacementId":"Internal_2014-09-01","quotaId":"Internal_2014-09-01","spendingLimit":"Off"}}' + string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000","authorizationSource":"RoleBased","managedByTenants":[{"tenantId":"2f4a9838-26b7-47ee-be60-ccc1fdec5953"}],"tags":{},"subscriptionId":"00000000-0000-0000-0000-000000000000","tenantId":"00000000-0000-0000-0000-000000000000","displayName":"AzureSDKTest","state":"Enabled","subscriptionPolicies":{"locationPlacementId":"Internal_2014-09-01","quotaId":"Internal_2014-09-01","spendingLimit":"Off"}}' headers: cache-control: - no-cache content-length: - - '491' + - '453' content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:58:27 GMT + - Thu, 29 Oct 2020 05:38:41 GMT expires: - '-1' pragma: diff --git a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource_subscriptions.test_tenants.yaml b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource_subscriptions.test_tenants.yaml index a5eccc258073..211a005157ea 100644 --- a/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource_subscriptions.test_tenants.yaml +++ b/sdk/resources/azure-mgmt-resource/tests/recordings/test_mgmt_resource_subscriptions.test_tenants.yaml @@ -9,15 +9,15 @@ interactions: Connection: - keep-alive User-Agent: - - python/3.8.2 (Linux-4.19.104-microsoft-standard-x86_64-with-glibc2.29) msrest/0.6.16 - msrest_azure/0.6.3 azure-mgmt-resource/10.1.0 Azure-SDK-For-Python + - python/3.6.9 (Linux-4.19.76-linuxkit-x86_64-with-Ubuntu-18.04-bionic) msrest/0.6.10 + msrest_azure/0.6.2 azure-mgmt-resource/10.3.0 Azure-SDK-For-Python accept-language: - en-US method: GET uri: https://management.azure.com/tenants?api-version=2019-11-01 response: body: - string: '{"value":[{"id":"/tenants/72f988bf-86f1-41af-91ab-2d7cd011db47","tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","tenantCategory":"Home"}]}' + string: '{"value":[{"id":"/tenants/00000000-0000-0000-0000-000000000000","tenantId":"00000000-0000-0000-0000-000000000000","tenantCategory":"Home"}]}' headers: cache-control: - no-cache @@ -26,7 +26,7 @@ interactions: content-type: - application/json; charset=utf-8 date: - - Wed, 01 Jul 2020 00:58:29 GMT + - Thu, 29 Oct 2020 05:38:42 GMT expires: - '-1' pragma: